Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File:                     JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier:          uynDD9Q2cQzqE0tgDSepQTMbYLNsR547KEdYnbQ+Wck=
Subject key identifier:   E5:A6:69:4E:28:14:23:2B:B4:31:17:92:1F:43:8F:ED:58:5C:57:AC
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer:       /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial:       019E2024538AEDC62649047F904B01080826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number:          11FE
Signing time:             Wed 13 May 2026 07:01:51 +0000
Manifest this update:     Wed 13 May 2026 07:01:51 +0000
Manifest next update:     Thu 14 May 2026 07:01:51 +0000
Files and hashes:         1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: /7E7GHvGkgN95X4uZ1oTVP934t3H4WDMxYmrXOwfiqo=)
                          2: OHHaGHrJUG4Z7QEZTM3vHVpbnVE.roa (hash: nJnrlEE8x/srGp0O1q5atoaBywa0T1yFutOMsJNy5B0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:53:8a:ed:c6:26:49:04:7f:90:4b:01:08:08:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
        Validity
            Not Before: May 13 07:01:51 2026 GMT
            Not After : May 14 07:01:51 2026 GMT
        Subject: CN=e5a6694e2814232bb43117921f438fed585c57ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:99:8c:b5:84:04:cc:9b:38:86:e3:ed:2c:50:
                    00:1a:dc:e4:a9:1c:1a:1f:68:52:b6:67:a7:83:d7:
                    aa:83:e5:ea:5d:b2:3f:4c:0f:ca:86:8b:fd:d7:46:
                    73:7d:c1:16:7f:4e:61:4e:c1:48:8e:32:a0:46:b0:
                    7f:5e:da:ca:33:2a:12:45:95:37:19:72:67:ee:f4:
                    58:6d:d1:ad:dd:dc:b7:b5:8a:ad:50:c9:bd:e8:0c:
                    cd:54:e1:d4:20:10:e1:a8:63:51:ee:c8:3f:19:88:
                    20:c5:46:77:fc:d7:b0:27:7f:25:f3:7c:5d:91:74:
                    3c:b6:10:f8:64:ba:0a:7b:d6:01:a7:05:f9:54:0d:
                    3d:45:04:e3:91:48:54:4b:a5:33:54:d5:82:04:1c:
                    44:cb:09:6a:f5:7d:17:97:73:c3:3e:22:35:18:61:
                    f5:4d:e3:04:9b:b6:fa:a4:d7:b7:15:4d:6d:82:5f:
                    22:51:f6:57:68:ab:09:d9:10:34:1f:67:9f:74:d3:
                    f9:fa:69:ec:2e:15:2f:cf:66:50:9a:d7:17:f5:1b:
                    30:bc:43:22:7a:10:9a:98:fa:4b:08:e8:a8:1e:d0:
                    a3:5f:63:42:43:29:a1:9a:f8:1e:8e:4e:ad:91:3a:
                    93:36:73:f2:13:5a:f6:0b:db:cd:4c:f2:bd:3c:8e:
                    58:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A6:69:4E:28:14:23:2B:B4:31:17:92:1F:43:8F:ED:58:5C:57:AC
            X509v3 Authority Key Identifier:
                keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:fa:1d:db:db:0f:ce:1a:0b:06:41:a4:95:0c:4b:ea:2a:11:
         23:10:06:13:7c:03:25:48:a9:b3:c0:8e:4c:49:5e:7f:57:a1:
         fc:0c:40:44:f8:d8:77:84:ab:69:61:25:75:05:64:12:27:11:
         1a:da:f6:17:4d:5a:82:ac:49:c2:bb:9d:c8:4e:c5:ac:0e:60:
         bf:d6:ae:fa:96:f4:c6:53:c7:25:42:af:d5:c9:5a:93:a2:5f:
         75:34:4a:da:09:98:4f:50:0e:0e:33:a1:1e:aa:3e:5f:c0:06:
         33:45:02:80:88:af:f8:a3:bf:d6:68:ea:8a:85:50:46:e5:e9:
         f9:9c:70:a8:7e:d2:e8:7c:34:36:47:eb:ec:f6:8b:cd:ba:4b:
         74:ef:b0:b9:db:db:66:15:cd:49:b1:f7:da:10:34:04:29:b6:
         61:da:16:25:1b:62:f3:b2:ed:b7:08:a6:81:a9:b2:3b:af:8f:
         a5:39:c6:33:db:55:52:45:09:a7:35:22:35:cd:53:1d:6c:35:
         3a:62:11:57:82:c8:86:ab:f1:1c:2d:01:5f:8e:9d:cc:51:30:
         39:e4:af:ec:44:9c:b4:1e:2f:7a:bd:5e:a1:af:d0:e0:1d:f4:
         d7:c0:82:bc:42:29:67:39:b6:72:1f:08:87:ce:7a:76:6f:52:
         7e:2c:42:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJFOK7cYmSQR/kEsBCAgmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NTg3M2FlMjM1MGQwZTNlOGMzNTUzYmY5MDY0NjExMjc2
NGUxYzAwHhcNMjYwNTEzMDcwMTUxWhcNMjYwNTE0MDcwMTUxWjAzMTEwLwYDVQQD
EyhlNWE2Njk0ZTI4MTQyMzJiYjQzMTE3OTIxZjQzOGZlZDU4NWM1N2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pmMtYQEzJs4huPtLFAAGtzkqRwa
H2hStmeng9eqg+XqXbI/TA/Khov910ZzfcEWf05hTsFIjjKgRrB/XtrKMyoSRZU3
GXJn7vRYbdGt3dy3tYqtUMm96AzNVOHUIBDhqGNR7sg/GYggxUZ3/NewJ38l83xd
kXQ8thD4ZLoKe9YBpwX5VA09RQTjkUhUS6UzVNWCBBxEywlq9X0Xl3PDPiI1GGH1
TeMEm7b6pNe3FU1tgl8iUfZXaKsJ2RA0H2efdNP5+mnsLhUvz2ZQmtcX9RswvEMi
ehCamPpLCOioHtCjX2NCQymhmvgejk6tkTqTNnPyE1r2C9vNTPK9PI5YeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWmaU4oFCMrtDEXkh9Dj+1YXFesMB8GA1UdIwQY
MBaAFCZYc64jUNDj6MNVO/kGRhEnZOHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUt
ZmNkNGY3OTdkMzU2LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUtZmNkNGY3OTdkMzU2
LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfod29sP
zhoLBkGklQxL6ioRIxAGE3wDJUips8COTElef1eh/AxARPjYd4SraWEldQVkEicR
Gtr2F01agqxJwrudyE7FrA5gv9au+pb0xlPHJUKv1clak6JfdTRK2gmYT1AODjOh
Hqo+X8AGM0UCgIiv+KO/1mjqioVQRuXp+ZxwqH7S6Hw0Nkfr7PaLzbpLdO+wudvb
ZhXNSbH32hA0BCm2YdoWJRti87LttwimgamyO6+PpTnGM9tVUkUJpzUiNc1THWw1
OmIRV4LIhqvxHC0BX46dzFEwOeSv7ESctB4ver1eoa/Q4B3018CCvEIpZzm2ch8I
h856dm9SfixCQA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:11:11 2026 by rpki-client