Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
File:                     4sVVsgW63NgpS9MyW5wvvViNIZA.mft (raw, json)
Hash identifier:          QO1LkPapOc9LrQ2AKgoGqvpNlDCfeNMkzWDnzg7GmHc=
Subject key identifier:   38:13:59:29:1D:88:64:D8:01:CE:AE:66:62:E7:F9:40:B0:03:59:8F
Authority key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
Certificate issuer:       /CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Certificate serial:       019E1EA3B73CAE5300AF0F7C15657288EA20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
Manifest number:          1895
Signing time:             Wed 13 May 2026 00:01:46 +0000
Manifest this update:     Wed 13 May 2026 00:01:46 +0000
Manifest next update:     Thu 14 May 2026 00:01:46 +0000
Files and hashes:         1: 4sVVsgW63NgpS9MyW5wvvViNIZA.crl (hash: p2+Jg/LxSafnANAum6Jl0Mwe0Uy8k2aIihmtMfmvdDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:b7:3c:ae:53:00:af:0f:7c:15:65:72:88:ea:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
        Validity
            Not Before: May 13 00:01:46 2026 GMT
            Not After : May 14 00:01:46 2026 GMT
        Subject: CN=381359291d8864d801ceae6662e7f940b003598f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:da:4f:ee:06:29:bb:f7:15:cb:f3:64:69:02:
                    ea:90:95:1e:ec:27:1d:e8:6b:3a:c6:22:53:05:a6:
                    d8:38:d5:03:f7:84:4a:2e:09:c7:ab:7e:94:1d:33:
                    66:df:ac:3b:05:89:f1:c8:62:cb:7d:78:9a:53:e9:
                    c1:c1:88:af:8a:b0:23:78:ec:d9:40:8b:f7:e0:44:
                    e9:5e:c8:ec:5e:0f:be:07:af:96:d5:34:c4:d3:94:
                    b5:6f:c9:90:7d:f2:1f:ec:fc:f1:b8:b4:67:43:57:
                    e2:af:a4:36:a2:8f:ea:8e:88:5e:5c:65:ae:43:94:
                    07:a1:d0:37:94:c2:b7:77:75:9c:69:ef:84:cb:9f:
                    14:c6:ca:3b:e1:31:61:aa:f8:10:de:98:8e:77:fe:
                    73:d2:32:a8:58:0c:2a:61:3c:a7:8a:a0:62:ca:1a:
                    66:5f:d1:6e:50:b7:75:7b:85:01:d8:f5:92:bb:bb:
                    e1:3b:bf:0c:06:10:38:e2:c5:f8:9f:eb:4b:6d:39:
                    3c:af:39:fe:a1:7e:2b:ee:73:cc:da:d1:f6:77:fc:
                    e8:f7:0f:ff:a4:64:a5:73:c4:50:3c:12:cb:8b:44:
                    7d:1f:5c:ff:68:92:b7:d8:b1:d9:ed:ad:45:3b:a9:
                    f0:89:47:00:07:e7:5a:01:84:f2:b0:d5:28:8b:e3:
                    86:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:13:59:29:1D:88:64:D8:01:CE:AE:66:62:E7:F9:40:B0:03:59:8F
            X509v3 Authority Key Identifier:
                keyid:E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:50:c0:08:cc:75:65:83:d0:4f:30:0e:de:96:7c:c2:2d:ee:
         67:e6:af:a5:82:20:7b:b0:cf:3c:9f:94:fa:2e:b6:70:80:8e:
         6c:38:da:f9:d4:e4:63:fa:fc:83:ba:0e:df:f6:90:6c:9b:a2:
         bc:80:26:a4:ba:c2:60:dd:32:96:1e:1a:1a:2a:ff:93:c9:cc:
         3d:27:68:3f:70:56:5d:ec:7b:57:de:ca:b9:3f:5b:73:c8:20:
         56:f6:f2:a4:28:75:5a:2f:ac:ca:3e:24:6d:7b:36:d0:e8:09:
         bf:4d:23:58:e1:5e:43:71:8c:92:10:90:fe:5a:1a:73:24:ea:
         95:be:22:41:00:a2:fe:f3:c3:a4:c5:96:5d:54:94:42:7a:60:
         da:d4:e8:b2:4a:75:fe:df:5c:cc:5f:58:60:45:9f:d1:07:fd:
         a3:f6:ac:cf:21:a6:2d:0d:92:4d:09:2b:87:1f:b7:d3:0c:89:
         b9:f2:2b:0f:fb:c2:39:50:c5:1f:b5:dd:96:2a:e0:e0:f1:6b:
         f0:98:e0:3f:ab:36:ca:4f:17:b9:63:7e:56:40:3b:10:3a:d6:
         ce:5f:c6:cc:46:80:22:a4:bf:7d:ff:4f:5e:e3:84:75:61:be:
         a2:2b:18:00:ec:d0:24:78:fb:6a:39:a7:27:aa:c0:b0:b1:09:
         02:ca:ff:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:32:34 2026 by rpki-client