Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
File:                     4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft (raw, json)
Hash identifier:          WDFO868H8kHy8t+PKuNXH/tYzsfeHVJH8tiJbkObzjo=
Subject key identifier:   2E:BD:AA:37:72:92:2D:E7:A3:AF:6D:97:63:3A:CD:0B:6C:E6:5C:1C
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Certificate issuer:       /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial:       019E1CB44914326E15E2F1A2E4FD885422E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
Manifest number:          0609
Signing time:             Tue 12 May 2026 15:00:37 +0000
Manifest this update:     Tue 12 May 2026 15:00:37 +0000
Manifest next update:     Wed 13 May 2026 15:00:37 +0000
Files and hashes:         1: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl (hash: E3JzaB84bF8kRoTqYfYpEtKc4ogkCUgWKdVCe4dghGc=)
                          2: 9m6XpGENN_Zc7gu4DZLgz-bFG_8.roa (hash: /mTzPbGMqBx+64njFbuyJLyG64tSV59h469Ll6ebv7Y=)
                          3: KEIqtKdHOr2xFwyul2M4Mj3OCXg.roa (hash: 3sxiPnrD0Gc6fzs8KkM4ayt1dKyCeKq1vgI2Ien7IrU=)
                          4: a7LWLvfWgtFn-hlQ7rePCg-poYE.roa (hash: VgwZIwqUK5p5zdClmFKprg0jOARykjuW1KNUaPMDVgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:49:14:32:6e:15:e2:f1:a2:e4:fd:88:54:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
        Validity
            Not Before: May 12 15:00:37 2026 GMT
            Not After : May 13 15:00:37 2026 GMT
        Subject: CN=2ebdaa3772922de7a3af6d97633acd0b6ce65c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e4:41:4f:61:51:2f:90:d0:bf:59:a4:0e:6b:
                    90:72:bc:b2:16:c9:92:fd:1a:93:94:15:bf:1b:b3:
                    15:ca:54:b0:7a:4c:61:42:56:23:e8:c9:e4:a0:e0:
                    8f:34:d5:c5:96:c3:e4:47:d9:ac:76:64:e9:fe:a9:
                    74:ec:73:5d:ab:94:ab:9a:62:dd:0d:e0:a4:3d:09:
                    0e:37:de:ea:87:5a:13:59:52:8f:f4:8d:e0:49:b8:
                    fc:7d:e7:aa:6e:b2:cc:fe:f2:77:cb:33:8d:e7:82:
                    a8:7e:14:b5:3b:bb:7f:14:ee:7f:8f:83:5e:ef:fe:
                    9c:69:87:5b:15:04:8e:c3:cd:73:26:12:ad:29:d7:
                    73:d1:48:54:45:de:5c:7f:a2:07:4d:d6:3c:88:37:
                    71:ca:c2:e4:5a:17:4f:06:ab:8e:11:f2:24:d3:5c:
                    d6:16:42:f5:1b:d4:b8:6a:f4:ab:db:86:f3:3d:ea:
                    e8:ff:bf:cb:92:e8:34:cc:8d:35:71:f6:29:e4:e3:
                    4e:d8:25:66:37:8d:64:cd:a2:0e:e0:ee:87:7f:2c:
                    2f:f8:78:70:b1:9e:2e:4f:50:f4:e7:00:01:f9:16:
                    a4:ee:3d:59:e5:e8:d2:c5:b2:fa:96:59:91:89:4b:
