Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
File:                     8DpbV31dnm0cX9O-1ADpacC-fDQ.mft (raw, json)
Hash identifier:          bCo1X3vu1Cei9nqlC082S6sVamoNQ1AdE5D9lQxSips=
Subject key identifier:   30:8C:58:54:AA:6E:AF:60:47:3C:DF:A8:2F:C7:20:CE:F2:5E:B9:76
Authority key identifier: F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
Certificate issuer:       /CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Certificate serial:       019E20FF0C7266565887B7F0DF69D0F15310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
Manifest number:          1902
Signing time:             Wed 13 May 2026 11:00:46 +0000
Manifest this update:     Wed 13 May 2026 11:00:46 +0000
Manifest next update:     Thu 14 May 2026 11:00:46 +0000
Files and hashes:         1: 8DpbV31dnm0cX9O-1ADpacC-fDQ.crl (hash: e3oFGb//dBFuQJ6+aUCgzCiBt8huO45WoxCrcckNxNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:0c:72:66:56:58:87:b7:f0:df:69:d0:f1:53:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
        Validity
            Not Before: May 13 11:00:46 2026 GMT
            Not After : May 14 11:00:46 2026 GMT
        Subject: CN=308c5854aa6eaf60473cdfa82fc720cef25eb976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:30:58:aa:3b:c5:08:27:13:ac:da:13:c3:
                    94:5d:4a:d0:d8:08:4d:a5:5d:49:aa:28:f3:17:92:
                    77:3d:cf:d9:ac:48:cf:67:cb:59:c0:59:03:a0:62:
                    4c:d4:c9:a6:60:20:84:ea:73:8b:49:f0:fa:22:1e:
                    7d:dd:28:f8:f6:88:4d:1b:36:67:0a:a4:db:90:59:
                    41:16:9c:ff:d8:b4:f4:7f:65:da:66:43:31:cd:70:
                    e2:b5:ba:8a:b2:4e:4f:57:b4:4e:be:b9:2a:8c:ad:
                    be:3c:fb:ef:20:7f:26:fa:cc:b3:0a:54:4c:e8:5d:
                    9e:1f:9c:a5:3c:79:85:b0:86:b7:5e:63:26:29:4e:
                    6e:7f:10:58:4d:4f:17:ee:18:1a:69:3b:f4:b1:78:
                    46:55:b9:93:50:4c:81:02:dc:6b:20:c3:3b:2e:37:
                    e1:2d:e1:40:9e:23:da:52:41:cb:0e:53:03:51:d0:
                    1a:fb:6c:f8:24:ad:c2:82:b8:c7:7f:f6:43:8d:fa:
                    2b:30:4d:97:0e:c6:a1:29:19:e5:20:ed:8f:60:33:
                    38:b4:c1:40:cc:1b:71:94:2e:94:0b:ec:1a:4f:a4:
                    3b:d4:ff:7d:6d:f3:da:cd:a6:0d:46:3c:6a:f3:e3:
                    bb:fd:29:4e:bf:de:35:68:ba:9a:1f:fb:86:93:24:
                    b5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8C:58:54:AA:6E:AF:60:47:3C:DF:A8:2F:C7:20:CE:F2:5E:B9:76
            X509v3 Authority Key Identifier:
