Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File:                     4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier:          z5jlVQtdxiClcbHrxhUmD9qe0QVMhcO/onQVeBrTrNo=
Subject key identifier:   66:A6:86:4A:73:BD:FE:75:4F:D8:05:5F:C0:0B:E9:00:29:AA:9B:12
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer:       /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial:       019E1D90AB710F444C1966FC2FF09592F608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number:          186C
Signing time:             Tue 12 May 2026 19:01:20 +0000
Manifest this update:     Tue 12 May 2026 19:01:20 +0000
Manifest next update:     Wed 13 May 2026 19:01:20 +0000
Files and hashes:         1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: Z233ixi1r026si6TgMo1RApO2zEIO6LwGcI5KY4xFOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:ab:71:0f:44:4c:19:66:fc:2f:f0:95:92:f6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
        Validity
            Not Before: May 12 19:01:20 2026 GMT
            Not After : May 13 19:01:20 2026 GMT
        Subject: CN=66a6864a73bdfe754fd8055fc00be90029aa9b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:7d:a9:be:47:2b:ab:fb:cc:6b:f7:56:32:
                    94:1e:3c:1c:03:7f:e9:01:23:7e:69:61:98:dd:19:
                    a4:45:e9:dd:82:d6:23:0e:e7:ed:eb:f5:9f:5d:ff:
                    76:2c:98:a8:ca:d3:3f:b4:8d:fc:a5:ad:18:89:12:
                    13:a5:8a:fd:75:b6:0c:1c:a2:24:64:a9:35:62:90:
                    6e:d5:9e:90:34:d3:8c:b5:3e:c4:20:87:ef:bd:0b:
                    b7:97:f1:da:8f:c5:df:6c:df:88:b3:09:38:57:23:
                    15:dd:8c:84:58:59:70:4d:eb:e2:df:33:73:50:be:
                    36:e5:02:00:2b:68:7e:3f:2f:e5:42:28:8b:5f:0e:
                    e7:8c:d6:7a:bb:02:03:61:5e:6e:75:13:a0:23:23:
                    04:d3:e7:ac:20:49:0a:ea:7c:d4:b6:55:f9:1b:82:
                    10:8d:6a:f6:20:9d:09:e3:36:4b:e9:69:b4:ea:c4:
                    11:8d:5b:4e:75:d4:bc:03:bc:79:c5:24:ec:ee:bb:
                    60:4b:88:d4:09:e2:84:dc:e3:cf:41:5b:15:af:7e:
                    8f:b8:e4:de:25:9a:bc:4b:dd:b9:76:d4:53:3e:e8:
                    d3:01:cb:47:a4:ee:5e:99:31:5b:65:68:f1:dc:9a:
                    2f:a5:a2:14:ef:07:96:8d:4a:05:a5:9d:b3:ef:b1:
                    ee:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A6:86:4A:73:BD:FE:75:4F:D8:05:5F:C0:0B:E9:00:29:AA:9B:12
            X509v3 Authority Key Identifier:
                keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:69:96:2a:6a:32:fe:cb:95:4e:6d:8a:cf:01:7b:62:a5:13:
         94:2f:6a:1e:b5:39:1d:b8:17:05:8c:9b:e9:29:07:31:b6:0f:
         03:31:32:29:df:3f:ba:a1:26:81:d4:48:38:76:53:cf:f6:bd:
         4e:74:3c:18:49:a0:e0:32:ca:4a:c8:a7:a7:ee:48:43:fc:16:
         a4:c9:15:14:db:b3:e1:e7:66:df:24:66:e7:cb:c0:87:fc:e1:
         d5:36:3c:4f:e9:a2:68:18:9e:66:60:79:b1:bd:dc:5f:95:9e:
         00:7a:07:bd:f6:eb:46:de:07:6b:38:dc:04:c7:6d:31:63:03:
         88:e3:cb:01:91:3c:79:d4:8e:03:d2:77:85:68:97:69:3b:1e:
         89:9c:37:4b:8a:33:ef:2a:2a:ce:9f:6d:e3:d7:6a:1d:34:eb:
         d6:b9:ec:dc:38:3a:a9:5a:db:14:5b:8a:2e:1e:ca:61:f5:61:
         49:50:05:f4:33:00:ca:ee:63:7a:0b:2a:04:a7:fe:2d:1b:8c:
         42:16:71:8c:8e:6c:c1:1d:6f:9b:45:e4:fa:a9:f1:db:dc:b4:
         c8:76:2d:27:19:c3:3c:fb:af:ae:10:e2:6c:cf:51:45:34:e0:
         c8:fc:7d:0d:72:44:e1:f5:1b:64:69:89:48:7f:a6:15:26:5b:
         95:73:b2:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkKtxD0RMGWb8L/CVkvYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMmVjNzRkYTU0OTM2YmVmNDJmZTI2MDU5N2RkNmQyMWRj
Y2VkZmMwHhcNMjYwNTEyMTkwMTIwWhcNMjYwNTEzMTkwMTIwWjAzMTEwLwYDVQQD
Eyg2NmE2ODY0YTczYmRmZTc1NGZkODA1NWZjMDBiZTkwMDI5YWE5YjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhR9qb5HK6v7zGv3VjKUHjwcA3/p
ASN+aWGY3RmkRendgtYjDuft6/WfXf92LJioytM/tI38pa0YiRITpYr9dbYMHKIk
ZKk1YpBu1Z6QNNOMtT7EIIfvvQu3l/Haj8XfbN+Iswk4VyMV3YyEWFlwTevi3zNz
UL425QIAK2h+Py/lQiiLXw7njNZ6uwIDYV5udROgIyME0+esIEkK6nzUtlX5G4IQ
jWr2IJ0J4zZL6Wm06sQRjVtOddS8A7x5xSTs7rtgS4jUCeKE3OPPQVsVr36PuOTe
JZq8S925dtRTPujTActHpO5emTFbZWjx3JovpaIU7weWjUoFpZ2z77HuawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGamhkpzvf51T9gFX8AL6QApqpsSMB8GA1UdIwQY
MBaAFOAux02lSTa+9C/iYFl91tIdzO38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTIt
MDFiOGIwZjRiMDE5LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTItMDFiOGIwZjRiMDE5
LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2mWKmoy
/suVTm2KzwF7YqUTlC9qHrU5HbgXBYyb6SkHMbYPAzEyKd8/uqEmgdRIOHZTz/a9
TnQ8GEmg4DLKSsinp+5IQ/wWpMkVFNuz4edm3yRm58vAh/zh1TY8T+miaBieZmB5
sb3cX5WeAHoHvfbrRt4HazjcBMdtMWMDiOPLAZE8edSOA9J3hWiXaTseiZw3S4oz
7yoqzp9t49dqHTTr1rns3Dg6qVrbFFuKLh7KYfVhSVAF9DMAyu5jegsqBKf+LRuM
QhZxjI5swR1vm0Xk+qnx29y0yHYtJxnDPPuvrhDibM9RRTTgyPx9DXJE4fUbZGmJ
SH+mFSZblXOyvA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:37:13 2026 by rpki-client