Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File:                     5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier:          I6/kKVKpdPYfqopDL6ks61xqcQzicxrNTIM43AiuZ3M=
Subject key identifier:   BE:D1:97:9F:B8:AB:4E:2B:3E:AB:53:6C:91:B9:8C:92:98:89:33:1C
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer:       /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial:       019E1EA309437B9E9131207A0122FA1A783B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number:          0992
Signing time:             Wed 13 May 2026 00:01:01 +0000
Manifest this update:     Wed 13 May 2026 00:01:01 +0000
Manifest next update:     Thu 14 May 2026 00:01:01 +0000
Files and hashes:         1: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: 0SV0R9D0Ugou/FZ++J0WS8rpEXmKRn60GxTxZKkiBqM=)
                          2: eTB20vbuw0ColRTbhpUzLeqy0n0.roa (hash: KC01L3zZWRaOvr8WRrIfqvZndCj/RMYJlTwl8jE/MI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:09:43:7b:9e:91:31:20:7a:01:22:fa:1a:78:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
        Validity
            Not Before: May 13 00:01:01 2026 GMT
            Not After : May 14 00:01:01 2026 GMT
        Subject: CN=bed1979fb8ab4e2b3eab536c91b98c929889331c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:de:cc:5a:b6:13:86:5d:da:03:78:90:9c:
                    f0:15:46:f6:f0:09:03:bd:3f:55:e6:ec:52:1e:ba:
                    fd:b7:0e:e1:04:67:61:b7:5a:dc:0e:ce:84:df:62:
                    b0:a8:a5:c8:da:47:9e:ca:23:50:0b:1d:13:f6:30:
                    2d:54:6d:d2:c9:67:b9:05:92:90:7c:01:00:90:74:
                    8a:60:6e:d3:7b:0b:48:0c:eb:6d:b0:ac:36:9d:da:
                    d7:b4:de:69:7e:25:ba:e4:d7:ae:10:f1:85:48:a0:
                    c7:34:8d:38:ea:02:4b:d3:e4:d0:27:67:10:90:fe:
                    e9:b0:a9:fe:c3:e4:f1:0d:f3:81:bf:78:6a:b4:af:
                    b6:e1:ec:f6:ea:6c:51:d4:c8:89:a3:57:42:2c:74:
                    c1:16:dd:55:1c:89:cb:ff:87:ed:23:20:d3:36:00:
                    1c:1a:36:1b:7a:e0:f5:3d:4a:7e:e3:f2:70:ab:17:
                    b7:b6:3f:69:b5:51:e1:74:d4:01:33:1d:03:5c:1a:
                    eb:e5:b3:9d:66:ed:fc:df:9a:16:bc:17:79:58:4f:
                    7b:a9:2a:b7:d0:03:fa:ac:39:5f:95:e3:04:52:35:
                    08:bb:cd:10:d8:f7:cf:79:7c:2b:a0:9b:76:c9:d3:
                    ca:9b:b8:75:91:ba:91:cc:fe:93:2b:42:fe:23:a6:
                    b9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D1:97:9F:B8:AB:4E:2B:3E:AB:53:6C:91:B9:8C:92:98:89:33:1C
            X509v3 Authority Key Identifier:
                keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4a:70:6f:ca:d4:93:40:f9:ed:e7:6c:a5:94:a6:4d:2b:e7:
         e7:bf:2a:d3:c8:7e:d2:c4:55:1e:66:4d:e6:c9:b5:17:63:32:
         ad:9a:37:81:2f:4e:84:a3:0e:db:47:9c:1c:df:e1:dd:f7:5d:
         71:68:47:b9:82:c6:58:c5:f0:7d:54:39:73:ee:95:59:12:f1:
         55:9a:2f:bb:6a:3f:39:8d:43:35:fe:d0:b9:4f:ba:f0:1a:03:
         cc:2f:d1:e8:d8:bc:1e:00:78:e9:88:02:8e:9f:55:4e:75:4b:
         ed:85:15:e5:30:a5:19:26:40:a6:f4:80:ab:ee:7b:16:94:42:
         63:56:3b:12:f6:57:0e:81:b8:73:ca:22:65:cb:4c:ca:01:bb:
         2e:e4:09:fd:ec:0d:2f:70:54:e9:28:d5:7b:35:6b:42:6c:6c:
         8b:31:e1:61:c1:d6:fc:ba:72:37:a6:9c:bc:fd:72:37:66:39:
         15:77:2f:6a:22:44:0d:8a:c1:aa:b8:05:fc:29:20:5e:58:4c:
         ab:02:ca:81:0a:04:51:a7:5e:dd:ac:1e:d6:03:ec:a3:cd:48:
         fd:dc:1b:cc:f4:c5:ca:32:83:33:c4:ba:47:b5:f5:17:2d:37:
         ea:97:3f:61:ce:90:7f:2d:a1:2b:26:9f:f5:b4:3a:58:5b:e5:
         3a:f0:83:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eowlDe56RMSB6ASL6Gng7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZjUxNzQxZGYxMzZmOTM4OTI1NGVmZGU0YmE5YWRjZmIw
ZGU2YmYwHhcNMjYwNTEzMDAwMTAxWhcNMjYwNTE0MDAwMTAxWjAzMTEwLwYDVQQD
EyhiZWQxOTc5ZmI4YWI0ZTJiM2VhYjUzNmM5MWI5OGM5Mjk4ODkzMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEnezFq2E4Zd2gN4kJzwFUb28AkD
vT9V5uxSHrr9tw7hBGdht1rcDs6E32KwqKXI2keeyiNQCx0T9jAtVG3SyWe5BZKQ
fAEAkHSKYG7TewtIDOttsKw2ndrXtN5pfiW65NeuEPGFSKDHNI046gJL0+TQJ2cQ
kP7psKn+w+TxDfOBv3hqtK+24ez26mxR1MiJo1dCLHTBFt1VHInL/4ftIyDTNgAc
GjYbeuD1PUp+4/Jwqxe3tj9ptVHhdNQBMx0DXBrr5bOdZu3835oWvBd5WE97qSq3
0AP6rDlfleMEUjUIu80Q2PfPeXwroJt2ydPKm7h1kbqRzP6TK0L+I6a5eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7Rl5+4q04rPqtTbJG5jJKYiTMcMB8GA1UdIwQY
MBaAFOT1F0HfE2+TiSVO/eS6mtz7Dea/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2Mt
NDFkNzM1YmQ4YzAzLzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hZjFiOTMtZDZlMy00NTNkLTkxY2MtNDFkNzM1YmQ4YzAz
LzEvNVBVWFFkOFRiNU9KSlU3OTVMcWEzUHNONXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0pwb8rU
k0D57edspZSmTSvn578q08h+0sRVHmZN5sm1F2MyrZo3gS9OhKMO20ecHN/h3fdd
cWhHuYLGWMXwfVQ5c+6VWRLxVZovu2o/OY1DNf7QuU+68BoDzC/R6Ni8HgB46YgC
jp9VTnVL7YUV5TClGSZApvSAq+57FpRCY1Y7EvZXDoG4c8oiZctMygG7LuQJ/ewN
L3BU6SjVezVrQmxsizHhYcHW/LpyN6acvP1yN2Y5FXcvaiJEDYrBqrgF/CkgXlhM
qwLKgQoEUade3awe1gPso81I/dwbzPTFyjKDM8S6R7X1Fy036pc/Yc6Qfy2hKyaf
9bQ6WFvlOvCDFQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:13:10 2026 by rpki-client