Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File:                     2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier:          ql8cLtWIQd42ZdCNGBf27ilRtRjs6iGi3U/U5x4tGSA=
Subject key identifier:   A4:7E:05:0A:15:C8:FA:82:13:CF:93:81:7B:05:88:CF:9C:62:21:5F
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer:       /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial:       019E1FB5DAA28CE4F94257241F4FB31B0D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number:          190C
Signing time:             Wed 13 May 2026 05:01:12 +0000
Manifest this update:     Wed 13 May 2026 05:01:12 +0000
Manifest next update:     Thu 14 May 2026 05:01:12 +0000
Files and hashes:         1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: uDXjX2cfp2y1HLSJzBk5+PfR2vgEFCC7xFJeeJGQaIU=)
                          2: mdgwEYDWnao0bVx89QT9Skm53nM.roa (hash: /jy8t/OJp9tVxCw/0qf7Mw46uVUZ9NIjSKlEDS6qgU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:da:a2:8c:e4:f9:42:57:24:1f:4f:b3:1b:0d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
        Validity
            Not Before: May 13 05:01:12 2026 GMT
            Not After : May 14 05:01:12 2026 GMT
        Subject: CN=a47e050a15c8fa8213cf93817b0588cf9c62215f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:8f:0e:d9:f1:54:a1:28:66:b9:81:2f:61:
                    1b:bf:ba:aa:81:6a:d6:96:f6:73:2e:34:19:f0:78:
                    d8:26:f1:52:1c:7a:f8:72:c0:4f:87:9b:1a:1a:6a:
                    c1:f4:df:d0:69:45:95:1c:05:03:fa:03:69:74:47:
                    40:66:62:f0:31:4c:08:63:18:0d:2f:a6:9c:69:78:
                    c5:97:83:97:ce:d9:5e:86:71:9a:72:8f:3a:15:3e:
                    81:6e:97:e9:88:8d:17:0e:f9:46:b1:99:b1:ad:a1:
                    5e:ae:47:2d:1b:ad:89:97:1a:b1:07:8b:02:46:7e:
                    e7:16:55:3e:54:55:94:94:60:79:6c:9c:00:8f:e5:
                    59:67:2a:c2:c2:66:e2:6d:ce:8b:70:1a:6c:a6:cd:
                    d7:fa:de:c6:ef:d1:7a:f2:c9:5e:c8:a4:16:99:fd:
                    a8:26:71:c1:51:e9:eb:e9:ba:e8:21:83:9e:fc:1d:
                    ce:7b:75:3f:8c:53:55:bb:ec:16:41:d5:c8:be:0a:
                    07:ee:25:ff:b7:82:cf:64:f4:79:ac:a4:33:75:a9:
                    cc:00:a5:76:83:87:b1:04:dc:a1:8e:ff:47:3f:b9:
                    80:91:1c:30:e6:19:cb:80:2b:80:51:aa:ca:3b:b4:
                    01:54:74:42:59:fc:3e:63:46:31:1c:67:52:cf:64:
                    3f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7E:05:0A:15:C8:FA:82:13:CF:93:81:7B:05:88:CF:9C:62:21:5F
            X509v3 Authority Key Identifier:
                keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f1:de:a9:24:2f:9d:82:ca:d0:74:03:b3:d9:b2:63:60:59:
         a7:e7:d6:b5:41:9d:98:3f:62:d6:4b:32:68:8c:d6:34:58:8e:
         21:75:d4:9d:4e:ba:7f:42:43:7f:cf:8e:d4:ed:34:d5:7d:02:
         4c:61:85:6f:52:e4:7e:5b:3f:72:60:9a:12:2a:4b:67:e4:2f:
         64:63:b4:01:b6:f7:47:a6:f2:53:7d:a9:76:13:69:c0:90:6b:
         98:af:05:a9:39:6f:59:bd:b5:6f:63:49:32:2d:43:26:1d:84:
         b7:ea:47:0b:cf:a8:44:c5:ef:2d:c1:2d:9d:12:92:25:f1:fa:
         d6:2e:49:58:4d:ec:32:55:c0:8b:8f:76:35:30:5f:62:90:42:
         a1:53:9d:f3:8d:fb:47:3e:a7:02:a3:42:08:52:da:05:48:6d:
         82:a6:16:e8:fb:e8:be:cf:a4:f6:33:e9:80:a1:fe:d3:e9:79:
         9e:d0:e7:05:8a:75:44:86:d9:e7:55:1f:3c:c6:3f:b9:34:30:
         28:f2:ec:54:c3:da:43:3f:69:f9:b7:8f:19:79:57:4b:1c:a7:
         05:1e:ac:af:0d:3c:ff:a2:bb:2c:c0:9f:9d:1a:b7:6e:99:ff:
         d7:62:0b:b4:9f:d4:48:75:88:d2:95:9f:ed:9b:ff:0c:47:6e:
         45:aa:48:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:22:46 2026 by rpki-client