Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File:                     xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier:          ABf8AfPxlPz9r82JHDItzRxQPyXcYYAC6SizlsjqPfY=
Subject key identifier:   96:9F:36:3F:DF:42:03:B7:93:99:D9:37:0C:98:F3:71:AC:EE:80:E2
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer:       /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial:       019E2136A8DC441A93E2622017DBC54077FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number:          1915
Signing time:             Wed 13 May 2026 12:01:30 +0000
Manifest this update:     Wed 13 May 2026 12:01:30 +0000
Manifest next update:     Thu 14 May 2026 12:01:30 +0000
Files and hashes:         1: 7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa (hash: L6u//TWO0oG/8Tdr3Tg8lfsVqZiNaM1y0Ryf8hK01sg=)
                          2: PPXNJhyqSJSHAcVtgk0VztMlglY.roa (hash: ex9cUqmNLS12UIvKYIuoCv8mQvwQVbCS289sS1wTF3M=)
                          3: e6h2n9XnoiZKNpyZDuWS--kogbA.roa (hash: tWYIKN6aFchD9ZG77xZYhxaLu1YeirWOa5ux4eeE0kw=)
                          4: lNE8D9GJWfcd-D9egVK1TMPitC0.roa (hash: 2CmJCZprp/LCt6ibHBoiFVrP1YcZuqexjzFdiTh77oM=)
                          5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: CGkh8+Ql7l1xdnTCYool0L1Kq+EowvShO0Qieb2kawQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 12:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:36:a8:dc:44:1a:93:e2:62:20:17:db:c5:40:77:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
        Validity
            Not Before: May 13 12:01:30 2026 GMT
            Not After : May 14 12:01:30 2026 GMT
        Subject: CN=969f363fdf4203b79399d9370c98f371acee80e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:47:76:7e:a8:5c:58:68:98:71:a3:a8:ca:fd:
                    d0:62:40:13:ed:a0:30:02:4e:e8:19:d9:48:47:4e:
                    54:d6:c1:6d:a2:98:27:e1:13:0a:e2:38:5a:47:cf:
                    90:25:ec:f3:da:9c:b9:0d:91:37:e3:f0:6d:22:d7:
                    0e:fd:c9:39:10:af:ac:f1:4c:53:54:cc:04:d4:2c:
                    4b:01:d7:06:be:0c:a9:63:49:af:93:50:81:0a:0b:
                    03:b6:7f:eb:0d:63:6c:26:26:1c:76:5b:6c:f3:53:
                    31:bf:4d:9f:76:61:79:c4:d0:b1:c4:78:7c:89:2e:
                    f1:ed:a9:e9:42:c4:ad:e4:77:1a:6d:bc:2d:0b:83:
                    5f:53:0a:96:6a:00:e5:d3:7c:c4:10:ba:c6:fc:7d:
                    76:94:21:e2:67:03:2c:da:c4:7d:ef:c2:24:6b:23:
                    5f:d9:f1:bb:e1:c4:ed:e3:c2:6c:94:4a:39:01:dc:
                    6c:9d:81:55:45:fd:d4:b2:df:6c:78:17:99:23:94:
                    26:97:f3:cf:3e:9d:79:52:56:5e:7e:1b:a2:11:54:
                    5b:76:ef:12:53:7f:2e:99:8f:ec:2e:4e:07:d6:62:
