Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File:                     AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier:          99ciUx+OuH+POPyURrgdTqe9L8cfKCgRNPoD09893cI=
Subject key identifier:   A0:D3:78:B5:A7:33:75:12:66:20:0A:32:AB:89:2F:EC:E2:22:EB:09
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer:       /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial:       019E1C10686377FE49B0F042CCBED39343EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number:          0FA6
Signing time:             Tue 12 May 2026 12:01:37 +0000
Manifest this update:     Tue 12 May 2026 12:01:37 +0000
Manifest next update:     Wed 13 May 2026 12:01:37 +0000
Files and hashes:         1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: KvZsCNomyEbczkR4wtkf01PAeMA2twO384bzF6C+clQ=)
                          2: NwTnA5e7wr-U_MMwFPC2DoOmCk0.roa (hash: KGPawungpMUVZBS2QyhWuSqDsxcDEXQmXtvekIh8Gno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:68:63:77:fe:49:b0:f0:42:cc:be:d3:93:43:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
        Validity
            Not Before: May 12 12:01:37 2026 GMT
            Not After : May 13 12:01:37 2026 GMT
        Subject: CN=a0d378b5a733751266200a32ab892fece222eb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:34:6d:3f:35:72:58:1c:46:9c:d3:ff:79:
                    c0:70:74:a7:4e:ae:86:6b:b7:d3:53:15:aa:ce:e6:
                    1e:83:fc:15:50:3b:2a:c1:46:fc:9d:9e:66:5f:ab:
                    83:f1:42:b3:34:ec:67:03:3e:88:58:a7:10:e7:33:
                    86:a9:f5:3a:c9:56:e9:70:c0:3e:77:c1:45:99:dc:
                    ef:e6:d2:02:36:dd:5f:6c:0b:24:e2:48:4d:bc:c8:
                    19:df:46:0c:5b:7a:aa:73:85:0e:14:cd:59:23:6e:
                    64:f1:b3:70:2c:8b:0e:f9:41:0d:dd:1e:6e:1d:85:
                    d5:fe:b2:ee:9b:b0:27:d4:24:6d:4c:ce:04:89:90:
                    fe:bb:4b:a0:f0:d2:7e:8e:d9:71:43:63:6f:fa:4f:
                    34:a8:f0:eb:47:cb:b6:10:b5:17:13:04:cd:ec:a8:
                    0a:d7:e5:5c:a4:2b:4a:5e:08:eb:b9:2e:a2:d6:6c:
                    0d:62:3e:57:8c:80:9f:9c:96:3d:02:e6:76:ac:00:
                    16:e4:5e:f2:f6:d4:be:cc:e3:6f:d1:3b:c9:4a:87:
                    c8:d0:f7:23:e2:11:92:73:c9:58:bc:0e:72:c5:f4:
                    5b:f6:90:9a:c5:88:f0:c5:d0:b0:8b:8d:0f:f3:4a:
                    11:bf:6d:ea:35:7e:8a:58:4b:20:e3:59:87:4d:45:
                    0e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D3:78:B5:A7:33:75:12:66:20:0A:32:AB:89:2F:EC:E2:22:EB:09
            X509v3 Authority Key Identifier:
                keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:14:b6:43:9b:82:79:d9:f7:00:8e:b4:c6:47:6f:be:cf:99:
         7c:b3:f1:70:7a:e0:c1:bf:f2:94:fe:4d:07:1b:28:17:ce:74:
         de:d8:93:64:c1:56:4c:6b:f5:a1:6d:15:b4:bc:38:8f:7a:6b:
         60:7b:6a:74:9e:73:a5:1a:cf:7a:17:55:7a:16:7f:e4:d9:5b:
         40:7a:00:3b:df:7f:d7:a1:e4:bf:fe:e0:04:6e:50:1c:ba:1a:
         1c:73:d5:69:31:90:cc:ed:ca:95:af:df:c6:8e:00:9d:85:e0:
         47:f3:c3:9d:03:85:95:4f:aa:81:1b:f3:4c:62:25:34:7e:f1:
         cc:43:3d:16:0d:97:94:a9:52:df:09:e1:79:5b:68:f7:00:7a:
         29:e5:20:e3:a8:be:df:9e:64:92:d8:cb:fe:52:89:54:1c:8d:
         c2:e4:a3:83:7b:0d:df:39:0c:ad:f0:99:9f:ef:99:b3:97:79:
         f6:f8:94:a3:2a:d1:4c:16:c0:3f:2c:82:48:fb:54:1e:b8:b6:
         ed:52:6d:61:5d:28:9e:04:dd:49:87:fc:af:c5:f7:d3:a1:f6:
         a0:fb:db:60:76:5e:08:e0:76:35:d5:03:ed:26:25:da:9c:bd:
         8b:77:2d:9b:b8:73:da:d5:17:2d:36:f5:27:fc:19:4f:48:46:
         ba:8e:e1:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cEGhjd/5JsPBCzL7Tk0PrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwODNmNjk3OTU0ZWM3Y2M0OTJlNWFhNDZjYzhlZjEzZmM4
ZWRhOTEwHhcNMjYwNTEyMTIwMTM3WhcNMjYwNTEzMTIwMTM3WjAzMTEwLwYDVQQD
EyhhMGQzNzhiNWE3MzM3NTEyNjYyMDBhMzJhYjg5MmZlY2UyMjJlYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxE0bT81clgcRpzT/3nAcHSnTq6G
a7fTUxWqzuYeg/wVUDsqwUb8nZ5mX6uD8UKzNOxnAz6IWKcQ5zOGqfU6yVbpcMA+
d8FFmdzv5tICNt1fbAsk4khNvMgZ30YMW3qqc4UOFM1ZI25k8bNwLIsO+UEN3R5u
HYXV/rLum7An1CRtTM4EiZD+u0ug8NJ+jtlxQ2Nv+k80qPDrR8u2ELUXEwTN7KgK
1+VcpCtKXgjruS6i1mwNYj5XjICfnJY9AuZ2rAAW5F7y9tS+zONv0TvJSofI0Pcj
4hGSc8lYvA5yxfRb9pCaxYjwxdCwi40P80oRv23qNX6KWEsg41mHTUUONwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDTeLWnM3USZiAKMquJL+ziIusJMB8GA1UdIwQY
MBaAFACD9peVTsfMSS5apGzI7xP8jtqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hOTJmY2UtN2ExYi00Y2I3LTllNWMt
ODE5ZGIxNmI2NmVlLzEvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hOTJmY2UtN2ExYi00Y2I3LTllNWMtODE5ZGIxNmI2NmVl
LzEvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxS2Q5uC
edn3AI60xkdvvs+ZfLPxcHrgwb/ylP5NBxsoF8503tiTZMFWTGv1oW0VtLw4j3pr
YHtqdJ5zpRrPehdVehZ/5NlbQHoAO99/16Hkv/7gBG5QHLoaHHPVaTGQzO3Kla/f
xo4AnYXgR/PDnQOFlU+qgRvzTGIlNH7xzEM9Fg2XlKlS3wnheVto9wB6KeUg46i+
355kktjL/lKJVByNwuSjg3sN3zkMrfCZn++Zs5d59viUoyrRTBbAPyyCSPtUHri2
7VJtYV0ongTdSYf8r8X306H2oPvbYHZeCOB2NdUD7SYl2py9i3ctm7hz2tUXLTb1
J/wZT0hGuo7hWg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:34 2026 by rpki-client