Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
File:                     m1hBsHzPY5l5mzWGobIohZI9-L8.mft (raw, json)
Hash identifier:          7fo0c5+Zyul6v7NeeMqnbeTDliEuEVCzTGjPs8nWMF4=
Subject key identifier:   57:73:F2:9D:03:30:BD:58:8E:BA:AC:99:93:EA:7E:F0:B2:83:F4:F5
Authority key identifier: 9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
Certificate issuer:       /CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Certificate serial:       019E20FFD4985CDF6A5C3D98AD38819BF71A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
Manifest number:          1584
Signing time:             Wed 13 May 2026 11:01:37 +0000
Manifest this update:     Wed 13 May 2026 11:01:37 +0000
Manifest next update:     Thu 14 May 2026 11:01:37 +0000
Files and hashes:         1: IFQ-id79kHlDKPQ9PpUhMxfR5F8.roa (hash: 8hN9YwJ+324f32TBhUPA/FbIWI7pWULirPqO3HhSjN8=)
                          2: m1hBsHzPY5l5mzWGobIohZI9-L8.crl (hash: diZ/Zax+lqh7Gdw7cTUIJWQ4vJYk+HsDAOmuwxFVc3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 11:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:d4:98:5c:df:6a:5c:3d:98:ad:38:81:9b:f7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5841b07ccf6399799b3586a1b22885923df8bf
        Validity
            Not Before: May 13 11:01:37 2026 GMT
            Not After : May 14 11:01:37 2026 GMT
        Subject: CN=5773f29d0330bd588ebaac9993ea7ef0b283f4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:71:00:38:3c:40:64:bd:5c:6d:ef:5e:2e:
                    a3:52:cd:d5:32:9c:fb:de:31:50:60:3b:20:13:31:
                    e3:e4:a7:17:25:4b:c7:5c:ee:59:3c:76:58:49:86:
                    c4:77:60:50:8d:2e:14:c2:e9:0e:98:aa:2e:ef:bc:
                    94:69:e4:0c:d9:b9:b3:31:a8:5e:1d:a0:d0:e9:8c:
                    84:07:22:04:98:37:0f:68:58:f0:33:ff:9d:d1:c9:
                    9d:ce:d7:e7:81:34:76:9f:c8:3c:c9:15:49:cc:49:
                    ce:d9:50:31:1e:3d:24:73:9e:03:72:e4:26:95:ba:
                    e1:b8:1f:90:d0:d6:cc:b1:fd:0d:96:fa:01:bf:62:
                    80:99:0f:63:01:16:8e:92:ae:5b:cf:b7:b6:3e:00:
                    f1:67:73:40:21:e9:12:23:37:24:b6:a3:e9:0f:20:
                    f1:0c:ee:18:d4:21:3a:3b:fc:22:1b:1d:0f:f8:2f:
                    d9:aa:11:80:42:63:53:bd:b1:12:d4:a8:e0:03:01:
                    62:64:2c:f0:04:b0:1c:b1:14:c1:c2:85:be:a5:31:
                    cb:35:06:e1:33:ce:96:5c:1e:65:11:88:0b:38:fa:
                    eb:2a:1d:1e:ff:b0:03:f9:e5:c7:1d:5f:d8:41:61:
                    e6:2a:bc:41:6a:9c:1a:7f:36:87:8d:a2:2b:41:c8:
