Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
File:                     70QOE80mESzLWVF2D8-y1JFtcSc.mft (raw, json)
Hash identifier:          RQ2/o/xyKijgci3toq9cYP27ad9GELm4rthJ6hN55nw=
Subject key identifier:   20:83:1D:E1:C3:BA:75:10:37:D9:76:9F:02:3F:FE:4B:00:A6:CE:22
Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
Certificate issuer:       /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Certificate serial:       019E1EDA7490F1C3557F05273849F76E2AB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 01:01:33 +0000
Manifest this update:     Wed 13 May 2026 01:01:33 +0000
Manifest next update:     Thu 14 May 2026 01:01:33 +0000
Files and hashes:         1: 70QOE80mESzLWVF2D8-y1JFtcSc.crl (hash: 0Z2Ax13mSJdxqh31SFQZyWKEHzSBV+fEKDfDgwxru4w=)
                          2: iihdxArhWBfRd2TbdfbS7PBd2-A.roa (hash: YhBcDUdnzWiPDeX7N0lIwAMHxmHjRf7w0DKaQDLlNXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:74:90:f1:c3:55:7f:05:27:38:49:f7:6e:2a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
        Validity
            Not Before: May 13 01:01:33 2026 GMT
            Not After : May 14 01:01:33 2026 GMT
        Subject: CN=20831de1c3ba751037d9769f023ffe4b00a6ce22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:37:1a:70:52:f0:a2:86:3e:c8:d7:cf:b2:
                    1f:8c:39:dc:f5:ea:34:89:52:0c:08:d7:9c:97:df:
                    f7:b6:fd:b1:c6:ec:37:e7:19:80:1b:f0:bf:94:81:
                    1b:ed:81:4c:3a:62:bf:ad:3a:a0:c3:47:4b:51:dc:
                    55:82:11:b4:65:74:29:09:56:77:70:be:86:a7:52:
                    e4:93:7f:db:40:aa:0a:4f:a2:f1:d4:ec:ba:bd:a1:
                    b9:4f:04:b1:13:39:08:2f:67:a5:0b:55:16:2a:d4:
                    3a:d8:7f:75:75:79:86:68:c7:a1:71:05:7d:94:12:
                    43:08:3a:8e:27:00:45:95:cd:0f:93:d8:ca:2d:bc:
                    da:af:70:47:13:c7:56:cf:36:17:b7:06:d7:41:79:
                    fe:20:64:82:5c:72:e0:05:a8:87:a1:66:9c:7d:d5:
                    b7:d1:46:02:02:a9:36:d8:85:f5:7c:ca:64:c4:b2:
                    4c:ec:f9:d6:df:4f:6d:2d:d3:f1:b1:4c:b0:25:a8:
                    8a:57:d3:c0:69:a5:df:d7:aa:ca:ee:5e:91:41:d6:
                    e2:0e:84:5d:fc:98:f5:01:04:00:0f:ac:d0:2f:3a:
                    b3:82:13:b4:1a:30:ed:e3:48:eb:94:bd:e7:ae:20:
                    3b:47:58:7f:be:e4:3a:bd:3d:75:0c:66:fd:17:dd:
                    6f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:83:1D:E1:C3:BA:75:10:37:D9:76:9F:02:3F:FE:4B:00:A6:CE:22
            X509v3 Authority Key Identifier:
                keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ff:3e:45:a8:ce:4b:a7:de:34:2c:a6:56:51:e0:e5:cb:1b:
         5d:3e:d3:90:41:8e:df:0a:65:7a:46:56:d4:66:f1:cf:db:00:
         c4:10:7f:9d:85:a4:4e:7a:ef:07:01:75:5a:ad:50:5a:b6:da:
         ab:94:db:78:d7:07:60:be:15:6e:08:04:4b:6e:1e:a7:49:08:
         24:5f:3c:f7:5d:40:18:02:f3:80:5b:c3:ec:3e:f6:94:35:ce:
         cc:bc:38:b4:1d:66:a1:e1:13:73:63:5d:c0:96:ed:e8:96:6f:
         25:d1:25:ca:2f:3f:4b:d8:16:e4:e7:3d:89:79:f5:36:5a:3d:
         d0:0c:c7:9f:f5:83:6c:06:f8:7d:1b:47:4e:4c:fb:43:5e:4d:
         02:9a:d0:a8:b1:61:03:e7:ee:33:fb:fa:ab:14:1c:c4:9e:fa:
         24:e2:46:12:26:ac:76:35:03:85:c8:d2:38:0d:8f:74:34:8e:
         70:cd:75:85:0b:c8:73:d3:f8:1a:22:d7:18:32:ce:d4:fd:90:
         27:dd:d7:22:92:0b:a5:21:b2:22:d2:05:18:04:c1:66:7e:a3:
         3e:35:a4:5c:db:4c:91:5f:90:1e:67:34:e3:d6:7b:4b:20:06:
         ab:91:e2:21:40:87:14:a4:ef:fd:e3:1d:df:72:98:b5:18:ef:
         e6:47:75:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2nSQ8cNVfwUnOEn3biqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDQwZTEzY2QyNjExMmNjYjU5NTE3NjBmY2ZiMmQ0OTE2
ZDcxMjcwHhcNMjYwNTEzMDEwMTMzWhcNMjYwNTE0MDEwMTMzWjAzMTEwLwYDVQQD
EygyMDgzMWRlMWMzYmE3NTEwMzdkOTc2OWYwMjNmZmU0YjAwYTZjZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZM3GnBS8KKGPsjXz7IfjDnc9eo0
iVIMCNecl9/3tv2xxuw35xmAG/C/lIEb7YFMOmK/rTqgw0dLUdxVghG0ZXQpCVZ3
cL6Gp1Lkk3/bQKoKT6Lx1Oy6vaG5TwSxEzkIL2elC1UWKtQ62H91dXmGaMehcQV9
lBJDCDqOJwBFlc0Pk9jKLbzar3BHE8dWzzYXtwbXQXn+IGSCXHLgBaiHoWacfdW3
0UYCAqk22IX1fMpkxLJM7PnW309tLdPxsUywJaiKV9PAaaXf16rK7l6RQdbiDoRd
/Jj1AQQAD6zQLzqzghO0GjDt40jrlL3nriA7R1h/vuQ6vT11DGb9F91vKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCDHeHDunUQN9l2nwI//ksAps4iMB8GA1UdIwQY
MBaAFO9EDhPNJhEsy1lRdg/PstSRbXEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDkt
N2E4MzY4MDBlOWY3LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDktN2E4MzY4MDBlOWY3
LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACP8+RajO
S6feNCymVlHg5csbXT7TkEGO3wplekZW1Gbxz9sAxBB/nYWkTnrvBwF1Wq1QWrba
q5TbeNcHYL4VbggES24ep0kIJF88911AGALzgFvD7D72lDXOzLw4tB1moeETc2Nd
wJbt6JZvJdElyi8/S9gW5Oc9iXn1Nlo90AzHn/WDbAb4fRtHTkz7Q15NAprQqLFh
A+fuM/v6qxQcxJ76JOJGEiasdjUDhcjSOA2PdDSOcM11hQvIc9P4GiLXGDLO1P2Q
J93XIpILpSGyItIFGATBZn6jPjWkXNtMkV+QHmc049Z7SyAGq5HiIUCHFKTv/eMd
33KYtRjv5kd1XA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:02:28 2026 by rpki-client