Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File:                     4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier:          PeGVCkGsT1qDQZ0kF3uoHGKup1SXR+rwhxwU6Ag/AAQ=
Subject key identifier:   E8:58:C1:C2:8A:DE:D5:15:9A:2B:9E:44:12:16:D9:D5:CB:B3:E6:8E
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer:       /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial:       019E1FEC9396549CAAA436F27E38CEFAA995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number:          1637
Signing time:             Wed 13 May 2026 06:00:58 +0000
Manifest this update:     Wed 13 May 2026 06:00:58 +0000
Manifest next update:     Thu 14 May 2026 06:00:58 +0000
Files and hashes:         1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: 5JbZUriOPbKhMZJekKqi7FnYam+OWzgCyWWM2CHZRG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:93:96:54:9c:aa:a4:36:f2:7e:38:ce:fa:a9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
        Validity
            Not Before: May 13 06:00:58 2026 GMT
            Not After : May 14 06:00:58 2026 GMT
        Subject: CN=e858c1c28aded5159a2b9e441216d9d5cbb3e68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:4c:b2:23:e4:b1:f8:50:b4:ac:c0:d3:ab:
                    a3:7a:40:60:78:de:93:88:d1:0d:04:69:f7:8d:52:
                    1b:ac:d7:dc:97:b5:95:8b:8a:c3:8c:85:94:67:90:
                    ac:c2:26:19:cb:5f:55:0d:e7:a0:b1:49:7b:af:7b:
                    8c:5b:f4:ca:5a:ac:27:b2:d5:78:26:92:c9:e8:5f:
                    95:4a:8a:d6:2c:5e:78:02:bc:e2:d2:85:5e:32:f1:
                    78:bf:b7:e7:60:f6:16:ba:11:64:46:b8:2a:a0:42:
                    48:ba:c7:19:58:1b:85:73:70:e7:da:56:92:92:49:
                    5b:7c:c5:07:99:fa:ab:90:24:88:04:50:40:5d:f2:
                    59:7d:8b:73:33:bd:70:d3:9c:d0:63:47:d8:74:4e:
                    9e:57:df:40:d9:5a:e2:4c:39:56:ca:ea:ed:de:6e:
                    02:b8:ef:78:bc:46:90:12:53:80:05:15:cf:4b:2b:
                    d4:db:18:73:99:cd:16:f5:cd:15:05:73:68:0a:d6:
                    64:a6:3d:4f:a6:6e:93:6d:eb:82:10:08:a6:61:86:
                    b5:d2:f9:db:a8:83:3d:d3:29:aa:34:32:18:e0:c7:
                    c0:a7:b1:25:a6:7b:04:17:d2:c8:85:66:53:e3:0f:
                    b6:a0:b3:9e:d3:c3:ee:a6:6d:02:ed:b9:9b:c9:a2:
                    9e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:58:C1:C2:8A:DE:D5:15:9A:2B:9E:44:12:16:D9:D5:CB:B3:E6:8E
            X509v3 Authority Key Identifier:
                keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:28:57:93:da:02:7a:ad:97:a8:17:e9:52:e7:96:44:73:bc:
         07:d6:86:76:a3:ab:e4:d5:e9:8e:60:9b:76:ce:39:57:7f:cc:
         b1:f3:46:23:00:96:ae:09:19:7c:53:01:dc:ec:ac:1b:6e:b2:
         db:39:ad:5d:22:16:4d:c0:85:b4:91:91:dc:14:2a:fd:54:f2:
         1c:9a:19:5c:05:69:27:2b:d5:47:88:ca:b2:d1:14:78:b2:2e:
         f6:b6:78:fb:a9:24:e1:6c:1d:b9:9a:1a:23:ec:c6:55:98:29:
         fd:f3:0b:de:a2:fa:4c:91:77:43:37:97:01:4d:a5:62:9e:e3:
         01:bc:b2:5b:d2:9d:53:19:53:e0:7b:57:e2:cb:7d:b6:c1:a2:
         20:48:8f:ae:31:7e:37:e6:b1:81:d5:ee:9c:31:22:1d:87:50:
         a6:d4:bb:11:25:23:75:73:4c:03:43:3e:a9:31:48:1c:ae:d8:
         ca:c4:ad:0e:fc:7c:c2:1f:cd:25:13:6a:4f:8f:ad:6e:35:2f:
         1d:68:03:73:99:87:59:73:a8:d9:76:70:35:66:e9:46:95:ab:
         b9:55:f4:e1:1a:92:29:df:3d:6e:d0:cd:11:6b:94:60:6d:83:
         36:be:0e:2e:aa:d1:b5:12:1f:c0:5f:b3:bb:18:9f:41:9f:29:
         a5:e2:9d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:13 2026 by rpki-client