Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
File:                     10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft (raw, json)
Hash identifier:          9ilVzna75gDDCbK+u1O/KGWvLWmq9aA1cEEGEsMZsmE=
Subject key identifier:   C2:E6:9C:51:7F:86:5A:A7:09:92:98:55:93:EF:59:2A:E5:49:82:79
Authority key identifier: D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
Certificate issuer:       /CN=d74794f996ac5a3f02b56a75c14949403d02ac64
Certificate serial:       019E20915E1C5FCF5CFC7462C0627B1DCC42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
Manifest number:          1902
Signing time:             Wed 13 May 2026 09:00:58 +0000
Manifest this update:     Wed 13 May 2026 09:00:58 +0000
Manifest next update:     Thu 14 May 2026 09:00:58 +0000
Files and hashes:         1: 10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl (hash: 4FRHdkfKUKJ5zTna/f2PW7k1UHR9UCQBQITLBwM5fm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:5e:1c:5f:cf:5c:fc:74:62:c0:62:7b:1d:cc:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74794f996ac5a3f02b56a75c14949403d02ac64
        Validity
            Not Before: May 13 09:00:58 2026 GMT
            Not After : May 14 09:00:58 2026 GMT
        Subject: CN=c2e69c517f865aa70992985593ef592ae5498279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3b:8e:98:65:90:2b:14:69:b3:99:f7:66:e7:
                    38:bc:ee:98:d0:c0:0d:74:9a:03:6a:b3:ca:40:0c:
                    38:f4:a3:6e:95:8b:ba:68:43:53:42:a0:eb:f1:af:
                    5a:94:83:07:f7:4a:ca:b1:c7:96:a4:ce:10:cf:94:
                    6b:ab:2b:2f:2b:17:11:6e:aa:b8:66:9c:0c:6f:ad:
                    88:a3:2d:59:df:07:37:7a:b1:d1:b7:f0:80:7f:95:
                    26:92:9a:fa:0d:6b:aa:ca:9b:fc:5b:8a:7d:c1:24:
                    c2:2f:f2:87:cd:f0:10:15:92:38:a4:e4:54:8a:e6:
                    66:3e:fa:56:54:54:d3:9e:7e:f6:7b:79:93:fa:8a:
                    e8:2e:f4:f9:3d:07:9b:7b:71:0d:d7:b4:a5:c0:e4:
                    3b:ff:8a:b6:56:ce:1f:ba:d4:01:c0:fa:cd:5f:bb:
                    18:56:65:df:89:d5:75:59:c5:c3:9b:29:2b:19:b9:
                    a3:2e:98:92:8f:62:82:23:21:81:41:97:b0:10:24:
                    a5:13:c8:c2:b1:6e:03:23:cd:1b:0f:de:89:d4:c9:
                    66:d3:19:b7:d7:a3:3f:dd:ed:ae:eb:11:b6:56:ff:
                    ae:03:d0:4f:b1:dc:b2:20:ad:e6:12:8c:f3:3a:4a:
                    f6:d3:bd:84:c8:f4:82:20:fd:a6:e1:86:98:fb:bf:
                    86:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E6:9C:51:7F:86:5A:A7:09:92:98:55:93:EF:59:2A:E5:49:82:79
            X509v3 Authority Key Identifier:
                keyid:D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:eb:0e:1f:fc:90:3b:a4:40:7a:db:7e:2d:3a:f6:ee:b2:b3:
         19:f4:5f:9e:07:3e:cb:df:7f:88:1d:ad:56:bb:13:bc:95:b8:
         3f:e1:a1:0b:41:2f:e6:40:19:a9:1e:5b:97:1c:9b:03:e4:e5:
         c9:08:12:04:9d:c3:b7:03:62:7e:1f:46:7d:53:79:28:cf:7a:
         3a:a2:5b:10:95:8a:9b:e1:f2:9c:8d:06:49:3d:9a:12:96:89:
         65:4d:f7:7d:84:77:14:f5:af:0b:c5:c5:28:2a:ab:69:60:5f:
         41:5f:99:8c:b6:1e:df:92:ed:a3:0b:6b:88:ef:b7:4f:ab:80:
         e9:17:68:41:a4:0f:cd:9d:fd:5a:b6:1a:9c:a6:54:62:02:27:
         0c:73:8f:6a:d0:7d:be:35:c1:e6:8e:b4:98:be:37:da:86:01:
         3e:b7:ff:9f:be:cb:e1:3f:c2:c5:22:3a:9b:13:fb:47:1f:af:
         06:fa:18:33:6b:93:34:30:65:fc:12:0a:d2:75:60:3c:65:36:
         96:5e:f5:0c:64:55:a2:d0:4d:fd:59:67:7c:17:ce:f5:ec:cd:
         d8:b5:7f:b3:ab:23:87:b1:d4:12:b4:51:f8:d7:4e:e5:b8:d6:
         d3:67:54:3b:23:d7:9f:a9:10:da:ab:06:87:a3:d3:84:c0:3a:
         c7:0a:bf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:27:15 2026 by rpki-client