Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File:                     duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier:          a7N5H8P4ZiuCDbPzD98/yVZDDKobmbovxIiJ6WjY2EM=
Subject key identifier:   E8:1B:7E:C0:7B:82:8E:CF:3C:0E:F6:3E:B7:97:10:A4:9D:A2:84:83
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer:       /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial:       019E20C8AE0FF5E1BD1DC0107785964B3B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number:          189A
Signing time:             Wed 13 May 2026 10:01:23 +0000
Manifest this update:     Wed 13 May 2026 10:01:23 +0000
Manifest next update:     Thu 14 May 2026 10:01:23 +0000
Files and hashes:         1: URJzBUsEISSG4FG2wK4plKVqkbA.roa (hash: d/U8BrAHZytlsN3OdFaMGxSnxJz7rd2AErfm0Q8DI8Y=)
                          2: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: Le+nEefjRXpgkQOOmxSSug/c6azhVKTJ3yfohzapbIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 10:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:ae:0f:f5:e1:bd:1d:c0:10:77:85:96:4b:3b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
        Validity
            Not Before: May 13 10:01:23 2026 GMT
            Not After : May 14 10:01:23 2026 GMT
        Subject: CN=e81b7ec07b828ecf3c0ef63eb79710a49da28483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2c:19:18:48:db:7e:ca:0d:31:59:75:0b:f5:
                    66:20:b9:f1:0d:1c:41:b9:bd:d1:d5:e3:3a:1d:12:
                    51:ba:72:06:37:28:e6:37:76:b7:ca:b9:3a:46:74:
                    0b:68:b9:0e:c5:04:09:a0:c4:7c:c4:52:34:4f:0c:
                    92:6b:07:ef:ed:4c:b8:39:db:e9:df:8e:ce:95:c9:
                    f9:4a:9b:c4:e6:08:64:d5:be:0f:38:64:81:a4:51:
                    f9:cd:0a:0d:66:d9:93:8f:35:37:e5:7e:96:46:88:
                    27:c1:f6:5f:c9:ee:27:d8:5c:b4:8e:69:a2:de:05:
                    8c:93:9f:fa:c6:1c:7a:c4:68:90:dd:39:68:14:74:
                    a7:b9:e5:72:f5:06:86:34:ae:d1:39:c1:4e:7b:a7:
                    3a:95:aa:db:da:b9:f3:27:5b:d4:08:7d:70:48:4f:
                    88:bc:00:11:06:80:87:29:89:34:36:5c:c3:0b:71:
                    a6:a8:83:c8:18:40:95:02:a1:3e:c7:72:d6:92:e2:
                    f3:97:da:24:7f:5c:21:c3:cb:9a:f0:ef:35:95:54:
                    83:24:75:75:55:0e:71:de:a9:c7:c7:0f:32:02:dd:
                    0f:ba:7d:79:1e:31:6f:a8:6e:5c:c1:36:4f:ec:da:
                    d7:a9:a2:52:a2:b0:52:21:bd:d5:48:00:b7:d9:5d:
                    1c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1B:7E:C0:7B:82:8E:CF:3C:0E:F6:3E:B7:97:10:A4:9D:A2:84:83
            X509v3 Authority Key Identifier:
                keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:07:f1:09:3b:c6:bd:7a:02:e3:d0:04:4e:15:fe:62:94:ad:
         5f:87:5d:60:13:42:52:33:fa:2c:df:25:3b:20:3c:f7:2b:77:
         37:3e:d5:46:cb:06:1e:32:4c:6e:f6:ae:c8:9e:7f:ca:bb:93:
         0a:5a:0c:0c:71:37:fc:94:cd:ba:45:7f:3e:1f:f4:af:52:6b:
         e4:60:60:ab:66:cc:71:46:9b:02:fb:fa:91:39:7e:95:93:da:
         29:db:d5:fa:de:d5:13:56:49:52:30:1a:2d:44:a2:8a:41:9d:
         2b:ad:96:6b:dd:d9:09:6e:69:24:46:b7:2e:eb:ca:db:4c:ee:
         9c:3e:d5:53:87:ab:15:f5:a4:cd:af:c9:72:70:5e:f1:2f:39:
         ad:92:7e:ca:e1:52:d6:e2:46:15:74:fe:e7:e0:46:54:12:2c:
         32:74:02:6c:4a:70:6d:42:c2:3a:65:d6:a6:ce:44:2a:ba:80:
         0b:ec:c2:d6:c3:69:83:f5:fd:7e:3e:2d:42:d2:cd:24:9f:b0:
         b7:9b:e1:7a:25:08:bf:cd:b3:e0:5c:92:aa:f8:d9:86:52:98:
         fa:bc:1a:1f:bc:da:75:84:31:12:7d:4d:f3:ca:c5:88:1c:54:
         60:f1:e6:21:43:ac:bf:96:9d:79:7d:54:25:3a:33:5f:61:d0:
         1b:e6:81:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:37 2026 by rpki-client