Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
File:                     1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json)
Hash identifier:          5uQNgy624FLIJ2SeQvA5W5wz3wnSupAnHj8R/Kvj+/s=
Subject key identifier:   72:10:B8:8F:49:D3:32:F0:01:8E:22:92:06:46:88:F1:45:F5:6C:CD
Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Certificate issuer:       /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Certificate serial:       019E1D22661DD2D9AC3CBE7F45C3C95A05F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
Manifest number:          1902
Signing time:             Tue 12 May 2026 17:00:53 +0000
Manifest this update:     Tue 12 May 2026 17:00:53 +0000
Manifest next update:     Wed 13 May 2026 17:00:53 +0000
Files and hashes:         1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: +YVXI8hxriZeVqamCDZ5g5yOdPFhzo74ZPq3i/+bIZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:66:1d:d2:d9:ac:3c:be:7f:45:c3:c9:5a:05:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
        Validity
            Not Before: May 12 17:00:53 2026 GMT
            Not After : May 13 17:00:53 2026 GMT
        Subject: CN=7210b88f49d332f0018e2292064688f145f56ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:85:b2:c4:79:5a:b7:30:db:ce:50:a4:3f:77:
                    e3:cf:ae:68:27:f1:d6:15:ec:8a:40:2d:1a:62:98:
                    db:b9:4c:4c:52:6b:25:3c:ac:09:65:d3:b8:ac:29:
                    e7:5b:2d:3b:8f:68:ef:03:b8:cf:b3:b8:b6:a3:c6:
                    7d:8c:d6:0e:d7:7f:63:e7:d7:10:ea:fb:26:59:30:
                    4d:fa:87:ef:9a:c6:27:4a:84:8e:73:41:0d:de:f2:
                    9a:cb:ed:27:f8:ee:0f:6a:ef:55:7e:17:55:34:52:
                    db:9d:7a:e2:62:04:68:e8:27:86:97:8c:64:f5:97:
                    56:5d:c9:b0:b9:5d:71:bd:a4:ab:aa:14:1a:14:0a:
                    c9:19:d9:fe:3c:5f:06:96:cb:04:6d:73:65:31:e4:
                    36:2e:5f:69:86:ae:dd:66:09:8d:04:81:82:0b:ba:
                    07:4d:90:61:47:61:8b:a6:3c:c6:e0:c6:96:39:ff:
                    54:0f:b1:ba:77:11:c7:20:0e:18:67:2f:9d:80:c2:
                    3f:80:dc:14:f4:5d:35:59:84:0e:2b:49:8f:28:16:
                    03:b7:89:f6:2f:88:3f:15:99:d2:05:a4:bc:3d:6b:
                    ee:5e:b2:c2:44:23:80:50:e6:88:b3:bc:85:f9:6b:
                    2d:a3:8d:b4:2c:b1:e8:1e:ab:21:41:d1:5a:6f:e9:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:10:B8:8F:49:D3:32:F0:01:8E:22:92:06:46:88:F1:45:F5:6C:CD
            X509v3 Authority Key Identifier:
                keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:30:e7:c3:5a:eb:94:7c:5d:98:18:af:eb:03:af:49:3e:2e:
         1c:5f:85:29:55:e9:26:27:0c:99:d5:1d:24:79:5a:81:f8:34:
         f8:32:1f:84:2a:12:3d:c2:58:7d:c3:6d:fb:c9:99:c3:32:47:
         ec:84:a8:64:07:57:e9:41:49:6f:54:1b:ed:8c:f4:d8:64:1e:
         50:1e:29:37:be:39:2a:f2:67:cb:70:5e:18:0a:61:f6:30:6f:
         39:5d:e9:03:18:36:64:b2:10:05:4f:14:a4:72:32:2e:07:01:
         ff:e9:74:0d:69:aa:8f:ad:cd:85:b0:7c:e6:51:f4:e7:e4:5d:
         b4:6c:13:2e:92:0b:77:74:3d:c6:27:d4:72:bd:14:56:47:36:
         2c:11:f1:e2:29:0b:b5:f9:78:7b:ab:24:d1:92:d6:bd:7d:12:
         87:90:f4:88:00:96:3d:8a:ae:82:b1:b4:11:63:71:5f:4d:3a:
         27:4d:30:1c:56:ec:f6:cd:65:ef:8b:c7:2e:f2:1a:14:b9:05:
         dc:00:e9:4f:8f:16:04:ca:50:b4:b4:18:4d:36:7f:a6:1d:0f:
         5d:39:96:41:20:bd:fa:99:fb:d4:37:21:bc:d3:37:6d:68:70:
         f8:8e:99:5f:77:dc:93:91:1b:16:69:c6:d5:c5:22:8c:90:7d:
         4c:09:21:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:49 2026 by rpki-client