Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/d60aa7-5dbe-4dc0-bf08-d713fefa7ba0/1/461v6kSDfaCdkjFcYPCcewaz6wc.mft
File:                     461v6kSDfaCdkjFcYPCcewaz6wc.mft (raw, json)
Hash identifier:          VWwRfIFT8l+McBacAnrU9g+bI+N/jvjcdDrQd2T5TVM=
Subject key identifier:   F0:B4:9B:56:41:4B:5D:41:F8:9D:69:1C:81:F7:C5:DC:09:0B:9E:22
Authority key identifier: E3:AD:6F:EA:44:83:7D:A0:9D:92:31:5C:60:F0:9C:7B:06:B3:EB:07
Certificate issuer:       /CN=e3ad6fea44837da09d92315c60f09c7b06b3eb07
Certificate serial:       019E1C46EC148AB5076D9FE2A9C97C60DD14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/461v6kSDfaCdkjFcYPCcewaz6wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/d60aa7-5dbe-4dc0-bf08-d713fefa7ba0/1/461v6kSDfaCdkjFcYPCcewaz6wc.mft
Manifest number:          0149
Signing time:             Tue 12 May 2026 13:01:10 +0000
Manifest this update:     Tue 12 May 2026 13:01:10 +0000
Manifest next update:     Wed 13 May 2026 13:01:10 +0000
Files and hashes:         1: 461v6kSDfaCdkjFcYPCcewaz6wc.crl (hash: vx+xjjmKGS/Dxs8tvobT26zLBn9z55EOS7uZGSszBKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/d60aa7-5dbe-4dc0-bf08-d713fefa7ba0/1/461v6kSDfaCdkjFcYPCcewaz6wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/d60aa7-5dbe-4dc0-bf08-d713fefa7ba0/1/461v6kSDfaCdkjFcYPCcewaz6wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/461v6kSDfaCdkjFcYPCcewaz6wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:ec:14:8a:b5:07:6d:9f:e2:a9:c9:7c:60:dd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ad6fea44837da09d92315c60f09c7b06b3eb07
        Validity
            Not Before: May 12 13:01:10 2026 GMT
            Not After : May 13 13:01:10 2026 GMT
        Subject: CN=f0b49b56414b5d41f89d691c81f7c5dc090b9e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:2b:a6:f1:db:dc:ea:df:d1:3d:fc:a4:53:
                    66:65:f8:83:62:7c:33:72:10:8d:f4:01:99:6f:aa:
                    38:54:85:db:4b:8c:88:76:4a:d5:39:46:ce:7e:75:
                    12:4d:f7:25:0e:64:cb:9e:40:07:e3:13:50:fd:af:
                    cb:d0:83:43:23:50:2d:4c:8f:68:f7:d7:f0:af:7b:
                    fa:f8:a0:23:2a:f0:a9:d5:71:ca:87:32:4c:22:25:
                    d2:74:10:36:a0:e6:96:ec:cf:2f:74:83:72:3a:ea:
                    f3:a3:51:a6:17:c1:a2:fe:5d:da:35:f6:6b:4d:05:
                    1b:26:75:82:d8:b4:3d:f9:3d:f4:3a:91:bb:29:cc:
                    d6:a9:63:71:88:55:bd:02:25:9b:13:b7:45:62:31:
                    6c:04:19:95:43:5b:15:75:bb:96:d2:2f:37:8b:1c:
                    15:1f:0b:78:c0:e2:e8:ce:30:b7:6e:e5:cb:c0:91:
                    9b:43:0f:d9:a4:07:35:3f:2a:96:50:a5:e0:d0:f0:
                    86:e3:18:be:1b:65:29:30:0f:04:20:dd:fc:48:61:
                    a9:45:2a:23:43:82:36:e3:ac:23:22:38:ce:26:66:
                    17:c8:da:57:27:36:b0:aa:8b:74:09:92:6f:ce:fb:
                    f9:30:d3:ab:ef:0d:f2:7c:53:ae:64:45:15:fc:61:
                    f7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B4:9B:56:41:4B:5D:41:F8:9D:69:1C:81:F7:C5:DC:09:0B:9E:22
            X509v3 Authority Key Identifier:
                keyid:E3:AD:6F:EA:44:83:7D:A0:9D:92:31:5C:60:F0:9C:7B:06:B3:EB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/461v6kSDfaCdkjFcYPCcewaz6wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/d60aa7-5dbe-4dc0-bf08-d713fefa7ba0/1/461v6kSDfaCdkjFcYPCcewaz6wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/d60aa7-5dbe-4dc0-bf08-d713fefa7ba0/1/461v6kSDfaCdkjFcYPCcewaz6wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ff:d7:cf:6c:d3:ec:06:ee:fb:4b:f9:5e:52:94:2c:69:59:
         a0:b0:b0:39:de:02:58:60:b9:6c:70:ea:a1:a7:73:e1:da:d2:
         b7:e0:8e:fa:38:ef:71:fc:c2:73:ff:c3:c6:c6:66:b4:51:5e:
         ef:3e:dd:c4:f8:4e:d1:de:05:1d:10:13:9e:09:aa:f7:38:58:
         ef:ba:01:43:e4:aa:74:79:c0:c3:aa:da:2c:d2:ef:03:ed:9c:
         b6:7d:6e:77:f4:ee:de:8c:7e:df:e0:01:b5:e0:74:2e:b5:32:
         34:15:bb:0a:c4:14:03:38:aa:39:b5:87:ba:55:c4:bf:95:d2:
         81:aa:74:84:24:92:3e:fb:89:bf:49:56:51:42:0d:18:43:20:
         e0:b5:a9:eb:89:6d:b0:c0:12:f0:d2:5c:e4:9b:0f:dc:00:9e:
         62:fd:7a:7f:d7:db:df:73:ee:b2:bd:9e:d3:f0:08:53:7e:70:
         2a:c1:0b:ea:78:8b:18:18:25:40:5b:c7:f1:0a:13:87:8c:c3:
         5b:51:c3:14:02:e2:48:1c:61:4b:fb:09:8b:29:20:2e:e2:34:
         91:1d:3d:b3:ad:d4:f8:25:d3:c2:1d:5c:dc:0f:6c:a1:4c:d2:
         6b:4e:2d:93:95:47:4e:2d:82:4a:1f:57:97:96:3f:fa:de:93:
         a7:27:af:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:33 2026 by rpki-client