Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File:                     1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier:          tbUxHi6bzvzTtAVy8Pg2nMmb7zTY7oOkO+Lgmj2kns0=
Subject key identifier:   73:FD:09:42:06:E6:0E:17:30:A3:93:D5:F9:CD:F6:01:5F:7F:E7:2B
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer:       /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial:       019E30E00A7D04AC8F79C94EF8C5469A7A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number:          190D
Signing time:             Sat 16 May 2026 13:00:49 +0000
Manifest this update:     Sat 16 May 2026 13:00:49 +0000
Manifest next update:     Sun 17 May 2026 13:00:49 +0000
Files and hashes:         1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: arcoJAKWfaYy+MqZyaiDj50NLOGwfvdizG3hU/qgTBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:0a:7d:04:ac:8f:79:c9:4e:f8:c5:46:9a:7a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
        Validity
            Not Before: May 16 13:00:49 2026 GMT
            Not After : May 17 13:00:49 2026 GMT
        Subject: CN=73fd094206e60e1730a393d5f9cdf6015f7fe72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:8c:7b:ba:f4:81:d7:bd:3c:c9:f2:96:33:
                    a0:dc:22:28:98:0a:65:17:1f:79:f5:9a:d4:13:8f:
                    76:7c:6a:04:1d:6d:c8:81:87:c3:ec:d9:50:5a:59:
                    09:f1:58:cd:a0:f2:16:8c:fc:11:90:e8:01:8b:e3:
                    97:30:89:a1:87:1a:f0:aa:c6:52:3c:cb:3e:c2:17:
                    aa:80:41:df:fa:53:36:09:2b:f5:0f:d6:be:4f:b8:
                    aa:1e:59:4b:ae:fe:d3:ef:2f:86:09:27:38:2c:de:
                    76:e9:09:5b:62:7f:12:8e:0e:40:7a:04:03:70:99:
                    68:a5:e5:01:12:ab:d7:d8:fc:9d:11:cf:7b:42:a2:
                    43:96:b0:c3:f5:62:80:a8:06:84:3d:bc:59:30:2a:
                    40:d7:d4:14:b7:71:b7:2c:28:e8:15:a2:3d:b3:ac:
                    1a:2d:75:46:1c:1b:7a:0a:7d:c6:7a:03:f0:20:cd:
                    34:8b:0f:be:6c:c5:74:1f:e9:7f:99:96:12:0c:8a:
                    ab:10:84:56:d1:80:24:d3:b5:57:4e:9f:10:4b:d6:
                    15:0e:97:b7:5b:a4:7d:83:5b:2e:86:2f:79:65:06:
                    d7:62:13:c9:db:d5:e3:3b:af:0d:5e:ac:61:00:c7:
                    c5:cb:10:4b:af:a5:c9:d9:84:d8:c0:dd:22:bd:78:
                    22:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FD:09:42:06:E6:0E:17:30:A3:93:D5:F9:CD:F6:01:5F:7F:E7:2B
            X509v3 Authority Key Identifier:
                keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:09:b7:09:ca:64:a2:8a:75:12:e5:2b:02:20:e0:13:00:04:
         f3:69:34:ba:05:dc:7d:b5:50:05:f7:17:45:24:77:91:e1:56:
         7a:8e:0c:74:4c:f9:2f:81:a4:92:29:25:72:bc:75:d7:70:9f:
         da:3e:1c:26:54:84:7f:a9:e9:63:2c:e8:51:dd:6b:85:92:a5:
         dd:a6:0a:20:79:ff:2e:37:70:2c:6a:d4:cc:6c:2b:33:ac:80:
         a1:0b:24:41:53:ed:d2:c9:72:9a:20:c3:96:a4:64:47:4c:ca:
         54:a4:12:6c:0a:46:a7:86:58:40:a9:42:8f:44:dd:07:8e:96:
         3f:74:a4:99:2e:8e:b8:f2:2d:e5:9f:f2:3a:e9:69:78:af:02:
         59:43:ff:30:e3:24:bf:f2:14:e2:77:90:8a:04:cf:3b:a1:0c:
         4f:72:79:2a:1c:45:ac:e2:dc:6e:d3:6d:8b:82:f4:6a:a6:29:
         ab:89:5a:bd:12:e5:cf:ee:5c:2a:18:af:dd:2c:70:c4:f3:81:
         c6:1b:f0:be:05:a8:98:d1:9b:e7:42:9a:5a:a9:ab:f7:55:a1:
         3e:b0:dc:9c:9f:f7:74:94:74:7e:c9:9b:75:57:bb:0d:5d:62:
         78:8e:b5:5c:6c:5a:49:ab:56:ee:d9:e7:a2:28:6b:5a:6f:06:
         0d:58:1d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:54:37 2026 by rpki-client