                    6c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:73:F2:9D:03:30:BD:58:8E:BA:AC:99:93:EA:7E:F0:B2:83:F4:F5
            X509v3 Authority Key Identifier:
                keyid:9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:6f:99:c4:b7:b9:0d:d5:ef:d5:1f:9b:6f:48:10:29:b6:b2:
         1c:4b:59:2e:7c:15:ad:89:1c:20:d4:56:5d:5f:8b:16:f8:9b:
         c3:53:fe:71:b0:bc:b1:bc:ea:f8:0b:a3:28:1e:f7:aa:c4:73:
         0e:9c:18:9a:08:d0:b5:d9:bc:7d:e2:83:e3:ea:ec:33:7d:c2:
         4c:ce:c6:29:01:4b:da:dd:5a:c9:f7:1f:61:45:a5:d6:ea:5e:
         a1:4e:94:8a:dc:2a:45:09:e6:ad:2d:97:77:b6:90:22:d0:8e:
         7b:c1:6b:49:57:6b:5f:64:79:14:99:26:41:06:a5:38:7b:48:
         03:df:5a:37:97:00:98:bd:71:b6:68:b5:5f:af:86:e4:62:11:
         7d:8c:7e:cd:08:80:5a:48:98:b4:5a:cc:e2:dc:e2:c4:f7:c8:
         6d:c2:6e:7e:ec:1e:55:94:9c:74:89:11:62:18:86:96:0c:15:
         56:03:77:e3:29:4f:38:c8:17:16:09:41:5a:12:dd:da:10:e6:
         eb:1c:38:c1:13:14:27:fc:d7:ec:51:f2:1e:96:73:73:41:f2:
         63:23:5c:eb:25:a6:16:7c:ca:0a:fc:25:34:47:19:6b:b7:d4:
         02:17:f0:99:e1:3b:9d:3d:49:ad:35:08:97:b6:50:1b:4e:54:
         d3:a8:f1:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/9SYXN9qXD2YrTiBm/caMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTg0MWIwN2NjZjYzOTk3OTliMzU4NmExYjIyODg1OTIz
ZGY4YmYwHhcNMjYwNTEzMTEwMTM3WhcNMjYwNTE0MTEwMTM3WjAzMTEwLwYDVQQD
Eyg1NzczZjI5ZDAzMzBiZDU4OGViYWFjOTk5M2VhN2VmMGIyODNmNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKVxADg8QGS9XG3vXi6jUs3VMpz7
3jFQYDsgEzHj5KcXJUvHXO5ZPHZYSYbEd2BQjS4UwukOmKou77yUaeQM2bmzMahe
HaDQ6YyEByIEmDcPaFjwM/+d0cmdztfngTR2n8g8yRVJzEnO2VAxHj0kc54DcuQm
lbrhuB+Q0NbMsf0NlvoBv2KAmQ9jARaOkq5bz7e2PgDxZ3NAIekSIzcktqPpDyDx
DO4Y1CE6O/wiGx0P+C/ZqhGAQmNTvbES1KjgAwFiZCzwBLAcsRTBwoW+pTHLNQbh
M86WXB5lEYgLOPrrKh0e/7AD+eXHHV/YQWHmKrxBapwafzaHjaIrQchsmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdz8p0DML1YjrqsmZPqfvCyg/T1MB8GA1UdIwQY
MBaAFJtYQbB8z2OZeZs1hqGyKIWSPfi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5Yjgt
NTMzOWYzN2ZmYzc3LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5YjgtNTMzOWYzN2ZmYzc3
LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbW+ZxLe5
DdXv1R+bb0gQKbayHEtZLnwVrYkcINRWXV+LFvibw1P+cbC8sbzq+AujKB73qsRz
DpwYmgjQtdm8feKD4+rsM33CTM7GKQFL2t1ayfcfYUWl1upeoU6UitwqRQnmrS2X
d7aQItCOe8FrSVdrX2R5FJkmQQalOHtIA99aN5cAmL1xtmi1X6+G5GIRfYx+zQiA
WkiYtFrM4tzixPfIbcJufuweVZScdIkRYhiGlgwVVgN34ylPOMgXFglBWhLd2hDm
6xw4wRMUJ/zX7FHyHpZzc0HyYyNc6yWmFnzKCvwlNEcZa7fUAhfwmeE7nT1JrTUI
l7ZQG05U06jx8A==
-----END CERTIFICATE-----
Generated at Wed May 13 17:34:42 2026 by rpki-client