Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File:                     _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier:          +F9wTm6pfAHkvYHR4A4sMsX6QoNBK8vHIfL0sPwZHYU=
Subject key identifier:   A4:01:88:E5:3B:1F:58:51:11:D1:AD:D8:D5:34:3A:4C:68:6F:DA:AA
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer:       /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial:       019E1D59117E213B72AAD018BE05BD735FCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number:          190C
Signing time:             Tue 12 May 2026 18:00:36 +0000
Manifest this update:     Tue 12 May 2026 18:00:36 +0000
Manifest next update:     Wed 13 May 2026 18:00:36 +0000
Files and hashes:         1: 1-ijVMFl6GCcC6GGP7jpRptAbkME.roa (hash: 6WwqDb4fLLuH7fqrOWTiw7oz+ZLJGp2PJoPRlWydUCs=)
                          2: 41PdyGaqWfuZrGCiI7A6Pe8er08.roa (hash: fqabz9d9YrXMSNvuc4clJBMP1zUaniqoWE3YHtZWSoc=)
                          3: RpRW9hgIjPMfAZ842QdrIrNI7fk.roa (hash: 3sOUZl0+LvcVI79+33YVuGWAx3JxO70FfZgzplNUMc0=)
                          4: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: 76psZCMsLZx0jMErB5Arscg4+vzePUr+JOUCtRlaFyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:11:7e:21:3b:72:aa:d0:18:be:05:bd:73:5f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
        Validity
            Not Before: May 12 18:00:36 2026 GMT
            Not After : May 13 18:00:36 2026 GMT
        Subject: CN=a40188e53b1f585111d1add8d5343a4c686fdaaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:72:67:97:8b:55:b3:45:f2:e1:d4:4f:63:67:
                    f6:58:77:19:b5:82:c4:c5:d8:35:cf:28:71:ae:59:
                    86:4f:21:5b:41:89:71:16:3c:54:9f:e4:b1:4f:c6:
                    5d:37:8a:02:f1:b4:7b:4f:3b:9c:ae:cd:23:bf:f6:
                    30:88:36:d3:92:40:e1:b6:d8:89:34:bf:e4:1c:92:
                    b8:37:db:41:b6:0a:ba:6f:87:2d:d9:54:3e:49:d9:
                    91:53:5f:3c:d3:ca:e4:c1:ff:8c:ec:3b:81:2f:e1:
                    58:3e:33:ad:53:77:7e:96:bc:24:2f:15:77:01:95:
                    ab:39:f3:5f:f1:a4:d7:cd:3b:12:6d:5d:9c:8e:e0:
                    bd:8a:f4:9c:29:3e:aa:a6:32:44:d7:cd:63:df:da:
                    96:08:72:66:ad:33:c5:ef:85:be:61:35:65:63:f3:
                    a4:cf:58:d2:e1:7f:11:d4:ea:90:b1:56:9f:d3:1f:
                    c2:f8:97:eb:f3:1d:bc:f9:1d:38:cf:4c:50:9e:02:
                    51:36:f8:32:90:67:ff:b5:43:0e:62:3c:1a:7e:6e:
                    73:e4:6e:66:e1:82:45:c0:9b:83:b0:58:c0:da:27:
                    4c:84:d9:e9:2e:d8:89:66:4c:82:0e:bf:51:52:59:
                    bf:ec:e2:eb:36:79:e3:63:cb:a3:6f:da:ec:5c:78:
                    f6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:01:88:E5:3B:1F:58:51:11:D1:AD:D8:D5:34:3A:4C:68:6F:DA:AA
            X509v3 Authority Key Identifier:
                keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:88:ad:bf:39:c6:26:45:ee:ac:a5:e9:c8:7c:de:11:12:c9:
         d1:23:0a:c3:b6:f9:9b:b0:83:b6:a5:e5:69:87:f4:39:a2:ae:
         b0:de:98:96:d5:36:42:4b:4b:a0:0e:51:37:87:61:5d:10:31:
         02:62:66:f4:2a:23:cd:d4:e0:9d:38:84:c3:90:fe:5a:22:40:
         64:8e:f8:5b:ff:71:22:b4:b5:4d:82:3f:69:ad:59:52:e3:5c:
         29:68:f5:67:3e:d3:17:ce:da:05:55:e3:21:1d:ca:f6:53:a8:
         33:50:62:34:ab:ed:2b:67:d2:2e:a6:e3:a6:d6:cd:fb:ca:cf:
         ba:6a:a2:d8:dc:6d:5a:64:57:18:5b:2e:01:c8:e1:4f:89:60:
         bf:d3:cd:8c:93:45:35:69:ed:79:4a:7b:27:a9:f6:4b:68:4c:
         60:ce:c1:0e:45:19:85:e6:ef:4a:9e:62:5f:b4:a7:da:39:a4:
         39:4d:51:f8:17:4d:ef:20:3a:65:30:aa:85:7e:30:ef:57:b4:
         e1:96:db:4d:53:72:fe:84:a9:f1:04:11:26:c4:a9:03:f5:35:
         7d:4f:c3:60:cd:1a:e7:2d:c1:bf:cb:0d:46:36:04:f8:a8:ce:
         77:70:1c:91:dc:cc:92:d3:0e:d9:e8:8d:0c:4c:de:39:7b:92:
         1e:dc:25:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:08:57 2026 by rpki-client