Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
File:                     28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json)
Hash identifier:          jwyRbcyOFMgO5/Ik6Dr/Kt4rxNFESDNVL9z2nuYV0R0=
Subject key identifier:   E7:C3:76:11:AE:3A:15:E0:D2:92:F3:B2:9F:23:A4:D8:43:59:64:E5
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Certificate issuer:       /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial:       019E314E43D060FDA4609D7C081977CB98A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 15:01:13 +0000
Manifest this update:     Sat 16 May 2026 15:01:13 +0000
Manifest next update:     Sun 17 May 2026 15:01:13 +0000
Files and hashes:         1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: DGV98H3LH6iAf8u9yiP6Z5T1x99P8Hhl2F0EFbjZ8DI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:43:d0:60:fd:a4:60:9d:7c:08:19:77:cb:98:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
        Validity
            Not Before: May 16 15:01:13 2026 GMT
            Not After : May 17 15:01:13 2026 GMT
        Subject: CN=e7c37611ae3a15e0d292f3b29f23a4d8435964e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:42:a7:f7:c4:24:54:c0:53:d0:f3:37:6f:70:
                    9d:17:43:a5:19:f0:53:b2:30:31:e8:3f:07:b3:40:
                    da:8c:ba:15:96:10:b2:2e:c3:3d:4c:4e:6d:97:37:
                    61:ec:62:ef:bc:2d:c0:5f:77:11:be:6f:7e:dc:ae:
                    3d:aa:4f:cb:6a:79:b8:be:2c:ff:b6:d6:a1:4a:81:
                    05:fe:0d:c0:10:34:6d:c2:1c:0d:03:a1:1f:d6:b2:
                    f4:80:71:5f:e2:2a:16:fb:78:a9:e6:44:da:3b:06:
                    28:31:f4:fb:cd:ee:b9:e8:48:8f:9b:e1:e5:56:76:
                    54:c2:8b:00:92:d7:71:a5:bc:29:b9:57:20:99:bf:
                    43:7a:5b:26:88:c1:cf:4c:2d:b1:81:04:31:24:fd:
                    97:76:d2:69:70:4e:bb:3a:ce:f4:00:46:c4:03:1d:
                    c9:c0:93:fd:e9:21:c9:87:ec:a3:84:b0:85:7e:e0:
                    4c:11:d4:b0:53:67:7d:b2:d8:1d:16:11:52:1d:cb:
                    3d:2f:33:38:a9:3b:24:3e:42:73:7d:40:5c:b6:e9:
                    27:7a:ec:e6:13:f0:34:b0:b9:78:f8:51:9e:77:4a:
                    ad:c8:da:3e:53:a8:ff:b3:6f:d5:ee:c9:d6:ba:d3:
                    59:f8:af:ca:c2:02:4b:23:e8:ab:26:74:b1:66:91:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C3:76:11:AE:3A:15:E0:D2:92:F3:B2:9F:23:A4:D8:43:59:64:E5
            X509v3 Authority Key Identifier:
                keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:66:01:35:7c:b9:51:39:69:87:b6:c5:fb:13:6c:f2:75:88:
         db:c8:db:73:58:6c:2d:15:2e:d3:41:36:b0:01:17:ae:48:60:
         36:07:bd:5c:3c:9c:51:8b:9d:6e:6b:96:88:40:91:c0:92:69:
         6d:4e:fd:1d:5e:1a:b2:06:52:5f:00:de:4c:9b:e2:37:c9:98:
         54:24:75:7f:ff:b7:02:f3:85:ce:52:43:71:be:4f:6a:b8:27:
         eb:dd:6d:3c:89:b8:cf:01:17:b8:0c:59:bd:f9:aa:84:13:f4:
         b7:a7:e0:52:60:89:cf:27:2d:14:a6:bd:1e:50:67:f0:13:0a:
         28:cc:12:a0:63:c7:1f:57:d2:11:84:ea:7c:32:65:6d:31:e1:
         b4:ff:44:b9:7a:ae:b2:a5:14:ea:7b:2a:b2:ee:e5:62:ee:62:
         bf:41:43:70:92:96:77:4e:2d:8e:d4:58:e7:16:de:74:a6:0e:
         18:01:1c:9a:e4:43:6c:51:54:9b:9f:d6:75:84:94:01:d9:a2:
         dd:8e:3b:9c:ae:fb:67:66:ba:8d:9a:78:69:0b:b9:6d:2e:08:
         52:23:f1:9d:27:cd:19:5c:80:be:26:96:b4:5b:87:62:3d:11:
         c4:a6:be:4d:49:34:73:20:f3:cd:a3:ec:7f:0b:73:64:53:b6:
         bd:7f:6b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:23:52 2026 by rpki-client