Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
File:                     1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft (raw, json)
Hash identifier:          glqZhWSSB//qm9Kpbd019xeTcaPisslMRDXECWYh4Gg=
Subject key identifier:   E2:A3:BE:7D:AB:2F:66:7A:F6:69:35:02:EE:BA:86:71:5E:92:5D:CC
Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
Certificate issuer:       /CN=fab796d980fa60fe2514fce62646f45d12c95165
Certificate serial:       019E1DFE546EE96783FCD621B76BE2C046E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
Manifest number:          190A
Signing time:             Tue 12 May 2026 21:01:07 +0000
Manifest this update:     Tue 12 May 2026 21:01:07 +0000
Manifest next update:     Wed 13 May 2026 21:01:07 +0000
Files and hashes:         1: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl (hash: 3vMzM5ODcn0Ur+x4jvRD5s7n4sdXxZZ7gJUOUjOHecU=)
                          2: YPX4hTijPNtYr9QhjImFgFRXgKg.roa (hash: Uysgi8w4knYDa70kMhClAKgRlCbLW7PT65F4/2d78Bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:54:6e:e9:67:83:fc:d6:21:b7:6b:e2:c0:46:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165
        Validity
            Not Before: May 12 21:01:07 2026 GMT
            Not After : May 13 21:01:07 2026 GMT
        Subject: CN=e2a3be7dab2f667af6693502eeba86715e925dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4d:28:dc:98:84:b9:97:9e:db:77:3b:9b:61:
                    e8:10:1f:02:e2:14:9a:b3:0b:3f:81:3c:fe:1a:81:
                    f6:7e:8a:7a:19:e4:dd:2a:4f:c4:17:bb:47:a5:8d:
                    8c:f2:43:37:cf:89:75:48:eb:d2:07:cc:07:54:9d:
                    84:4c:fb:13:6f:8b:34:5c:32:d5:15:f8:89:36:d7:
                    a5:f6:35:e7:46:97:a6:9e:b4:35:c5:20:82:ea:35:
                    5b:cf:88:1f:e4:aa:ff:42:d8:e4:d5:32:66:8e:d5:
                    29:75:2f:8b:a7:8f:79:f4:8e:6d:d3:dd:2f:9c:88:
                    a5:74:5e:44:14:f7:f7:9d:c5:30:5c:a2:cd:1a:13:
                    fd:1e:f3:b4:7a:c5:12:83:00:49:96:5e:11:30:97:
                    9d:e3:23:2c:1b:27:7b:5d:44:a9:2d:a6:b5:43:d5:
                    85:56:96:5b:89:f3:c9:75:ff:58:56:d5:9b:e4:7e:
                    b0:e5:65:50:03:9e:7d:46:4c:a6:0a:4e:40:59:29:
                    71:b3:15:09:70:6f:43:73:53:c5:c3:82:86:82:cd:
                    c6:31:59:7f:c3:37:b3:bd:5d:de:79:a9:b7:fa:e3:
                    dc:25:90:39:03:9b:41:05:17:e9:1d:db:5d:c3:db:
                    e2:b9:be:bd:64:19:e6:5a:8b:bf:63:62:02:bc:27:
                    57:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A3:BE:7D:AB:2F:66:7A:F6:69:35:02:EE:BA:86:71:5E:92:5D:CC
            X509v3 Authority Key Identifier:
                keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:7f:9d:6a:f8:8a:6e:9f:e1:55:7a:f3:2a:f9:f6:ef:26:23:
         d7:e6:12:d2:af:09:1c:b3:7e:3b:aa:3b:a8:38:38:6f:c1:95:
         af:50:9d:12:6b:12:9f:61:32:27:8e:19:17:0d:1f:a2:10:0a:
         ea:ea:0d:a7:f1:a4:35:bb:6c:c7:c3:71:c0:4d:6c:ad:1c:c5:
         06:03:58:14:be:c4:79:d2:19:14:c5:6b:fa:5f:2f:5a:70:16:
         66:1a:b5:27:09:60:7d:6e:a9:d6:b3:7c:53:88:1a:22:43:ab:
         1d:31:28:d8:3a:1a:ef:f5:47:b9:66:e6:de:47:43:04:19:e2:
         c7:0e:7d:2c:a8:04:07:2b:d8:e9:ca:66:08:49:43:b3:fe:df:
         28:8c:25:61:e0:57:11:e6:71:d1:49:e7:b1:59:78:39:50:55:
         31:0d:f5:4f:b2:67:d1:8e:78:ba:c2:2e:da:25:68:41:22:59:
         cd:e0:f7:cc:17:8a:64:6d:00:6a:33:ec:40:7e:2b:16:6a:31:
         a2:ba:e2:aa:43:d2:ac:ab:e9:ca:ae:22:52:a1:35:4f:0f:03:
         3f:ed:51:00:0f:04:f8:02:7d:02:4f:7c:27:1e:95:7d:45:84:
         20:71:ce:e9:c7:e2:69:9f:3f:c7:94:c3:35:26:59:38:e6:29:
         8e:9b:8a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:41 2026 by rpki-client