                    f0:ec:fe:a7:b2:4c:8d:01:3e:09:47:5b:b1:e3:7e:
                    61:1d:9c:18:4e:df:b8:dd:7f:61:78:a0:32:f8:66:
                    e4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9F:36:3F:DF:42:03:B7:93:99:D9:37:0C:98:F3:71:AC:EE:80:E2
            X509v3 Authority Key Identifier:
                keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6b:9d:92:b6:ab:4a:6b:00:cd:9e:ff:ba:83:93:9d:71:ba:
         f7:02:80:24:c7:28:3c:15:81:3e:05:c5:40:ca:05:d7:8a:ea:
         a7:4f:d7:e6:4c:f3:84:3a:60:9e:3a:e0:6a:46:e1:7a:b0:2a:
         e1:da:82:2c:da:7f:4e:63:e3:3a:a4:ff:4b:ae:d2:7d:a1:0b:
         f8:20:b6:a2:eb:da:a6:1e:12:ef:e6:9c:a5:88:3f:d2:76:17:
         a6:4e:62:ef:f4:9a:23:fd:d9:1c:10:4a:63:50:8f:50:c6:b6:
         78:3a:3d:cb:9e:c0:e1:7e:da:8c:5d:45:21:29:ef:bd:d2:90:
         70:3a:be:08:a1:e1:59:25:67:ae:0a:fb:b6:21:98:c0:4a:d6:
         07:06:0b:00:ec:35:e4:e1:32:de:3c:c4:44:6b:61:8c:f5:a2:
         dc:aa:59:4e:45:f7:3a:f3:c8:c7:3c:8a:87:5b:94:1d:a3:38:
         9d:d0:9a:33:e1:03:8d:68:8d:03:97:8c:ba:04:ca:5d:65:d6:
         76:c8:7f:9d:69:25:fa:b4:51:66:70:b7:45:12:58:f4:62:88:
         18:ad:c0:e4:92:02:18:b0:3a:ae:8d:c0:47:1d:a7:d7:21:ed:
         1d:ca:bb:8b:a2:4b:7b:bd:59:ce:d3:80:b1:26:c0:40:1d:c6:
         b5:e0:ce:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hNqjcRBqT4mIgF9vFQHf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0
NmVlMDUwHhcNMjYwNTEzMTIwMTMwWhcNMjYwNTE0MTIwMTMwWjAzMTEwLwYDVQQD
Eyg5NjlmMzYzZmRmNDIwM2I3OTM5OWQ5MzcwYzk4ZjM3MWFjZWU4MGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ed2fqhcWGiYcaOoyv3QYkAT7aAw
Ak7oGdlIR05U1sFtopgn4RMK4jhaR8+QJezz2py5DZE34/BtItcO/ck5EK+s8UxT
VMwE1CxLAdcGvgypY0mvk1CBCgsDtn/rDWNsJiYcdlts81Mxv02fdmF5xNCxxHh8
iS7x7anpQsSt5HcabbwtC4NfUwqWagDl03zEELrG/H12lCHiZwMs2sR978IkayNf
2fG74cTt48JslEo5AdxsnYFVRf3Ust9seBeZI5Qml/PPPp15UlZefhuiEVRbdu8S
U38umY/sLk4H1mLw7P6nskyNAT4JR1ux435hHZwYTt+43X9heKAy+GbkLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJafNj/fQgO3k5nZNwyY83Gs7oDiMB8GA1UdIwQY
MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt
MDYzYjQwMTc0NTk3LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3
LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2udkrar
SmsAzZ7/uoOTnXG69wKAJMcoPBWBPgXFQMoF14rqp0/X5kzzhDpgnjrgakbherAq
4dqCLNp/TmPjOqT/S67SfaEL+CC2ouvaph4S7+acpYg/0nYXpk5i7/SaI/3ZHBBK
Y1CPUMa2eDo9y57A4X7ajF1FISnvvdKQcDq+CKHhWSVnrgr7tiGYwErWBwYLAOw1
5OEy3jzERGthjPWi3KpZTkX3OvPIxzyKh1uUHaM4ndCaM+EDjWiNA5eMugTKXWXW
dsh/nWkl+rRRZnC3RRJY9GKIGK3A5JICGLA6ro3ARx2n1yHtHcq7i6JLe71ZztOA
sSbAQB3GteDOyg==
-----END CERTIFICATE-----
Generated at Wed May 13 17:02:18 2026 by rpki-client