Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
File:                     4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft (raw, json)
Hash identifier:          BU27NvZt+Wzynq9Yk9SWxVaTKh0rfkWQDRfiV4h7TtI=
Subject key identifier:   3A:B3:26:63:68:ED:A2:66:02:4D:F8:DB:EF:EE:F7:32:84:54:CE:90
Authority key identifier: E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46
Certificate issuer:       /CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
Certificate serial:       019E1E359CCEC54C7288B20028C94BFD706B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
Manifest number:          0392
Signing time:             Tue 12 May 2026 22:01:30 +0000
Manifest this update:     Tue 12 May 2026 22:01:30 +0000
Manifest next update:     Wed 13 May 2026 22:01:30 +0000
Files and hashes:         1: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl (hash: wM0HAZcgCG+O9zcL9ZkMBGEtzDCXMaXcCxlewNCSdCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:9c:ce:c5:4c:72:88:b2:00:28:c9:4b:fd:70:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
        Validity
            Not Before: May 12 22:01:30 2026 GMT
            Not After : May 13 22:01:30 2026 GMT
        Subject: CN=3ab3266368eda266024df8dbefeef7328454ce90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:73:e8:b9:6b:44:f7:4c:6f:de:b8:be:57:
                    c3:62:c3:ca:8a:18:0a:26:f0:00:14:5b:93:e4:3c:
                    67:9d:3a:a7:ee:d3:75:d6:11:bd:70:13:5f:02:f7:
                    7e:ec:76:99:ba:c0:31:f4:ce:ce:cf:48:1a:30:82:
                    06:6a:c6:97:78:7f:39:09:bd:db:de:7d:b7:96:38:
                    80:d0:8c:b3:5e:36:47:42:b2:4d:89:62:6c:40:2a:
                    f9:09:69:00:70:dd:3e:4c:df:22:ec:65:36:17:ba:
                    ee:8b:65:a7:0c:de:61:8e:c0:a2:fd:34:ba:4a:d1:
                    8b:76:7f:b1:08:f4:1f:f1:58:b6:8a:0d:88:f0:5a:
                    65:83:13:65:81:e4:78:85:4c:e4:8c:0b:02:79:4f:
                    5c:d1:3c:26:7c:62:01:93:6c:e3:b3:41:3e:ae:6d:
                    ac:67:3e:d2:8b:e0:54:e0:44:53:2c:4c:36:d8:4a:
                    8b:5e:85:7d:16:db:9b:c6:02:a4:8e:8b:4f:37:28:
                    2d:37:86:29:b6:32:52:50:53:7b:44:7e:02:23:0a:
                    ec:9b:33:7a:23:db:c6:96:d2:59:9e:a0:e7:f1:80:
                    4b:20:80:a8:47:8b:69:5f:91:48:2a:43:c7:46:5d:
                    79:1a:2e:cb:ef:0f:1e:64:28:58:1d:a9:3d:08:e6:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B3:26:63:68:ED:A2:66:02:4D:F8:DB:EF:EE:F7:32:84:54:CE:90
            X509v3 Authority Key Identifier:
                keyid:E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5a:73:8b:7c:79:e1:18:22:43:2f:2c:e2:6d:c3:23:0d:e7:
         9c:8c:a7:ce:41:e6:f5:15:31:a1:70:51:84:50:53:57:0a:a2:
         dd:ca:41:8a:4a:3c:6d:a1:51:9e:05:3e:09:19:22:d3:9c:45:
         a1:a8:b0:4a:c5:3a:1f:32:34:78:d1:6c:f2:e4:c1:1d:ef:a2:
         80:04:c4:89:9f:c3:dd:a4:7b:e1:be:ca:0b:35:92:0a:b9:41:
         12:de:de:36:8d:f8:a5:af:69:a8:03:6e:3d:f5:71:59:20:03:
         f0:ee:aa:5f:53:14:65:24:bb:01:bc:b6:d8:0d:a4:b3:ba:c0:
         49:ba:24:e9:e7:1b:82:f6:fb:ed:28:36:10:3e:22:44:6c:3c:
         43:1f:b3:ae:57:da:64:9b:e8:7f:c0:45:8b:ed:a2:11:c7:10:
         2b:b5:f6:c6:3b:91:cd:e5:f7:91:37:91:04:7a:52:ff:5a:74:
         15:c4:dc:f0:27:e3:1a:44:08:f1:13:21:31:52:dc:9e:35:cc:
         32:e0:6f:2a:f1:1e:22:46:40:89:fe:9b:d0:3e:ad:52:3d:cb:
         a4:8b:71:b6:db:b2:48:e6:b3:2d:b7:d2:c8:5d:5e:c0:48:f4:
         8e:55:9c:17:ec:f7:06:60:46:44:76:e4:d9:87:bd:ce:e9:67:
         5c:d1:22:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:30:27 2026 by rpki-client