Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
File:                     1-FVaeIP5K5-bpCKpa045e_X7j8c.mft (raw, json)
Hash identifier:          ryol8N3uLjKoyaYgpo7NLv/U22I2iOozp8Olov5NDTc=
Subject key identifier:   AE:E0:52:65:3E:55:27:1B:95:49:FC:70:AF:D5:E7:4C:00:A4:2E:28
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Certificate issuer:       /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial:       019E1D59CB7F08C27EB079BF95C2C7C16AC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
Manifest number:          121A
Signing time:             Tue 12 May 2026 18:01:24 +0000
Manifest this update:     Tue 12 May 2026 18:01:24 +0000
Manifest next update:     Wed 13 May 2026 18:01:24 +0000
Files and hashes:         1: 1-FVaeIP5K5-bpCKpa045e_X7j8c.crl (hash: Erzuza5RWrhF34rVEpapKdPjUcD3rL7ONT40RAe/4uk=)
                          2: KO-QbiA4B8Fqmh4PoUG1b2CWqyo.roa (hash: AQjqAS5i/LVUFXeGIyKdhva6id7Kjy8HsHgnyuWVcqc=)
                          3: LBp-f2wTeEG__GeuFL9S2VPjFS4.roa (hash: jbigl4wtO4I3oLlMsdwWFhj1QBqpQaBQsh/wEl6VUQo=)
                          4: T7-uQqlLNMsiccxdjsoaTK4wseo.roa (hash: +BKfpUhxoHfLf7cPj1R21xoP1tto5+gxC04QZRCZI6c=)
                          5: ap691plquRdyX3vt85LxuWpbm1c.roa (hash: khufkxMKrWAd/D05QdS5OQV/ljvmohRpPsDkx0sZzKs=)
                          6: eWAGfLfEp43y_iN-RtSZfG1D49U.roa (hash: POgI5hw92swzuRADnz2nsMp43qgG4i2QfhiIQqJZJqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:cb:7f:08:c2:7e:b0:79:bf:95:c2:c7:c1:6a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
        Validity
            Not Before: May 12 18:01:24 2026 GMT
            Not After : May 13 18:01:24 2026 GMT
        Subject: CN=aee052653e55271b9549fc70afd5e74c00a42e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:ca:3d:a8:ef:80:b2:a8:7d:73:d1:c8:4b:
                    91:3d:2d:5a:3f:17:ba:78:be:46:49:04:63:6b:2b:
                    a6:96:20:ed:1e:1e:ed:3b:41:83:92:d5:61:45:40:
                    30:8d:0b:65:37:91:d4:06:dd:25:f7:5d:05:47:ec:
                    27:91:ae:d6:8b:c2:e7:50:45:9d:91:85:df:e2:37:
                    ec:dd:2b:56:3f:9c:61:4f:9d:bf:83:f8:b8:04:53:
                    9a:9f:75:f2:bf:8a:c9:5e:48:94:f3:52:c5:f4:aa:
                    e5:18:66:ca:08:03:cd:35:cb:00:99:d7:0c:11:4a:
                    4e:08:9d:3a:7f:10:07:0f:ee:c1:2c:8b:d9:4d:18:
                    b5:33:c4:37:d1:5f:3d:b1:45:25:29:3b:9b:02:98:
                    88:af:0a:d6:22:af:5b:f3:aa:6c:21:fe:3e:6f:76:
                    c7:99:19:10:a9:84:97:f0:70:a8:3f:36:dc:4d:71:
                    23:db:c9:8c:e1:5b:e8:68:7e:68:41:e0:0c:ae:81:
                    71:3e:80:7d:0e:9a:95:60:e7:31:d3:14:fa:4a:a7:
                    80:20:ad:66:18:5a:9d:ca:b7:5d:11:8a:95:82:0d:
                    d7:03:d8:6e:f7:c6:12:8d:0b:66:eb:67:f9:e0:13:
