Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File:                     AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier:          wqx0tEnHCzYmSU+Yc8MSHF+uoi7opJAv5EMojQiwiW8=
Subject key identifier:   82:71:A0:D9:A7:D2:C9:D1:45:F0:62:99:E2:6B:20:82:8E:BE:01:D3
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer:       /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial:       019E20920A144F34B9C6C13269A67E24E342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 09:01:42 +0000
Manifest this update:     Wed 13 May 2026 09:01:42 +0000
Manifest next update:     Thu 14 May 2026 09:01:42 +0000
Files and hashes:         1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: Zp8AXjhSZtHjMlQM9G00vhjdP++0iSt+SReKWbrWKQE=)
                          2: EK4O0xHWKJmmPQygRY3dmzgeTsI.roa (hash: m1XR1i5Us8oblIUOIQzSE1h5zvdVSIn8gW8k8tGSpec=)
                          3: Ql95-IGW0X06XmkQjeBmRl8NR5M.roa (hash: U0YHtEFSJr7CqFsN6UUpHO3sj4tjBDK3Qns3+4dEtP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:0a:14:4f:34:b9:c6:c1:32:69:a6:7e:24:e3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
        Validity
            Not Before: May 13 09:01:42 2026 GMT
            Not After : May 14 09:01:42 2026 GMT
        Subject: CN=8271a0d9a7d2c9d145f06299e26b20828ebe01d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:6b:fa:31:c1:da:0f:14:36:13:10:37:31:
                    71:a6:2e:67:54:12:53:7f:54:74:1f:35:f9:ee:14:
                    c4:f4:54:e9:b0:5a:46:b1:b0:39:d7:d6:ae:e3:08:
                    8c:ca:c1:dd:fa:2a:ea:80:05:eb:c0:44:c8:05:1d:
                    2b:ab:74:be:5a:fc:3e:11:1b:5c:48:69:33:63:4f:
                    a8:45:46:4a:f6:5a:6b:ae:47:35:23:21:51:07:ec:
                    85:fd:1b:b4:43:35:e8:96:44:2a:1f:8c:dd:57:89:
                    72:a3:8b:ba:23:5f:57:99:e0:8f:77:7b:23:05:e3:
                    77:20:cd:b1:69:58:c9:3f:73:77:91:b7:9d:19:d0:
                    8e:27:23:02:c2:0d:86:4f:2d:3a:d0:11:4b:37:83:
                    f8:d5:eb:3e:1f:c7:a3:b1:bd:5b:be:29:cf:da:6a:
                    c1:64:44:0e:25:0b:06:55:b3:24:8b:5d:40:44:07:
                    45:c0:11:c5:82:8a:33:7d:fc:4a:99:8d:f5:d1:f7:
                    dc:49:3f:99:5f:bc:3c:c7:e6:3e:ea:54:ab:b8:9f:
                    de:1f:b0:be:fa:ae:4f:c6:54:f0:83:88:f4:00:16:
                    99:d3:65:52:ea:64:92:09:4c:6c:d4:24:06:e6:d3:
                    42:9b:a4:c0:a2:f8:63:50:37:37:0e:2e:8d:32:96:
                    0e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:71:A0:D9:A7:D2:C9:D1:45:F0:62:99:E2:6B:20:82:8E:BE:01:D3
            X509v3 Authority Key Identifier:
                keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:de:f5:93:68:76:7b:79:f7:8c:e7:85:0e:63:13:e4:b7:a6:
         c3:f1:93:57:fb:3f:52:6f:d6:94:1f:45:e6:46:65:27:2a:8e:
         c2:1a:44:bc:f5:0a:08:9f:cb:e5:b3:60:ef:22:15:38:c1:b0:
         46:b9:04:53:38:40:8f:72:8d:8f:88:cf:bd:e7:15:d0:25:de:
         3b:ed:d6:f7:cc:8a:d3:6b:75:4d:18:f8:61:ba:6d:17:e3:4a:
         37:84:0e:bf:a8:2b:93:b0:2d:52:d7:44:5d:07:3a:10:a0:88:
         45:e8:f6:4f:49:04:79:5e:3f:8e:bc:5b:ad:f8:fe:79:67:ca:
         35:cc:cc:f6:ef:40:fb:90:34:75:6e:00:ab:8e:ec:49:c7:8a:
         88:89:47:f8:7b:d4:f0:39:57:b0:c5:2f:39:05:0e:23:78:f0:
         99:29:9c:62:56:41:3f:b7:e5:ea:bc:c9:85:40:ad:d3:fb:51:
         f5:76:ae:a5:53:b0:fa:c3:d1:da:6e:f2:9e:44:99:41:60:90:
         04:9c:5b:d7:10:09:a7:58:64:ae:a9:2a:30:61:40:65:e7:eb:
         2d:d2:de:60:c4:c4:28:07:3b:f9:65:10:e5:ef:03:17:e8:4a:
         9d:81:58:de:99:60:04:c3:7b:4f:fb:8f:f3:91:c7:86:f5:08:
         07:3d:34:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:02:58 2026 by rpki-client