Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File:                     dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier:          hUHJY9v8Qor6/mBbnkLo82/V33BPPjZrxppeFjRM6no=
Subject key identifier:   3E:47:A3:31:B2:B3:74:79:F4:13:5E:E5:EA:AA:06:27:C6:F7:70:94
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer:       /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial:       019E1FB6109C74D1B6CEC05E7FFD2375B30C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 05:01:25 +0000
Manifest this update:     Wed 13 May 2026 05:01:25 +0000
Manifest next update:     Thu 14 May 2026 05:01:25 +0000
Files and hashes:         1: EHRNG-kpACtEs0ZEWLFTcfb4Kpk.roa (hash: 93XpsB5VKJuRYZMCsqmi8z6M3Wzn065njgcQk7yvI2A=)
                          2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: yC9MvHwGw9F/gDo2adXltfM0H435SVKZdCaN/AWaDno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b6:10:9c:74:d1:b6:ce:c0:5e:7f:fd:23:75:b3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
        Validity
            Not Before: May 13 05:01:25 2026 GMT
            Not After : May 14 05:01:25 2026 GMT
        Subject: CN=3e47a331b2b37479f4135ee5eaaa0627c6f77094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:31:8e:ad:ca:24:da:a0:03:44:2c:ff:ad:
                    34:6e:3d:d2:d8:22:67:51:12:62:77:72:1a:fd:3f:
                    60:17:65:b3:88:95:20:47:22:fb:df:8d:68:44:8b:
                    d6:c0:28:b0:1f:ec:7a:b4:67:d0:f6:0f:b2:f2:48:
                    8a:5d:08:12:b6:19:62:68:b3:62:cc:d4:e1:1c:aa:
                    18:83:a8:dc:b3:c7:b0:df:06:ce:17:27:ad:97:f7:
                    6a:1b:c6:b5:90:4d:d9:ce:33:c3:bd:ce:1e:49:98:
                    2e:39:ec:f7:85:fa:de:b7:69:d5:c6:5f:56:94:b7:
                    66:11:ee:2f:d1:cf:97:77:7e:13:4c:b3:8c:27:37:
                    a8:c7:4d:d6:74:a2:72:14:91:ca:42:f7:7b:9e:0c:
                    d4:e5:12:fc:33:18:0c:90:bd:24:ad:3e:5f:06:8a:
                    46:2d:db:22:a4:91:9e:c1:de:79:ac:01:e6:8e:f5:
                    3b:e9:e4:16:8c:4c:81:8d:9c:c3:70:49:ad:2e:3c:
                    2f:f7:eb:89:94:9c:f7:75:9d:ec:a4:58:be:22:18:
                    30:88:29:d6:89:0c:b5:ff:68:41:2f:da:bd:e0:58:
                    d2:07:5f:a5:ad:ec:b3:45:1a:90:3a:20:f1:b6:c1:
                    a6:a1:d4:98:83:aa:6f:5f:b9:d9:64:e1:e1:8a:53:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:47:A3:31:B2:B3:74:79:F4:13:5E:E5:EA:AA:06:27:C6:F7:70:94
            X509v3 Authority Key Identifier:
                keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:8f:68:6d:da:6e:02:64:fa:30:f0:0d:00:11:0c:96:05:20:
         d7:aa:66:1f:21:d9:ca:a0:c7:6e:b6:c2:f5:45:e5:75:a6:30:
         65:29:43:a6:e5:fa:c2:f1:fb:c3:6b:f4:5e:56:07:bf:88:06:
         1c:61:8b:3d:8f:3b:d1:d5:02:0a:4c:70:4e:18:af:46:27:27:
         2d:51:11:d8:cc:17:f3:64:50:f9:db:4a:ee:ac:04:ca:48:95:
         f8:23:c6:15:04:af:c9:de:b3:16:b5:cd:25:31:f8:59:5d:52:
         4e:45:87:73:d7:f4:23:78:b8:68:b1:fe:b8:f6:71:47:6f:14:
         fb:fe:4c:f1:7b:00:e6:0e:89:eb:07:34:8c:25:c7:e5:4a:cd:
         f2:d1:46:68:16:04:01:a9:89:a5:f9:93:16:42:28:c4:dd:d4:
         4c:60:62:e8:8c:32:fa:13:26:2d:30:5f:f2:f1:56:d0:cc:17:
         f1:26:65:3a:b9:15:14:a9:3e:b1:d0:ef:97:c6:a3:4b:88:47:
         bd:16:63:3c:98:90:90:4b:e6:54:83:f4:3f:1a:2a:a8:29:5c:
         37:6a:71:82:fb:b3:c1:b2:e0:c2:d8:8b:55:1e:df:bf:99:70:
         ec:45:1c:d7:87:7f:6a:d1:8c:f2:56:2e:95:e3:54:c7:68:62:
         89:6b:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:29 2026 by rpki-client