Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File:                     4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier:          cRX9xGhaEbNVuFu9FdpYOJ8em1o4OqQDPXS2l2GtLEM=
Subject key identifier:   81:02:B0:10:5D:04:D2:54:67:E7:3C:F4:0E:5F:B5:BE:45:D1:08:3E
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer:       /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial:       019E1E351AE0D9BF730BD96EFC383F952A13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number:          0B15
Signing time:             Tue 12 May 2026 22:00:57 +0000
Manifest this update:     Tue 12 May 2026 22:00:57 +0000
Manifest next update:     Wed 13 May 2026 22:00:57 +0000
Files and hashes:         1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: INEAfnwL2oBMhbRIIDNsrDnR97XH0J+u2fvnAPaTIHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:1a:e0:d9:bf:73:0b:d9:6e:fc:38:3f:95:2a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
        Validity
            Not Before: May 12 22:00:57 2026 GMT
            Not After : May 13 22:00:57 2026 GMT
        Subject: CN=8102b0105d04d25467e73cf40e5fb5be45d1083e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:ca:4f:1c:3e:3f:2e:9b:a1:eb:3f:0d:6c:
                    ff:ca:74:e0:09:83:3e:5d:02:92:70:e6:94:2d:0d:
                    b6:71:d6:a1:b5:11:09:a5:5f:c6:52:9d:bc:65:aa:
                    07:57:c8:a1:c9:60:b0:1f:df:04:8d:d1:2d:0b:ce:
                    5b:28:7c:ee:7d:c5:93:b0:3c:5d:f6:00:18:dc:b8:
                    80:fa:b2:7e:06:51:18:a9:cb:6c:b9:21:14:15:cb:
                    7a:91:96:d2:2b:85:e5:ce:01:a6:cb:10:d2:5a:43:
                    2c:d4:8a:82:bb:aa:06:b6:3f:5a:a7:00:57:51:b1:
                    cc:c4:13:ca:a4:da:08:1c:9d:4e:13:71:29:3d:c7:
                    19:7f:51:f7:87:fd:27:e1:b6:08:3b:f5:e6:1c:db:
                    a3:de:8a:71:4f:52:a7:8c:7b:19:c2:7e:9f:46:e6:
                    d0:aa:06:aa:90:f0:43:67:99:95:23:f8:55:e4:ff:
                    da:12:52:a8:a0:6e:6a:7c:8e:f3:cd:65:07:29:58:
                    49:57:9a:f1:f1:71:40:41:7b:2e:cc:6f:92:d4:dd:
                    c4:6d:17:66:36:64:3e:fb:00:a9:d1:d4:83:c9:ee:
                    46:fc:86:00:05:2e:43:ad:b4:e3:64:e1:f8:dc:5e:
                    41:ce:aa:63:63:ed:9e:aa:ab:31:72:3e:26:e4:62:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:02:B0:10:5D:04:D2:54:67:E7:3C:F4:0E:5F:B5:BE:45:D1:08:3E
            X509v3 Authority Key Identifier:
                keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d2:eb:02:1b:a6:03:be:4e:8e:f1:1f:fd:f0:50:69:11:bb:
         9e:ed:8b:68:32:a1:4e:dc:34:fc:32:ca:47:ad:46:50:cf:dd:
         44:7e:7a:04:64:49:67:ce:5a:10:d8:f6:4d:27:1f:67:a3:6d:
         61:08:fa:c2:97:a1:c1:c7:9e:a8:f4:10:98:50:5e:e9:8d:d8:
         93:6e:75:51:79:4f:44:90:c0:30:47:aa:7f:f5:b3:4b:87:6e:
         45:82:c7:8b:99:2f:8f:bb:73:39:7b:ef:3c:a9:3d:e9:da:c4:
         6c:7f:33:54:13:5c:ff:13:a6:53:3e:09:a5:e7:84:94:35:01:
         96:a9:1e:f5:58:56:48:d0:a1:14:74:4f:60:af:ac:e5:1a:e6:
         fe:f1:66:01:04:95:04:68:f8:ee:96:f5:e4:47:20:8f:85:71:
         69:99:7e:65:a8:31:86:73:81:0a:ef:01:b3:f6:0f:d0:c5:9f:
         80:a8:34:51:db:fb:1c:e7:a2:c3:cf:ff:fe:a0:fd:ba:c4:34:
         9c:bb:34:6e:02:17:5c:dc:06:bb:41:f9:ed:08:1a:d0:6e:07:
         f3:f6:4b:66:01:8c:3d:71:29:10:c0:8e:d8:26:01:b0:d8:4b:
         63:21:27:6a:65:99:00:48:97:f1:c7:c8:d7:67:df:94:c3:c7:
         ca:4b:89:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:44 2026 by rpki-client