Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File:                     481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier:          ERhpE0R/CYBRaNge6nlxp94zN7Agxquk6+2tcsNqIBY=
Subject key identifier:   C4:6C:6F:74:61:3D:8D:C5:A5:1E:2B:36:10:24:0B:09:64:FA:A5:27
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer:       /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial:       019E1F7EC9D9DAD4604BF687352EE375E569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number:          07FB
Signing time:             Wed 13 May 2026 04:01:03 +0000
Manifest this update:     Wed 13 May 2026 04:01:03 +0000
Manifest next update:     Thu 14 May 2026 04:01:03 +0000
Files and hashes:         1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: pz2ZqdndtgImWoIJAakF+jJrkya6V5+lhuWvcdFDg+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:c9:d9:da:d4:60:4b:f6:87:35:2e:e3:75:e5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
        Validity
            Not Before: May 13 04:01:03 2026 GMT
            Not After : May 14 04:01:03 2026 GMT
        Subject: CN=c46c6f74613d8dc5a51e2b3610240b0964faa527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:36:0a:e7:d9:aa:2c:b7:81:9a:9c:a9:8e:
                    99:a0:68:16:6e:6a:7e:43:07:08:a7:31:f0:3e:f2:
                    f2:8d:e7:45:65:16:9a:3b:38:23:6a:2b:e2:d6:06:
                    7e:a9:b8:9c:33:bc:a0:2f:b0:c6:56:30:d9:79:89:
                    12:47:e9:60:63:65:7c:fd:22:c3:1a:f1:1f:77:45:
                    f0:d0:ec:7f:5a:a1:1a:1e:90:17:73:16:79:df:79:
                    c1:3b:7e:d7:34:33:03:bc:c4:17:79:cd:72:57:7e:
                    31:9c:b4:9f:64:a0:d0:be:4b:4d:68:a9:02:05:90:
                    fa:80:91:cd:64:ed:5a:1c:cb:bc:c7:2a:a3:f6:5d:
                    4d:74:cf:f3:ac:5c:c8:61:bc:2e:ca:b8:e2:0f:46:
                    22:a6:1b:f3:7d:6a:36:1e:2c:15:5e:88:aa:95:68:
                    b9:bb:77:89:f3:a1:a9:5a:e0:67:28:ce:33:fc:c1:
                    03:8d:03:f1:40:33:6c:82:2a:26:30:84:79:e3:ef:
                    10:a5:08:5b:d2:7f:26:33:06:d2:25:99:17:c0:47:
                    4b:18:f4:f1:df:1d:f3:72:5b:68:cf:23:86:18:e0:
                    21:71:f6:9a:77:eb:04:fd:35:ac:c3:1e:00:3b:3c:
                    d2:8e:2a:6c:af:7b:90:10:0a:b7:f2:fc:77:be:5c:
                    7b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6C:6F:74:61:3D:8D:C5:A5:1E:2B:36:10:24:0B:09:64:FA:A5:27
            X509v3 Authority Key Identifier:
                keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:60:19:3f:a0:9f:0e:18:22:68:3d:59:e4:64:fe:82:53:19:
         c4:2c:36:35:37:f6:fb:ff:ba:09:04:30:dc:01:ad:ef:b0:d3:
         b6:2a:cd:93:9e:9d:31:c9:d3:b1:5c:2b:81:86:81:3f:01:65:
         55:c7:cb:31:22:0a:e2:3a:45:20:8a:98:fb:34:ab:64:b0:0a:
         fc:8c:10:fe:1b:c3:4e:83:aa:54:8d:ad:93:2a:5b:c8:08:30:
         6f:0e:70:c8:c5:99:35:16:39:92:3e:96:d6:71:83:d2:a6:e3:
         0d:38:04:93:7d:8f:c5:b6:5f:16:4c:10:8f:d1:1a:a7:61:d9:
         6f:6e:50:07:33:83:2e:73:0c:7b:41:6b:2f:bb:be:ec:d7:27:
         8e:5d:37:f0:69:f2:df:f1:2f:a3:42:25:aa:ce:c7:41:e4:70:
         8a:3e:a6:cf:ce:9f:c9:21:c7:46:cf:86:80:a8:32:16:41:e0:
         f0:8d:4f:61:02:f2:a5:59:50:83:07:d3:d2:d6:90:ce:9f:96:
         4e:08:0c:69:60:42:6e:1b:4b:61:f6:b5:b9:d2:a7:f6:f5:24:
         5e:84:ab:4d:04:e0:f5:fe:0d:54:3a:d7:90:e8:81:a7:9f:34:
         86:e3:ac:5b:59:a9:26:59:47:e6:0a:1d:e6:c5:7b:32:ad:5a:
         d1:ec:cb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:13:34 2026 by rpki-client