Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
File:                     DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft (raw, json)
Hash identifier:          nMAXP+fHybJeDsoR0BVwk8rxnC4OV5GGYtErnDniJww=
Subject key identifier:   64:9C:DA:67:D0:10:0A:DC:76:B8:0A:5F:96:D6:7A:4B:96:AA:B5:2A
Authority key identifier: 0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
Certificate issuer:       /CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Certificate serial:       019E30E0682C5CF197F59BED7B18800DEF48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
Manifest number:          190C
Signing time:             Sat 16 May 2026 13:01:13 +0000
Manifest this update:     Sat 16 May 2026 13:01:13 +0000
Manifest next update:     Sun 17 May 2026 13:01:13 +0000
Files and hashes:         1: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl (hash: wznonw1pUrZhzcFARAmLERQ3O0zU/XYJNbS1E7XHoTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:68:2c:5c:f1:97:f5:9b:ed:7b:18:80:0d:ef:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
        Validity
            Not Before: May 16 13:01:13 2026 GMT
            Not After : May 17 13:01:13 2026 GMT
        Subject: CN=649cda67d0100adc76b80a5f96d67a4b96aab52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d6:3b:8d:97:35:a0:52:ea:c3:54:88:f0:92:
                    14:e6:6e:f7:e0:4b:2e:07:e2:0e:68:94:81:f8:c6:
                    9a:a9:e8:1b:e5:da:1a:c9:ae:79:33:a1:c7:56:7d:
                    a8:ff:8d:62:8e:82:c6:2e:30:86:4b:c0:0e:b9:78:
                    0c:b8:e0:2e:de:eb:06:87:88:cb:7d:b0:2f:21:10:
                    12:3a:9c:f5:89:ed:c4:54:e3:1e:fe:b2:7d:10:59:
                    e4:95:28:09:db:c5:2d:94:45:fb:2d:a5:d2:7f:7d:
                    85:cf:a7:93:b9:8b:99:62:cc:c8:3d:d2:67:fb:50:
                    a2:6c:d5:7f:71:d9:15:85:7e:9f:aa:4b:ab:22:f3:
                    d6:c2:4e:af:9d:1f:aa:c6:e6:49:db:78:25:77:47:
                    e0:f1:75:6b:7b:bc:90:12:ba:0a:a1:74:f3:57:c8:
                    b5:ca:3c:49:0a:75:0c:f5:6a:3b:3a:71:ea:ce:02:
                    d8:7b:80:3f:56:82:ac:da:61:9c:49:ff:ea:22:8c:
                    f9:4e:b6:f3:91:33:a6:ea:24:1f:22:9d:72:18:73:
                    ec:b1:cf:68:21:b8:f1:de:04:9a:a0:16:b9:19:bb:
                    a2:12:6b:3b:d7:42:e9:31:0d:b9:08:cf:79:3f:ff:
                    2d:15:39:c2:b3:49:b7:e8:ad:e3:18:f0:c6:fa:27:
                    30:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9C:DA:67:D0:10:0A:DC:76:B8:0A:5F:96:D6:7A:4B:96:AA:B5:2A
            X509v3 Authority Key Identifier:
                keyid:0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:36:83:ef:3d:e2:f6:ea:00:91:f5:35:ae:17:99:78:7d:25:
         be:87:3c:1e:15:1e:27:54:25:71:ac:f7:c2:61:16:92:42:25:
         d5:f7:97:3d:2b:c7:e0:0f:9d:04:8e:15:26:ea:33:84:6e:cf:
         ae:d5:4c:1a:81:eb:c1:82:a1:8e:ab:68:61:67:6a:85:9f:f6:
         32:f1:cc:eb:46:25:ef:74:99:97:5c:b4:fd:55:6e:44:d4:08:
         38:33:8a:51:30:bd:c0:80:54:35:f1:17:b8:4c:b4:52:56:9e:
         ee:b4:44:80:1a:08:1f:ed:a1:11:f5:e0:4b:87:2e:65:41:63:
         1c:47:b2:04:47:98:2a:e4:31:16:4d:64:38:b1:41:e5:4e:a4:
         eb:45:14:8d:64:da:19:d2:1c:37:81:22:b7:99:23:c2:22:1e:
         46:8a:09:f8:85:d2:e0:c9:78:6d:fc:4c:76:d1:1c:60:c5:bb:
         78:65:2e:af:ea:69:b5:a4:91:b1:ff:e6:f8:90:a5:82:83:a0:
         e6:8f:d8:20:5e:89:a2:0e:93:cc:92:b3:85:09:3e:6c:12:14:
         33:87:2f:5d:f0:12:a3:89:0a:ff:cb:1e:08:7e:78:99:77:94:
         0f:87:f5:67:08:7b:01:c0:93:6c:d7:57:f4:6c:27:d9:6d:ef:
         89:1f:47:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:24 2026 by rpki-client