Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
File:                     sWOSIkDRQLZn9joYNNHaNBAI57E.mft (raw, json)
Hash identifier:          qJCvYn87Sk1CQc7R6rRMLBQAeogJXY2MGrghSJH8OC4=
Subject key identifier:   A5:2C:AC:FB:9F:25:B2:B8:59:1B:AA:03:58:51:3D:9B:65:0B:A0:B4
Authority key identifier: B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
Certificate issuer:       /CN=b163922240d140b667f63a1834d1da341008e7b1
Certificate serial:       019E1C7DCA0212BBA1B8E8913BE6C3087D20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
Manifest number:          92
Signing time:             Tue 12 May 2026 14:01:06 +0000
Manifest this update:     Tue 12 May 2026 14:01:06 +0000
Manifest next update:     Wed 13 May 2026 14:01:06 +0000
Files and hashes:         1: sWOSIkDRQLZn9joYNNHaNBAI57E.crl (hash: H4O9aS+WrWZG1dL1Fh5cwljaIMIP76T1wOmsPVL/pxY=)
                          2: uZTIBpW66ELOgsfpMVny5BNAdjo.asa (hash: RpRnt1dSYCHaXvYLR/eb+aECZD1rw5iDnpi3qizA+5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:ca:02:12:bb:a1:b8:e8:91:3b:e6:c3:08:7d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b163922240d140b667f63a1834d1da341008e7b1
        Validity
            Not Before: May 12 14:01:06 2026 GMT
            Not After : May 13 14:01:06 2026 GMT
        Subject: CN=a52cacfb9f25b2b8591baa0358513d9b650ba0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0b:82:f2:67:31:44:c9:70:74:a3:2d:72:5c:
                    29:1c:0b:1b:48:22:68:ba:18:4b:f8:7d:d0:bb:9b:
                    2d:62:22:df:31:cd:5f:ac:1b:8f:64:2e:3a:83:7b:
                    57:d9:12:db:3d:92:96:01:6b:60:7d:4e:11:de:e0:
                    73:e9:49:7e:9f:31:30:56:62:8c:87:6d:74:78:99:
                    f0:21:cf:27:9a:33:75:c1:60:9b:2a:5e:79:3c:f5:
                    25:67:fa:c8:c5:17:f4:ad:87:67:c0:72:fc:ed:f1:
                    02:32:dc:b7:51:7d:e1:bd:61:e7:ce:61:5a:ab:fa:
                    d0:2a:0a:d3:5a:12:a9:20:6e:25:fc:d9:30:ec:92:
                    0d:a6:c4:42:e1:ae:79:22:bb:c8:d3:ae:42:dc:06:
                    84:75:33:90:38:79:04:93:8a:39:64:e7:88:2e:de:
                    f8:e9:9b:7c:7b:40:4e:f1:b0:d4:98:72:4f:45:ce:
                    b6:47:4b:f6:53:2a:9a:f2:1c:d9:cc:c1:c9:2a:a7:
                    a4:0f:b7:1b:1d:ac:e8:77:d0:cc:37:bf:0c:36:6b:
                    9c:69:24:a7:b0:36:6a:5a:29:fe:13:f5:92:b3:f3:
                    07:a0:56:25:fa:98:cf:37:ef:2d:3a:4e:9d:b2:08:
                    0b:40:89:1a:f2:4f:4b:30:7b:31:0b:93:9e:12:81:
                    1f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2C:AC:FB:9F:25:B2:B8:59:1B:AA:03:58:51:3D:9B:65:0B:A0:B4
            X509v3 Authority Key Identifier:
