Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
File:                     17ISLEzzCqZTnsnH5ojbh1BqqV0.mft (raw, json)
Hash identifier:          AiRclchE6OkA1P+pTfozMvqVoVWwEIwFGHpKKzoo56I=
Subject key identifier:   22:11:CC:68:19:E9:AB:01:0A:38:B8:23:A5:B2:69:EC:65:59:82:ED
Authority key identifier: D7:B2:12:2C:4C:F3:0A:A6:53:9E:C9:C7:E6:88:DB:87:50:6A:A9:5D
Certificate issuer:       /CN=d7b2122c4cf30aa6539ec9c7e688db87506aa95d
Certificate serial:       019E1F10BA627E76CC8A0663DB051B8F73C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
Manifest number:          0151
Signing time:             Wed 13 May 2026 02:00:50 +0000
Manifest this update:     Wed 13 May 2026 02:00:50 +0000
Manifest next update:     Thu 14 May 2026 02:00:50 +0000
Files and hashes:         1: 17ISLEzzCqZTnsnH5ojbh1BqqV0.crl (hash: f8HEqBg+FvU+n6JUTKrwT0Gny/cFgmluZAwPvQEgq28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:ba:62:7e:76:cc:8a:06:63:db:05:1b:8f:73:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7b2122c4cf30aa6539ec9c7e688db87506aa95d
        Validity
            Not Before: May 13 02:00:50 2026 GMT
            Not After : May 14 02:00:50 2026 GMT
        Subject: CN=2211cc6819e9ab010a38b823a5b269ec655982ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:92:d5:53:ef:91:21:c8:be:61:ce:75:a1:b3:
                    2e:69:7d:ee:94:13:05:3d:81:45:d5:e8:56:dd:bb:
                    57:fb:17:f4:ca:1d:95:24:e2:bd:fc:ec:7c:67:b5:
                    07:d6:7b:35:c4:39:54:e8:c1:8d:8d:b0:3e:e2:2e:
                    25:9f:4a:5d:53:7d:91:bf:06:03:64:54:65:b8:13:
                    ae:fa:56:e5:eb:9b:4a:9d:cf:dd:87:d6:06:e5:24:
                    dc:8a:cf:ca:c4:ab:48:87:60:02:0d:f9:c1:b8:94:
                    a8:f0:1f:fe:2a:be:0a:d5:37:8a:90:9c:fd:b7:e3:
                    3b:42:86:a7:6c:c5:83:b0:06:37:e7:fd:db:ef:d8:
                    b0:01:03:e3:b2:10:26:09:92:4a:34:ad:29:9a:d5:
                    10:63:04:26:aa:2f:f2:c6:f8:8b:d9:eb:7f:0a:8c:
                    89:70:8f:87:62:d8:16:37:12:85:d4:f7:3d:29:24:
                    ae:13:a7:a0:86:e4:ab:05:da:5e:29:da:c6:8a:aa:
                    79:9e:6f:67:44:d3:88:0d:87:07:5e:7a:ce:7f:eb:
                    26:67:54:64:a0:b0:06:2e:20:94:9c:d2:6f:c4:8b:
                    e8:00:e0:7a:11:b0:60:b1:2c:d8:56:ad:94:ac:43:
                    e8:71:94:ff:bf:59:43:fe:7f:f3:94:3f:0c:f5:1f:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:11:CC:68:19:E9:AB:01:0A:38:B8:23:A5:B2:69:EC:65:59:82:ED
            X509v3 Authority Key Identifier:
