Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File:                     dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier:          bKvILrBc9t/HhFq1T0r5he/TUWP7qb+21+kecQNr96A=
Subject key identifier:   B0:FF:37:D8:E1:13:11:AF:A4:51:01:9D:60:4F:87:72:15:81:C5:E8
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer:       /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial:       019E1EA387886DA026D80D47A7906C2F3C6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number:          0D54
Signing time:             Wed 13 May 2026 00:01:33 +0000
Manifest this update:     Wed 13 May 2026 00:01:33 +0000
Manifest next update:     Thu 14 May 2026 00:01:33 +0000
Files and hashes:         1: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: PEIgoGJNSTxqV5smikZ2EMMW3/rbakhMZFxkO2g72h8=)
                          2: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (hash: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 00:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:87:88:6d:a0:26:d8:0d:47:a7:90:6c:2f:3c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
        Validity
            Not Before: May 13 00:01:33 2026 GMT
            Not After : May 14 00:01:33 2026 GMT
        Subject: CN=b0ff37d8e11311afa451019d604f87721581c5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:01:4f:60:ac:0f:31:ae:3a:60:d9:32:ad:6f:
                    de:d8:75:af:3d:b0:56:90:36:75:c2:24:00:b4:38:
                    87:ee:e8:5e:e7:fa:c7:c2:74:45:39:6c:2b:86:68:
                    5f:7b:18:bf:f8:12:4d:b1:a3:14:37:f8:c5:ef:3a:
                    c4:95:39:ac:1e:57:fd:12:e2:45:8c:d4:0f:08:04:
                    8c:15:e8:88:5a:72:3f:8a:e5:0a:1b:5e:9d:ba:42:
                    f4:75:14:c1:98:ef:a3:3a:12:d4:56:a1:46:45:4f:
                    9e:91:1a:25:3e:56:30:88:5d:06:81:2c:56:48:27:
                    d1:b0:27:6e:5e:ad:1a:68:3c:90:b2:17:45:be:63:
                    5e:53:38:7c:46:3a:fa:ed:65:96:ca:d9:71:9b:4b:
                    b6:4e:40:1f:c5:27:e6:f0:67:fa:bf:e3:c8:c6:8c:
                    1c:bd:79:65:88:46:83:fc:13:57:07:12:31:54:5f:
                    d7:fe:7b:7c:46:e8:8d:2f:4f:dc:be:70:b5:f3:5b:
                    52:28:2e:35:60:5a:07:b6:61:3e:1e:6a:6f:4c:7a:
                    dd:9d:9d:1c:0e:c7:b9:3e:c6:e3:f1:a5:85:01:f1:
                    9c:ee:01:c1:b4:89:b8:ec:0e:fb:d5:e0:15:03:1c:
                    ec:87:15:fe:ee:39:c9:17:19:b2:45:e4:33:33:d2:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FF:37:D8:E1:13:11:AF:A4:51:01:9D:60:4F:87:72:15:81:C5:E8
            X509v3 Authority Key Identifier:
                keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1c:46:fc:8e:8a:2b:c2:81:91:dc:95:82:cb:5f:3c:dc:75:
         1f:02:1d:07:7f:c0:ac:56:0d:e4:8b:61:b7:38:38:68:d2:a9:
         f3:d3:c9:9b:53:ac:ff:38:8e:c0:4d:09:c6:01:da:30:09:42:
         ef:35:a2:58:9d:c5:c6:54:1d:72:b2:bf:e1:e8:3a:82:19:d2:
         cd:19:9e:98:98:26:bf:c0:1f:b4:fe:e1:cb:63:32:85:ac:37:
         54:d8:dd:f0:bc:36:8f:8d:fb:42:1b:a8:9a:73:44:ea:9e:ff:
         27:83:fd:38:38:c2:6b:a7:2e:9b:a9:08:57:6c:b9:a8:df:f7:
         c9:70:8b:4b:6b:ba:95:48:64:9e:f6:36:94:3e:7f:50:55:f1:
         e9:2a:57:36:e9:db:8c:75:83:dd:1a:cb:a7:ad:25:30:8a:44:
         3c:bc:60:2c:d7:ad:a8:de:4c:c6:ce:f2:d3:8c:13:4e:71:cb:
         5c:70:14:6a:75:2e:a2:72:06:67:4d:e4:ea:6a:9b:14:90:d0:
         1e:8e:c8:f9:6b:c0:ba:af:50:5d:e5:c2:66:6c:23:24:7b:79:
         1e:36:a2:69:6b:12:f1:71:0b:7b:6b:4f:b2:ef:14:92:54:76:
         51:83:75:2d:be:62:ee:90:02:14:22:4c:42:dd:91:fe:e9:8f:
         fa:e9:8c:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo4eIbaAm2A1Hp5BsLzxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGRjYjcyZThjYjQ3OGNmYzRiMjVhZWIxZjAzYjQwNjI2
NjM3NWMwHhcNMjYwNTEzMDAwMTMzWhcNMjYwNTE0MDAwMTMzWjAzMTEwLwYDVQQD
EyhiMGZmMzdkOGUxMTMxMWFmYTQ1MTAxOWQ2MDRmODc3MjE1ODFjNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wFPYKwPMa46YNkyrW/e2HWvPbBW
kDZ1wiQAtDiH7uhe5/rHwnRFOWwrhmhfexi/+BJNsaMUN/jF7zrElTmsHlf9EuJF
jNQPCASMFeiIWnI/iuUKG16dukL0dRTBmO+jOhLUVqFGRU+ekRolPlYwiF0GgSxW
SCfRsCduXq0aaDyQshdFvmNeUzh8Rjr67WWWytlxm0u2TkAfxSfm8Gf6v+PIxowc
vXlliEaD/BNXBxIxVF/X/nt8RuiNL0/cvnC181tSKC41YFoHtmE+HmpvTHrdnZ0c
Dse5Psbj8aWFAfGc7gHBtIm47A771eAVAxzshxX+7jnJFxmyReQzM9IVywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLD/N9jhExGvpFEBnWBPh3IVgcXoMB8GA1UdIwQY
MBaAFHRNy3Loy0eM/EslrrHwO0BiZjdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4Yjct
ZDBkNDc2ZjQxZmQ2LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4YjctZDBkNDc2ZjQxZmQ2
LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBxG/I6K
K8KBkdyVgstfPNx1HwIdB3/ArFYN5Ithtzg4aNKp89PJm1Os/ziOwE0JxgHaMAlC
7zWiWJ3FxlQdcrK/4eg6ghnSzRmemJgmv8AftP7hy2Myhaw3VNjd8Lw2j437Qhuo
mnNE6p7/J4P9ODjCa6cum6kIV2y5qN/3yXCLS2u6lUhknvY2lD5/UFXx6SpXNunb
jHWD3RrLp60lMIpEPLxgLNetqN5Mxs7y04wTTnHLXHAUanUuonIGZ03k6mqbFJDQ
Ho7I+WvAuq9QXeXCZmwjJHt5HjaiaWsS8XELe2tPsu8UklR2UYN1Lb5i7pACFCJM
Qt2R/umP+umMyg==
-----END CERTIFICATE-----
Generated at Wed May 13 10:01:11 2026 by rpki-client