Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File:                     4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier:          OhsXdadjCO9k3XIzvjsPJOKrRQ8s7dg44/5+bPIDdLI=
Subject key identifier:   D6:E1:D5:F8:51:26:FC:AA:8D:D4:0E:AC:A4:4A:08:87:7E:92:62:FB
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer:       /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial:       019E2F600AA56A39C1BAF569F7219C637479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 06:01:23 +0000
Manifest this update:     Sat 16 May 2026 06:01:23 +0000
Manifest next update:     Sun 17 May 2026 06:01:23 +0000
Files and hashes:         1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: hnkX0AwErXUXunUCQWUdqvlYpZB8Lsh4uqMjctuTPgk=)
                          2: EC4GBb1LJjJ7pV8_x0txKCEIXSg.roa (hash: 9oW73pfxOP8M7veC/PL5Kk4ZUA5njttoIdfA+gSwRO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:60:0a:a5:6a:39:c1:ba:f5:69:f7:21:9c:63:74:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
        Validity
            Not Before: May 16 06:01:23 2026 GMT
            Not After : May 17 06:01:23 2026 GMT
        Subject: CN=d6e1d5f85126fcaa8dd40eaca44a08877e9262fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:c7:f9:fb:75:ea:13:12:5b:84:15:63:93:
                    85:5a:62:a7:82:9c:94:2e:1d:f9:ca:3d:f1:45:21:
                    5d:e5:bd:f7:a9:81:64:f3:ff:34:a0:78:4e:e7:0f:
                    f9:b9:4a:52:72:59:89:4c:13:77:7e:2d:dc:02:10:
                    43:4e:2f:b9:29:1a:b6:9d:75:82:6b:0d:f3:58:cc:
                    7e:76:9a:b2:51:2e:f8:c0:fa:0e:28:20:91:60:94:
                    bb:65:af:71:18:09:46:6e:5c:8e:9f:c7:2f:9c:80:
                    03:51:1d:a7:13:98:c1:7b:13:f7:3b:c2:09:23:2e:
                    18:e2:3e:cb:c8:fa:99:0a:34:ff:a9:ba:32:8c:89:
                    58:7a:e3:54:1b:20:5f:db:9b:a2:09:33:b7:ae:e1:
                    22:4c:51:fe:30:4f:ac:cb:f5:63:bd:91:3c:c9:96:
                    44:c7:aa:41:d8:33:5a:62:80:7e:0a:58:55:51:b7:
                    2a:a7:e7:7d:af:e6:27:a7:b0:26:b4:1f:9f:c3:e3:
                    39:2b:79:5e:86:0a:05:ab:79:a1:40:c0:1c:4a:8c:
                    ee:56:8c:db:11:e0:e9:66:d5:f0:56:44:43:1f:db:
                    15:23:2a:67:9c:f7:00:89:c1:f3:02:27:2c:d3:42:
                    46:99:e5:25:fe:3a:5b:ad:e2:ed:81:1d:e3:2d:ea:
                    3e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E1:D5:F8:51:26:FC:AA:8D:D4:0E:AC:A4:4A:08:87:7E:92:62:FB
            X509v3 Authority Key Identifier:
                keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:df:f5:48:9d:e3:75:4e:e3:45:b2:1a:e6:0a:96:cb:2e:45:
         fa:8c:66:c1:89:90:20:85:5a:99:b4:97:20:a8:6d:ce:94:8c:
         74:33:44:c0:ef:45:45:02:07:c1:c0:49:56:7c:57:24:bd:29:
         4a:0c:d6:c3:6e:b2:03:64:22:1e:4e:68:70:19:f3:d8:74:33:
         1d:f1:c2:b8:64:c7:77:61:e0:bc:4f:5b:48:b5:73:ff:2a:2d:
         b2:75:bf:7d:70:1a:60:a2:4e:1a:66:0d:87:bc:0f:ea:e2:b0:
         62:43:42:47:d8:4c:ae:8f:ef:15:4b:21:b2:45:86:27:fd:71:
         c9:6c:9b:66:d1:76:a6:cd:fc:3d:ae:a0:82:37:64:e6:3e:1a:
         1e:09:75:5f:4f:f5:9e:cb:14:41:9a:62:0c:ae:ca:4b:1d:59:
         72:ac:f4:73:4f:53:73:a5:3e:bd:ab:db:b9:88:c0:84:13:9a:
         08:14:96:79:33:51:7e:a7:66:f5:45:66:73:06:56:a7:80:58:
         08:5d:1f:b6:81:6f:df:05:74:e8:79:d7:24:8d:ed:5f:47:2a:
         18:4a:30:df:93:a5:77:34:f2:9d:77:9e:2c:10:d1:5d:17:b9:
         c0:b6:96:53:36:cb:bf:76:90:05:e2:71:57:3c:e3:8b:c8:b6:
         cd:a3:35:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:52 2026 by rpki-client