                keyid:D7:B2:12:2C:4C:F3:0A:A6:53:9E:C9:C7:E6:88:DB:87:50:6A:A9:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17ISLEzzCqZTnsnH5ojbh1BqqV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/599ce1-d598-409e-b133-c94d9d6a207b/1/17ISLEzzCqZTnsnH5ojbh1BqqV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f7:80:ba:31:b9:6f:fb:3b:00:65:eb:62:99:98:7c:77:5d:
         74:62:65:45:c6:cf:ae:13:2e:14:32:bb:fc:a4:03:b3:17:5f:
         4b:05:cb:0e:60:2f:61:ef:f6:57:ac:fb:14:69:47:61:a4:89:
         b6:b9:e8:12:3e:ab:48:61:b5:3b:f5:99:34:aa:00:0e:ec:4a:
         f3:83:89:d8:a6:7d:5a:a7:6e:3c:7d:2c:02:4a:74:ff:c3:7c:
         f7:55:56:ee:32:b4:44:98:96:45:a0:f5:1e:f2:b9:ab:28:c4:
         b8:94:d9:c2:9a:fc:3e:4d:45:87:53:f1:45:04:a8:6a:53:50:
         5c:bb:d5:66:65:3c:04:fd:fc:00:c8:a8:34:42:3d:97:5c:05:
         0a:9e:c7:bf:48:b7:be:fa:5c:5b:1c:13:72:4d:6e:49:80:c0:
         ab:ed:f7:8e:9d:ad:1d:f8:2a:8b:a0:6b:27:b8:1a:91:7c:c6:
         d0:12:05:2d:45:1f:1f:5d:0d:24:40:9e:ca:93:29:3a:25:39:
         49:f1:e8:55:5b:eb:1a:cc:31:b2:f6:ee:47:b7:ea:16:1f:88:
         57:86:03:bd:ac:49:8f:75:eb:d4:f8:fa:49:e0:e4:70:6b:e6:
         d9:69:ce:8f:4c:ff:e2:d9:48:02:2d:ca:2d:39:fa:1d:a0:aa:
         6e:28:8d:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fELpifnbMigZj2wUbj3PDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YjIxMjJjNGNmMzBhYTY1MzllYzljN2U2ODhkYjg3NTA2
YWE5NWQwHhcNMjYwNTEzMDIwMDUwWhcNMjYwNTE0MDIwMDUwWjAzMTEwLwYDVQQD
EygyMjExY2M2ODE5ZTlhYjAxMGEzOGI4MjNhNWIyNjllYzY1NTk4MmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpLVU++RIci+Yc51obMuaX3ulBMF
PYFF1ehW3btX+xf0yh2VJOK9/Ox8Z7UH1ns1xDlU6MGNjbA+4i4ln0pdU32RvwYD
ZFRluBOu+lbl65tKnc/dh9YG5STcis/KxKtIh2ACDfnBuJSo8B/+Kr4K1TeKkJz9
t+M7QoanbMWDsAY35/3b79iwAQPjshAmCZJKNK0pmtUQYwQmqi/yxviL2et/CoyJ
cI+HYtgWNxKF1Pc9KSSuE6eghuSrBdpeKdrGiqp5nm9nRNOIDYcHXnrOf+smZ1Rk
oLAGLiCUnNJvxIvoAOB6EbBgsSzYVq2UrEPocZT/v1lD/n/zlD8M9R9CdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIRzGgZ6asBCji4I6WyaexlWYLtMB8GA1UdIwQY
MBaAFNeyEixM8wqmU57Jx+aI24dQaqldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTdJU0xFenpDcVpUbnNuSDVvamJoMUJxcVYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81OTljZTEtZDU5OC00MDllLWIxMzMt
Yzk0ZDlkNmEyMDdiLzEvMTdJU0xFenpDcVpUbnNuSDVvamJoMUJxcVYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi81OTljZTEtZDU5OC00MDllLWIxMzMtYzk0ZDlkNmEyMDdi
LzEvMTdJU0xFenpDcVpUbnNuSDVvamJoMUJxcVYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfeAujG5
b/s7AGXrYpmYfHdddGJlRcbPrhMuFDK7/KQDsxdfSwXLDmAvYe/2V6z7FGlHYaSJ
trnoEj6rSGG1O/WZNKoADuxK84OJ2KZ9WqduPH0sAkp0/8N891VW7jK0RJiWRaD1
HvK5qyjEuJTZwpr8Pk1Fh1PxRQSoalNQXLvVZmU8BP38AMioNEI9l1wFCp7Hv0i3
vvpcWxwTck1uSYDAq+33jp2tHfgqi6BrJ7gakXzG0BIFLUUfH10NJECeypMpOiU5
SfHoVVvrGswxsvbuR7fqFh+IV4YDvaxJj3Xr1Pj6SeDkcGvm2WnOj0z/4tlIAi3K
LTn6HaCqbiiN+Q==
-----END CERTIFICATE-----
Generated at Wed May 13 06:28:15 2026 by rpki-client