Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
File:                     RjUoxUCm1XfC0cwabuoXEks5I4Y.mft (raw, json)
Hash identifier:          FBkIt74nCrGruLlMxWXhLjFiOLtZ932JRgCE+muWEMk=
Subject key identifier:   4A:E6:2D:74:33:17:4D:DA:2E:26:D3:BA:7F:6E:12:44:69:B6:6C:B6
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Certificate issuer:       /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial:       019E1DC784BDDD27B344A209893FAD9FBAFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
Manifest number:          190A
Signing time:             Tue 12 May 2026 20:01:15 +0000
Manifest this update:     Tue 12 May 2026 20:01:15 +0000
Manifest next update:     Wed 13 May 2026 20:01:15 +0000
Files and hashes:         1: RjUoxUCm1XfC0cwabuoXEks5I4Y.crl (hash: IWIEHBLLfIKCXFvKaQDFZCURDbyHNkeL30ltWDUpB4o=)
                          2: sq_j1691pyhvkH9BoIr0BcNKCxI.roa (hash: i+UMV8SIsi3sQ/GKmfxv9CROSQ0ya0P5Ih29wcl+1k0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:84:bd:dd:27:b3:44:a2:09:89:3f:ad:9f:ba:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
        Validity
            Not Before: May 12 20:01:15 2026 GMT
            Not After : May 13 20:01:15 2026 GMT
        Subject: CN=4ae62d7433174dda2e26d3ba7f6e124469b66cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e9:00:f3:c6:9a:88:f8:34:49:e3:f1:73:20:
                    8a:51:ea:c2:ed:f9:28:c6:f5:5d:a1:cd:55:37:14:
                    46:d2:c5:26:38:53:da:f4:a2:08:08:67:97:af:83:
                    3c:0c:2c:3c:cd:83:d8:65:6e:b7:b7:cc:c3:e2:16:
                    e0:09:d9:0b:92:06:c9:25:1f:a1:59:b4:26:10:39:
                    9a:e6:3a:84:23:07:ea:e0:12:cd:a4:30:92:c3:39:
                    2c:8b:53:26:ec:84:af:82:49:de:ef:ee:fa:8d:66:
                    8d:e3:17:a2:9a:9a:31:53:fa:f7:12:14:aa:20:a0:
                    9a:04:35:68:ae:ec:86:05:26:6d:44:1d:44:6a:32:
                    56:49:b8:f6:72:83:aa:de:ca:6d:c6:2d:50:72:b0:
                    6d:18:79:23:8e:96:62:17:7a:e9:f0:a9:92:88:80:
                    cb:01:d2:b3:29:1f:24:5d:a0:47:2a:b5:dc:81:b6:
                    07:de:9b:4d:68:40:64:bf:7f:22:eb:70:f7:79:6c:
                    05:ad:82:a8:40:ec:de:51:58:26:6d:01:5b:c1:c4:
                    f3:21:6b:33:aa:19:fb:ea:65:6b:88:d0:be:1e:4b:
                    ec:bd:2f:42:45:cc:13:b3:64:fb:47:5d:31:14:f1:
                    1e:d7:6f:02:7b:fa:58:3b:59:40:20:ce:61:25:e1:
                    cd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E6:2D:74:33:17:4D:DA:2E:26:D3:BA:7F:6E:12:44:69:B6:6C:B6
            X509v3 Authority Key Identifier:
                keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:31:5b:84:b8:79:f9:12:29:8f:e9:54:c6:83:a9:03:d1:10:
         c4:c4:0a:cf:95:3a:36:00:55:81:f3:f5:68:7a:3a:2d:54:aa:
         cf:de:05:68:35:cc:59:1f:5c:9d:42:0f:e7:b5:e9:23:5e:ab:
         1d:67:8a:1e:7f:e4:78:37:43:53:45:84:ec:b3:83:98:0c:8c:
         bb:3f:76:44:d5:ce:e5:18:df:7e:a5:5b:c8:da:1d:97:7f:b7:
         53:9a:ce:c4:0c:a1:1d:87:e6:73:d3:3e:34:09:da:1b:a3:d9:
         fb:ca:54:29:d3:b3:50:cf:f1:01:36:39:a2:d4:26:ad:82:5c:
         0c:2c:0a:5f:46:f3:4f:f5:0e:c4:70:61:69:51:93:d5:43:f7:
         d8:ca:ff:55:5e:2b:26:97:2b:03:88:34:97:6b:5a:b3:27:6d:
         d2:54:22:62:2f:1d:54:2b:73:89:fd:02:f5:7d:48:76:c4:e7:
         73:46:51:01:3d:f4:9f:e1:1f:38:cf:19:84:35:14:39:7f:2c:
         65:17:23:a5:0c:4f:4b:86:80:98:7d:d9:2a:b1:3c:ef:05:b0:
         91:61:cf:69:59:21:10:a8:11:16:59:d9:38:1b:25:9c:dd:ed:
         ac:48:67:be:35:11:86:8f:49:63:6c:8f:99:a2:3a:58:7b:af:
         98:23:87:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:35 2026 by rpki-client