Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File:                     dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier:          e4gzJd5FmuIDEdvfJIkA9yvoRP5TP+cQhrrgixc4+NY=
Subject key identifier:   62:E8:BE:49:9E:A5:A1:44:E2:55:4B:98:28:FB:83:7E:C0:26:EC:EA
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer:       /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial:       019E2023E0E6BA5BA81FB07C7DC8F34F723A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 07:01:22 +0000
Manifest this update:     Wed 13 May 2026 07:01:22 +0000
Manifest next update:     Thu 14 May 2026 07:01:22 +0000
Files and hashes:         1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: St7hXbUEbERPGpMVO9kAW/pKK+vdDzzDOeihm2ztDfc=)
                          2: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (hash: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:e0:e6:ba:5b:a8:1f:b0:7c:7d:c8:f3:4f:72:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
        Validity
            Not Before: May 13 07:01:22 2026 GMT
            Not After : May 14 07:01:22 2026 GMT
        Subject: CN=62e8be499ea5a144e2554b9828fb837ec026ecea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:bd:dc:39:2e:c9:da:f8:3a:6b:96:39:08:
                    7a:a7:4a:fe:c4:d9:7b:d5:92:48:fa:cd:39:d8:e4:
                    6d:ee:89:a1:83:af:4f:60:55:36:50:09:ff:8d:8a:
                    2c:5d:f4:a5:99:8b:f5:8f:59:31:b4:a3:e3:f4:a6:
                    23:3d:e2:d4:8a:37:38:27:10:40:35:5c:48:bc:dc:
                    77:06:e3:d7:78:b7:a3:a0:85:e1:43:ad:7c:5a:c2:
                    a1:f2:d4:50:67:1b:53:a1:b2:5e:3a:fc:20:b5:9f:
                    74:07:6d:93:2f:b9:b7:7c:39:52:9c:a0:ac:37:4c:
                    b8:a9:69:cf:d5:09:06:b0:69:68:99:d9:6a:73:82:
                    e6:a6:4b:63:49:5d:95:3c:b4:f4:9d:9d:b4:56:c9:
                    0f:73:c1:26:98:bb:86:f8:5a:3a:18:d9:f8:91:ef:
                    85:f5:1d:78:27:44:5f:52:49:97:0a:e6:1f:57:c8:
                    c7:df:7d:a0:7e:31:2e:75:88:89:59:a7:eb:33:bc:
                    7c:13:b3:8f:b1:b3:bb:02:4b:d6:02:02:f2:a6:3a:
                    56:6c:2f:00:6e:81:fc:cf:f3:fc:26:5a:e7:da:30:
                    96:aa:09:20:86:fd:b5:53:e0:5f:a5:76:1a:37:42:
                    49:9b:bc:84:00:f3:5e:33:c1:af:15:37:91:35:43:
                    b6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E8:BE:49:9E:A5:A1:44:E2:55:4B:98:28:FB:83:7E:C0:26:EC:EA
            X509v3 Authority Key Identifier:
                keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:64:60:69:7f:ff:08:ab:2f:e5:7e:14:8e:e0:42:3d:69:4a:
         f5:be:4e:22:35:9e:e7:6d:45:6f:d1:21:40:ff:81:4a:65:1e:
         bc:c5:a1:fc:d9:d6:9b:c2:b8:89:06:7c:9f:d5:f6:bb:1e:6c:
         ea:9f:c5:bc:9d:fa:9b:fd:11:6d:c1:6a:3e:ec:e5:84:42:19:
         53:b6:b3:55:de:9f:e2:b1:a8:ff:80:88:e2:c8:42:f0:10:4e:
         bb:d0:1a:3b:da:b0:12:6c:cf:db:23:a6:97:6d:fb:a1:b2:a0:
         1e:56:c8:ad:db:ac:1b:34:3c:a8:52:d4:be:14:c5:64:4d:f1:
         24:78:19:41:76:22:33:31:d0:5a:97:53:b4:ad:0c:37:6d:3c:
         fc:58:02:56:49:0f:f7:c4:e8:16:8c:44:57:0a:8e:08:a2:67:
         84:72:4d:8e:f4:a8:e4:fa:03:d3:81:33:6d:ee:32:41:f4:26:
         a0:45:e4:b2:43:14:71:80:ab:92:17:e7:b0:37:39:94:ca:9f:
         40:b2:f1:db:70:8b:ee:42:52:b8:d4:65:64:c7:d2:10:75:bb:
         69:95:a7:d2:5b:0b:e6:9e:a8:7d:be:bd:2e:0e:eb:b6:e1:84:
         b3:87:12:1a:ff:c4:45:05:34:11:de:e7:0b:55:b5:86:86:86:
         d6:13:30:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:31:47 2026 by rpki-client