Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File:                     1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier:          7vlGhvWtHeU7WykQN/iZngDKXXhaRGyvQ4iBphLZ92s=
Subject key identifier:   0D:93:5A:12:BE:41:32:B0:90:46:EF:1D:D3:E8:52:34:66:19:49:5D
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer:       /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial:       019E1CB48602483C4FC058197AE58541524C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number:          0292
Signing time:             Tue 12 May 2026 15:00:53 +0000
Manifest this update:     Tue 12 May 2026 15:00:53 +0000
Manifest next update:     Wed 13 May 2026 15:00:53 +0000
Files and hashes:         1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: XydpTAsQMzfMLbjgxiu8X0TqrUmLwBlwEJjZya0lmSc=)
                          2: EDeDoQ8ytzaDc453b_Hq8-dl9oc.asa (hash: J7RmGJ2X8FshdgcvTgizHOO8ASOmx+lH13sNYAbtfjQ=)
                          3: PBQ90Wgy6M4SEkfQzgan77cHl-g.roa (hash: iVkZ3qKGXfgftGuOAhegIIRNsLxxhb2ssniaZrXGIi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:86:02:48:3c:4f:c0:58:19:7a:e5:85:41:52:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
        Validity
            Not Before: May 12 15:00:53 2026 GMT
            Not After : May 13 15:00:53 2026 GMT
        Subject: CN=0d935a12be4132b09046ef1dd3e852346619495d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:2f:1c:5f:22:ca:fc:5e:1e:cb:07:fb:29:
                    27:cd:fe:4b:40:f8:fa:d4:c4:2a:06:ba:a9:ec:bf:
                    c7:17:c6:b3:5b:b7:66:85:6c:16:bf:1e:c5:70:8a:
                    15:ee:2c:e7:35:30:16:b4:8f:46:e5:c9:cb:52:ef:
                    a1:ac:02:80:e5:2d:1e:2c:69:e8:ea:7f:82:bd:c6:
                    49:ee:23:95:78:a4:74:24:5b:7b:03:5f:92:67:32:
                    e7:3c:63:bd:b3:8c:5d:50:61:0b:98:9d:19:db:ce:
                    4b:22:a4:8c:7e:6a:e8:1a:66:87:ea:03:02:e2:98:
                    07:e4:fb:c9:cd:dd:3d:44:d8:80:70:85:06:0b:d6:
                    be:c1:03:da:b3:a5:51:88:b1:a2:9d:c2:3a:27:6b:
                    48:20:9c:00:0f:01:c3:84:02:09:1b:d5:49:b8:b1:
                    3a:0c:73:89:9d:04:37:c3:f2:dd:8d:78:c2:73:56:
                    4d:58:75:c6:5e:6a:d2:c9:cd:8c:18:92:6a:c0:57:
                    52:c2:bc:af:93:1b:97:0f:55:20:5f:a2:92:45:85:
                    a6:0c:0e:f5:a1:75:ef:ec:f5:0b:da:c9:a3:39:97:
                    39:48:0d:d6:90:2e:c2:68:e3:ef:3e:64:85:d9:b8:
                    59:f8:6c:24:69:60:76:0e:f2:3d:95:a0:9d:f1:ee:
                    8d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:93:5A:12:BE:41:32:B0:90:46:EF:1D:D3:E8:52:34:66:19:49:5D
            X509v3 Authority Key Identifier:
                keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:a0:7b:f2:01:88:c3:6a:48:10:33:d2:b6:3d:f8:f1:5a:3e:
         1f:c4:40:02:dd:a7:a2:df:2a:d3:9e:18:e8:6f:33:08:89:2b:
         0b:57:cf:cc:62:a5:d3:16:ce:3a:27:31:c8:95:c0:58:24:fb:
         59:da:a9:0a:4e:49:0a:98:92:b1:9b:89:66:ac:30:07:1f:3a:
         6a:7b:53:f7:62:52:67:1e:76:92:85:f0:da:0c:90:c0:ee:7e:
         4d:a6:1b:c8:7d:a6:49:4f:12:25:2c:3c:06:e8:e1:8b:8c:46:
         95:be:9e:95:7d:84:e4:a8:79:52:7c:cd:d0:2b:b7:93:41:1f:
         94:83:cc:58:2c:2d:d4:7f:f9:26:d1:71:ae:eb:c6:f2:ca:3e:
         fc:73:e2:e9:2e:1a:96:1e:5c:3f:6f:4c:a5:57:3f:12:80:13:
         fa:26:7f:89:c2:8a:c1:83:0f:b3:d3:32:2c:bb:04:2d:ec:dd:
         88:73:ea:6c:a1:eb:ce:d3:15:cf:70:0d:c7:90:73:2f:97:67:
         13:2e:c3:74:f5:25:11:7c:57:e1:2f:e9:2d:17:06:e0:68:16:
         c6:58:a4:a6:f9:7b:ef:29:eb:a5:79:41:89:50:54:11:97:0a:
         f1:8b:9a:5e:d2:a7:30:f3:bc:4f:f4:3e:ee:65:ec:8e:f2:db:
         a7:33:5a:11
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4ctIYCSDxPwFgZeuWFQVJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiN2YxOTFhOGRiYmYxZjEzMTQ3NDk3NTM1OGYyNDQ0ZDY5
NTBlODIwHhcNMjYwNTEyMTUwMDUzWhcNMjYwNTEzMTUwMDUzWjAzMTEwLwYDVQQD
EygwZDkzNWExMmJlNDEzMmIwOTA0NmVmMWRkM2U4NTIzNDY2MTk0OTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQUvHF8iyvxeHssH+yknzf5LQPj6
1MQqBrqp7L/HF8azW7dmhWwWvx7FcIoV7iznNTAWtI9G5cnLUu+hrAKA5S0eLGno
6n+CvcZJ7iOVeKR0JFt7A1+SZzLnPGO9s4xdUGELmJ0Z285LIqSMfmroGmaH6gMC
4pgH5PvJzd09RNiAcIUGC9a+wQPas6VRiLGincI6J2tIIJwADwHDhAIJG9VJuLE6
DHOJnQQ3w/LdjXjCc1ZNWHXGXmrSyc2MGJJqwFdSwryvkxuXD1UgX6KSRYWmDA71
oXXv7PUL2smjOZc5SA3WkC7CaOPvPmSF2bhZ+GwkaWB2DvI9laCd8e6NYQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFA2TWhK+QTKwkEbvHdPoUjRmGUldMB8GA1UdIwQY
MBaAFPt/GRqNu/HxMUdJdTWPJETWlQ6CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zOFpHbzI3OGZFeFIwbDFOWThrUk5hVkRvSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMjJmMGE4LWI2ZjAtNDRiNi05YWEx
LTg3NDdkYWE1OTNmMi8xLzEtMzhaR28yNzhmRXhSMGwxTlk4a1JOYVZEb0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNkLzIyZjBhOC1iNmYwLTQ0YjYtOWFhMS04NzQ3ZGFhNTkz
ZjIvMS8xLTM4WkdvMjc4ZkV4UjBsMU5ZOGtSTmFWRG9JLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA06B7
8gGIw2pIEDPStj348Vo+H8RAAt2not8q054Y6G8zCIkrC1fPzGKl0xbOOicxyJXA
WCT7WdqpCk5JCpiSsZuJZqwwBx86antT92JSZx52koXw2gyQwO5+TaYbyH2mSU8S
JSw8Bujhi4xGlb6elX2E5Kh5UnzN0Cu3k0EflIPMWCwt1H/5JtFxruvG8so+/HPi
6S4alh5cP29MpVc/EoAT+iZ/icKKwYMPs9MyLLsELezdiHPqbKHrztMVz3ANx5Bz
L5dnEy7DdPUlEXxX4S/pLRcG4GgWxlikpvl77ynrpXlBiVBUEZcK8YuaXtKnMPO8
T/Q+7mXsjvLbpzNaEQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:23:06 2026 by rpki-client