Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File:                     C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier:          I2Qj+hqgzA3LxFa9gvlyoLLwHzdvGZnO7fL4N8Zd76A=
Subject key identifier:   FC:1F:23:A9:08:74:F4:50:97:34:1F:3B:4B:E4:3D:E0:0D:8E:CF:E1
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer:       /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial:       019E1BD8A7E9DE5FF5CD4555B21076D754AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 11:00:43 +0000
Manifest this update:     Tue 12 May 2026 11:00:43 +0000
Manifest next update:     Wed 13 May 2026 11:00:43 +0000
Files and hashes:         1: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: QVlzdivi0O2t5mWwWBSuhWmJ0RcF6QizZR58YkwbXgg=)
                          2: CmZEd0vYTRTietCa6o94aYFKsyA.roa (hash: ms87/QO/xJdnl8jsldWQGZIky2TSGhb/sj+KQCKOeWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:a7:e9:de:5f:f5:cd:45:55:b2:10:76:d7:54:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
        Validity
            Not Before: May 12 11:00:43 2026 GMT
            Not After : May 13 11:00:43 2026 GMT
        Subject: CN=fc1f23a90874f45097341f3b4be43de00d8ecfe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:1c:5b:39:a3:15:56:84:b4:a7:3a:31:81:
                    15:48:bf:83:8e:9f:f3:d0:a0:9d:33:73:b0:db:e5:
                    84:ce:30:d8:38:05:d3:ee:6e:80:b4:fb:7d:7a:59:
                    13:03:df:1b:84:c7:38:82:92:76:82:63:ed:01:0a:
                    bd:a2:ca:0f:78:79:15:8f:ba:a6:5c:10:84:ec:74:
                    76:0c:e1:d6:48:87:19:81:c5:a6:8b:77:d7:45:0e:
                    54:ac:ff:3e:c6:da:b3:82:45:37:4b:4b:17:3e:74:
                    6f:f3:e0:8a:64:01:dc:e8:e5:fa:c7:94:50:a9:c0:
                    78:50:f5:a0:5d:5e:97:f7:46:ef:48:e9:14:df:58:
                    43:9c:d7:56:a7:b1:dc:04:fc:e8:84:6d:ac:e1:a7:
                    f8:26:e1:40:c8:b1:f2:4e:16:d5:80:a8:09:6f:8f:
                    c0:76:65:c5:f2:90:e8:3a:c5:05:38:57:26:4d:95:
                    69:cd:ce:ac:b3:83:6d:38:ee:34:29:6c:a1:b8:5c:
                    0e:22:45:ee:34:b8:1d:18:e8:e3:c5:88:e7:dc:58:
                    54:95:e5:5f:38:aa:8c:99:42:2b:80:c2:27:b1:81:
                    05:4c:a5:3e:8d:78:13:ca:de:67:24:38:f9:2f:ca:
                    5d:d5:78:16:18:6a:68:ed:db:9f:9c:ba:a4:ba:5f:
                    15:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1F:23:A9:08:74:F4:50:97:34:1F:3B:4B:E4:3D:E0:0D:8E:CF:E1
            X509v3 Authority Key Identifier:
                keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:38:d6:24:5f:11:f0:62:ac:c1:b1:f8:f9:d4:85:29:88:cf:
         8b:7e:57:a2:74:2f:73:d6:d7:cf:ad:76:6b:1e:ec:e3:d3:37:
         fe:a2:2c:fe:d5:d7:ff:5d:79:b6:d8:bb:1a:84:a8:27:f3:72:
         87:d0:7e:57:e8:0d:de:42:17:2f:d3:9d:7a:b0:d5:1c:21:52:
         3a:a4:32:0c:6a:9f:6c:61:6a:ff:23:d0:73:38:7b:51:01:fe:
         87:f2:0d:54:47:b3:1c:d0:0a:1d:3a:ec:df:7c:5b:2d:a9:75:
         f2:c2:7f:44:a2:1d:22:10:a0:08:c9:66:a3:5a:0b:f7:85:72:
         04:52:f1:da:a4:e9:fd:39:0e:61:60:2a:c3:e4:e8:80:af:17:
         89:ec:b2:f6:55:66:4c:33:59:8d:55:6a:1d:99:94:d2:e9:39:
         0a:8d:a5:61:0b:c8:d0:98:2b:43:49:d1:24:26:79:b4:09:81:
         07:f6:25:e2:63:38:70:d3:24:f1:eb:65:2d:70:26:fc:d5:18:
         c5:37:56:65:2b:c9:23:00:91:f8:b1:45:f8:20:90:86:9e:dd:
         3b:47:75:34:8c:39:ce:21:ae:a5:31:30:01:16:c4:45:c9:17:
         1c:28:78:80:2b:63:51:ba:c0:5a:e4:da:91:8d:94:91:fa:a8:
         fd:17:71:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2Kfp3l/1zUVVshB211StMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNmVmZGEzZWRjYjJmNzQ1Y2NjYWJiNDVlMjBiNzllNzlh
OWZjOTgwHhcNMjYwNTEyMTEwMDQzWhcNMjYwNTEzMTEwMDQzWjAzMTEwLwYDVQQD
EyhmYzFmMjNhOTA4NzRmNDUwOTczNDFmM2I0YmU0M2RlMDBkOGVjZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+McWzmjFVaEtKc6MYEVSL+Djp/z
0KCdM3Ow2+WEzjDYOAXT7m6AtPt9elkTA98bhMc4gpJ2gmPtAQq9osoPeHkVj7qm
XBCE7HR2DOHWSIcZgcWmi3fXRQ5UrP8+xtqzgkU3S0sXPnRv8+CKZAHc6OX6x5RQ
qcB4UPWgXV6X90bvSOkU31hDnNdWp7HcBPzohG2s4af4JuFAyLHyThbVgKgJb4/A
dmXF8pDoOsUFOFcmTZVpzc6ss4NtOO40KWyhuFwOIkXuNLgdGOjjxYjn3FhUleVf
OKqMmUIrgMInsYEFTKU+jXgTyt5nJDj5L8pd1XgWGGpo7dufnLqkul8VsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwfI6kIdPRQlzQfO0vkPeANjs/hMB8GA1UdIwQY
MBaAFAtu/aPtyy90XMyrtF4gt555qfyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzI3OW8tM0xMM1Jjekt1MFhpQzNubm1wX0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81ODM1YmUtNjllMC00NjliLWJjYmEt
MDBkMTRhMjAzZWIxLzEvQzI3OW8tM0xMM1Jjekt1MFhpQzNubm1wX0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81ODM1YmUtNjllMC00NjliLWJjYmEtMDBkMTRhMjAzZWIx
LzEvQzI3OW8tM0xMM1Jjekt1MFhpQzNubm1wX0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjjWJF8R
8GKswbH4+dSFKYjPi35XonQvc9bXz612ax7s49M3/qIs/tXX/115tti7GoSoJ/Ny
h9B+V+gN3kIXL9OderDVHCFSOqQyDGqfbGFq/yPQczh7UQH+h/INVEezHNAKHTrs
33xbLal18sJ/RKIdIhCgCMlmo1oL94VyBFLx2qTp/TkOYWAqw+TogK8Xieyy9lVm
TDNZjVVqHZmU0uk5Co2lYQvI0JgrQ0nRJCZ5tAmBB/Yl4mM4cNMk8etlLXAm/NUY
xTdWZSvJIwCR+LFF+CCQhp7dO0d1NIw5ziGupTEwARbERckXHCh4gCtjUbrAWuTa
kY2Ukfqo/Rdx1A==
-----END CERTIFICATE-----
Generated at Tue May 12 21:23:30 2026 by rpki-client