                keyid:B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3e:ca:6a:30:77:d6:be:1a:df:da:63:69:83:c6:c1:83:0b:
         be:21:3b:68:fa:6b:e6:c4:3b:b6:19:18:2a:ca:f3:1b:d4:c0:
         55:ea:82:a7:8b:99:b8:8f:c5:ea:2a:3e:ac:80:54:82:81:cd:
         3e:5b:1d:bc:6c:7b:d6:e5:d8:30:9b:26:07:93:95:c6:27:92:
         c1:2b:34:24:04:8f:67:2a:15:c3:b7:65:6d:af:ee:16:b4:48:
         f3:20:52:2d:1b:4f:8a:4c:e4:9b:67:75:f6:2d:30:c5:eb:6d:
         98:d1:e2:9f:14:ae:fe:b0:96:8b:5b:c0:c2:ed:e7:68:0f:e6:
         9b:fe:f4:d6:80:7f:5b:15:31:e8:95:5f:28:c8:d1:01:1b:47:
         8f:30:17:31:ed:e7:3c:9a:fc:9d:64:d0:cb:ec:33:aa:e4:60:
         24:9c:c1:17:a7:e5:fc:f2:8c:c3:9a:c7:83:b7:08:1f:cc:33:
         ad:b9:9b:99:35:81:d9:ce:c5:6e:52:66:4c:cc:8d:17:55:c5:
         e4:14:45:74:6b:92:82:8d:27:92:99:44:5c:a8:9f:55:7f:4a:
         ef:5c:e2:38:2c:33:58:5e:65:10:80:aa:e6:c4:a6:bd:3d:a5:
         9c:d2:31:8f:8f:f8:83:08:98:39:92:73:2d:da:57:d6:c0:74:
         98:e7:5b:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfcoCEruhuOiRO+bDCH0gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNjM5MjIyNDBkMTQwYjY2N2Y2M2ExODM0ZDFkYTM0MTAw
OGU3YjEwHhcNMjYwNTEyMTQwMTA2WhcNMjYwNTEzMTQwMTA2WjAzMTEwLwYDVQQD
EyhhNTJjYWNmYjlmMjViMmI4NTkxYmFhMDM1ODUxM2Q5YjY1MGJhMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAuC8mcxRMlwdKMtclwpHAsbSCJo
uhhL+H3Qu5stYiLfMc1frBuPZC46g3tX2RLbPZKWAWtgfU4R3uBz6Ul+nzEwVmKM
h210eJnwIc8nmjN1wWCbKl55PPUlZ/rIxRf0rYdnwHL87fECMty3UX3hvWHnzmFa
q/rQKgrTWhKpIG4l/Nkw7JINpsRC4a55IrvI065C3AaEdTOQOHkEk4o5ZOeILt74
6Zt8e0BO8bDUmHJPRc62R0v2Uyqa8hzZzMHJKqekD7cbHazod9DMN78MNmucaSSn
sDZqWin+E/WSs/MHoFYl+pjPN+8tOk6dsggLQIka8k9LMHsxC5OeEoEfdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUsrPufJbK4WRuqA1hRPZtlC6C0MB8GA1UdIwQY
MBaAFLFjkiJA0UC2Z/Y6GDTR2jQQCOexMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1dPU0lrRFJRTFpuOWpvWU5OSGFOQkFJNTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wYzgwNTItYmUwOC00MzMzLWEwZjkt
Nzc2NjgwMDliN2Q1LzEvc1dPU0lrRFJRTFpuOWpvWU5OSGFOQkFJNTdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wYzgwNTItYmUwOC00MzMzLWEwZjktNzc2NjgwMDliN2Q1
LzEvc1dPU0lrRFJRTFpuOWpvWU5OSGFOQkFJNTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMD7KajB3
1r4a39pjaYPGwYMLviE7aPpr5sQ7thkYKsrzG9TAVeqCp4uZuI/F6io+rIBUgoHN
PlsdvGx71uXYMJsmB5OVxieSwSs0JASPZyoVw7dlba/uFrRI8yBSLRtPikzkm2d1
9i0wxettmNHinxSu/rCWi1vAwu3naA/mm/701oB/WxUx6JVfKMjRARtHjzAXMe3n
PJr8nWTQy+wzquRgJJzBF6fl/PKMw5rHg7cIH8wzrbmbmTWB2c7FblJmTMyNF1XF
5BRFdGuSgo0nkplEXKifVX9K71ziOCwzWF5lEICq5sSmvT2lnNIxj4/4gwiYOZJz
LdpX1sB0mOdbrA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:25:36 2026 by rpki-client