                keyid:F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:3c:d9:3d:3c:fb:09:bc:d1:b7:aa:f3:d6:6c:53:79:35:bf:
         ee:c2:fa:d7:3e:b1:f7:9a:1b:10:d2:56:29:07:78:08:f4:7d:
         4c:58:ae:49:11:34:d1:1d:d7:19:30:94:d6:b8:3f:c4:e8:1c:
         e1:21:85:5d:9f:3b:5a:33:ed:7c:2e:9c:52:47:fe:10:9b:da:
         82:84:01:cd:71:39:88:b8:28:b6:99:9c:d9:65:ce:58:73:22:
         7e:ee:11:3b:77:54:9f:6b:42:34:7e:4d:ec:e8:5b:2c:c6:c9:
         0e:04:32:91:b5:44:e3:b3:fd:d3:88:21:f3:da:50:e3:d6:30:
         c6:3b:4c:1f:d9:85:28:2c:e6:cf:01:48:e1:9b:92:00:b7:07:
         12:a4:4c:bb:47:37:86:11:68:bf:ed:18:1c:e5:e7:5f:de:80:
         39:ed:5f:5d:4c:4b:1a:76:60:e2:ae:0b:d7:1a:09:b0:61:25:
         0f:34:6d:72:a5:e5:a1:4c:85:cc:83:b5:3f:28:62:45:8a:d5:
         70:ea:d5:de:86:d2:44:47:8f:1b:38:f9:32:fe:74:31:56:00:
         a6:72:35:e1:6b:ed:fe:20:60:31:a7:3a:c0:f2:29:a0:4a:75:
         ef:45:e5:2a:f0:0e:96:13:4a:d0:a0:50:64:99:1c:df:19:4b:
         24:21:02:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/wxyZlZYh7fw32nQ8VMQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2E1YjU3N2Q1ZDllNmQxYzVmZDNiZWQ0MDBlOTY5YzBi
ZTdjMzQwHhcNMjYwNTEzMTEwMDQ2WhcNMjYwNTE0MTEwMDQ2WjAzMTEwLwYDVQQD
EygzMDhjNTg1NGFhNmVhZjYwNDczY2RmYTgyZmM3MjBjZWYyNWViOTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnQwWKo7xQgnE6zaE8OUXUrQ2AhN
pV1JqijzF5J3Pc/ZrEjPZ8tZwFkDoGJM1MmmYCCE6nOLSfD6Ih593Sj49ohNGzZn
CqTbkFlBFpz/2LT0f2XaZkMxzXDitbqKsk5PV7ROvrkqjK2+PPvvIH8m+syzClRM
6F2eH5ylPHmFsIa3XmMmKU5ufxBYTU8X7hgaaTv0sXhGVbmTUEyBAtxrIMM7Ljfh
LeFAniPaUkHLDlMDUdAa+2z4JK3CgrjHf/ZDjforME2XDsahKRnlIO2PYDM4tMFA
zBtxlC6UC+waT6Q71P99bfPazaYNRjxq8+O7/SlOv941aLqaH/uGkyS1pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCMWFSqbq9gRzzfqC/HIM7yXrl2MB8GA1UdIwQY
MBaAFPA6W1d9XZ5tHF/TvtQA6WnAvnw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERwYlYzMWRubTBjWDlPLTFBRHBhY0MtZkRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82ODg5NDMtNzEzZC00OTFlLWE3MjEt
ZWNhNTlmODIwMThhLzEvOERwYlYzMWRubTBjWDlPLTFBRHBhY0MtZkRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS82ODg5NDMtNzEzZC00OTFlLWE3MjEtZWNhNTlmODIwMThh
LzEvOERwYlYzMWRubTBjWDlPLTFBRHBhY0MtZkRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzzZPTz7
CbzRt6rz1mxTeTW/7sL61z6x95obENJWKQd4CPR9TFiuSRE00R3XGTCU1rg/xOgc
4SGFXZ87WjPtfC6cUkf+EJvagoQBzXE5iLgotpmc2WXOWHMifu4RO3dUn2tCNH5N
7OhbLMbJDgQykbVE47P904gh89pQ49YwxjtMH9mFKCzmzwFI4ZuSALcHEqRMu0c3
hhFov+0YHOXnX96AOe1fXUxLGnZg4q4L1xoJsGElDzRtcqXloUyFzIO1PyhiRYrV
cOrV3obSREePGzj5Mv50MVYApnI14Wvt/iBgMac6wPIpoEp170XlKvAOlhNK0KBQ
ZJkc3xlLJCECIQ==
-----END CERTIFICATE-----
Generated at Wed May 13 13:59:32 2026 by rpki-client