Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
File:                     0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft (raw, json)
Hash identifier:          bb26vcBSlNKSMApX9QpCYa71qSlHehbMY1RHB2GBI0o=
Subject key identifier:   73:9E:D7:84:4B:0C:88:B3:E4:B1:A9:FD:11:F8:27:F1:13:57:9D:0A
Authority key identifier: D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
Certificate issuer:       /CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Certificate serial:       019E1D232CDA4356CBD289991D76F2F37C7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 17:01:44 +0000
Manifest this update:     Tue 12 May 2026 17:01:44 +0000
Manifest next update:     Wed 13 May 2026 17:01:44 +0000
Files and hashes:         1: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl (hash: yb7lBn4g1tKv/lYq7tcTSADKzlyl99hRQqkEmjco+iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:2c:da:43:56:cb:d2:89:99:1d:76:f2:f3:7c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
        Validity
            Not Before: May 12 17:01:44 2026 GMT
            Not After : May 13 17:01:44 2026 GMT
        Subject: CN=739ed7844b0c88b3e4b1a9fd11f827f113579d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:4b:b4:06:8a:ac:25:b3:8b:41:13:e7:52:
                    f0:77:0a:e8:67:cc:ef:94:0e:0a:83:5d:1d:38:56:
                    25:38:35:40:ce:f1:45:ab:2a:b3:5e:ab:54:2b:20:
                    3e:7b:17:e5:0d:d2:be:12:25:8f:97:33:13:cc:fd:
                    12:c9:36:c1:c0:54:ee:06:8d:26:f5:d7:6c:e3:7c:
                    3f:56:8f:d4:f4:5c:ff:21:10:ab:6a:e4:4b:08:62:
                    1c:df:8d:0c:28:cc:bd:66:8a:a4:6b:5d:8d:9c:d7:
                    b1:78:a0:50:5f:73:13:12:3d:71:79:6b:fe:cc:a3:
                    8e:f5:be:fd:e8:52:9e:2e:9b:27:16:ff:ed:a6:12:
                    99:09:08:03:a3:91:42:4b:58:d9:a8:32:69:34:fe:
                    18:b0:60:45:0a:d9:91:e2:1a:63:07:63:32:2c:a8:
                    01:a5:97:08:37:f8:49:ed:19:a6:86:15:35:35:18:
                    3a:32:c9:7c:e5:09:b6:fe:8a:36:d9:23:29:c7:66:
                    bc:5b:60:d7:94:cb:d6:d3:fd:2a:d8:36:6c:24:fb:
                    9c:ac:01:c1:58:79:c9:b5:4c:cc:b1:5b:82:35:c4:
                    48:ce:57:c3:db:78:69:c7:02:a1:2f:6e:6f:ab:cb:
                    29:70:10:b1:3d:0f:da:f5:17:89:49:a9:c6:6c:aa:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9E:D7:84:4B:0C:88:B3:E4:B1:A9:FD:11:F8:27:F1:13:57:9D:0A
            X509v3 Authority Key Identifier:
                keyid:D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:4f:98:3f:42:fb:bb:e9:ae:af:08:33:18:34:50:5c:57:53:
         88:4e:c6:3f:4f:53:87:fc:10:58:5a:fa:c1:73:1d:64:22:69:
         90:60:e8:12:0a:7e:88:a3:a5:bb:07:01:ce:07:d4:72:a8:4d:
         dd:21:ec:01:6e:d3:86:0c:ee:f1:17:24:c3:34:72:0e:ef:52:
         ae:78:32:1a:a2:73:b1:98:db:30:bc:35:3f:32:6d:1d:d2:0b:
         14:2a:19:95:33:51:5d:4b:1c:9f:78:da:f2:79:ae:3a:e0:57:
         fd:28:fc:61:06:90:2a:0b:0c:f5:66:10:06:01:50:de:29:0f:
         87:2e:57:d1:e7:93:8e:37:1a:bf:35:f2:5a:10:2f:d5:60:ae:
         1d:83:bf:ba:6a:a2:32:8d:72:68:7f:ac:35:27:7c:12:e0:aa:
         ef:85:63:f8:42:07:00:4d:e2:09:ff:a0:8a:0d:36:86:53:7f:
         8b:01:a3:78:57:19:20:d9:96:6c:09:65:66:a1:e7:cc:66:07:
         56:ee:48:f2:a6:c0:5c:f2:d8:92:59:57:7b:ff:44:51:9f:65:
         57:ff:07:92:14:7c:7b:8c:5e:1c:e1:bc:76:a3:b8:aa:81:9c:
         0c:20:ab:73:0b:85:07:a7:e1:30:12:22:55:15:b4:58:d9:7b:
         35:91:10:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:54:08 2026 by rpki-client