Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File:                     9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier:          iGRfB5Z7WP49jYMZM18nRk0JZS6pU9IEYSCThIFQGHo=
Subject key identifier:   0D:0E:5B:B1:23:B6:B6:06:EA:A3:6B:61:B0:13:A1:75:3E:A9:68:56
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer:       /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial:       019E1EDA540875C84B15C3D648DD951979E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number:          0D30
Signing time:             Wed 13 May 2026 01:01:25 +0000
Manifest this update:     Wed 13 May 2026 01:01:25 +0000
Manifest next update:     Thu 14 May 2026 01:01:25 +0000
Files and hashes:         1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: +YwPPM+L+UqE4pMPS5G77cJPiZmKzYVmrh0hk56KuvI=)
                          2: nt5KsVI8vqdpSeFz_087e62oU14.roa (hash: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:54:08:75:c8:4b:15:c3:d6:48:dd:95:19:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
        Validity
            Not Before: May 13 01:01:25 2026 GMT
            Not After : May 14 01:01:25 2026 GMT
        Subject: CN=0d0e5bb123b6b606eaa36b61b013a1753ea96856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:65:1e:06:0f:9e:d8:8e:fe:45:dd:17:b3:
                    1f:d8:1a:0c:d1:9c:cc:92:7a:07:80:f0:f0:73:be:
                    1c:01:7e:45:ca:79:cb:9b:8b:66:53:ad:13:ea:56:
                    c9:b6:fe:ec:79:d3:c0:a1:0e:da:20:7e:86:ed:22:
                    5c:6f:ff:a9:1b:e4:e7:52:a0:14:1f:c5:04:2e:09:
                    3f:61:8a:d3:07:1c:81:84:c5:2f:c7:eb:13:39:a8:
                    b7:b7:c4:10:ab:62:94:8a:f6:27:2b:b9:2b:e3:c6:
                    bf:0b:10:7c:6c:9c:d6:f0:94:08:b9:d3:2d:8b:bd:
                    b4:98:52:f8:7e:4d:08:e0:ed:bd:c8:6c:5a:80:3d:
                    f8:c2:9a:d4:89:8c:8d:8d:81:9a:c3:76:c9:0c:59:
                    62:e9:87:91:47:da:8d:31:6a:11:c1:4e:c2:dc:67:
                    a2:a3:68:27:f0:bd:f7:9c:ca:83:ab:f6:c1:25:ae:
                    84:2d:da:c2:1f:d0:b1:82:75:e1:98:cc:e9:ab:43:
                    84:b6:88:c2:57:a1:e0:85:4b:85:79:99:c4:1d:55:
                    3d:f9:61:dc:30:9c:40:16:3c:c7:1f:f5:a5:11:5b:
                    b7:e3:5e:78:57:30:be:40:84:f9:ab:34:3b:f8:f0:
                    e5:4b:7d:74:07:77:fd:8c:48:76:dd:d2:27:27:5a:
                    29:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0E:5B:B1:23:B6:B6:06:EA:A3:6B:61:B0:13:A1:75:3E:A9:68:56
            X509v3 Authority Key Identifier:
                keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d2:64:55:1e:e7:a8:a2:2a:7a:da:bf:a0:bd:c1:bd:d4:36:
         b3:e3:ee:1a:62:09:2b:c8:e6:64:75:d3:d9:90:bd:31:0d:02:
         47:76:f4:4f:d4:38:aa:ef:93:a8:b9:96:e1:36:4d:fc:af:1a:
         ef:a5:b1:42:27:4d:9e:9b:76:3b:27:5a:bf:59:8e:b9:93:b5:
         27:2a:b6:10:da:ca:b4:a7:e8:91:99:97:a1:6f:9d:6b:69:e5:
         3f:b1:d4:53:c8:f7:22:76:14:06:18:1e:6d:b7:76:9e:ed:ae:
         3e:af:7a:01:8d:ec:ff:14:3c:2f:83:e6:e2:32:21:19:0d:bd:
         7a:91:69:23:f5:78:58:57:4b:0f:70:ca:c4:45:90:20:1c:3f:
         bd:a2:d1:d6:61:29:b1:64:a1:dc:c0:ca:a4:67:50:68:18:a3:
         9b:e4:91:bd:da:86:02:61:00:fd:25:a4:78:18:3b:5e:05:10:
         f2:7c:5e:f0:6e:3c:01:c6:88:1b:55:eb:8a:49:33:47:ba:7f:
         3d:fe:08:43:5e:00:9c:81:46:c5:ea:63:b5:bf:8b:fc:2c:fb:
         6b:71:a1:49:72:1a:07:f1:dd:e0:9f:34:89:ff:33:88:40:de:
         39:29:63:3b:53:d9:80:4d:b8:86:1e:52:03:9c:5f:d6:4c:a7:
         39:0c:bf:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2lQIdchLFcPWSN2VGXngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NDUxYWYxMTEyMGQ4ZmE4OThjYjYyMTJjZWE4Y2E2MWRj
NTliOTIwHhcNMjYwNTEzMDEwMTI1WhcNMjYwNTE0MDEwMTI1WjAzMTEwLwYDVQQD
EygwZDBlNWJiMTIzYjZiNjA2ZWFhMzZiNjFiMDEzYTE3NTNlYTk2ODU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/FlHgYPntiO/kXdF7Mf2BoM0ZzM
knoHgPDwc74cAX5FynnLm4tmU60T6lbJtv7sedPAoQ7aIH6G7SJcb/+pG+TnUqAU
H8UELgk/YYrTBxyBhMUvx+sTOai3t8QQq2KUivYnK7kr48a/CxB8bJzW8JQIudMt
i720mFL4fk0I4O29yGxagD34wprUiYyNjYGaw3bJDFli6YeRR9qNMWoRwU7C3Gei
o2gn8L33nMqDq/bBJa6ELdrCH9CxgnXhmMzpq0OEtojCV6HghUuFeZnEHVU9+WHc
MJxAFjzHH/WlEVu34154VzC+QIT5qzQ7+PDlS310B3f9jEh23dInJ1op+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0OW7EjtrYG6qNrYbAToXU+qWhWMB8GA1UdIwQY
MBaAFPZFGvERINj6iYy2ISzqjKYdxZuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEt
YTg2YTdhZjM2OGRhLzEvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEtYTg2YTdhZjM2OGRh
LzEvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNJkVR7n
qKIqetq/oL3BvdQ2s+PuGmIJK8jmZHXT2ZC9MQ0CR3b0T9Q4qu+TqLmW4TZN/K8a
76WxQidNnpt2Oydav1mOuZO1Jyq2ENrKtKfokZmXoW+da2nlP7HUU8j3InYUBhge
bbd2nu2uPq96AY3s/xQ8L4Pm4jIhGQ29epFpI/V4WFdLD3DKxEWQIBw/vaLR1mEp
sWSh3MDKpGdQaBijm+SRvdqGAmEA/SWkeBg7XgUQ8nxe8G48AcaIG1XrikkzR7p/
Pf4IQ14AnIFGxepjtb+L/Cz7a3GhSXIaB/Hd4J80if8ziEDeOSljO1PZgE24hh5S
A5xf1kynOQy/9w==
-----END CERTIFICATE-----
Generated at Wed May 13 04:07:45 2026 by rpki-client