Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
File:                     6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft (raw, json)
Hash identifier:          xPmppm4oqZMaSgyMBcO/VAnkSbGVqONgrvQ50nNbBiM=
Subject key identifier:   4D:71:4B:D1:F6:46:10:2E:1D:A0:0B:59:58:D4:6D:31:75:51:F3:11
Authority key identifier: EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E
Certificate issuer:       /CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
Certificate serial:       019E1D910435400CE10FCEB80294743042FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
Manifest number:          1904
Signing time:             Tue 12 May 2026 19:01:43 +0000
Manifest this update:     Tue 12 May 2026 19:01:43 +0000
Manifest next update:     Wed 13 May 2026 19:01:43 +0000
Files and hashes:         1: 6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl (hash: QKkwfL8NCVF8DcQp7K2V8b/VT/vHe8HEm++4D4tjt2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:04:35:40:0c:e1:0f:ce:b8:02:94:74:30:42:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe3ef83b2b4c11e07055b3f7c549b506246c63e
        Validity
            Not Before: May 12 19:01:43 2026 GMT
            Not After : May 13 19:01:43 2026 GMT
        Subject: CN=4d714bd1f646102e1da00b5958d46d317551f311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:f1:2a:c9:dc:67:36:e3:69:8f:bc:64:4c:
                    ed:e7:4f:0e:c0:09:c8:0b:c7:28:5e:9d:24:f3:10:
                    2e:ce:de:6d:31:bd:26:b4:12:90:5f:84:99:0c:41:
                    10:fe:cf:27:e3:0b:2c:2e:4e:49:fa:d5:ca:a2:4a:
                    c2:7b:85:60:3a:20:6b:7a:40:45:d8:8d:d4:ab:79:
                    97:a9:ee:70:76:d1:d4:0b:7c:70:e2:45:13:61:8f:
                    7f:56:83:19:b3:20:e2:6e:12:c4:c1:03:3b:af:c6:
                    77:68:53:ad:ca:6a:9a:6e:8a:05:bf:0c:82:65:89:
                    6a:f1:f1:56:a3:2a:3e:a5:aa:18:c0:01:b3:0f:e5:
                    58:3d:d6:b2:b1:93:e3:e9:c5:4f:be:a7:39:3c:12:
                    8d:f6:bb:b3:4a:c0:e6:fa:fc:34:de:61:6c:21:e8:
                    47:e3:b9:4c:04:9f:8f:c9:2e:6e:3e:7c:c8:ee:40:
                    18:54:7e:2c:9c:b6:d1:bb:41:a5:f8:19:dd:51:c5:
                    c4:cd:21:1b:5f:a6:2d:47:66:3f:5c:19:a4:e2:f7:
                    ed:4b:31:bc:fa:dd:cf:e0:85:01:8e:81:c6:ab:89:
                    c7:cb:d3:f5:a0:32:0a:68:3d:b5:52:df:a3:9a:60:
                    c3:97:76:46:72:c8:e6:16:26:d4:65:ed:c9:da:be:
                    4c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:71:4B:D1:F6:46:10:2E:1D:A0:0B:59:58:D4:6D:31:75:51:F3:11
            X509v3 Authority Key Identifier:
                keyid:EB:E3:EF:83:B2:B4:C1:1E:07:05:5B:3F:7C:54:9B:50:62:46:C6:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/a0d19b-5c6f-4814-adf8-1e1934f0e55e/1/6-Pvg7K0wR4HBVs_fFSbUGJGxj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:10:3a:e1:e4:67:93:eb:5e:8a:05:3c:c6:35:6c:60:de:77:
         d8:60:dd:91:9c:b1:c7:74:c5:2d:de:25:e8:6d:4d:ec:c7:42:
         d7:76:0b:c2:ca:42:72:db:b0:8d:95:ff:b2:07:bc:5e:5f:71:
         24:f9:ca:97:25:3b:08:87:5c:ee:cf:e9:12:0d:d7:e3:9f:dd:
         04:de:8c:35:64:11:c3:82:53:94:bd:7e:ae:f7:73:95:c8:9f:
         40:e7:f6:ea:6f:55:44:97:06:ee:4c:d5:6d:7c:e5:4a:e8:8a:
         91:06:06:ab:f6:4e:6e:6d:2a:cd:47:6a:a5:f4:83:9f:3c:bd:
         91:b8:95:a4:0a:68:21:29:ef:2d:0d:41:63:79:c3:ca:b3:1f:
         9c:c8:7b:11:59:d6:2d:58:28:ff:59:04:ea:60:b5:45:61:1a:
         13:79:ef:56:59:ba:d3:9d:42:d8:aa:27:76:2d:b2:28:57:ea:
         94:a8:35:0e:ad:ac:40:e1:d7:c0:54:4f:f0:a7:4f:39:2e:9e:
         24:32:38:81:96:89:97:a2:2e:a4:83:ac:d1:3b:3c:d1:32:c7:
         3a:8b:99:4d:d9:17:8d:7d:90:99:cb:b9:b4:12:bc:56:42:77:
         9e:66:91:46:23:b2:17:c3:fd:f5:f9:61:ce:58:a3:cc:8e:0c:
         e9:36:05:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:07 2026 by rpki-client