Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File:                     1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier:          TAh9urk5FK9c6ds/+5GmcWpYIBZ3Rpw1yE7Yujz4BDU=
Subject key identifier:   4E:0E:EA:31:8C:8A:61:CA:D9:56:28:C0:2E:46:AB:5F:4F:39:12:CA
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer:       /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial:       019E1C0FFD282BCA57FE26DF845001080E82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number:          162C
Signing time:             Tue 12 May 2026 12:01:10 +0000
Manifest this update:     Tue 12 May 2026 12:01:10 +0000
Manifest next update:     Wed 13 May 2026 12:01:10 +0000
Files and hashes:         1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: fJ/adJIOYwuFhQflFDxH5jTAqAP7yBlwPmF5b5WTpKA=)
                          2: jTE7aus6FHt_I5mpklvVVf-KpAw.roa (hash: jTSKuDkQyIFhQKFi7+s/96OtXGRbDcnGaxvdpome6eY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:fd:28:2b:ca:57:fe:26:df:84:50:01:08:0e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
        Validity
            Not Before: May 12 12:01:10 2026 GMT
            Not After : May 13 12:01:10 2026 GMT
        Subject: CN=4e0eea318c8a61cad95628c02e46ab5f4f3912ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:48:a4:ef:4f:20:d1:c3:44:04:84:db:0c:46:
                    37:3c:33:11:16:10:72:5b:b2:dc:de:70:49:b9:ae:
                    68:74:89:e5:bf:8c:79:77:d2:65:ab:0b:bb:0a:44:
                    ea:72:f2:87:41:1b:6c:d7:9f:84:b7:1d:8f:1b:bf:
                    f5:9b:e8:71:c2:7d:1b:76:62:d3:73:5a:c8:77:b8:
                    6b:44:6c:a3:73:6a:e8:a1:db:21:d4:d3:23:2b:23:
                    dd:82:d5:ff:8a:e4:aa:35:98:1d:c2:64:08:2d:63:
                    a2:25:9d:d8:0c:0d:2d:8b:00:80:48:3a:92:c2:5a:
                    2f:dd:82:a2:b4:64:30:cf:7b:7b:01:3e:47:b8:30:
                    d6:41:fe:c8:4e:b4:9a:19:2c:d6:71:cd:28:a4:86:
                    72:82:21:9a:5e:d6:7e:ba:11:f1:4e:c0:d1:a1:57:
                    76:90:73:29:a7:99:57:f1:7f:5f:2e:2e:59:46:d4:
                    23:c7:5f:26:4e:d3:d3:32:1b:62:8f:06:94:cf:be:
                    58:e5:2e:b2:9f:2a:aa:94:16:08:6e:66:ca:c2:04:
                    2f:f5:ed:26:5a:71:fa:26:9d:74:fd:ec:10:12:14:
                    ca:27:07:f9:25:d9:76:2c:a6:af:c8:24:8e:2c:e1:
                    bf:cc:64:5d:d4:27:23:9b:00:e7:83:c5:53:d4:59:
                    99:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0E:EA:31:8C:8A:61:CA:D9:56:28:C0:2E:46:AB:5F:4F:39:12:CA
            X509v3 Authority Key Identifier:
                keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e5:c4:b8:64:22:33:fc:77:52:d0:08:0a:44:e3:5b:42:96:
         50:e5:f7:d5:b6:d7:6b:00:6d:99:e2:b0:00:96:62:ca:22:4c:
         0e:a2:ee:c1:09:a3:9e:28:c0:81:18:fb:49:ac:63:84:2b:2f:
         bb:38:8e:31:b4:08:f7:e1:86:93:97:90:0a:67:f9:57:19:fd:
         50:d1:d6:81:2f:e1:39:8f:cc:53:64:b2:2c:af:62:3d:8d:e3:
         1f:37:ff:9a:8d:51:8d:a0:4b:c3:91:13:52:9b:61:e6:57:9b:
         5a:00:fc:3b:ff:a8:03:1d:ca:d1:e7:46:7e:68:af:0e:9e:2b:
         19:0a:68:e8:81:87:e2:33:91:b3:f8:30:b9:42:84:67:73:69:
         7c:a4:13:39:6e:98:a8:e1:eb:8e:f6:f2:41:be:51:f5:05:3f:
         0e:37:11:b0:8f:1e:85:36:40:c6:ed:3d:4e:e8:f1:1e:73:60:
         87:2e:4b:04:6e:5c:f5:f7:5e:21:12:49:cb:63:bb:92:d0:8b:
         1e:7d:a1:85:c5:c5:1d:1b:5f:0f:34:31:e0:ab:09:f8:27:50:
         48:bc:ff:db:b1:1f:f9:d9:1f:f4:d7:28:d1:5a:41:7f:8c:ee:
         5a:1c:32:4a:d7:5f:20:1c:29:90:a6:29:ec:8d:73:80:c4:7e:
         a6:c7:bc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:34 2026 by rpki-client