Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File:                     AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier:          oUY0FO9FcGK7Mir+jV/E9NRGhItc/enfXjpJXvjw06I=
Subject key identifier:   F7:48:AE:AD:B6:50:27:16:8B:D9:83:E7:18:B8:B8:48:CC:05:FD:2D
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer:       /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial:       019E1CB4DF6F3879268BD427D588674B10BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number:          1902
Signing time:             Tue 12 May 2026 15:01:16 +0000
Manifest this update:     Tue 12 May 2026 15:01:16 +0000
Manifest next update:     Wed 13 May 2026 15:01:16 +0000
Files and hashes:         1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: 8CtAXPp7hB2Qt8bUtALmp8m397RIvQEyTdxOHSDPouw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:df:6f:38:79:26:8b:d4:27:d5:88:67:4b:10:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
        Validity
            Not Before: May 12 15:01:16 2026 GMT
            Not After : May 13 15:01:16 2026 GMT
        Subject: CN=f748aeadb65027168bd983e718b8b848cc05fd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:6c:62:a5:a3:a3:a6:c8:80:2b:f4:15:6e:
                    53:d2:48:d2:03:ab:fd:9d:ca:7d:57:b1:4e:8c:18:
                    bf:05:ee:23:60:19:7e:d2:84:e3:58:40:54:ad:a1:
                    50:d9:cd:a3:64:e5:16:1d:b5:f9:a4:a1:5f:c0:c7:
                    44:db:77:6e:15:1c:c0:67:2b:40:5d:e0:01:e0:8a:
                    2e:36:49:67:bd:a8:a4:55:8c:fe:6a:b1:1a:95:cb:
                    03:cb:4a:dd:c2:75:fb:5c:10:36:f6:32:31:46:90:
                    5b:d3:3d:45:90:ef:3b:3d:5c:67:d6:a2:13:13:39:
                    b5:cf:cb:3c:29:ed:8f:1d:cd:4d:4e:fa:d4:3b:cd:
                    09:ef:bc:f5:4c:fc:e7:9a:fa:60:e9:f4:9d:56:57:
                    78:af:03:a1:40:86:80:68:5f:2a:1f:9f:00:59:66:
                    14:3e:0f:00:dd:a9:53:16:37:3a:44:da:20:2e:4d:
                    5b:3e:66:65:88:5c:42:ba:22:66:a8:1f:8a:27:e1:
                    7e:88:7f:63:11:79:92:23:8a:a6:c5:d5:7a:6b:85:
                    17:08:8e:36:13:08:41:4a:41:e8:b0:ef:3a:f8:6f:
                    67:00:46:49:4e:43:88:f7:09:78:66:f6:39:47:b3:
                    1d:09:52:de:de:c6:49:13:eb:54:35:be:33:f0:e9:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:48:AE:AD:B6:50:27:16:8B:D9:83:E7:18:B8:B8:48:CC:05:FD:2D
            X509v3 Authority Key Identifier:
                keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:62:72:e6:44:48:09:76:22:81:a1:e1:77:c7:e9:d4:eb:90:
         a3:87:84:ef:18:19:35:42:6a:d5:6a:26:9b:e6:ed:cc:de:2a:
         68:13:41:59:52:01:27:f3:31:7c:f9:1f:44:f8:d5:7a:c7:a0:
         d7:d9:fe:d0:1b:f7:88:8c:ec:ec:1b:ca:e0:4e:fc:48:a5:bd:
         77:75:5b:4f:90:ec:b1:ae:bd:6a:f0:5e:eb:54:eb:a9:6b:17:
         99:69:5c:ef:f5:f0:02:07:cb:e6:e9:1a:bf:29:44:7a:51:20:
         0b:ea:5e:ac:21:79:04:2f:69:19:e2:b0:c1:a5:ed:46:2f:06:
         e1:14:c2:0b:7c:ef:88:1c:4b:67:77:24:96:c8:1c:14:c7:4a:
         0a:8a:e0:e9:05:11:cd:8f:e2:2f:3f:a0:60:72:93:65:c1:09:
         95:e4:3a:b7:cc:4c:a2:8f:8a:d6:3f:98:6e:79:c6:46:0a:ee:
         dd:9c:b7:cf:60:c1:43:31:d8:bb:fd:70:d3:42:57:15:63:a3:
         8d:29:f2:c4:4f:93:a1:31:93:d2:88:b3:4d:cc:b7:85:27:39:
         b1:38:24:95:30:1e:d3:00:b6:c3:65:0e:2c:e6:c4:97:45:84:
         7d:0c:f5:2a:de:89:ca:b6:98:a7:07:17:c9:86:20:b8:c0:1b:
         06:fc:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:21:27 2026 by rpki-client