Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File:                     p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier:          jRlTuw8PztvA1aGrg5FvJrCiOecBHm6o+HytJML6abU=
Subject key identifier:   45:50:9D:6E:03:91:36:57:71:69:4A:5B:80:13:97:A3:1F:90:31:54
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer:       /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial:       019E1FEC443792BAA9B17A0844634D967B63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 06:00:37 +0000
Manifest this update:     Wed 13 May 2026 06:00:37 +0000
Manifest next update:     Thu 14 May 2026 06:00:37 +0000
Files and hashes:         1: 6Xsm7GtWPf6sxisdeJuLCo-3tLo.roa (hash: xdyBNDU6Kuc/zF3hUM0jBGfeZpAD6Qr+9Bqu74wdbek=)
                          2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: r49lxzY559eRjCkc5dq8sDl4m1K5mvwZm8oRApFQk/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:44:37:92:ba:a9:b1:7a:08:44:63:4d:96:7b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
        Validity
            Not Before: May 13 06:00:37 2026 GMT
            Not After : May 14 06:00:37 2026 GMT
        Subject: CN=45509d6e0391365771694a5b801397a31f903154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:e4:28:ff:56:a3:ea:5c:1a:a3:e5:e8:83:
                    45:cb:7a:ba:a0:81:d7:0f:44:20:8f:5d:07:97:77:
                    57:40:8b:d3:e1:55:09:14:6d:d6:0a:53:ce:97:f0:
                    05:16:eb:3b:14:8d:4d:17:d6:8d:8e:66:f9:ac:ec:
                    9c:aa:94:ff:14:49:22:94:ec:e4:55:26:12:18:dc:
                    c1:71:3e:f2:4e:84:24:06:7e:c7:ba:a1:9c:2e:9d:
                    02:2a:78:0f:a1:84:03:99:b8:da:1d:af:cf:df:aa:
                    27:e6:1b:47:5b:47:8d:46:b1:43:b2:60:65:cc:fe:
                    0d:a2:de:78:9d:45:ef:2a:dd:7a:d2:23:37:32:bb:
                    67:45:4a:0d:26:8f:52:a2:f7:86:aa:5b:fe:f0:cd:
                    a0:58:54:b2:61:96:81:36:a5:b9:07:df:6a:f4:6d:
                    63:fd:3e:93:22:65:46:62:bb:cc:01:65:b6:6c:c4:
                    e4:09:2d:91:cc:f5:3b:0b:64:87:2f:7d:94:35:4a:
                    08:a4:e1:50:78:29:19:f4:e3:6f:8a:eb:b4:ed:b9:
                    e5:02:4d:87:1d:31:72:63:ea:62:59:af:ac:81:7a:
                    ff:24:90:61:be:51:79:48:32:ec:0b:00:de:3d:64:
                    8c:3a:24:93:86:ec:b0:bf:a8:eb:ed:a9:a0:74:25:
                    a5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:50:9D:6E:03:91:36:57:71:69:4A:5B:80:13:97:A3:1F:90:31:54
            X509v3 Authority Key Identifier:
                keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:80:31:e5:6c:8a:89:48:ef:16:8b:fc:6c:dd:ee:48:00:cb:
         c9:6d:ee:64:d3:f5:96:12:ca:ea:a5:5e:13:9a:04:72:f6:8b:
         2a:19:e6:27:86:dc:63:e6:0a:a3:90:32:98:be:e9:e2:0c:0d:
         3c:22:70:5a:52:e9:48:d7:52:07:2a:02:64:14:c6:45:c3:3c:
         29:7a:b3:8f:7c:d4:7e:6d:59:df:59:96:ee:63:a3:31:22:74:
         8c:99:76:dd:c8:d3:56:66:2f:37:a6:37:1c:d6:34:49:77:aa:
         ab:d6:f5:35:bf:e5:70:3e:a8:6b:3c:76:38:e8:31:d2:6f:f6:
         05:da:db:f8:54:28:48:42:2c:d3:93:5b:a3:63:ec:8a:c6:43:
         ed:7f:87:5d:e2:f2:9c:94:2d:5f:1d:89:34:a1:9b:ff:b3:80:
         c6:ad:a7:a5:6d:c6:07:d7:ca:40:be:7d:bc:06:a6:7f:4b:4c:
         34:f0:6b:af:83:04:15:3c:97:fb:e1:15:8b:71:4c:3a:07:28:
         4f:5e:d6:7f:d1:16:ef:34:9b:dc:f4:ff:64:b5:b9:2c:c8:c2:
         79:e8:f7:7a:73:96:70:b2:a5:3e:41:c4:a3:c0:8e:8f:45:23:
         68:b5:2c:8a:83:d0:3b:1a:c7:55:c7:e6:01:87:55:47:10:3c:
         18:df:d2:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7EQ3krqpsXoIRGNNlntjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YmRiMmM3YjMzNGI5NGJjZDQzMzg4ZjIxZjgyMDkyZGI2
Y2ZkNGMwHhcNMjYwNTEzMDYwMDM3WhcNMjYwNTE0MDYwMDM3WjAzMTEwLwYDVQQD
Eyg0NTUwOWQ2ZTAzOTEzNjU3NzE2OTRhNWI4MDEzOTdhMzFmOTAzMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc3kKP9Wo+pcGqPl6INFy3q6oIHX
D0Qgj10Hl3dXQIvT4VUJFG3WClPOl/AFFus7FI1NF9aNjmb5rOycqpT/FEkilOzk
VSYSGNzBcT7yToQkBn7HuqGcLp0CKngPoYQDmbjaHa/P36on5htHW0eNRrFDsmBl
zP4Not54nUXvKt160iM3MrtnRUoNJo9SoveGqlv+8M2gWFSyYZaBNqW5B99q9G1j
/T6TImVGYrvMAWW2bMTkCS2RzPU7C2SHL32UNUoIpOFQeCkZ9ONviuu07bnlAk2H
HTFyY+piWa+sgXr/JJBhvlF5SDLsCwDePWSMOiSThuywv6jr7amgdCWlNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVQnW4DkTZXcWlKW4ATl6MfkDFUMB8GA1UdIwQY
MBaAFKe9ssezNLlLzUM4jyH4IJLbbP1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQt
YTk1OGJmNWFjYmVhLzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQtYTk1OGJmNWFjYmVh
LzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4Ax5WyK
iUjvFov8bN3uSADLyW3uZNP1lhLK6qVeE5oEcvaLKhnmJ4bcY+YKo5AymL7p4gwN
PCJwWlLpSNdSByoCZBTGRcM8KXqzj3zUfm1Z31mW7mOjMSJ0jJl23cjTVmYvN6Y3
HNY0SXeqq9b1Nb/lcD6oazx2OOgx0m/2Bdrb+FQoSEIs05Nbo2PsisZD7X+HXeLy
nJQtXx2JNKGb/7OAxq2npW3GB9fKQL59vAamf0tMNPBrr4MEFTyX++EVi3FMOgco
T17Wf9EW7zSb3PT/ZLW5LMjCeej3enOWcLKlPkHEo8COj0UjaLUsioPQOxrHVcfm
AYdVRxA8GN/SWQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:31:53 2026 by rpki-client