Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File:                     1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier:          FVDT1IPWAiwD4uzRQcTDg9MBwbJ8pMJPhyStvGtafWQ=
Subject key identifier:   D0:1F:F2:6B:45:EF:64:62:E1:2C:07:A6:E7:1C:78:10:55:E7:77:88
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer:       /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial:       019E1DC711CA9F927C6E67D4B56307F5DB45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number:          16EC
Signing time:             Tue 12 May 2026 20:00:45 +0000
Manifest this update:     Tue 12 May 2026 20:00:45 +0000
Manifest next update:     Wed 13 May 2026 20:00:45 +0000
Files and hashes:         1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: qvmLSEP7iuclwTbTIsYgft3D6vySIajX8D/6JCmtNhU=)
                          2: q3vaJOTC8w8YJydcJlzdNu2t6t0.roa (hash: 6HoX9dCuUvOi7bV1+OJY+cnUcJyW0sCh4AS88KCyve8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:11:ca:9f:92:7c:6e:67:d4:b5:63:07:f5:db:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
        Validity
            Not Before: May 12 20:00:45 2026 GMT
            Not After : May 13 20:00:45 2026 GMT
        Subject: CN=d01ff26b45ef6462e12c07a6e71c781055e77788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:c2:7a:0a:d4:da:33:cd:08:07:11:e8:7c:
                    6c:aa:e5:6c:b0:c4:5a:78:d1:d6:8b:35:12:18:08:
                    66:e5:71:dd:b5:4b:11:16:b1:ae:35:5c:66:fe:a4:
                    5b:92:6c:50:88:be:76:8f:d1:bd:ba:8e:30:53:90:
                    d9:d2:c7:a6:9b:60:c4:e4:1a:49:8c:1c:6a:27:e8:
                    d7:f7:d2:fb:b4:72:2d:53:e6:d8:cd:28:43:30:b6:
                    32:40:94:e0:b4:14:23:0e:0e:7b:89:81:80:4e:d0:
                    e8:82:1d:b7:d5:b5:23:02:fe:df:f2:d3:b3:eb:3c:
                    fd:8e:79:0c:4f:19:5a:93:10:9b:93:7c:99:4e:9c:
                    10:9d:2b:3c:7a:68:1f:e4:8c:fa:32:8c:53:e5:6b:
                    e2:99:80:22:33:e0:3f:8b:78:c9:3c:5d:5b:1e:a1:
                    4c:8a:24:09:45:ce:b3:e1:83:fb:7f:2e:8d:01:23:
                    90:76:6b:0c:4a:99:a9:f3:ff:74:fe:31:1c:e9:92:
                    3b:2f:a0:e0:84:c4:a4:c5:85:41:40:5d:f5:d0:79:
                    0a:fa:36:6d:28:1e:02:62:8e:6e:31:da:75:9f:e3:
                    18:46:1e:4d:11:f7:43:6e:08:ba:00:9a:bc:4e:ab:
                    e9:71:0a:3f:95:72:2f:f4:78:f4:fa:c8:52:dc:2f:
                    4d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1F:F2:6B:45:EF:64:62:E1:2C:07:A6:E7:1C:78:10:55:E7:77:88
            X509v3 Authority Key Identifier:
                keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:4f:1c:35:ba:51:64:31:85:fc:c7:88:6b:c1:db:42:2f:95:
         e3:ea:5f:0d:2f:3b:1d:5b:72:77:35:80:99:d9:bb:b5:b8:00:
         c6:ca:2d:0b:3e:9a:d8:fd:71:37:55:11:52:9a:62:09:78:9b:
         bd:aa:cc:e5:7e:23:47:fe:34:63:73:93:3b:af:60:17:8b:9b:
         db:ca:a3:d3:de:6b:4f:f3:a2:d1:23:a8:10:fe:0a:12:3f:bd:
         4f:29:24:27:32:51:88:2c:11:53:f0:62:67:4b:c0:56:d1:a1:
         f6:3f:4e:0d:d0:a8:70:d2:f1:8e:92:0d:0f:8d:5e:93:27:eb:
         5f:ed:a5:c3:f4:d1:3e:e0:01:91:bd:c1:92:eb:60:cc:27:eb:
         39:c1:82:2b:33:63:42:bb:8f:85:3f:64:70:0f:29:4b:67:18:
         50:21:c5:1f:30:5a:a7:4c:2e:2c:f3:62:b6:b1:45:e3:06:cf:
         d8:96:4b:68:36:77:61:13:73:b8:67:22:b7:48:4b:d1:68:e5:
         7a:11:8e:9b:59:30:50:b4:4b:21:56:b2:7c:1b:ab:71:b9:15:
         4e:ed:b8:49:56:03:dc:ac:5e:bd:e0:bd:4a:1f:97:e6:ed:26:
         67:08:1e:29:1d:e9:1b:e2:7f:da:cd:f7:90:4c:d5:4a:f1:ac:
         40:1f:43:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dxxHKn5J8bmfUtWMH9dtFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZWVlMjdmM2MyYzVjOWVjNTc4MGFjZGEyYjZlYjA0MGE2
ZDI1YTEwHhcNMjYwNTEyMjAwMDQ1WhcNMjYwNTEzMjAwMDQ1WjAzMTEwLwYDVQQD
EyhkMDFmZjI2YjQ1ZWY2NDYyZTEyYzA3YTZlNzFjNzgxMDU1ZTc3Nzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3DCegrU2jPNCAcR6HxsquVssMRa
eNHWizUSGAhm5XHdtUsRFrGuNVxm/qRbkmxQiL52j9G9uo4wU5DZ0semm2DE5BpJ
jBxqJ+jX99L7tHItU+bYzShDMLYyQJTgtBQjDg57iYGATtDogh231bUjAv7f8tOz
6zz9jnkMTxlakxCbk3yZTpwQnSs8emgf5Iz6MoxT5WvimYAiM+A/i3jJPF1bHqFM
iiQJRc6z4YP7fy6NASOQdmsMSpmp8/90/jEc6ZI7L6DghMSkxYVBQF310HkK+jZt
KB4CYo5uMdp1n+MYRh5NEfdDbgi6AJq8TqvpcQo/lXIv9Hj0+shS3C9NYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAf8mtF72Ri4SwHpucceBBV53eIMB8GA1UdIwQY
MBaAFNbu4n88LFyexXgKzaK26wQKbSWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMt
N2QzYzMzNTE0OTJjLzEvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMtN2QzYzMzNTE0OTJj
LzEvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfU8cNbpR
ZDGF/MeIa8HbQi+V4+pfDS87HVtydzWAmdm7tbgAxsotCz6a2P1xN1URUppiCXib
varM5X4jR/40Y3OTO69gF4ub28qj095rT/Oi0SOoEP4KEj+9TykkJzJRiCwRU/Bi
Z0vAVtGh9j9ODdCocNLxjpIND41ekyfrX+2lw/TRPuABkb3BkutgzCfrOcGCKzNj
QruPhT9kcA8pS2cYUCHFHzBap0wuLPNitrFF4wbP2JZLaDZ3YRNzuGcit0hL0Wjl
ehGOm1kwULRLIVayfBurcbkVTu24SVYD3KxeveC9Sh+X5u0mZwgeKR3pG+J/2s33
kEzVSvGsQB9D4g==
-----END CERTIFICATE-----
Generated at Wed May 13 07:05:14 2026 by rpki-client