Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File:                     02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier:          dN1OoIWnzUfB10iuogOV0zWKhMKwrLdFTKlUHhfAKZI=
Subject key identifier:   1A:86:AC:58:8A:07:DD:99:96:E2:11:D2:E6:C3:FA:F6:FA:CB:0D:A4
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer:       /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial:       019E1C47710F2C6CFD76B872751D7BF84905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 13:01:44 +0000
Manifest this update:     Tue 12 May 2026 13:01:44 +0000
Manifest next update:     Wed 13 May 2026 13:01:44 +0000
Files and hashes:         1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: YvdCior7igrJ5l9x7QR8WfrjEZKquPUAO4HviPEGygY=)
                          2: 2c_grymUIhGNucpWMSjL6-6xaVQ.roa (hash: LJfXc15WBjfpMq/ak34RsbKfXoculKlISrdKb2yl7LU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:71:0f:2c:6c:fd:76:b8:72:75:1d:7b:f8:49:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
        Validity
            Not Before: May 12 13:01:44 2026 GMT
            Not After : May 13 13:01:44 2026 GMT
        Subject: CN=1a86ac588a07dd9996e211d2e6c3faf6facb0da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0e:e1:15:82:12:17:42:c9:b0:27:c8:d0:cb:
                    69:c0:b7:02:56:3e:9d:d3:c9:5f:d2:3c:4c:de:06:
                    30:cc:86:3f:e5:94:be:ca:78:d5:a4:00:98:aa:c0:
                    38:1a:1f:9b:c6:12:0f:7c:e8:48:2c:54:26:22:02:
                    6a:46:73:78:57:e1:e6:40:b7:08:9c:cc:63:cd:f1:
                    0d:27:ab:99:ad:5f:06:fd:c2:8e:aa:58:7b:4c:5a:
                    ff:92:bd:f0:36:d5:2f:8e:25:69:51:39:76:1a:7f:
                    8c:a9:4a:d9:b6:b4:be:c8:dc:a1:b0:ad:aa:9b:98:
                    21:d1:1c:46:34:9b:2f:84:e6:82:0b:77:a1:60:fe:
                    52:a7:19:6a:db:22:b5:c1:1d:24:21:70:62:86:f2:
                    86:66:ce:77:a8:d9:bc:d3:01:36:68:a4:2b:8b:00:
                    c6:01:f3:18:59:11:98:c1:a2:25:d4:e5:3e:b6:ea:
                    55:eb:2f:5c:54:04:bb:23:10:53:1d:5c:df:05:1e:
                    3a:5c:3a:2c:c8:c7:e8:8d:16:29:8f:fd:1c:8e:f1:
                    d8:2e:ff:3e:8d:ca:72:66:73:a1:20:d3:1f:d3:ee:
                    9b:07:b3:0a:e7:20:96:fe:e8:ca:40:35:f7:d6:67:
                    8b:5d:7b:2b:97:cf:59:50:36:b5:fb:53:9f:08:c5:
                    8c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:86:AC:58:8A:07:DD:99:96:E2:11:D2:E6:C3:FA:F6:FA:CB:0D:A4
            X509v3 Authority Key Identifier:
                keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b4:e7:f2:0a:d0:85:0e:58:0b:2a:42:5d:0f:52:a2:4c:02:
         41:3b:ea:01:6e:fb:4e:42:f6:36:df:52:47:d5:e5:9d:31:37:
         49:d5:17:14:95:66:ee:90:14:af:89:a9:38:4d:dc:25:26:4d:
         14:57:13:3c:63:53:78:b1:e5:a2:ec:3c:2b:92:ef:d2:fd:83:
         fb:7a:05:cf:af:f0:f8:5d:41:e7:98:c5:54:5a:35:89:f3:8b:
         b5:b7:f8:7f:50:eb:85:ee:2c:a8:01:56:f2:3a:3a:40:c3:51:
         9e:2e:7c:a0:9a:11:a8:7b:f2:65:de:4e:71:26:3d:6f:78:38:
         43:b3:71:cc:0c:d1:cb:d1:b9:45:9c:5c:ed:ef:66:dd:23:05:
         fa:60:68:47:23:38:b5:ce:c8:e3:94:5e:81:cb:bf:b7:ed:81:
         be:4f:01:6a:0a:e9:f0:59:6a:48:07:1c:88:0c:b1:4d:d0:db:
         f8:d8:a1:c8:f0:61:90:5e:35:2b:29:38:97:d1:f8:3e:1f:b6:
         41:1a:a0:3f:6d:c5:ba:d6:c5:9f:5e:36:a0:66:33:90:cd:0c:
         e7:0e:f2:4f:e0:cb:ff:e6:e4:ef:84:c7:d3:69:4d:d7:35:cd:
         9e:e4:50:e9:f0:27:4b:01:a7:0a:18:2b:38:ae:1a:e4:b9:10:
         6d:9e:80:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cR3EPLGz9drhydR17+EkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjk4YmU5MDJjMDZmZWFiNWY1YWFmNzI5ZTBiYmMzN2Ji
YzM0MWMwHhcNMjYwNTEyMTMwMTQ0WhcNMjYwNTEzMTMwMTQ0WjAzMTEwLwYDVQQD
EygxYTg2YWM1ODhhMDdkZDk5OTZlMjExZDJlNmMzZmFmNmZhY2IwZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q7hFYISF0LJsCfI0MtpwLcCVj6d
08lf0jxM3gYwzIY/5ZS+ynjVpACYqsA4Gh+bxhIPfOhILFQmIgJqRnN4V+HmQLcI
nMxjzfENJ6uZrV8G/cKOqlh7TFr/kr3wNtUvjiVpUTl2Gn+MqUrZtrS+yNyhsK2q
m5gh0RxGNJsvhOaCC3ehYP5Spxlq2yK1wR0kIXBihvKGZs53qNm80wE2aKQriwDG
AfMYWRGYwaIl1OU+tupV6y9cVAS7IxBTHVzfBR46XDosyMfojRYpj/0cjvHYLv8+
jcpyZnOhINMf0+6bB7MK5yCW/ujKQDX31meLXXsrl89ZUDa1+1OfCMWM/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqGrFiKB92ZluIR0ubD+vb6yw2kMB8GA1UdIwQY
MBaAFNNpi+kCwG/qtfWq9yngu8N7vDQcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJtTDZRTEFiLXExOWFyM0tlQzd3M3U4TkJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84ZmNlN2YtNzdkZS00Mjc4LWJhZmUt
ZGRjMzI1MjFkNzkwLzEvMDJtTDZRTEFiLXExOWFyM0tlQzd3M3U4TkJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84ZmNlN2YtNzdkZS00Mjc4LWJhZmUtZGRjMzI1MjFkNzkw
LzEvMDJtTDZRTEFiLXExOWFyM0tlQzd3M3U4TkJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7Tn8grQ
hQ5YCypCXQ9SokwCQTvqAW77TkL2Nt9SR9XlnTE3SdUXFJVm7pAUr4mpOE3cJSZN
FFcTPGNTeLHlouw8K5Lv0v2D+3oFz6/w+F1B55jFVFo1ifOLtbf4f1Drhe4sqAFW
8jo6QMNRni58oJoRqHvyZd5OcSY9b3g4Q7NxzAzRy9G5RZxc7e9m3SMF+mBoRyM4
tc7I45Regcu/t+2Bvk8Bagrp8FlqSAcciAyxTdDb+NihyPBhkF41Kyk4l9H4Ph+2
QRqgP23FutbFn142oGYzkM0M5w7yT+DL/+bk74TH02lN1zXNnuRQ6fAnSwGnChgr
OK4a5LkQbZ6AFA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:18:01 2026 by rpki-client