Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
File:                     A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json)
Hash identifier:          Xrd5JJRF2DC1b6syYr4B8/vP0U8RWBLuwAAyICSYOwk=
Subject key identifier:   0F:EB:02:47:8A:ED:55:A2:00:68:03:13:E5:36:15:05:29:D0:DC:A4
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Certificate issuer:       /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial:       019E1F10AA5E667A4E99BE49C424534CE3EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 02:00:46 +0000
Manifest this update:     Wed 13 May 2026 02:00:46 +0000
Manifest next update:     Thu 14 May 2026 02:00:46 +0000
Files and hashes:         1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: iV2/nFc5Ur4PJYa5LE5MopUWMiHkdRdTr6Kj36+jxJE=)
                          2: lsqSMmJEavXh7pViu8wsmFP-0ew.roa (hash: WZM+G3iXoRdRNC/z9rbX80joIRjQ5aWaqz7KFYrf3LE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:aa:5e:66:7a:4e:99:be:49:c4:24:53:4c:e3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
        Validity
            Not Before: May 13 02:00:46 2026 GMT
            Not After : May 14 02:00:46 2026 GMT
        Subject: CN=0feb02478aed55a200680313e536150529d0dca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:67:cb:cd:ec:aa:0f:cb:e0:0f:73:94:24:
                    2a:32:13:ab:7f:10:26:55:1f:0d:84:75:2b:a2:4f:
                    31:30:11:35:d6:8e:65:02:b6:d8:db:12:cc:6a:2f:
                    85:d2:98:71:13:58:89:f3:96:77:63:9e:87:40:ac:
                    96:0b:00:ae:4b:93:4c:39:fb:52:f6:06:7b:c5:d4:
                    39:5c:85:da:14:a2:fe:b8:8a:db:e7:93:09:a8:9e:
                    d4:1b:61:81:3e:21:3c:36:e0:3c:30:4e:43:78:2b:
                    48:9f:5b:21:a9:80:46:f1:fc:c2:f9:e6:17:8d:0c:
                    87:ea:96:95:45:f5:77:be:ce:c4:ce:80:68:c1:36:
                    d1:84:16:25:52:03:ae:b5:c6:0a:5b:f4:a5:f5:d0:
                    7b:eb:c1:3d:28:08:37:54:a0:46:40:5b:31:b5:02:
                    ba:c2:0e:0b:46:98:55:de:89:b5:ad:de:12:a7:9d:
                    82:05:91:e0:20:be:fe:3e:67:6c:12:24:a3:16:46:
                    83:83:76:7d:1b:ba:fd:41:72:8a:83:1a:42:15:99:
                    90:7a:43:7a:0a:f2:8b:09:2b:36:10:98:49:1e:3c:
                    61:d9:fd:ed:38:b9:fb:a9:42:7e:62:2e:53:03:90:
                    f3:d4:ae:8b:53:fa:67:da:ab:c4:eb:e6:aa:6d:16:
                    62:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EB:02:47:8A:ED:55:A2:00:68:03:13:E5:36:15:05:29:D0:DC:A4
            X509v3 Authority Key Identifier:
                keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:34:92:09:91:0d:3a:a2:03:92:7d:af:70:c9:3d:6d:eb:b4:
         99:88:17:0e:2b:f8:03:53:5d:e6:dc:32:38:4b:e0:ab:ab:af:
         bc:ca:16:e7:86:6f:e2:c9:e7:1e:fe:60:ae:da:4e:7c:d8:95:
         e2:63:48:2f:42:ed:e4:69:0f:d2:f5:b4:c9:42:5e:1b:bd:7b:
         64:de:39:20:71:b9:18:74:29:38:18:0f:54:f1:19:c3:cc:d8:
         15:62:d5:24:e7:20:7e:67:47:0a:c8:9c:c8:7c:de:e9:ff:ae:
         d7:54:04:9f:10:f8:ea:73:b1:31:fd:ed:8d:5a:fe:86:ad:e2:
         6e:8d:2c:68:81:5a:34:00:c8:94:6c:7f:18:b1:c2:66:5c:4a:
         c6:b7:33:66:0a:b6:a5:c8:88:ca:62:cb:e3:d9:e6:29:a9:86:
         79:84:ea:65:4f:90:13:b0:4a:54:53:57:63:c6:d0:96:9e:0d:
         95:b2:61:1a:d5:d8:0b:4e:f7:b3:7d:0c:bb:ea:10:c2:d5:50:
         00:4f:7d:00:9c:65:53:91:5b:ac:e4:56:c9:18:07:23:e4:0b:
         df:35:d4:5e:3e:27:a5:da:41:e0:34:1a:5c:75:91:03:db:8e:
         69:43:93:76:78:2c:f7:fc:26:c4:fc:f9:85:b0:48:a1:44:ab:
         ff:52:56:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:30:03 2026 by rpki-client