Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File:                     FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier:          N+vo+frnsjz4EfFvv11of3CgzZTSm/B4CY4TypAsxJY=
Subject key identifier:   16:2F:32:0D:45:E0:73:E4:12:54:85:D8:E1:75:55:44:DF:26:D5:2D
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer:       /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial:       019E1E6C0AE4DE2EB4A6EE3F7E9CABCFBC61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number:          189B
Signing time:             Tue 12 May 2026 23:00:57 +0000
Manifest this update:     Tue 12 May 2026 23:00:57 +0000
Manifest next update:     Wed 13 May 2026 23:00:57 +0000
Files and hashes:         1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: jYBFn84fgDc2IyK+FCej4hjBxvAonlP4vqXSAAdMqBA=)
                          2: GmYrfW3k8osvPQTynxaphEXGOF0.roa (hash: KL4WvC6vPGKTcuwvQwS3AK/arMjab0ANyIFkXhXDgSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:0a:e4:de:2e:b4:a6:ee:3f:7e:9c:ab:cf:bc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
        Validity
            Not Before: May 12 23:00:57 2026 GMT
            Not After : May 13 23:00:57 2026 GMT
        Subject: CN=162f320d45e073e4125485d8e1755544df26d52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:be:62:d0:2f:b5:9b:73:74:75:a5:58:50:a8:
                    ae:d3:5b:aa:1b:ce:d8:1f:98:eb:34:bf:73:a0:3b:
                    28:07:04:64:e1:66:82:61:33:91:fa:7f:a0:65:94:
                    c2:56:0f:a5:d3:49:cc:3d:83:71:a1:b9:e6:ea:fd:
                    da:c6:32:1b:f2:d9:56:b3:25:83:b6:91:23:98:4e:
                    fa:04:16:76:13:a3:0c:30:7b:fd:c1:21:cd:46:01:
                    74:c4:20:68:cc:5f:45:a9:a3:27:a1:a3:6e:7a:b8:
                    4a:b4:a8:b6:08:9b:8d:65:24:5c:36:86:0c:ad:3e:
                    f8:3e:a8:69:56:58:23:14:53:c2:5e:56:1f:32:bb:
                    eb:d1:5e:32:bc:c9:dd:fa:8f:c9:17:cb:68:35:b4:
                    1b:40:ee:a1:c0:7c:d9:4f:07:e6:68:c8:ea:a8:cb:
                    52:57:75:57:a0:84:1f:ea:e7:5f:01:d1:a9:0b:d7:
                    0b:b7:6a:da:e9:99:91:75:7e:fe:3a:61:5a:c6:15:
                    8c:de:34:d8:d9:b5:e1:7b:b2:ce:ac:24:21:62:5f:
                    48:43:9f:bd:6d:3d:d7:2b:9f:b0:e1:88:87:44:c8:
                    92:1b:3a:9a:3d:f9:bf:1f:ab:61:c8:7a:f0:36:8b:
                    66:91:b2:37:d9:c4:85:fd:3f:cf:dc:22:46:4b:ec:
                    2f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2F:32:0D:45:E0:73:E4:12:54:85:D8:E1:75:55:44:DF:26:D5:2D
            X509v3 Authority Key Identifier:
                keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b2:c6:9d:a7:47:b1:f1:1c:46:14:ff:a8:aa:0b:b6:09:59:
         24:9e:b5:2c:a1:76:e4:a9:45:ee:58:6d:fb:d7:e2:6e:7d:72:
         6b:e2:45:32:fb:a1:4a:f3:bf:7a:30:80:c6:a2:09:09:9a:76:
         6b:41:a7:16:be:78:cf:4e:ad:ea:70:1a:9b:3c:8a:69:9a:9c:
         33:32:0d:76:32:85:85:08:c7:e5:75:b0:d2:e0:ed:c6:1c:69:
         b9:ae:3f:cd:00:98:14:6b:12:c9:9f:e9:ac:30:e2:32:aa:2c:
         51:a3:6b:f1:e1:f6:67:19:85:71:e6:32:91:22:78:4b:99:41:
         70:eb:b3:2c:de:a7:f3:f9:72:33:ee:63:b1:f9:37:f5:75:1e:
         1f:1c:b9:c7:63:37:92:d3:76:28:dc:6b:65:6e:ea:a9:13:cf:
         35:89:60:88:c2:e1:b7:a7:0e:9e:72:04:28:4d:b2:6f:46:32:
         74:0e:dd:42:be:4d:ea:e1:27:32:1d:2b:51:23:7c:c2:8b:2a:
         d4:05:28:83:f7:e7:1c:5f:5b:1c:22:3b:fd:6e:12:80:8e:0c:
         48:1f:27:84:a2:e4:10:dd:97:02:29:93:53:87:cc:13:5e:64:
         4b:37:5e:7c:ed:db:aa:68:4d:59:e8:11:32:01:3b:de:a7:c0:
         d4:57:01:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:50:13 2026 by rpki-client