Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
File:                     564LxrVkpXPje515fLdeuxt24AE.mft (raw, json)
Hash identifier:          LfVyWKXUTBNlrAZgp/zNa/GycfUk2leEDYD0+CQkIn0=
Subject key identifier:   4E:05:D3:6A:10:45:F8:54:A6:28:89:D9:00:F2:B5:7D:06:76:79:AE
Authority key identifier: E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
Certificate issuer:       /CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Certificate serial:       019E1C101C3C40A43FFE9559D760E31C1164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
Manifest number:          1902
Signing time:             Tue 12 May 2026 12:01:18 +0000
Manifest this update:     Tue 12 May 2026 12:01:18 +0000
Manifest next update:     Wed 13 May 2026 12:01:18 +0000
Files and hashes:         1: 564LxrVkpXPje515fLdeuxt24AE.crl (hash: qzqDgMRwbdoEZQAsI+kleG8mREcD4e3NgIHTev7+bFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:1c:3c:40:a4:3f:fe:95:59:d7:60:e3:1c:11:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
        Validity
            Not Before: May 12 12:01:18 2026 GMT
            Not After : May 13 12:01:18 2026 GMT
        Subject: CN=4e05d36a1045f854a62889d900f2b57d067679ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:d7:7d:02:ff:42:d9:bb:67:94:57:f6:be:
                    61:8e:4e:2b:68:1a:1d:23:ca:56:60:05:75:a8:6f:
                    e3:ac:7c:dc:11:07:8c:bb:89:60:cc:e0:04:93:69:
                    6f:69:5e:11:6c:20:11:68:ec:9a:d8:6d:a7:7f:d5:
                    59:49:7f:67:54:64:ec:4e:b8:ae:b1:a6:2d:42:a6:
                    f0:1b:ab:6e:95:62:db:55:38:c5:00:4e:d0:0e:14:
                    41:f4:2f:36:26:a4:a9:0b:1f:98:29:46:5e:b6:d4:
                    12:1e:1a:34:54:15:df:0b:fd:18:d6:af:e8:ac:3e:
                    53:07:05:b0:a6:74:96:c9:b7:ed:c1:4b:4d:c8:28:
                    bc:80:5d:4a:cd:5a:ab:ea:bb:36:c9:ac:47:50:7e:
                    0b:ee:3a:74:cf:ea:ca:42:a8:e9:2d:a0:20:9d:f1:
                    c2:a0:c0:dd:38:6b:95:f5:70:4a:d4:5a:5c:c1:bb:
                    00:dc:11:6b:90:b3:51:0d:34:7c:21:d4:01:26:53:
                    4b:c9:da:7f:c6:dc:79:bd:ae:d7:91:82:02:f3:97:
                    c2:76:25:9a:c9:9f:80:10:1c:dd:5f:09:ae:76:83:
                    06:04:07:ce:fd:11:68:e8:a2:de:67:a6:2d:00:a3:
                    30:d1:95:58:30:da:26:33:4d:c4:43:1d:f7:e1:3a:
                    5c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:05:D3:6A:10:45:F8:54:A6:28:89:D9:00:F2:B5:7D:06:76:79:AE
            X509v3 Authority Key Identifier:
                keyid:E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:99:b4:6d:0e:57:64:ad:f9:4d:5e:1d:fc:64:46:a0:96:d1:
         d9:86:73:bd:cd:6b:3c:d4:50:fc:70:d9:d2:9d:24:f6:1e:50:
         ad:b1:43:c2:73:45:3d:c7:22:13:45:e7:47:a0:62:82:dc:da:
         1e:ac:b5:cf:db:dd:5c:10:0e:9c:4a:24:c2:07:93:8d:c9:39:
         71:73:69:d2:99:8b:35:29:51:13:8e:7e:f5:2b:20:e3:cb:c6:
         f5:3f:42:13:65:20:bf:7e:0e:3f:64:cd:0b:d7:e2:16:cc:8a:
         22:33:56:17:f5:79:32:e9:ed:c2:f1:d7:c7:9a:95:f0:e6:a5:
         31:96:6e:d1:a3:c5:34:02:4d:e2:dc:44:96:0e:61:45:4c:d1:
         0c:2e:fb:25:fa:0a:81:85:9e:2e:bb:cd:f2:b3:c5:62:97:c3:
         69:fb:b8:fb:4a:b9:ef:28:2c:78:89:76:45:1d:04:d9:15:e8:
         c0:b9:16:29:00:4b:dd:2f:66:72:d8:90:88:9e:e0:27:d3:74:
         4a:06:c4:62:48:e2:57:bc:ad:87:4a:b2:e8:94:65:ce:08:97:
         07:43:cd:82:27:63:20:a0:8d:8d:34:f8:cb:ce:bb:62:69:15:
         0a:63:3f:89:bc:32:36:ea:8c:ae:fc:0c:d9:07:4d:0a:46:84:
         54:2f:a0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:40 2026 by rpki-client