Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File:                     inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier:          TRlcorlYY/RxxRSFFVR2fKVbpbulqJdOGkY3PSCA9/0=
Subject key identifier:   02:67:79:57:BC:EE:4A:99:D8:1C:8C:9B:31:39:C8:DB:EE:67:0E:A3
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer:       /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial:       019E1F114A14583B0E95AAE7A89265F46A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number:          190D
Signing time:             Wed 13 May 2026 02:01:27 +0000
Manifest this update:     Wed 13 May 2026 02:01:27 +0000
Manifest next update:     Thu 14 May 2026 02:01:27 +0000
Files and hashes:         1: PguFJecoQt--LyHW2Dxlv0ZZ3t0.asa (hash: 0DuH9ZfW8f/p2+Moq7rG/7mXkezlodPdLgpnaG/Lc0I=)
                          2: cSJtDg9vgEHyxl9pdyznOaSGrWg.roa (hash: 76q9DQ4PdJdy77vI2HX3g1+OVo3qLamEUqimf88VMZA=)
                          3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: rJH7OdMhzT/rh8r9ITFJWuAzA7QxkPnhbDpVQvaBQdM=)
                          4: nyn8nP7M60E_Gz5chelL2mp7sBg.roa (hash: no7cv4ijMcaVa1AjDdpe2zKmm1N/3cLT1g+7PMJ12Ew=)
                          5: x5mGmJWW7VG2d9fAFZDjA0LUA6M.asa (hash: VX9BMxwn8E44ljUNBHA9sm5zOwxMI5hsQlaAlIe0HNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:4a:14:58:3b:0e:95:aa:e7:a8:92:65:f4:6a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
        Validity
            Not Before: May 13 02:01:27 2026 GMT
            Not After : May 14 02:01:27 2026 GMT
        Subject: CN=02677957bcee4a99d81c8c9b3139c8dbee670ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:0b:f7:c3:63:78:f0:ce:8d:f3:d8:89:80:
                    e9:15:fd:a5:fd:d9:69:f4:a3:b0:07:42:76:77:9e:
                    e0:2b:6e:54:82:6e:3f:26:a7:2c:bd:e2:a5:1e:8b:
                    38:ad:7c:98:35:8c:59:2d:af:31:3c:ff:a1:cc:39:
                    6b:b2:8e:75:06:c5:36:ff:14:0d:e1:8a:30:26:91:
                    fb:26:13:2e:da:b4:09:34:b7:ef:d4:b2:28:da:8d:
                    27:7b:b1:c5:c0:7a:2a:5c:ce:0d:4c:7b:5b:b1:74:
                    ba:df:e7:8f:2f:83:85:46:19:8e:11:bd:cc:31:a4:
                    aa:52:45:c2:3d:dc:59:32:54:61:8d:bb:77:a0:c4:
                    4d:43:21:c7:57:02:0d:c3:af:61:aa:b5:5b:5d:d5:
                    9c:fd:08:38:1c:5f:24:0f:c2:a5:47:7a:a9:3d:5d:
                    37:ee:29:86:9e:81:8d:68:fe:5a:7c:8a:0a:19:f3:
                    e8:42:14:b3:9b:e6:e2:03:0e:7c:30:c4:9e:c3:95:
                    15:1d:c2:73:64:42:fd:69:e3:a0:c8:ee:f7:9a:d5:
                    0d:10:ff:94:41:de:01:61:48:e0:f0:f6:de:e3:87:
                    41:33:be:f2:36:3f:15:23:04:02:cc:d0:f2:57:41:
                    ff:1e:8c:16:2a:dc:63:be:b0:74:3a:19:19:dc:0b:
                    1e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:67:79:57:BC:EE:4A:99:D8:1C:8C:9B:31:39:C8:DB:EE:67:0E:A3
            X509v3 Authority Key Identifier:
                keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ae:26:50:d4:f4:d1:d9:4f:88:48:72:a6:3b:15:38:00:19:
         be:62:0a:d5:5f:d0:80:51:1b:15:6c:f9:ba:2a:f2:0a:2a:47:
         48:25:8c:76:31:ba:4b:ec:ef:a7:9f:c3:a4:39:8d:48:1f:1f:
         f6:a7:d2:ae:f4:65:5c:a9:d3:20:a9:83:3d:05:c3:49:48:42:
         ca:f4:84:cb:c4:59:c2:f7:d7:b6:4a:88:64:2e:9f:05:90:f8:
         aa:5a:bd:15:54:db:bd:46:25:f5:a1:17:8a:ec:9e:f9:4f:42:
         03:56:11:7d:c0:12:8a:b5:f7:75:8e:33:3c:f1:45:7b:b4:6d:
         af:fa:1c:72:30:f3:3a:19:8d:94:cb:2a:c2:04:87:f2:f7:e4:
         2e:7f:2f:c5:47:02:d1:02:bb:41:d6:df:2b:b7:e7:79:e0:a9:
         ee:f7:af:f0:8e:17:72:f6:53:78:40:67:ce:98:47:aa:07:f6:
         d8:db:c5:1f:d3:e8:44:01:b4:96:4a:d5:f6:19:da:96:3b:10:
         15:10:be:3a:16:83:8e:f2:8a:0f:41:96:db:85:04:e0:fe:76:
         46:97:53:4b:23:14:3c:62:73:11:72:93:c6:ad:6f:5e:90:01:
         c6:33:cd:d3:93:f7:19:fb:9b:e8:14:d8:cd:41:c0:1a:7a:d3:
         3c:22:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:36 2026 by rpki-client