Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File:                     5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier:          gKEl07s4X4MbGr2mye6jdL9sl1HxHycsSNt8VLuAzPg=
Subject key identifier:   F9:7C:A3:55:B6:4D:14:C2:AD:D1:C5:0E:0E:FF:8B:C4:0D:E0:9A:62
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer:       /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial:       019E30DFF02B2374AA71B8175F81FD9F6FED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number:          190C
Signing time:             Sat 16 May 2026 13:00:42 +0000
Manifest this update:     Sat 16 May 2026 13:00:42 +0000
Manifest next update:     Sun 17 May 2026 13:00:42 +0000
Files and hashes:         1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: vDXNPOZb6hpIgfN+P2Gas7J5wVOC6bE+sr2X0O2S1JY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:df:f0:2b:23:74:aa:71:b8:17:5f:81:fd:9f:6f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
        Validity
            Not Before: May 16 13:00:42 2026 GMT
            Not After : May 17 13:00:42 2026 GMT
        Subject: CN=f97ca355b64d14c2add1c50e0eff8bc40de09a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:de:60:f7:23:d8:f3:ef:e4:65:31:a7:b8:
                    4a:fa:2c:4d:5e:5e:dc:4a:49:3e:d3:0d:ff:2b:cf:
                    87:52:58:25:da:c3:13:43:18:0c:b3:0a:79:8d:26:
                    e0:c5:47:a0:f8:96:0e:8a:74:a1:2e:79:e5:f6:79:
                    8b:b1:b0:2f:a1:34:af:1a:a9:f9:ac:9e:64:b6:7c:
                    fe:33:c4:85:33:d2:41:ac:11:d5:25:2c:a9:77:1c:
                    25:ef:71:d5:0f:02:9c:b3:72:5b:31:2e:64:df:94:
                    b0:4e:3c:0d:17:f6:8d:ed:00:18:43:52:12:ab:75:
                    87:48:f2:2e:4f:8b:86:7d:c7:f9:58:8e:8f:52:11:
                    b0:52:d1:2e:90:df:f8:82:27:16:41:78:0b:68:34:
                    e0:b3:9e:c3:c2:08:1d:36:fd:25:95:08:d6:9e:bc:
                    2d:ab:3e:60:40:12:09:ba:5a:6b:8c:17:7e:db:b2:
                    48:3d:eb:04:70:2e:fa:b0:6e:ac:68:2e:23:11:52:
                    68:46:d8:94:0d:a1:35:b9:8f:13:67:cb:a1:69:f2:
                    68:2c:83:8d:68:0e:18:e6:be:01:c7:e5:31:82:d7:
                    ce:09:d4:15:d4:c4:cd:9a:eb:d6:f8:83:4c:ea:da:
                    c2:09:5b:30:68:2c:c0:03:ee:42:49:0d:e3:d9:e0:
                    b5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7C:A3:55:B6:4D:14:C2:AD:D1:C5:0E:0E:FF:8B:C4:0D:E0:9A:62
            X509v3 Authority Key Identifier:
                keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d5:2a:fc:9a:08:bb:f8:d1:72:39:42:20:68:18:db:1f:0c:
         9b:3a:a7:e8:63:27:66:2c:47:25:dd:71:1b:d6:a6:ad:aa:ab:
         c9:5b:80:7e:11:f9:e4:02:59:d8:7e:f1:c1:72:9b:8c:6e:0e:
         55:48:87:86:a1:85:f8:dc:88:a2:fe:55:5b:0c:f9:47:79:4b:
         7d:cd:5b:ef:c1:a8:f2:4f:e2:7b:19:ab:7b:03:05:d8:bb:05:
         76:b4:fe:f8:ea:84:3f:2e:c4:b1:16:a8:36:de:17:c8:61:10:
         bb:13:9b:28:1b:20:3b:e8:65:eb:66:65:76:a6:87:fd:e6:f2:
         90:0e:4a:06:60:9f:03:8b:d0:f8:26:2b:f6:89:54:d1:81:3b:
         e4:53:3f:a0:25:3f:11:1f:7f:4d:d9:14:ac:e0:fd:87:6a:90:
         83:1c:94:32:60:e5:3d:03:ac:20:c2:2b:c5:57:c9:fd:9f:0b:
         06:c0:86:8c:86:b4:7b:e0:6e:8f:f2:79:ca:a9:33:e8:40:67:
         c5:cf:7a:fb:2f:c8:bf:b7:46:75:34:3b:c1:b5:b1:c2:33:fb:
         02:c3:38:85:28:42:81:69:1c:c7:3a:03:03:6b:9a:d3:4c:a1:
         7b:cc:ee:f6:8e:7f:a3:46:db:3d:65:06:24:aa:52:35:bf:78:
         58:be:b2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:00 2026 by rpki-client