Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
File:                     JfzJXxkPb63_o5NBMcdMs6BojXI.mft (raw, json)
Hash identifier:          AiEfUO6eFf+9k4ks+rz9ahymTukNAvqtspZ4aotc28A=
Subject key identifier:   9E:74:2E:B4:32:6A:45:0A:AF:4C:3E:B3:DD:3A:AA:CB:31:D3:B5:3B
Authority key identifier: 25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
Certificate issuer:       /CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Certificate serial:       019E1ED9FFD0F37D37341833EB1CA8FAAD36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
Manifest number:          E3
Signing time:             Wed 13 May 2026 01:01:03 +0000
Manifest this update:     Wed 13 May 2026 01:01:03 +0000
Manifest next update:     Thu 14 May 2026 01:01:03 +0000
Files and hashes:         1: JfzJXxkPb63_o5NBMcdMs6BojXI.crl (hash: bv4yzE8Q2Qcyf3SKDV2a/EEsc8ymSvZrJr6hCYB830A=)
                          2: g4SpKvZLDrCSSEc4j2eY2sgyR8k.roa (hash: F6VZpsG6B4dQY8+6I93tdHS61Qfv0yiT02WGdhA/ATs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:ff:d0:f3:7d:37:34:18:33:eb:1c:a8:fa:ad:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
        Validity
            Not Before: May 13 01:01:03 2026 GMT
            Not After : May 14 01:01:03 2026 GMT
        Subject: CN=9e742eb4326a450aaf4c3eb3dd3aaacb31d3b53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e5:90:4c:c9:4d:83:47:a0:5f:51:db:5f:77:
                    79:eb:df:76:89:ce:5d:1b:c2:62:41:d5:f6:9f:33:
                    54:2b:76:c2:70:03:cf:86:4e:dd:9f:d2:f5:fc:bc:
                    22:9b:34:4a:57:2d:2c:fb:0d:39:36:a4:29:3e:fe:
                    16:ff:40:e1:55:05:aa:4a:27:18:e2:bc:8d:57:52:
                    5b:f2:97:39:75:06:42:7a:a8:9e:11:ad:33:c5:45:
                    ad:ac:d0:23:75:18:09:af:f6:2d:8d:d0:cb:b2:c1:
                    fc:ff:27:61:70:fc:e9:f0:a8:cc:47:e5:37:1b:88:
                    aa:90:e9:e7:43:e2:32:7c:b2:35:c0:2a:41:85:ea:
                    98:ed:78:62:91:ea:62:8a:08:29:08:5f:fa:22:c9:
                    da:db:0e:a4:82:91:07:7b:3a:f1:ab:0d:ce:8e:6e:
                    6f:57:cf:0c:e1:76:21:34:5e:a1:c3:f3:f8:3c:89:
                    54:37:e2:d2:94:6f:06:16:23:0c:be:25:a4:57:0b:
                    81:06:13:fe:5c:9b:6f:34:b4:88:a2:0a:0f:34:3e:
                    8c:6b:75:f8:81:49:69:48:6e:9b:eb:b4:52:31:9d:
                    ce:98:34:04:a0:3c:1c:0f:bb:11:39:1a:ef:3c:37:
                    0a:16:fd:fc:56:e9:0c:d0:7f:4d:83:43:a6:13:a1:
                    24:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:74:2E:B4:32:6A:45:0A:AF:4C:3E:B3:DD:3A:AA:CB:31:D3:B5:3B
            X509v3 Authority Key Identifier:
                keyid:25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:44:01:41:a0:d8:2f:b3:13:00:3a:54:86:81:d8:34:72:e6:
         12:3e:23:6c:9a:01:e6:96:2d:ff:f2:ee:62:06:6a:d7:8c:dd:
         88:ec:d5:fb:11:a6:49:d6:b4:30:09:8f:57:e9:bb:c5:64:b8:
         92:55:53:dd:dd:46:c0:25:a5:fd:b3:31:51:61:19:88:46:25:
         35:d6:4d:dc:e7:19:3f:54:cb:87:c9:58:48:ce:93:fb:69:c8:
         e7:b7:6c:e2:9e:f7:cf:86:92:f3:46:22:3f:a4:38:86:80:63:
         d6:c0:6d:61:cd:53:16:e6:e9:85:72:a6:77:55:ed:b3:a3:22:
         bc:df:2e:c7:4b:cd:46:49:d5:13:16:a0:78:95:3a:ea:37:5d:
         b6:fc:76:4a:ca:d1:cb:6a:17:a3:81:e0:3a:10:51:17:cb:e3:
         24:e0:c2:44:d6:1e:de:be:f5:14:6f:2b:a6:61:a6:3a:4c:d9:
         f3:8c:2f:84:23:63:f3:0e:01:86:d2:02:ad:a0:ad:c5:7a:75:
         d9:fe:82:b8:d0:48:d8:94:ba:fd:d5:86:43:06:cb:5e:c6:cf:
         83:55:2a:85:b7:a1:c0:0f:cd:7c:05:68:46:74:bc:65:b1:ff:
         3b:56:75:82:f8:20:4a:a9:62:28:ef:87:55:7f:44:40:81:d0:
         91:44:6c:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2f/Q8303NBgz6xyo+q02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZmNjOTVmMTkwZjZmYWRmZmEzOTM0MTMxYzc0Y2IzYTA2
ODhkNzIwHhcNMjYwNTEzMDEwMTAzWhcNMjYwNTE0MDEwMTAzWjAzMTEwLwYDVQQD
Eyg5ZTc0MmViNDMyNmE0NTBhYWY0YzNlYjNkZDNhYWFjYjMxZDNiNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+WQTMlNg0egX1HbX3d56992ic5d
G8JiQdX2nzNUK3bCcAPPhk7dn9L1/LwimzRKVy0s+w05NqQpPv4W/0DhVQWqSicY
4ryNV1Jb8pc5dQZCeqieEa0zxUWtrNAjdRgJr/YtjdDLssH8/ydhcPzp8KjMR+U3
G4iqkOnnQ+IyfLI1wCpBheqY7XhikepiiggpCF/6Isna2w6kgpEHezrxqw3Ojm5v
V88M4XYhNF6hw/P4PIlUN+LSlG8GFiMMviWkVwuBBhP+XJtvNLSIogoPND6Ma3X4
gUlpSG6b67RSMZ3OmDQEoDwcD7sRORrvPDcKFv38VukM0H9Ng0OmE6EkVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ50LrQyakUKr0w+s906qssx07U7MB8GA1UdIwQY
MBaAFCX8yV8ZD2+t/6OTQTHHTLOgaI1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmZ6Slh4a1BiNjNfbzVOQk1jZE1zNkJvalhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMWMzOTktMzQxOC00MDcxLTg1YTkt
YmExZTYwOWZjNDIxLzEvSmZ6Slh4a1BiNjNfbzVOQk1jZE1zNkJvalhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lMWMzOTktMzQxOC00MDcxLTg1YTktYmExZTYwOWZjNDIx
LzEvSmZ6Slh4a1BiNjNfbzVOQk1jZE1zNkJvalhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkQBQaDY
L7MTADpUhoHYNHLmEj4jbJoB5pYt//LuYgZq14zdiOzV+xGmSda0MAmPV+m7xWS4
klVT3d1GwCWl/bMxUWEZiEYlNdZN3OcZP1TLh8lYSM6T+2nI57ds4p73z4aS80Yi
P6Q4hoBj1sBtYc1TFubphXKmd1Xts6MivN8ux0vNRknVExageJU66jddtvx2SsrR
y2oXo4HgOhBRF8vjJODCRNYe3r71FG8rpmGmOkzZ84wvhCNj8w4BhtICraCtxXp1
2f6CuNBI2JS6/dWGQwbLXsbPg1UqhbehwA/NfAVoRnS8ZbH/O1Z1gvggSqliKO+H
VX9EQIHQkURskA==
-----END CERTIFICATE-----
Generated at Wed May 13 10:47:36 2026 by rpki-client