Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
File:                     K1PcIaJCAlQoIMyobiZfioeX0lA.mft (raw, json)
Hash identifier:          QdNFTY817fHt2i7lpsD0hlKxKzeoQLD54KwDp9d8eNU=
Subject key identifier:   8E:AA:98:D0:9F:15:AC:E1:EC:FF:B9:1E:CE:55:80:0C:09:FD:FC:F8
Authority key identifier: 2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
Certificate issuer:       /CN=2b53dc21a24202542820cca86e265f8a8797d250
Certificate serial:       019E1EA3032EB20B291EDE68D2EC9C6C4C69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
Manifest number:          011E
Signing time:             Wed 13 May 2026 00:01:00 +0000
Manifest this update:     Wed 13 May 2026 00:01:00 +0000
Manifest next update:     Thu 14 May 2026 00:01:00 +0000
Files and hashes:         1: K1PcIaJCAlQoIMyobiZfioeX0lA.crl (hash: tF3monCO5ffskCkqRt9Xlm8m5L3mA7vDc/iTg9Wsqu8=)
                          2: kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa (hash: GDKNpiIO5829SnDrPg3nh1X5rP785rc0edBI69dLKGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:03:2e:b2:0b:29:1e:de:68:d2:ec:9c:6c:4c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b53dc21a24202542820cca86e265f8a8797d250
        Validity
            Not Before: May 13 00:01:00 2026 GMT
            Not After : May 14 00:01:00 2026 GMT
        Subject: CN=8eaa98d09f15ace1ecffb91ece55800c09fdfcf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:70:46:97:c9:6e:35:91:23:f9:dc:df:d8:
                    b5:57:d9:69:8a:01:3a:25:a5:b6:d9:e5:db:ce:1b:
                    b4:21:4a:10:be:75:2c:7b:78:38:57:37:68:a2:2d:
                    41:0e:6d:ce:e1:2f:0d:1b:04:42:a0:b1:6c:37:ef:
                    b9:b7:5a:fe:2b:e2:79:3b:1f:f8:f4:6c:df:d0:bd:
                    23:88:89:21:50:6a:c5:ac:96:78:d8:42:3f:bb:7b:
                    f4:a9:f5:80:d6:2d:5e:85:c6:44:23:ce:4f:59:94:
                    1e:8a:ae:4b:da:14:47:98:6b:5f:cb:05:82:39:d1:
                    b7:99:78:13:15:47:68:7e:d8:41:83:c9:9f:de:15:
                    e2:b8:fa:3a:d9:c2:67:b1:0d:16:50:be:a3:d0:98:
                    b4:9c:7d:21:38:06:73:ca:f0:fe:81:c3:70:43:e8:
                    27:54:3e:44:58:b6:77:07:84:9c:a4:08:b6:b9:48:
                    3e:39:91:15:ff:c1:85:f5:02:a1:c0:3c:2b:49:6a:
                    46:92:8c:e9:e8:25:d7:db:dd:e3:46:dc:6f:d6:73:
                    6e:05:ef:c6:00:14:13:d7:f8:b9:4a:4f:13:eb:8f:
                    b6:b2:62:c5:18:da:31:3e:45:83:6e:58:75:41:71:
                    e4:0b:29:0c:96:47:7b:14:34:b1:fc:d6:ea:ea:59:
                    15:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AA:98:D0:9F:15:AC:E1:EC:FF:B9:1E:CE:55:80:0C:09:FD:FC:F8
