Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File:                     C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier:          QVp6TFZFD+HRw1+I04eCKu7XEcuetMzmsaaFeNn6+ls=
Subject key identifier:   1D:85:36:87:EA:43:DC:08:C4:37:36:B5:C7:96:E4:8A:1B:F5:91:12
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer:       /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial:       019E1E351C3B5C59253D6CCC9C78B6BE5B76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number:          190B
Signing time:             Tue 12 May 2026 22:00:57 +0000
Manifest this update:     Tue 12 May 2026 22:00:57 +0000
Manifest next update:     Wed 13 May 2026 22:00:57 +0000
Files and hashes:         1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: z5no5J9jteirFha4WLwZ/tPrq7C15CHuH57+sZF1BpQ=)
                          2: CG82gzRyJjDfFWfuD3mZCTUFAGk.roa (hash: gKZxL4EPwYbDm8mzGxioP2eZTGCmezZu5Mvtzl5e1/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:1c:3b:5c:59:25:3d:6c:cc:9c:78:b6:be:5b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
        Validity
            Not Before: May 12 22:00:57 2026 GMT
            Not After : May 13 22:00:57 2026 GMT
        Subject: CN=1d853687ea43dc08c43736b5c796e48a1bf59112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9b:0a:28:d6:b4:ec:cf:90:2c:1f:e9:91:8f:
                    e1:d7:d1:36:55:c3:c1:f5:e6:56:3c:4a:86:15:19:
                    ca:95:94:e9:c4:f6:4d:52:a1:b5:20:64:c8:7e:3b:
                    e7:4c:6f:44:72:c2:8b:f5:b6:de:21:c3:b3:0b:91:
                    23:51:c1:b4:db:36:aa:6c:80:12:00:e1:46:d3:9d:
                    48:3a:2b:1e:f3:11:d4:13:3a:e7:0e:14:f8:bf:61:
                    f7:c4:0d:99:d8:f7:b7:81:d1:8a:5b:57:3e:bf:08:
                    e7:cd:de:97:25:bc:11:ca:33:74:9f:11:79:16:1a:
                    a0:1d:d1:ac:03:f8:69:32:0f:f8:e5:d1:fa:ad:0e:
                    a6:79:40:c6:33:26:b5:57:a9:29:6e:4f:f0:28:a3:
                    6b:db:59:d4:c5:ca:f2:56:3b:38:18:e4:23:02:5f:
                    a9:84:a9:dd:58:85:74:5c:af:44:a6:ac:2c:b2:8c:
                    f8:e5:b6:96:63:c6:05:64:ab:84:51:03:eb:9e:9e:
                    2f:11:60:79:d8:c4:88:da:ed:b3:df:ec:13:ba:b2:
                    a2:bf:fe:6b:80:2e:63:99:b8:0d:9a:c0:2e:c9:61:
                    ef:70:7d:93:a7:c9:03:bb:6a:38:3b:66:26:64:9d:
                    ec:49:60:b9:4e:ed:ae:0c:ad:27:ee:e5:d8:e6:70:
                    32:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:85:36:87:EA:43:DC:08:C4:37:36:B5:C7:96:E4:8A:1B:F5:91:12
            X509v3 Authority Key Identifier:
                keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7b:03:45:b0:80:e7:a1:1e:c4:87:1b:7f:81:ad:03:eb:a7:
         2b:47:3f:1b:01:30:92:22:b3:e5:0b:5d:fe:7a:4f:31:f5:43:
         8f:7e:60:98:41:fb:81:3d:5a:9c:aa:c6:c8:dd:2a:24:1d:38:
         9e:9e:01:32:b6:01:9a:b8:bd:64:a0:0e:a1:5f:fd:27:53:ea:
         4a:e6:03:de:7a:7b:45:2e:fb:2a:bf:ae:1b:87:f1:7b:db:71:
         f2:b1:7f:a7:27:4c:9d:79:dd:4f:c9:a9:b6:78:4a:0d:50:ff:
         e1:75:ca:a2:48:8d:29:9e:0a:44:ae:99:fe:3a:b0:f0:20:b8:
         0b:97:b2:c8:ec:0c:25:2a:c9:4d:c2:fe:08:42:90:29:dd:30:
         ea:87:b4:88:f6:98:84:b0:24:fa:ac:9f:f3:0e:63:5f:c4:f4:
         91:ff:f9:0a:48:ce:fe:64:01:7c:14:39:ba:4c:56:c4:0d:11:
         41:a8:c2:78:f0:c6:ca:69:9c:e7:d9:a1:88:c2:d5:bb:b4:3b:
         b1:2a:ef:a5:c3:df:cf:a3:01:c5:a2:37:5c:c6:4c:c5:39:4e:
         2a:e3:f0:21:dd:5d:02:de:27:46:21:f2:ef:31:8d:eb:e1:c5:
         88:2b:83:63:8c:4b:37:f9:a8:df:17:fb:b8:c7:84:69:ea:74:
         50:5e:72:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:33:24 2026 by rpki-client