Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
File:                     e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json)
Hash identifier:          w/c9UfvzSOifQI3oYT/SVpa3rqsG6iAJlvr98KPFcGk=
Subject key identifier:   33:00:AC:21:6A:17:11:3D:4C:9A:32:9C:59:CF:02:5C:EE:4B:12:90
Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
Certificate issuer:       /CN=7b89385c0002330b096567b21514d8e1bc09689f
Certificate serial:       019E209181234D319EC6A4FF59E32F32AAB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
Manifest number:          190B
Signing time:             Wed 13 May 2026 09:01:06 +0000
Manifest this update:     Wed 13 May 2026 09:01:06 +0000
Manifest next update:     Thu 14 May 2026 09:01:06 +0000
Files and hashes:         1: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: QYgQfumrheAM28SmP+sxK6Eq+kq6BNNeR56I+4RuNEo=)
                          2: rBb-Zp2DN1YryszXlTcGsxUi8kg.roa (hash: VjavbSWKLaeBoYTEkUDvu679eNkgyVWO00COvRWyhp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:81:23:4d:31:9e:c6:a4:ff:59:e3:2f:32:aa:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f
        Validity
            Not Before: May 13 09:01:06 2026 GMT
            Not After : May 14 09:01:06 2026 GMT
        Subject: CN=3300ac216a17113d4c9a329c59cf025cee4b1290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:9f:15:e7:fc:0b:6b:d7:e6:0d:eb:c2:51:
                    22:05:97:3c:ca:ff:9b:96:28:1c:5c:d7:a8:42:a7:
                    c4:c7:35:e0:43:e7:e7:71:c5:82:c3:b0:e0:61:b9:
                    f9:c8:be:e3:cd:53:93:69:fe:3e:a3:8b:05:d5:48:
                    91:46:71:9b:fd:2f:c1:a9:a6:02:1b:08:b4:92:b3:
                    11:da:e9:26:2c:fb:ea:dd:f4:05:bd:2a:54:be:b2:
                    71:ef:de:48:ac:52:03:20:96:0b:72:c3:f9:3e:83:
                    88:f6:80:64:57:c7:c1:7a:83:ed:c4:3c:3c:8b:33:
                    8e:86:81:6f:48:a2:01:1c:2b:08:a7:0e:49:51:49:
                    d9:42:87:29:0e:83:d3:90:8a:51:e9:dd:82:97:c8:
                    9e:41:f1:56:04:54:db:81:64:dc:b9:ae:43:1f:8b:
                    0c:af:73:01:33:4a:aa:16:bb:f5:bf:28:42:ef:b7:
                    e9:0d:32:3e:69:f5:32:cf:a8:bb:ab:2c:40:58:97:
                    83:8f:71:1e:fc:03:4e:8c:44:1e:53:3f:82:4c:9c:
                    70:1e:9e:ff:a4:2f:9a:e4:c3:84:45:a6:72:fd:fb:
                    a5:49:e3:9d:87:e8:80:04:8e:ac:6e:d5:7a:24:52:
                    f9:80:ba:6f:9b:1f:ce:59:4b:d7:8c:ba:b7:22:52:
                    fa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:00:AC:21:6A:17:11:3D:4C:9A:32:9C:59:CF:02:5C:EE:4B:12:90
            X509v3 Authority Key Identifier:
                keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7b:5c:1f:b9:1f:a6:cd:bb:11:75:3c:14:f3:1c:30:5f:43:
         3d:51:d6:d6:cf:51:11:42:20:85:8f:62:67:af:e4:83:57:e9:
         05:30:99:52:f0:33:45:11:6f:14:5f:07:81:3e:23:a0:f7:31:
         28:12:8f:eb:20:cb:75:9f:6b:02:fd:d8:fa:0d:35:58:92:94:
         97:c1:f2:ef:24:2c:8a:d9:20:82:15:24:aa:a8:c9:37:9d:3d:
         2d:bd:c5:2b:fd:30:5d:bf:81:f7:67:1d:2d:f2:4e:7e:84:1b:
         15:1a:bd:a0:ec:95:9e:73:ad:43:65:21:bc:25:5f:73:01:ac:
         09:fb:2c:91:f5:e5:d6:a6:21:13:64:0d:e7:7d:83:3d:68:f5:
         6e:0a:52:49:23:8a:c8:c3:6e:3d:20:d0:3f:54:f5:cb:45:88:
         4c:ce:c0:5a:bd:99:ec:4c:44:00:b7:fd:ba:a8:69:40:34:0c:
         b0:5b:3f:cb:e7:eb:36:b5:0b:1b:82:2d:43:49:38:cc:b6:92:
         96:be:4e:eb:97:ea:d1:9a:46:be:c9:92:33:bd:86:b7:c2:b7:
         c6:b6:89:95:0e:2c:fc:36:3d:21:79:1d:63:fa:9c:04:7e:23:
         49:c8:b2:b4:18:da:d8:98:f2:98:87:d6:b6:7d:46:9c:3f:92:
         5f:7a:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:58:59 2026 by rpki-client