Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
File:                     4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft (raw, json)
Hash identifier:          As0kgPnb0RYxYkMnkpIaoj7EHz7opY1e59yzXQEUXPg=
Subject key identifier:   EA:18:CA:EC:1B:D8:95:2E:3E:E6:2C:62:E9:4A:21:92:24:AF:99:FB
Authority key identifier: E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
Certificate issuer:       /CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Certificate serial:       019E2F9747348D9035FD6E56833344234869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
Manifest number:          190C
Signing time:             Sat 16 May 2026 07:01:43 +0000
Manifest this update:     Sat 16 May 2026 07:01:43 +0000
Manifest next update:     Sun 17 May 2026 07:01:43 +0000
Files and hashes:         1: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl (hash: iHRBTRoP4PgqjzT8feKqEaW6H40Gjj9rgmzCQb6enE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:47:34:8d:90:35:fd:6e:56:83:33:44:23:48:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
        Validity
            Not Before: May 16 07:01:43 2026 GMT
            Not After : May 17 07:01:43 2026 GMT
        Subject: CN=ea18caec1bd8952e3ee62c62e94a219224af99fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:04:b7:3d:78:90:7d:69:df:59:1e:a3:c9:
                    bb:38:ea:9d:1c:08:ab:2b:9e:74:16:27:4c:52:8a:
                    a4:55:ab:6b:16:cf:45:cb:f2:4a:de:53:f7:85:05:
                    cb:bd:15:cb:67:b4:f4:9e:ac:1e:b0:b3:65:ab:1b:
                    bf:74:ed:57:b4:92:e2:69:de:c1:25:fa:db:60:87:
                    78:44:83:8a:d0:72:81:31:19:0a:3e:74:68:be:91:
                    f9:54:70:b1:05:9e:9d:f1:79:ae:6d:39:5e:d6:6b:
                    8a:ec:7b:03:ee:46:70:38:d2:82:c5:28:5c:32:ba:
                    2c:58:5e:0f:f7:f4:24:2a:aa:09:ad:99:9f:52:5a:
                    32:e9:b7:8f:07:fa:e8:35:d3:a7:b6:d0:42:46:72:
                    bf:8b:1f:81:b6:30:c9:5c:b6:da:ec:50:34:ac:f5:
                    a5:21:2c:1d:48:f1:6c:bc:82:52:e7:29:42:fd:3f:
                    4b:41:51:82:e9:2d:e7:b9:29:b0:89:b4:94:b7:c5:
                    11:8b:ca:c1:50:97:d9:52:6c:b9:d4:59:9a:48:62:
                    bb:ac:bd:d5:53:9f:01:7b:46:8c:96:88:93:c2:66:
                    ac:c4:68:7d:94:27:06:29:28:a1:e5:b4:41:da:20:
                    fe:60:67:0c:b7:5b:cd:7a:9d:94:bd:2c:a0:06:16:
                    ba:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:18:CA:EC:1B:D8:95:2E:3E:E6:2C:62:E9:4A:21:92:24:AF:99:FB
            X509v3 Authority Key Identifier:
                keyid:E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:04:f9:cb:db:42:a9:30:83:3f:f5:e9:06:62:ba:9c:93:ac:
         2b:6e:27:0d:8f:93:0d:63:b5:9f:28:24:5f:00:b3:c9:7f:16:
         b7:c0:52:38:59:87:c2:97:7b:f7:88:a8:1d:6e:32:de:0e:25:
         81:c6:27:de:64:ce:da:ff:41:92:3e:bc:b6:65:08:95:6c:f3:
         06:71:73:57:58:a6:cd:fe:d1:c9:54:ae:25:1b:9e:5c:24:bc:
         83:9b:fa:77:88:63:e1:89:a4:01:12:1f:5b:16:6c:46:66:b3:
         60:1a:bf:0e:0a:73:6b:52:37:27:d5:69:94:34:9f:46:e2:f7:
         b3:9e:46:09:2d:e3:b1:31:a8:18:97:fd:9d:2c:79:1a:8c:55:
         00:c0:1d:a2:1c:8c:62:8a:3b:11:e8:8a:fb:c6:c2:4a:fe:fc:
         69:3d:8b:a3:df:43:27:13:dc:c1:b7:bb:01:c1:42:c8:74:bd:
         e5:4a:f2:4d:0d:c9:c5:1d:0e:e0:9f:38:be:7a:af:2f:f0:59:
         22:cb:f4:67:fc:e6:ce:af:d3:54:7f:5a:3c:da:9d:a9:41:93:
         70:c5:37:a6:7f:36:62:a3:6a:46:2c:bd:46:21:7e:87:a2:d6:
         6e:47:38:14:4b:2a:bc:4f:98:8c:18:00:5a:61:e5:cc:82:75:
         7c:bd:7d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:22 2026 by rpki-client