Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
File:                     4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft (raw, json)
Hash identifier:          t2A7lfMkhXT8Wwt5ucGxlTkH7dKTLa5Pemf1aVwOFtQ=
Subject key identifier:   AB:2A:75:96:46:AF:29:3A:DB:61:EC:DC:0D:F2:B1:BA:2B:62:53:89
Authority key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
Certificate issuer:       /CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Certificate serial:       019E303B232913255C915C27A3F947EA540E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 10:00:42 +0000
Manifest this update:     Sat 16 May 2026 10:00:42 +0000
Manifest next update:     Sun 17 May 2026 10:00:42 +0000
Files and hashes:         1: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl (hash: tJxPhkGncF0kS6NiUUl2e0tBaHpsk2T+v1+bui6eS/E=)
                          2: vhW7lS-JBYebJEO-U1J2yweu6Yo.roa (hash: hv3bo8RYqKbVjpyma1UuE8rn8DDYyjzn6U1qa0IMKCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:23:29:13:25:5c:91:5c:27:a3:f9:47:ea:54:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
        Validity
            Not Before: May 16 10:00:42 2026 GMT
            Not After : May 17 10:00:42 2026 GMT
        Subject: CN=ab2a759646af293adb61ecdc0df2b1ba2b625389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8c:85:b4:cf:cb:e7:da:40:81:07:4a:bf:30:
                    73:a8:60:cd:a5:ab:dc:84:a1:b8:79:17:5f:43:62:
                    52:0d:62:d0:de:35:5c:f8:3c:1a:3f:3e:3e:dd:f7:
                    a8:f5:32:be:28:89:56:94:e7:1e:4b:ff:b0:8e:61:
                    e7:2d:64:20:ee:4e:b9:fd:64:ba:b3:84:cf:d7:bc:
                    61:21:15:e9:19:9c:fb:51:dc:4a:26:02:38:ed:28:
                    c8:76:3a:89:c9:2f:e1:af:2a:7d:10:4f:6d:1a:20:
                    2b:a2:35:36:c5:4b:81:ef:aa:87:1a:a1:7a:92:c0:
                    68:07:be:1b:15:6a:8e:e9:a4:80:fb:12:67:4e:37:
                    ea:b0:eb:72:d3:d8:de:51:2e:df:24:88:ae:5b:66:
                    61:de:78:30:74:60:20:10:80:02:52:40:b3:1d:ea:
                    9e:1c:a9:66:cf:63:24:a4:02:b7:8b:28:3b:d3:57:
                    ff:ac:2c:af:93:cf:0f:b1:f0:c8:c4:cf:a4:fe:91:
                    6b:6a:d4:eb:c7:2c:9d:e5:29:e6:69:11:78:3c:29:
                    c8:40:27:8d:65:0d:aa:74:d1:98:be:80:ed:38:6b:
                    8b:dd:6c:7f:32:9a:8b:06:2d:43:81:2e:12:97:23:
                    e4:3d:87:71:5a:8a:42:db:b7:2e:7f:bc:f3:4b:27:
                    4a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2A:75:96:46:AF:29:3A:DB:61:EC:DC:0D:F2:B1:BA:2B:62:53:89
            X509v3 Authority Key Identifier:
                keyid:E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ff:94:06:ed:96:8b:c9:ad:35:c3:73:14:34:a4:fb:ef:dc:
         3c:65:1c:16:f4:58:b4:d4:c5:72:2e:64:be:d7:24:bb:a6:0b:
         3a:d6:7e:6f:bd:37:b3:41:23:09:e0:31:64:a5:6a:32:40:be:
         f6:79:07:f0:19:12:9d:1c:58:05:91:1d:89:3c:84:fe:36:ac:
         b5:09:71:1f:7d:2d:14:76:5f:f9:73:c1:e8:5c:06:38:36:7f:
         99:90:18:16:c6:43:a0:39:34:c0:df:df:ea:d4:d3:e9:dd:af:
         ad:c1:c8:45:2c:62:cf:65:c6:32:08:b5:2b:78:92:0c:32:e3:
         8e:4a:9a:83:6d:59:43:91:c7:52:a4:7b:69:fa:f7:ca:79:4f:
         d8:12:00:c4:af:c2:a4:1e:00:c7:56:4c:65:61:fb:d7:48:03:
         e0:1c:2b:6f:88:75:70:a0:a0:ac:82:6d:64:e3:51:25:47:f2:
         15:72:e7:7d:9b:64:30:68:7a:cd:89:87:51:b7:39:86:71:8a:
         45:e3:42:8c:88:ec:72:99:d0:f8:39:6d:e8:b1:33:01:63:ce:
         ae:8a:7c:08:cd:01:a2:84:8d:aa:d0:0e:2b:39:0b:aa:2d:4f:
         a7:59:0f:0f:97:2a:5f:87:44:08:da:ec:38:39:df:09:28:ca:
         a5:39:51:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:29 2026 by rpki-client