Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File:                     AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier:          Ru6P1q3QXx+M5S5xwl/mOP0U58Ej5wD5pOnkZ8lCXwQ=
Subject key identifier:   A3:27:1E:96:5C:26:1D:4A:32:7E:52:C0:D5:CB:84:42:43:43:DF:6B
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer:       /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial:       019E1EDA100CB00811B929E047CBE648E759
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number:          10E6
Signing time:             Wed 13 May 2026 01:01:07 +0000
Manifest this update:     Wed 13 May 2026 01:01:07 +0000
Manifest next update:     Thu 14 May 2026 01:01:07 +0000
Files and hashes:         1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: ZAM7rTmYFowytS3CQrX8Aiz/EJEkIs7C8h+4GKaURYw=)
                          2: Bi1XXzWo6lnTEVYADTXqjFg4Phs.roa (hash: CcN3AAar9jL+JjbAjisL+jzrcTOAzrlyvwRjw6mb2gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:10:0c:b0:08:11:b9:29:e0:47:cb:e6:48:e7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=017c90654653ac150028562b32431491b52147d1
        Validity
            Not Before: May 13 01:01:07 2026 GMT
            Not After : May 14 01:01:07 2026 GMT
        Subject: CN=a3271e965c261d4a327e52c0d5cb84424343df6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:aa:3f:72:df:4c:c2:d0:8d:35:2b:83:8b:
                    dd:c5:80:8f:e4:ab:39:a3:07:06:67:8b:15:e2:1a:
                    91:a7:db:d2:f9:da:67:77:0c:ae:d5:bc:ab:85:b8:
                    f4:27:e2:73:b7:b9:ec:51:60:68:ac:9b:67:d2:58:
                    23:1c:b6:79:c9:f4:2e:77:f3:19:4c:d2:7c:63:b2:
                    0a:2f:ed:88:5a:97:6c:73:b9:6d:c4:43:8d:21:db:
                    fc:e9:51:b4:6f:b3:57:de:37:9e:59:dc:10:9b:63:
                    66:fd:94:48:e8:7e:66:ad:8f:09:84:73:5c:50:5d:
                    8d:a7:e0:70:48:e8:66:a6:53:02:9c:4c:16:38:18:
                    91:11:81:35:ca:75:0f:38:b2:38:27:87:94:89:e2:
                    65:8c:1f:fd:9d:02:48:bf:5f:62:88:81:88:41:c8:
                    33:2d:4c:69:b6:9e:4e:a2:87:3a:81:90:07:02:c0:
                    46:8a:31:58:be:2f:c4:ed:ec:ec:b8:0c:2b:73:7e:
                    67:4a:9f:54:0c:00:f4:f8:0a:4e:8f:f5:c1:d6:28:
                    49:5e:1a:45:33:18:42:15:6d:93:f8:2d:5c:e8:ab:
                    be:c2:f5:9c:44:30:6f:a8:87:30:c6:29:bd:50:97:
                    93:d4:79:75:f7:9e:1d:cb:ab:77:47:38:ef:50:49:
                    fa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:27:1E:96:5C:26:1D:4A:32:7E:52:C0:D5:CB:84:42:43:43:DF:6B
            X509v3 Authority Key Identifier:
                keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:57:85:7a:97:89:35:d3:ec:29:c3:30:0f:40:3c:9c:fe:de:
         69:69:aa:8c:0d:e6:50:f4:53:cd:75:b1:38:33:6c:43:e1:03:
         5b:c7:87:86:ce:56:b0:6a:0a:70:06:d4:10:14:ed:5d:ec:2e:
         2e:8d:71:70:18:57:19:eb:ca:01:98:51:cd:8f:22:3d:1e:ab:
         da:6f:7d:01:2b:05:a2:02:54:28:b3:d7:8b:f7:a1:f1:ef:0d:
         64:43:bd:0e:2a:94:af:90:c3:f5:42:80:bd:f0:e8:41:39:6a:
         ce:99:bc:3a:6c:dc:6e:b7:99:65:c7:45:f4:3d:ac:7e:91:21:
         e3:18:39:09:59:36:a1:89:b1:82:09:3d:29:47:12:5c:d4:90:
         0b:9e:7d:d4:e9:98:1d:ef:26:89:26:38:75:31:bc:52:71:11:
         4d:49:3c:7f:59:40:aa:5f:8b:c4:a3:17:a5:9c:e8:77:bf:ca:
         5d:50:af:be:f3:aa:4c:c6:b3:67:20:5e:bb:fc:3f:f6:aa:45:
         22:89:ed:61:4d:94:3c:c3:37:07:a6:3b:2e:54:09:bd:69:59:
         ee:0d:a9:c1:32:17:25:2d:8a:58:ce:d7:82:1c:b9:e9:6c:44:
         12:19:46:79:28:e5:10:34:da:18:db:c8:fc:8a:29:fa:ac:cb:
         46:50:f7:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2hAMsAgRuSngR8vmSOdZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxN2M5MDY1NDY1M2FjMTUwMDI4NTYyYjMyNDMxNDkxYjUy
MTQ3ZDEwHhcNMjYwNTEzMDEwMTA3WhcNMjYwNTE0MDEwMTA3WjAzMTEwLwYDVQQD
EyhhMzI3MWU5NjVjMjYxZDRhMzI3ZTUyYzBkNWNiODQ0MjQzNDNkZjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7OqP3LfTMLQjTUrg4vdxYCP5Ks5
owcGZ4sV4hqRp9vS+dpndwyu1byrhbj0J+Jzt7nsUWBorJtn0lgjHLZ5yfQud/MZ
TNJ8Y7IKL+2IWpdsc7ltxEONIdv86VG0b7NX3jeeWdwQm2Nm/ZRI6H5mrY8JhHNc
UF2Np+BwSOhmplMCnEwWOBiREYE1ynUPOLI4J4eUieJljB/9nQJIv19iiIGIQcgz
LUxptp5Oooc6gZAHAsBGijFYvi/E7ezsuAwrc35nSp9UDAD0+ApOj/XB1ihJXhpF
MxhCFW2T+C1c6Ku+wvWcRDBvqIcwxim9UJeT1Hl1954dy6t3RzjvUEn6HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMnHpZcJh1KMn5SwNXLhEJDQ99rMB8GA1UdIwQY
MBaAFAF8kGVGU6wVAChWKzJDFJG1IUfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVh5UVpVWlRyQlVBS0ZZck1rTVVrYlVoUjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zNWI3ZTUtODg2NC00NzU5LWJiODYt
NzAxM2E2YzQzOTg1LzEvQVh5UVpVWlRyQlVBS0ZZck1rTVVrYlVoUjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8zNWI3ZTUtODg2NC00NzU5LWJiODYtNzAxM2E2YzQzOTg1
LzEvQVh5UVpVWlRyQlVBS0ZZck1rTVVrYlVoUjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASleFepeJ
NdPsKcMwD0A8nP7eaWmqjA3mUPRTzXWxODNsQ+EDW8eHhs5WsGoKcAbUEBTtXewu
Lo1xcBhXGevKAZhRzY8iPR6r2m99ASsFogJUKLPXi/eh8e8NZEO9DiqUr5DD9UKA
vfDoQTlqzpm8OmzcbreZZcdF9D2sfpEh4xg5CVk2oYmxggk9KUcSXNSQC5591OmY
He8miSY4dTG8UnERTUk8f1lAql+LxKMXpZzod7/KXVCvvvOqTMazZyBeu/w/9qpF
IontYU2UPMM3B6Y7LlQJvWlZ7g2pwTIXJS2KWM7Xghy56WxEEhlGeSjlEDTaGNvI
/Iop+qzLRlD3NA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:22:10 2026 by rpki-client