Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File:                     4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier:          0eaGdQk/Cmp10yq31xkWMiGaE5BUStPmF2LjH06R4mU=
Subject key identifier:   DE:54:6D:60:9F:3B:06:06:85:26:9A:0F:2B:41:F9:B8:49:33:49:68
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer:       /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial:       019E1DC7242EA98EE625794D3C88FCA27FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number:          1614
Signing time:             Tue 12 May 2026 20:00:50 +0000
Manifest this update:     Tue 12 May 2026 20:00:50 +0000
Manifest next update:     Wed 13 May 2026 20:00:50 +0000
Files and hashes:         1: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: j37nZN1mQhhVXEGHD+jXfhig8T55d41hIhG+h8M4MJE=)
                          2: BdqGs3R6xCnjEwShLrflyZwaVp0.roa (hash: RR88JIqbu0K/mTZcvwGkA42FVlGztgnaWCqdDikFkjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:24:2e:a9:8e:e6:25:79:4d:3c:88:fc:a2:7f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
        Validity
            Not Before: May 12 20:00:50 2026 GMT
            Not After : May 13 20:00:50 2026 GMT
        Subject: CN=de546d609f3b060685269a0f2b41f9b849334968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:39:76:09:04:69:c4:e8:21:34:c6:4d:2e:
                    a9:cc:ad:18:0f:90:59:34:86:2f:41:0d:8f:69:c4:
                    f6:b5:8f:81:f8:a1:b0:b5:52:e6:89:a9:a4:4c:03:
                    93:45:56:23:94:16:d1:10:ef:96:8f:82:dc:d7:b8:
                    18:4a:8b:a1:6a:44:a7:18:a5:8f:9e:2c:94:98:15:
                    29:8f:ad:6b:62:2a:db:a3:b1:03:90:58:77:19:56:
                    17:d4:7a:33:50:d7:6e:ec:34:49:23:9a:59:a0:67:
                    a2:9f:de:9d:69:0e:d7:29:c5:0c:93:66:09:7e:ea:
                    db:75:3c:67:35:81:72:05:0b:18:59:08:15:4d:c7:
                    78:9d:fd:61:5e:1e:e7:a4:04:76:2e:d3:6f:2f:8f:
                    00:d1:62:45:fc:69:46:de:ad:1c:08:14:6e:1f:76:
                    1a:e6:b8:6e:8e:b4:1c:43:14:8a:71:30:fd:f3:a8:
                    70:b8:15:56:db:cd:4a:e0:6b:e1:ca:64:5d:c9:6a:
                    6d:4b:93:83:43:07:27:cf:46:de:fd:5d:4d:bf:6b:
                    df:ad:8e:56:18:39:46:d0:b4:60:1d:7f:ea:e3:1f:
                    93:a9:06:69:7d:c7:25:20:78:24:5a:2c:12:8d:51:
                    23:46:73:ae:e9:8b:ff:33:89:75:3d:2d:fa:30:26:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:54:6D:60:9F:3B:06:06:85:26:9A:0F:2B:41:F9:B8:49:33:49:68
            X509v3 Authority Key Identifier:
                keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9b:75:ce:03:b5:fc:1b:4c:56:03:ce:9b:12:ed:62:ee:d6:
         74:38:78:93:cf:f8:bb:90:ff:ef:65:7a:78:9a:8e:4a:d5:a3:
         a2:e2:23:ac:40:6b:ae:ef:6d:7d:06:c6:26:16:aa:f3:a9:37:
         45:21:a0:dc:54:63:d0:59:a0:be:6b:42:2a:39:bc:0c:8d:96:
         a1:18:fb:a0:48:70:95:44:45:2f:87:04:ae:18:65:3d:7d:1d:
         2f:53:e3:1d:01:4f:bb:c0:50:87:79:41:7d:b9:46:50:49:6f:
         bc:2d:bf:e5:78:13:14:d5:8f:9a:76:f0:61:48:8f:47:d1:d4:
         14:e6:b0:2d:29:84:62:40:ea:6b:78:05:4d:79:1b:23:5c:b3:
         26:ee:08:ef:c0:28:28:35:dd:bf:c5:5c:0a:fb:a2:b6:1a:7d:
         5e:12:9a:57:fe:bf:7d:92:e6:39:83:88:ca:2f:cd:64:9a:9d:
         5b:b1:d8:80:45:c0:52:1a:18:82:b0:e6:c5:42:fb:2b:f3:ff:
         af:e0:68:d5:e1:be:3a:73:96:58:6c:05:59:35:13:65:6f:0f:
         b4:df:b3:14:21:9c:19:63:66:81:39:c6:dc:33:dc:f3:e1:d2:
         38:b1:55:55:82:f7:3b:f6:8c:7b:7d:a5:d9:60:25:8e:0b:e8:
         c3:7b:9c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:11 2026 by rpki-client