Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
File:                     dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json)
Hash identifier:          Dm5rXBpUGSGVsYDD0QE9b0+k9pVD5MlEH8ONg0ENd98=
Subject key identifier:   DC:91:0F:17:96:D4:FD:84:45:DD:02:CF:E9:FA:5F:39:D0:52:95:49
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Certificate issuer:       /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial:       019E1F7F84FC0982B7A93A4AAEA78806A5B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
Manifest number:          190B
Signing time:             Wed 13 May 2026 04:01:51 +0000
Manifest this update:     Wed 13 May 2026 04:01:51 +0000
Manifest next update:     Thu 14 May 2026 04:01:51 +0000
Files and hashes:         1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: CfD9l71NvlcSFF64Ye5NVCbCXBVb1eFSln/sRXIwbu4=)
                          2: tSEZjU-vS57hTqP83y9FF4MrWAs.roa (hash: ozjgCaqpcyjXz1n6hccmETcyoNzECahsGI6im8BxTac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:84:fc:09:82:b7:a9:3a:4a:ae:a7:88:06:a5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
        Validity
            Not Before: May 13 04:01:51 2026 GMT
            Not After : May 14 04:01:51 2026 GMT
        Subject: CN=dc910f1796d4fd8445dd02cfe9fa5f39d0529549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:86:65:86:90:be:19:61:2b:52:e5:d0:17:
                    d5:f1:90:08:43:e5:e3:e7:dd:a9:23:4d:b3:10:38:
                    80:09:4e:55:ff:32:90:00:26:85:e1:02:49:87:d8:
                    fb:25:76:e7:e8:46:7e:3e:a8:b7:7c:ce:79:ee:b3:
                    c3:2c:aa:8d:78:1d:8a:7b:85:c3:33:fa:5b:69:84:
                    0d:30:39:f5:56:7a:f4:6b:83:81:5c:07:7f:20:80:
                    5e:5f:e6:0a:6a:c6:d8:be:36:8f:56:a3:8f:8a:08:
                    b4:e5:39:be:7a:22:ca:f9:6f:5c:d6:71:9a:c9:4e:
                    b5:7c:46:ee:44:3a:87:4e:bd:d5:ec:cb:78:03:20:
                    d4:08:a3:37:3f:69:a9:70:ff:2d:63:a5:75:79:f1:
                    fc:5c:eb:2b:ab:40:a7:2c:1d:04:05:db:3f:39:61:
                    76:ce:25:e9:1a:8f:5f:43:11:32:d3:3c:bc:c1:97:
                    16:15:06:48:07:10:31:bd:ce:31:ea:5f:3f:69:23:
                    0d:75:d9:24:9f:f0:52:d9:b5:34:cf:51:21:65:c1:
                    f5:9a:fc:b4:81:a8:36:fc:7e:c6:42:d7:0b:4e:17:
                    67:bd:90:c8:22:18:69:f9:3c:34:4e:7b:45:a6:3d:
                    70:d2:19:0b:d1:e2:04:dd:e0:18:ec:37:83:90:a4:
                    dd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:91:0F:17:96:D4:FD:84:45:DD:02:CF:E9:FA:5F:39:D0:52:95:49
            X509v3 Authority Key Identifier:
                keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:3d:c3:86:82:9e:04:20:50:bb:52:fb:de:57:98:24:7a:cf:
         da:a0:0a:c2:b3:75:6b:dc:af:70:87:cf:a2:f5:99:b6:65:48:
         b3:5f:5f:33:cd:d0:06:e2:17:7b:11:94:a2:73:98:98:6c:f6:
         34:d8:30:25:fd:ae:c3:0b:8c:c0:9f:9a:34:16:a2:3e:e4:77:
         22:46:c0:cb:46:86:29:f4:7e:a8:4b:cb:74:bc:4a:14:b0:57:
         a4:ce:a8:ad:cb:89:c0:9b:d4:34:62:de:4c:1a:ec:56:4e:85:
         49:6c:40:d0:f0:07:71:93:e2:24:1b:c0:4f:77:eb:89:69:e3:
         30:8b:82:b1:cc:01:0b:b2:2b:ee:7d:0f:53:75:74:76:0e:11:
         24:b8:ad:9b:80:ec:f6:7e:27:ba:cc:53:92:65:14:ea:0f:f4:
         ab:8c:dd:e2:22:76:9b:a3:4f:e9:19:48:5b:68:9b:d9:78:f8:
         2c:c0:d3:71:9b:5c:84:07:dd:4f:e5:28:4f:ef:4d:ed:ce:f2:
         08:52:d2:51:7c:b0:ba:54:73:28:74:1c:90:36:25:a7:2d:3e:
         fc:42:44:5b:e4:78:bf:93:34:73:0c:e0:22:c4:f8:06:c3:b4:
         5b:bb:df:3b:54:4b:2d:1f:54:8a:3e:a0:df:ca:fd:11:fc:4e:
         e9:30:68:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:14 2026 by rpki-client