Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
File:                     DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft (raw, json)
Hash identifier:          26my06oTWAxOkg6k44DNQ5AIsokeJfHVAMu4Fg2H1C8=
Subject key identifier:   03:F3:D3:A6:C9:69:CE:A8:84:3A:D4:7A:F9:5C:37:A0:8C:C3:91:59
Authority key identifier: 0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
Certificate issuer:       /CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Certificate serial:       019E1D90CE77BD4743D4AFEF0DBE55D17AD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
Manifest number:          1902
Signing time:             Tue 12 May 2026 19:01:29 +0000
Manifest this update:     Tue 12 May 2026 19:01:29 +0000
Manifest next update:     Wed 13 May 2026 19:01:29 +0000
Files and hashes:         1: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl (hash: is3Oy6NYNoEwRW2Z1gEaM8w0CD323We9sUcBri+cNRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:ce:77:bd:47:43:d4:af:ef:0d:be:55:d1:7a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
        Validity
            Not Before: May 12 19:01:29 2026 GMT
            Not After : May 13 19:01:29 2026 GMT
        Subject: CN=03f3d3a6c969cea8843ad47af95c37a08cc39159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:09:87:21:2d:9e:67:c4:a0:40:07:fd:0b:d6:
                    55:45:f2:76:58:33:76:dc:d6:43:cf:32:43:20:c0:
                    20:d7:62:e0:93:80:e1:18:c2:8a:28:3b:2f:81:42:
                    31:00:b6:8b:66:41:e4:c4:f2:88:43:e6:0d:2a:73:
                    9d:88:15:77:54:e1:a0:48:ef:e0:87:a2:71:a4:7f:
                    8b:71:c8:7d:2d:a4:40:20:5a:c6:91:53:51:56:c8:
                    4a:75:42:0e:b1:cb:76:e2:b9:73:06:2c:1d:55:b3:
                    22:3a:08:25:23:08:ca:1c:f0:05:97:bc:6d:3e:bd:
                    32:ce:cb:3d:65:5f:7b:06:e7:23:25:7a:f4:22:5e:
                    ba:aa:f5:5a:fa:0c:61:7c:86:52:51:4c:ac:32:67:
                    5e:cf:2c:a4:1b:c7:36:8e:3e:21:80:7c:b3:51:08:
                    4d:8c:6c:83:c6:b7:f1:81:6b:f0:06:7e:fe:00:e6:
                    5c:67:9f:c0:16:68:6d:30:82:3b:ec:39:04:67:5b:
                    e0:39:03:5f:c5:cd:a3:8c:aa:e9:f1:ce:9b:4d:a1:
                    07:f2:29:fb:0c:7d:14:eb:6f:35:14:77:9e:38:f9:
                    7a:86:d8:bc:a9:15:84:86:d4:ef:d6:b8:ad:ce:04:
                    04:93:f9:9a:dc:c1:db:28:66:67:14:b5:33:b0:67:
                    08:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F3:D3:A6:C9:69:CE:A8:84:3A:D4:7A:F9:5C:37:A0:8C:C3:91:59
            X509v3 Authority Key Identifier:
                keyid:0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:45:15:4f:89:c9:14:04:05:38:ff:82:3e:9c:ed:fd:8d:20:
         46:4b:d5:4e:3a:d6:bc:15:ea:ce:15:b6:51:c1:0c:a2:99:5d:
         21:4a:27:8b:59:83:85:b9:33:26:4b:5c:77:19:39:ea:17:f0:
         41:34:d2:a7:84:26:15:12:44:05:99:a7:70:72:4b:4f:ea:d2:
         62:0e:0b:13:39:56:50:e2:fb:ac:77:bd:37:b3:ff:70:71:a4:
         b1:d4:22:c2:09:d3:a1:04:39:8e:7a:5f:72:4b:91:9e:24:66:
         fc:ba:1f:45:c5:55:ab:5d:2a:21:94:e7:01:5b:1c:12:97:5e:
         a5:89:71:01:99:6f:1c:94:1c:44:8b:5e:40:e7:52:1d:9b:ce:
         d0:e7:ce:b5:07:51:49:3f:ce:45:97:51:59:55:01:38:1d:56:
         f4:94:70:68:43:b0:05:cb:69:22:a7:58:8a:e1:49:77:09:40:
         d9:6b:23:5c:f9:25:8a:8e:ba:f1:20:a4:9c:85:82:ea:f6:32:
         98:58:ad:a3:a3:75:44:b4:39:88:4a:6c:1f:b0:3f:76:88:20:
         be:db:47:7b:7f:bf:e4:da:ea:ec:6c:87:90:6e:e3:64:2a:7b:
         48:c9:1b:dd:60:38:a9:3e:7e:6e:69:96:9f:68:9b:a9:9d:84:
         06:61:8f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:08:51 2026 by rpki-client