                    11:58:d5:e5:80:1a:6a:0b:42:55:e4:25:77:24:c7:
                    c8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E0:52:65:3E:55:27:1B:95:49:FC:70:AF:D5:E7:4C:00:A4:2E:28
            X509v3 Authority Key Identifier:
                keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fd:94:45:7b:19:e5:68:cc:7a:1b:8f:01:00:5b:68:d1:7d:
         14:cf:84:11:61:0f:1d:47:fa:75:ef:7e:42:c9:44:bf:3a:18:
         90:a8:b5:3d:af:a5:4d:9d:5e:40:75:1c:93:fc:21:ea:89:95:
         a0:79:10:2d:51:64:3f:28:94:8e:f2:45:f1:5b:43:13:85:41:
         ef:04:62:4b:8b:7e:22:15:e9:a5:b8:d6:70:28:c3:26:af:3f:
         ee:d7:f2:da:73:b9:9b:c8:e1:a0:c3:19:ae:cc:bd:38:b7:d1:
         20:e4:02:70:f6:ee:49:30:68:b3:6b:d9:69:3e:ff:96:a4:1a:
         67:bd:ef:8a:ca:8e:f9:3b:f3:c5:ae:73:09:50:02:92:c5:a6:
         d7:47:f8:35:72:19:cd:8a:84:d4:00:b1:dd:52:79:1f:e8:91:
         7b:14:ec:95:b9:9e:de:ec:23:b7:fc:7b:0d:2c:b5:50:f0:f5:
         97:ca:ec:b6:62:49:6f:a2:15:30:ba:8e:c6:5d:2c:77:62:fe:
         3e:86:f9:65:19:7b:58:60:ae:71:17:92:44:ff:29:13:be:1c:
         d1:cd:d0:bd:f0:3d:bf:8b:90:29:86:3b:f0:2c:66:77:7e:bb:
         0b:0b:40:30:11:e4:dc:df:20:26:ed:31:ef:5f:6f:54:ef:12:
         49:e4:f7:ca
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4dWct/CMJ+sHm/lcLHwWrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NTU1YTc4ODNmOTJiOWY5YmE0MjJhOTZiNGUzOTdiZjVm
YjhmYzcwHhcNMjYwNTEyMTgwMTI0WhcNMjYwNTEzMTgwMTI0WjAzMTEwLwYDVQQD
EyhhZWUwNTI2NTNlNTUyNzFiOTU0OWZjNzBhZmQ1ZTc0YzAwYTQyZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP3KPajvgLKofXPRyEuRPS1aPxe6
eL5GSQRjayumliDtHh7tO0GDktVhRUAwjQtlN5HUBt0l910FR+wnka7Wi8LnUEWd
kYXf4jfs3StWP5xhT52/g/i4BFOan3Xyv4rJXkiU81LF9KrlGGbKCAPNNcsAmdcM
EUpOCJ06fxAHD+7BLIvZTRi1M8Q30V89sUUlKTubApiIrwrWIq9b86psIf4+b3bH
mRkQqYSX8HCoPzbcTXEj28mM4VvoaH5oQeAMroFxPoB9DpqVYOcx0xT6SqeAIK1m
GFqdyrddEYqVgg3XA9hu98YSjQtm62f54BMRWNXlgBpqC0JV5CV3JMfI1wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK7gUmU+VScblUn8cK/V50wApC4oMB8GA1UdIwQY
MBaAFPhVWniD+Sufm6QiqWtOOXv1+4/HMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GVmFlSVA1SzUtYnBDS3BhMDQ1ZV9YN2o4Yy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRm
LTc2NmMwNmU1ZjA3NS8xLzEtRlZhZUlQNUs1LWJwQ0twYTA0NWVfWDdqOGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNiLzgyNDQ1Zi1kMWQ3LTQ2YjAtYWY0Zi03NjZjMDZlNWYw
NzUvMS8xLUZWYWVJUDVLNS1icENLcGEwNDVlX1g3ajhjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcP2U
RXsZ5WjMehuPAQBbaNF9FM+EEWEPHUf6de9+QslEvzoYkKi1Pa+lTZ1eQHUck/wh
6omVoHkQLVFkPyiUjvJF8VtDE4VB7wRiS4t+IhXppbjWcCjDJq8/7tfy2nO5m8jh
oMMZrsy9OLfRIOQCcPbuSTBos2vZaT7/lqQaZ73visqO+Tvzxa5zCVACksWm10f4
NXIZzYqE1ACx3VJ5H+iRexTslbme3uwjt/x7DSy1UPD1l8rstmJJb6IVMLqOxl0s
d2L+Pob5ZRl7WGCucReSRP8pE74c0c3QvfA9v4uQKYY78Cxmd367CwtAMBHk3N8g
Ju0x719vVO8SSeT3yg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:38:27 2026 by rpki-client