Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
File:                     4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft (raw, json)
Hash identifier:          /8sVOdo3VOwTG4e1VFmKSaVEeouGrZj15Xe5tIJOigQ=
Subject key identifier:   75:09:F0:1B:48:FB:9D:60:80:96:5F:A5:03:78:A0:A7:E3:52:B5:A9
Authority key identifier: E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
Certificate issuer:       /CN=e33779b8388d001fdcbddc48ace227f009850660
Certificate serial:       019E1C4724244D937CF5100B5E5D308B0DC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
Manifest number:          1900
Signing time:             Tue 12 May 2026 13:01:24 +0000
Manifest this update:     Tue 12 May 2026 13:01:24 +0000
Manifest next update:     Wed 13 May 2026 13:01:24 +0000
Files and hashes:         1: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl (hash: D3mPGNVUfjm4xrcPVrpyjoomGshgAETZJQh9iwuo35Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:24:24:4d:93:7c:f5:10:0b:5e:5d:30:8b:0d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33779b8388d001fdcbddc48ace227f009850660
        Validity
            Not Before: May 12 13:01:24 2026 GMT
            Not After : May 13 13:01:24 2026 GMT
        Subject: CN=7509f01b48fb9d6080965fa50378a0a7e352b5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:04:c4:b0:2d:ac:e5:2c:c2:42:2a:7d:98:
                    3e:0d:35:7a:db:f0:71:74:69:6c:62:ee:8c:ca:2f:
                    a3:92:77:06:bf:2a:66:a9:55:8d:2a:f2:9e:f0:9c:
                    8e:ed:aa:57:91:0a:93:df:cc:07:a7:96:3d:db:9a:
                    fc:49:62:13:cb:02:ba:64:42:8f:ac:d5:14:ad:6e:
                    2c:c3:3f:ca:39:95:e4:3f:20:cd:f9:7e:35:4c:96:
                    85:52:bd:31:4f:71:62:93:50:4b:49:94:73:48:84:
                    8c:c8:5e:5d:7d:c9:24:50:42:99:db:fc:6a:25:b4:
                    a8:0a:ae:02:9c:73:89:df:48:18:a0:48:57:1c:85:
                    96:83:dd:bf:9d:60:87:ce:eb:79:0e:a1:1b:43:49:
                    29:df:9e:92:4f:8f:08:b2:07:60:f0:c7:d8:93:85:
                    8c:48:35:c2:3a:fb:ba:50:ad:8c:79:fa:6e:74:e5:
                    3f:ae:7f:cd:6f:d4:c8:3a:9d:53:9b:0b:0f:0a:3e:
                    a9:94:d7:71:d7:a5:30:3b:45:da:4c:60:3d:d3:4a:
                    76:f4:31:df:1c:9f:c7:59:fa:d7:57:21:ee:6c:b2:
                    2b:29:69:74:47:be:e0:4f:f0:1e:33:bc:56:11:19:
                    08:7a:98:5e:8c:1b:3a:14:d1:96:22:df:49:aa:44:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:09:F0:1B:48:FB:9D:60:80:96:5F:A5:03:78:A0:A7:E3:52:B5:A9
            X509v3 Authority Key Identifier:
                keyid:E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e8:b6:e1:45:8a:ab:bb:a3:6c:86:f3:50:ec:50:5a:bb:d8:
         42:bf:8b:11:c4:5a:70:64:6c:c9:69:cc:23:72:e7:fa:79:a0:
         85:83:22:5e:a8:76:98:b1:91:07:46:5f:43:be:7a:56:df:32:
         8f:88:18:49:86:dc:d9:e6:ff:b8:8f:e1:7c:7e:4e:87:92:30:
         a0:63:95:43:e4:fc:63:14:00:56:4e:99:e2:8a:86:d9:df:cc:
         e4:7f:fd:88:7d:87:51:8a:33:5e:c2:ee:3d:33:9f:08:f6:af:
         c8:33:63:cf:85:fa:d1:0d:45:6e:a8:f7:74:57:8a:94:eb:c2:
         d2:0f:15:d9:90:9b:fd:f1:8d:22:0e:a1:1b:3a:ea:3b:53:8d:
         d9:86:65:45:93:53:d1:7c:be:87:35:69:e4:b9:3d:2b:fb:0a:
         f5:ca:9d:8c:73:f6:86:15:78:90:7a:de:4a:ac:9f:7c:95:f3:
         50:64:14:b1:ed:d0:74:90:b9:cd:14:e6:67:ef:fb:c5:8b:15:
         79:90:73:1f:c3:76:34:22:10:ee:83:0a:81:cf:05:e8:6c:73:
         7a:f0:3c:c9:f1:ab:1e:ec:ab:08:65:94:df:8f:91:dc:4c:31:
         bd:f7:f2:83:94:74:05:29:e9:5c:9a:e2:15:98:46:ac:d2:11:
         fe:28:e7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:27 2026 by rpki-client