Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
File:                     1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft (raw, json)
Hash identifier:          Lj8PX0sbPvV8QmZhIyiKio06ZcCbx36Ys6acgzBUZbs=
Subject key identifier:   C2:93:E9:E3:6C:7F:96:52:DA:9C:8A:36:AA:AE:F7:1E:5F:B4:91:D8
Authority key identifier: FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82
Certificate issuer:       /CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
Certificate serial:       019E1D232DC3CF7BCAEE0404F9EFAC037949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
Manifest number:          1894
Signing time:             Tue 12 May 2026 17:01:45 +0000
Manifest this update:     Tue 12 May 2026 17:01:45 +0000
Manifest next update:     Wed 13 May 2026 17:01:45 +0000
Files and hashes:         1: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl (hash: CWq6qrG5nRq6QDVH5Bl2m3eCg3R2Y0le2UNunoPgtYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:2d:c3:cf:7b:ca:ee:04:04:f9:ef:ac:03:79:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
        Validity
            Not Before: May 12 17:01:45 2026 GMT
            Not After : May 13 17:01:45 2026 GMT
        Subject: CN=c293e9e36c7f9652da9c8a36aaaef71e5fb491d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:be:91:7c:90:75:ff:78:20:31:a2:17:67:
                    29:cc:08:f9:84:df:76:1e:f8:d6:b6:a9:e2:bb:e5:
                    b9:7e:a5:bf:78:10:d1:db:64:90:75:f3:20:a9:92:
                    49:93:71:95:ed:8b:c9:40:35:dc:58:f3:d6:4c:b5:
                    5b:30:41:e1:77:9e:1e:ea:f8:da:dc:92:02:93:2d:
                    ef:34:c2:e8:a0:fc:a2:ee:06:11:4d:cf:18:af:25:
                    42:b0:ff:54:e3:3e:20:ea:1f:d9:2f:90:70:62:c6:
                    ec:66:99:30:8a:ff:3f:cd:a4:19:d6:90:64:52:9b:
                    d7:d0:a2:0b:67:86:d3:bc:2c:9e:49:6d:2e:02:a4:
                    03:06:ad:9b:c8:43:54:84:ee:da:2f:70:51:69:af:
                    80:26:b3:37:15:dc:9b:f3:d9:eb:7a:5b:89:63:ad:
                    e6:c2:20:12:3b:f5:3b:54:a9:8e:ba:cc:1a:90:b6:
                    e4:3d:33:75:43:d1:52:3d:e0:89:2d:1f:ef:61:77:
                    80:1b:96:da:38:1a:01:1d:77:c0:21:1e:a5:34:e4:
                    a4:96:92:ce:44:18:1a:8f:23:5f:1f:5e:f5:8f:b7:
                    43:bc:66:c6:db:d3:69:02:9a:b8:97:59:16:36:88:
                    fe:f5:15:60:64:91:6b:31:e6:80:1c:74:39:c6:81:
                    8b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:93:E9:E3:6C:7F:96:52:DA:9C:8A:36:AA:AE:F7:1E:5F:B4:91:D8
            X509v3 Authority Key Identifier:
                keyid:FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:03:67:5d:96:27:69:07:74:10:15:9b:e7:a0:1f:39:96:8c:
         f1:03:73:d2:98:48:c7:c5:48:d8:f9:28:0e:a9:6a:de:e6:11:
         33:db:f2:e1:7e:09:15:93:20:8d:fb:7e:c4:71:f0:b7:2f:33:
         f7:63:ad:e7:a2:60:7c:c4:7d:1e:63:86:c4:7b:7e:d8:da:f7:
         35:69:71:e3:94:8c:5e:0d:56:dc:df:eb:67:f8:17:9a:38:1c:
         64:c0:04:48:53:ff:ed:9a:ad:29:07:af:07:5b:e6:25:e3:4e:
         72:ef:1d:27:bc:a9:70:90:97:d2:6f:9a:99:86:3e:7b:d7:26:
         08:7a:40:84:ed:41:85:ad:2e:b8:e6:2e:b3:45:7c:44:10:fb:
         de:d1:eb:e6:0b:a4:5b:80:99:bb:2a:83:e9:b7:ef:af:d8:a7:
         bc:d6:65:10:db:a3:dd:c0:c1:57:39:57:c8:1e:db:6b:29:20:
         7e:5e:f5:77:d6:fc:f8:28:b5:a1:f2:74:aa:39:b0:17:7b:21:
         9f:a4:33:eb:f7:76:b4:05:98:d5:50:d7:ba:cd:b8:60:66:9f:
         f4:b7:46:7a:b9:4d:df:22:a3:cd:1d:af:c2:0a:2c:cc:b2:5b:
         73:56:d2:5f:63:34:2a:29:af:cc:7f:b3:d9:ff:03:c2:6a:86:
         64:92:e2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:19 2026 by rpki-client