            X509v3 Authority Key Identifier:
                keyid:2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3f:13:ee:4b:4d:8a:f7:11:2d:18:e2:02:d0:67:a7:bb:98:
         db:92:6c:69:8e:07:3d:c3:70:84:d2:ed:e9:c3:c8:33:bd:99:
         1d:b9:7a:69:0b:f3:5b:83:7c:d3:2a:33:64:62:f1:3f:51:18:
         b0:3d:b4:42:31:c0:04:6b:7d:af:67:fd:08:07:6f:5d:6b:94:
         6d:72:13:fd:8f:cf:d5:1b:1b:04:23:4f:4e:cc:3c:d8:67:17:
         e4:06:be:27:cf:4c:16:f3:89:69:aa:c8:9f:fb:c2:b4:a5:92:
         86:7d:84:ea:ae:a8:61:85:0f:2c:a0:ca:f7:46:ea:89:9a:06:
         70:59:13:09:5e:0a:0a:24:04:56:32:28:2c:a4:0a:84:5c:c6:
         38:e4:8c:2c:a6:68:ff:c9:91:c2:4a:69:3f:33:31:11:77:ee:
         1f:0f:64:c9:05:31:fe:ca:10:a1:7d:c4:2c:04:89:2a:2a:12:
         0a:a6:8e:65:aa:4d:fd:08:a4:6f:c2:85:e8:af:fe:03:b3:02:
         1e:cb:25:f8:68:84:b4:31:b3:24:8b:86:1b:5a:9b:a3:df:95:
         ab:72:e4:fc:f5:6b:62:5e:d4:8c:ef:31:36:51:29:3a:81:09:
         55:70:47:2e:21:3f:0c:33:cb:ad:a0:bc:d5:61:6e:68:84:a1:
         9f:14:63:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eowMusgspHt5o0uycbExpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNTNkYzIxYTI0MjAyNTQyODIwY2NhODZlMjY1ZjhhODc5
N2QyNTAwHhcNMjYwNTEzMDAwMTAwWhcNMjYwNTE0MDAwMTAwWjAzMTEwLwYDVQQD
Eyg4ZWFhOThkMDlmMTVhY2UxZWNmZmI5MWVjZTU1ODAwYzA5ZmRmY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZJwRpfJbjWRI/nc39i1V9lpigE6
JaW22eXbzhu0IUoQvnUse3g4Vzdooi1BDm3O4S8NGwRCoLFsN++5t1r+K+J5Ox/4
9Gzf0L0jiIkhUGrFrJZ42EI/u3v0qfWA1i1ehcZEI85PWZQeiq5L2hRHmGtfywWC
OdG3mXgTFUdofthBg8mf3hXiuPo62cJnsQ0WUL6j0Ji0nH0hOAZzyvD+gcNwQ+gn
VD5EWLZ3B4ScpAi2uUg+OZEV/8GF9QKhwDwrSWpGkozp6CXX293jRtxv1nNuBe/G
ABQT1/i5Sk8T64+2smLFGNoxPkWDblh1QXHkCykMlkd7FDSx/Nbq6lkV7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6qmNCfFazh7P+5Hs5VgAwJ/fz4MB8GA1UdIwQY
MBaAFCtT3CGiQgJUKCDMqG4mX4qHl9JQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGJjZGItYjVlMi00Mzc3LWI1MzAt
ODM1OTNhZmJiNzUzLzEvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81NGJjZGItYjVlMi00Mzc3LWI1MzAtODM1OTNhZmJiNzUz
LzEvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfD8T7ktN
ivcRLRjiAtBnp7uY25JsaY4HPcNwhNLt6cPIM72ZHbl6aQvzW4N80yozZGLxP1EY
sD20QjHABGt9r2f9CAdvXWuUbXIT/Y/P1RsbBCNPTsw82GcX5Aa+J89MFvOJaarI
n/vCtKWShn2E6q6oYYUPLKDK90bqiZoGcFkTCV4KCiQEVjIoLKQKhFzGOOSMLKZo
/8mRwkppPzMxEXfuHw9kyQUx/soQoX3ELASJKioSCqaOZapN/Qikb8KF6K/+A7MC
Hssl+GiEtDGzJIuGG1qbo9+Vq3Lk/PVrYl7UjO8xNlEpOoEJVXBHLiE/DDPLraC8
1WFuaIShnxRj/g==
-----END CERTIFICATE-----
Generated at Wed May 13 07:19:19 2026 by rpki-client