Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File:                     AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier:          zqb5jzNtjqsWYpvVi0kUOi5gFDvSbbEFadm5xj3MiB8=
Subject key identifier:   D6:33:0B:A2:CA:75:C1:32:61:5C:7F:B2:A4:88:36:AC:91:F5:32:68
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer:       /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial:       019E1F47A86E88C9D1A11991CAF7945F2112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 03:00:50 +0000
Manifest this update:     Wed 13 May 2026 03:00:50 +0000
Manifest next update:     Thu 14 May 2026 03:00:50 +0000
Files and hashes:         1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: yaiPHaAqmY4dCtYI1uIhOfF0Tt5zNnNUH3urnTX9SQk=)
                          2: nu_nfWvngwD8Y74CXi065T5OVuQ.roa (hash: d92WDDshr8YLz0+Twkg4dzAWaxn6uiHcpqEqs+83HsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:a8:6e:88:c9:d1:a1:19:91:ca:f7:94:5f:21:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
        Validity
            Not Before: May 13 03:00:50 2026 GMT
            Not After : May 14 03:00:50 2026 GMT
        Subject: CN=d6330ba2ca75c132615c7fb2a48836ac91f53268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fe:4c:5d:29:86:67:cb:68:ab:6c:bf:11:0f:
                    a7:e3:f2:0f:50:67:84:94:2f:98:be:39:43:8a:ac:
                    d5:4c:a9:63:dc:52:a6:22:3e:7b:d1:e8:b0:cc:ea:
                    0c:ce:f7:a9:c6:d6:12:c7:40:a4:f3:58:65:e1:a3:
                    95:4d:bd:f7:53:65:9e:b0:df:5c:86:8f:76:5a:43:
                    cf:78:6a:42:89:e0:4e:bd:b9:d9:6d:7f:b7:2d:d1:
                    56:16:d2:a4:33:72:13:d5:cc:8c:18:ec:77:df:1f:
                    53:55:9c:a5:5a:3b:dd:1c:29:77:11:80:41:3d:a1:
                    dd:f8:df:86:d6:11:6a:ee:0a:b6:8b:1b:6c:0f:17:
                    4c:1b:84:ad:66:17:6d:5a:dd:20:bf:3f:17:bf:63:
                    07:43:60:49:f2:87:39:44:f9:31:e3:21:f5:4f:9b:
                    8d:69:9c:01:99:03:93:53:8c:6e:60:22:4e:e1:cf:
                    58:e9:c7:4d:af:95:3e:65:6a:c0:97:2b:96:87:34:
                    25:4a:03:25:66:a8:c7:d6:02:05:56:ac:e9:0e:2b:
                    3c:a3:8e:62:dc:9e:59:9a:cf:33:3e:df:42:94:92:
                    60:91:22:cd:0e:b5:7a:47:9d:cd:77:ed:fd:72:cf:
                    80:10:81:db:13:30:12:bf:d0:8b:59:40:cb:f8:37:
                    62:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:33:0B:A2:CA:75:C1:32:61:5C:7F:B2:A4:88:36:AC:91:F5:32:68
            X509v3 Authority Key Identifier:
                keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:2f:f8:ac:24:9f:21:e6:6c:1f:38:02:ba:22:cc:33:fa:d3:
         8a:86:a9:ef:b1:95:5c:17:c3:22:36:aa:9c:a8:ae:43:28:c6:
         45:98:33:b0:f2:62:90:df:f7:de:00:a4:10:5c:43:c6:3e:f5:
         9f:c7:54:76:d5:55:c7:55:69:13:a0:bb:40:12:da:ac:a5:dc:
         2d:c7:ce:d6:4a:d2:51:18:cc:eb:5a:b3:8a:7b:08:a5:af:a5:
         c2:6f:22:1a:f2:fd:ae:c5:49:c3:40:70:9d:ea:c4:b3:35:52:
         ac:29:e6:3a:48:21:30:94:f5:19:07:8e:f0:f7:b3:48:38:44:
         e1:df:87:e2:e0:ff:bf:a2:8a:06:34:4b:80:ec:29:f8:3d:2e:
         e8:7e:8a:d3:86:bd:9a:d9:1b:02:6e:34:73:00:f1:b2:d8:3f:
         4d:2e:06:67:f7:1c:29:0e:70:f5:42:3f:db:ce:8e:7e:08:ac:
         69:1b:58:64:66:aa:1a:58:02:99:7b:12:1c:f6:98:45:b5:5f:
         1c:fb:a7:b6:39:74:f2:cf:4e:39:8a:ec:72:5c:7d:d4:36:8b:
         b8:b8:73:ab:b9:92:ef:17:e8:a6:c2:db:6b:9a:59:5e:0b:eb:
         e8:2b:f1:93:c8:a4:27:a9:92:2f:0d:8d:fd:e4:52:90:8a:08:
         d0:40:3c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:44:53 2026 by rpki-client