Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File:                     _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier:          8qPxGAJ7KkaA74VIOPnl5dKT/R+zt20ejKwDtF7BZTM=
Subject key identifier:   C2:BF:F0:74:6F:11:8E:37:74:3C:90:71:C9:84:BF:13:7A:CE:B9:0F
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer:       /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial:       019E1D908312EF7807CA700B05C1225B018E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number:          103A
Signing time:             Tue 12 May 2026 19:01:10 +0000
Manifest this update:     Tue 12 May 2026 19:01:10 +0000
Manifest next update:     Wed 13 May 2026 19:01:10 +0000
Files and hashes:         1: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: OswZKtblOR0kdM358eXZutJqO54scwv1H6YCbxxA5XA=)
                          2: ybz_LJxmvXeX0zTpU2lRHbVV5as.roa (hash: s/QbbRettUJpmi4/wPM4zY/mnziqrGPExrreuVQcjVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:83:12:ef:78:07:ca:70:0b:05:c1:22:5b:01:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
        Validity
            Not Before: May 12 19:01:10 2026 GMT
            Not After : May 13 19:01:10 2026 GMT
        Subject: CN=c2bff0746f118e37743c9071c984bf137aceb90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:92:b5:06:71:79:24:e4:63:85:50:fa:b4:ee:
                    7e:c5:c9:3f:a4:6a:c5:ae:f4:72:a5:6f:a7:cd:46:
                    b7:1f:4d:fa:d7:53:57:ba:60:0f:13:af:61:93:d7:
                    37:32:17:4b:90:d1:73:7e:e9:93:d0:bb:04:2c:64:
                    f3:31:a2:63:c8:5e:72:f6:8f:36:ae:2e:7a:eb:2a:
                    e0:7a:e1:d7:a9:97:b8:30:f4:28:10:d1:8d:91:3b:
                    38:88:fb:b4:75:4e:fc:f6:a9:0a:bc:1e:1a:f9:de:
                    a8:ab:02:43:8b:af:dc:63:ee:46:0d:74:84:72:5f:
                    e3:f9:a1:7a:99:1d:26:05:22:a8:f4:e1:ed:4f:84:
                    22:8d:60:14:31:2b:96:85:00:2b:14:1f:2e:45:ea:
                    fe:d7:22:49:62:e1:fc:cb:af:d8:e1:76:10:bc:95:
                    6e:a4:95:18:2c:c3:b7:43:b0:ec:f1:96:4c:32:9d:
                    67:c7:e2:34:fd:4a:21:81:fe:85:69:37:47:1e:f8:
                    89:64:dc:d5:07:46:b9:0b:97:d0:f7:6e:70:56:b3:
                    09:bd:bf:68:69:ef:df:a5:1d:70:a9:7b:a3:22:8b:
                    ae:78:47:04:bd:8d:a7:7a:19:ad:08:8a:d2:72:5a:
                    83:c8:ef:8f:29:1b:41:be:5a:57:7d:de:0d:b8:fd:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BF:F0:74:6F:11:8E:37:74:3C:90:71:C9:84:BF:13:7A:CE:B9:0F
            X509v3 Authority Key Identifier:
                keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:bb:2d:53:be:c4:de:6b:35:b9:44:23:b2:9c:21:b2:c6:76:
         14:27:eb:37:b5:87:98:6d:3f:ce:c6:45:d5:2c:ad:80:4d:90:
         c4:37:11:ea:83:53:47:c2:4b:c3:5d:e4:52:fe:8e:7b:e4:ed:
         95:ac:76:b5:54:10:49:0e:74:ea:3f:97:e8:d6:9d:2e:af:a6:
         87:cb:98:ab:65:8e:46:2a:53:67:19:18:6a:55:2d:e7:03:94:
         88:77:bc:72:96:1a:99:64:ab:d0:73:c1:73:4a:60:ba:a0:bd:
         74:05:f0:92:71:c2:26:8a:56:5f:fe:1d:a6:25:55:01:2a:b3:
         e2:be:ed:de:1f:1d:21:c2:03:30:be:1a:d8:4d:a7:96:d9:7f:
         38:24:9c:0a:b0:60:af:1c:7e:0e:4c:45:db:4f:03:73:5c:fb:
         11:62:22:0b:c6:e5:8b:63:8e:9b:8e:a3:19:3e:7d:52:0f:7e:
         ef:80:42:2d:a2:10:0c:a0:63:3b:e8:11:51:0d:81:52:19:f3:
         ca:d5:0d:b8:30:c6:e8:83:88:94:e4:53:ca:ff:e7:eb:c1:72:
         7c:af:92:8d:19:90:2c:68:ab:6e:e8:9c:88:82:50:da:84:14:
         ed:66:f9:da:51:f2:d7:28:ea:d7:03:cb:86:cd:65:86:37:5a:
         ad:4c:af:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkIMS73gHynALBcEiWwGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMmM2YzFhNTU3ZjU4OGI2NDdlMTc5MTFhNjMwMGUzNDJj
NjYxZWIwHhcNMjYwNTEyMTkwMTEwWhcNMjYwNTEzMTkwMTEwWjAzMTEwLwYDVQQD
EyhjMmJmZjA3NDZmMTE4ZTM3NzQzYzkwNzFjOTg0YmYxMzdhY2ViOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JK1BnF5JORjhVD6tO5+xck/pGrF
rvRypW+nzUa3H03611NXumAPE69hk9c3MhdLkNFzfumT0LsELGTzMaJjyF5y9o82
ri566yrgeuHXqZe4MPQoENGNkTs4iPu0dU789qkKvB4a+d6oqwJDi6/cY+5GDXSE
cl/j+aF6mR0mBSKo9OHtT4QijWAUMSuWhQArFB8uRer+1yJJYuH8y6/Y4XYQvJVu
pJUYLMO3Q7Ds8ZZMMp1nx+I0/Uohgf6FaTdHHviJZNzVB0a5C5fQ925wVrMJvb9o
ae/fpR1wqXujIouueEcEvY2nehmtCIrSclqDyO+PKRtBvlpXfd4NuP2QTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMK/8HRvEY43dDyQccmEvxN6zrkPMB8GA1UdIwQY
MBaAFP0sbBpVf1iLZH4XkRpjAONCxmHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMt
ZTEzZGViNGFjN2I3LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMtZTEzZGViNGFjN2I3
LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLstU77E
3ms1uUQjspwhssZ2FCfrN7WHmG0/zsZF1SytgE2QxDcR6oNTR8JLw13kUv6Oe+Tt
lax2tVQQSQ506j+X6NadLq+mh8uYq2WORipTZxkYalUt5wOUiHe8cpYamWSr0HPB
c0pguqC9dAXwknHCJopWX/4dpiVVASqz4r7t3h8dIcIDML4a2E2nltl/OCScCrBg
rxx+DkxF208Dc1z7EWIiC8bli2OOm46jGT59Ug9+74BCLaIQDKBjO+gRUQ2BUhnz
ytUNuDDG6IOIlORTyv/n68FyfK+SjRmQLGirbuiciIJQ2oQU7Wb52lHy1yjq1wPL
hs1lhjdarUyvjA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:41:46 2026 by rpki-client