Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
File:                     1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft (raw, json)
Hash identifier:          CYW6lA1OGMiQX/yixtpkm27Bg+IpPTcUqirUosEj8xQ=
Subject key identifier:   2E:37:D4:FF:2A:7C:64:22:A5:91:A6:64:06:79:C5:54:F9:73:80:7F
Authority key identifier: D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1
Certificate issuer:       /CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
Certificate serial:       019E1F4774C4ACA0702DB56522C050D52278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
Manifest number:          03EC
Signing time:             Wed 13 May 2026 03:00:36 +0000
Manifest this update:     Wed 13 May 2026 03:00:36 +0000
Manifest next update:     Thu 14 May 2026 03:00:36 +0000
Files and hashes:         1: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl (hash: pXq6WfLeQqbbFeXKgngIVvU9HIPvE2l0QinLbZXVAYQ=)
                          2: qMQrhVdpokolQWUOh4o5Ri8JueU.roa (hash: kVKK0WjFieFltJV66QufbgDou6/7+zDDk1pZJHeL88k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:74:c4:ac:a0:70:2d:b5:65:22:c0:50:d5:22:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
        Validity
            Not Before: May 13 03:00:36 2026 GMT
            Not After : May 14 03:00:36 2026 GMT
        Subject: CN=2e37d4ff2a7c6422a591a6640679c554f973807f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:63:6a:5e:88:68:74:66:49:6f:a8:1b:55:
                    84:25:e4:5e:b4:8c:46:5e:c7:03:a4:36:0c:79:75:
                    0d:1d:cf:8c:de:91:cb:c4:de:f0:9f:c1:fa:9b:97:
                    d8:50:de:7e:69:46:52:05:bf:d5:1c:27:69:28:9d:
                    54:ff:27:e6:c4:5f:da:8c:bf:33:92:ff:e8:af:8c:
                    7d:c1:ab:5b:58:9f:ce:2b:78:e7:72:af:0b:85:52:
                    ac:0c:f6:bb:be:27:79:fe:cd:4a:5f:03:2d:24:64:
                    c7:4c:8d:00:c0:45:a8:eb:6c:48:b2:c6:65:ca:0e:
                    e1:9b:de:c8:b8:e7:09:0c:83:65:01:f1:9a:78:6f:
                    68:df:cc:1b:d6:72:34:86:6e:df:f5:dc:44:25:b8:
                    57:72:ca:39:24:bd:2b:97:0d:9f:a5:5c:09:7c:f5:
                    21:0c:34:22:22:7e:70:32:73:58:56:ba:1d:c7:6d:
                    d4:cb:85:b8:0e:fb:de:7c:7f:d1:75:5d:15:53:ca:
                    5d:18:93:62:52:69:5c:bc:3a:8b:53:7c:12:cb:02:
                    fb:ec:99:16:b9:43:ab:f7:8b:6d:ef:d6:4f:55:bb:
                    8e:19:05:18:88:a1:7f:07:29:8d:46:48:9a:9f:8f:
                    c4:6d:9d:2f:e6:8d:52:35:4a:1c:10:cd:de:c3:73:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:37:D4:FF:2A:7C:64:22:A5:91:A6:64:06:79:C5:54:F9:73:80:7F
            X509v3 Authority Key Identifier:
                keyid:D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:33:a7:64:1d:c5:d3:0c:6f:b0:4d:2f:5a:64:71:08:9a:f9:
         43:28:65:78:7e:58:1c:87:13:c7:f6:b0:99:74:ab:56:17:18:
         f9:af:ad:46:51:91:fc:fb:58:9c:64:36:dd:24:cc:fa:d4:35:
         40:4c:0d:e8:71:a0:f5:35:4e:5c:b0:2c:ee:1b:87:57:d4:94:
         e6:d4:b7:91:ab:ac:f4:5b:62:bb:44:7a:a1:d3:59:a2:ad:d0:
         7b:d1:49:7c:1a:59:f6:43:d5:5e:5d:be:94:f4:c4:d4:ae:79:
         95:20:e2:f1:dc:58:25:e0:8b:cf:8d:b9:4f:69:58:90:1b:9b:
         b1:0c:43:e7:dc:38:2b:37:00:1c:a9:2b:9a:84:c8:5e:63:1d:
         6e:8a:24:19:e1:fa:78:70:a6:e1:97:24:c6:74:94:5b:a8:39:
         79:42:bb:18:88:51:6b:23:14:8f:03:e3:01:c0:f3:0f:79:67:
         b0:8f:e2:42:e0:de:bf:c0:cd:f2:a0:d6:f8:29:71:e5:e1:c0:
         31:49:ee:a6:2a:a7:59:3b:bc:8c:78:8d:12:ae:4f:e4:8d:63:
         e3:12:56:0c:55:88:5d:65:58:61:dd:a9:50:48:50:a6:bb:2c:
         b1:73:85:1e:1e:5f:69:a6:97:78:d4:ac:c3:e8:16:da:71:f7:
         63:73:31:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:46 2026 by rpki-client