                    89:f2:1d:2b:ae:90:0d:77:1c:0e:05:58:3c:73:c9:
                    a5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BD:AA:37:72:92:2D:E7:A3:AF:6D:97:63:3A:CD:0B:6C:E6:5C:1C
            X509v3 Authority Key Identifier:
                keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:24:d2:41:d3:0e:a5:ca:79:d3:17:74:d1:50:25:c9:fa:a1:
         33:de:97:e6:67:41:cb:57:c2:52:c2:5a:e9:bf:20:04:23:63:
         60:6e:9c:de:32:61:05:0c:11:7c:81:71:3e:f0:c9:ef:4c:78:
         d5:f1:42:94:ca:50:31:c7:18:bf:09:4d:5e:4f:1d:dc:18:d0:
         5b:28:0c:f5:bc:ea:50:50:b5:7c:29:26:bb:c0:6e:fa:39:5c:
         eb:60:8d:8c:07:bc:10:b4:38:03:7d:2b:35:c6:31:b8:53:ee:
         eb:12:13:7b:22:0f:e9:5e:65:ea:e8:77:0d:27:95:1e:f9:86:
         7f:18:9f:05:1d:5e:c3:e2:74:f9:5c:5c:76:e6:6e:d0:ec:fd:
         f0:89:15:00:77:1b:4c:7b:fb:5e:f8:5b:ae:89:21:91:8f:ca:
         ff:4b:91:d8:3d:db:90:c8:1e:ff:fe:a1:d9:af:8d:56:5d:ea:
         93:b5:83:ce:ef:d0:9b:52:5d:05:c6:6a:80:4b:51:ef:76:ca:
         a5:3c:0f:8d:23:ce:64:5c:dc:3e:f0:28:2b:c8:5a:08:b6:22:
         18:2f:a3:50:6b:57:3b:41:5d:06:72:a6:7f:ac:b0:cf:82:db:
         2e:5f:9c:20:2a:b9:79:59:31:7c:00:32:b5:68:2b:38:40:81:
         c1:5b:71:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctEkUMm4V4vGi5P2IVCLgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNjBiMGE1NWE4N2E2NmU5MGE3NDYzYTAxZGE2NDE0ZmMw
MzRkM2QwHhcNMjYwNTEyMTUwMDM3WhcNMjYwNTEzMTUwMDM3WjAzMTEwLwYDVQQD
EygyZWJkYWEzNzcyOTIyZGU3YTNhZjZkOTc2MzNhY2QwYjZjZTY1YzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeRBT2FRL5DQv1mkDmuQcryyFsmS
/RqTlBW/G7MVylSwekxhQlYj6MnkoOCPNNXFlsPkR9msdmTp/ql07HNdq5SrmmLd
DeCkPQkON97qh1oTWVKP9I3gSbj8feeqbrLM/vJ3yzON54KofhS1O7t/FO5/j4Ne
7/6caYdbFQSOw81zJhKtKddz0UhURd5cf6IHTdY8iDdxysLkWhdPBquOEfIk01zW
FkL1G9S4avSr24bzPero/7/Lkug0zI01cfYp5ONO2CVmN41kzaIO4O6Hfywv+Hhw
sZ4uT1D05wAB+Rak7j1Z5ejSxbL6llmRiUuJ8h0rrpANdxwOBVg8c8mlXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC69qjdyki3no69tl2M6zQts5lwcMB8GA1UdIwQY
MBaAFOJgsKVah6ZukKdGOgHaZBT8A009MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEt
ZDIyNjlmNDBmM2QzLzEvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEtZDIyNjlmNDBmM2Qz
LzEvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSTSQdMO
pcp50xd00VAlyfqhM96X5mdBy1fCUsJa6b8gBCNjYG6c3jJhBQwRfIFxPvDJ70x4
1fFClMpQMccYvwlNXk8d3BjQWygM9bzqUFC1fCkmu8Bu+jlc62CNjAe8ELQ4A30r
NcYxuFPu6xITeyIP6V5l6uh3DSeVHvmGfxifBR1ew+J0+VxcduZu0Oz98IkVAHcb
THv7XvhbrokhkY/K/0uR2D3bkMge//6h2a+NVl3qk7WDzu/Qm1JdBcZqgEtR73bK
pTwPjSPOZFzcPvAoK8haCLYiGC+jUGtXO0FdBnKmf6ywz4LbLl+cICq5eVkxfAAy
tWgrOECBwVtxAg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:55:28 2026 by rpki-client