Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
File:                     Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json)
Hash identifier:          +7jrCtSLO0p9GHdxHo/1cb7W24Q9TboKNI3PUlBHhNw=
Subject key identifier:   6E:57:C6:D0:BE:CD:3C:8D:30:9A:BC:C5:9D:A8:02:4E:D6:BB:6D:2F
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Certificate issuer:       /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial:       019E1ED9DD1FCD13864BC4E9ECEC6CEF8387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 01:00:54 +0000
Manifest this update:     Wed 13 May 2026 01:00:54 +0000
Manifest next update:     Thu 14 May 2026 01:00:54 +0000
Files and hashes:         1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: nTDFapR50JOz9d9eBN0cM9slKakFHXipdZ00uuhR0YQ=)
                          2: kYVHDkjWpBomTAXvZtm-ybsEw4g.roa (hash: 6LPY5S+V1vJP40u2fVqFKReWSp6f+FzxIr8cYQv0/dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:dd:1f:cd:13:86:4b:c4:e9:ec:ec:6c:ef:83:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
        Validity
            Not Before: May 13 01:00:54 2026 GMT
            Not After : May 14 01:00:54 2026 GMT
        Subject: CN=6e57c6d0becd3c8d309abcc59da8024ed6bb6d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c6:5a:94:6e:d2:16:5a:00:90:d0:45:01:da:
                    cc:23:83:8a:4a:ac:bd:31:7c:b0:64:d8:43:6c:1b:
                    ba:99:4f:28:35:d1:55:5a:6f:06:b4:04:b0:ee:10:
                    52:99:15:3e:6c:c6:1b:25:1f:58:56:8e:8b:c1:3a:
                    93:07:94:de:ac:32:a4:5e:02:3a:64:69:91:cf:da:
                    53:a9:5d:ca:b1:5a:54:0c:31:02:b7:b4:78:3b:31:
                    95:b0:18:b2:26:e0:58:81:0b:fc:f0:06:01:55:84:
                    7d:0b:1d:77:c3:2d:a0:9c:a3:c7:49:e6:0e:33:b9:
                    ca:15:42:8f:52:85:0a:ac:0f:94:88:f2:cb:a5:cf:
                    dd:ef:3a:ea:18:59:4b:b9:5d:2f:94:d1:48:2e:f7:
                    bb:36:9c:a2:d5:20:94:d3:76:a2:ed:da:6a:d1:5d:
                    fb:b5:84:c9:74:31:d3:d3:19:d4:8d:09:5f:ec:51:
                    54:7b:78:7e:7b:cc:df:78:b8:80:52:3e:1d:99:10:
                    7c:8c:ab:d2:cb:3f:40:48:c0:4b:89:c2:fd:f7:2c:
                    0f:e1:64:3f:22:f0:3d:30:ac:4a:7c:9d:af:29:df:
                    44:87:d2:f7:4e:84:15:a1:f7:80:d1:80:b5:d9:26:
                    cd:94:16:7a:99:f2:6e:f8:ba:9c:0e:df:51:50:a1:
                    98:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:57:C6:D0:BE:CD:3C:8D:30:9A:BC:C5:9D:A8:02:4E:D6:BB:6D:2F
            X509v3 Authority Key Identifier:
                keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bd:44:94:d8:fc:e0:f2:6f:fe:de:0d:e9:d3:02:d6:d9:3f:
         67:85:6a:29:6c:bc:eb:b9:df:81:ab:a8:3b:03:36:49:84:28:
         66:e6:0e:75:aa:e9:9d:40:76:e0:96:2c:0d:4f:61:ae:05:ad:
         ab:a4:33:09:05:a6:8a:50:b6:b5:dd:bc:5d:d2:6d:69:ea:d2:
         a7:10:30:e9:aa:06:ca:d2:d3:0c:f1:1b:58:22:c9:bd:e9:42:
         72:10:e7:49:60:7e:bc:41:c2:3a:6a:e4:fe:84:4e:6e:69:45:
         51:af:01:e1:17:02:72:a3:91:0d:21:fa:b7:fd:8a:a1:19:2b:
         54:23:2c:79:c6:26:80:91:16:71:df:6c:90:26:81:98:3e:ab:
         d9:ea:bc:24:4d:bf:98:be:d8:8f:f3:68:68:94:af:2e:52:06:
         42:a3:09:83:35:a1:40:7c:3c:a2:39:cd:ed:3c:7b:79:55:ae:
         57:cb:e8:5b:75:1a:b1:41:37:36:28:ef:0f:26:82:f4:d6:cb:
         46:89:bb:01:9f:a5:62:a8:ea:c3:4e:85:82:8b:8e:98:0a:d3:
         37:27:dd:d9:8b:f7:95:d5:b2:48:e2:87:1c:59:fe:0f:1d:8e:
         b9:9d:d5:d6:c1:71:ea:24:3d:cf:f3:89:ca:fb:76:49:9b:82:
         8e:e6:7e:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2d0fzROGS8Tp7Oxs74OHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyN2IzNDIwYzI1MDEzNzk1ZTgyMmEyYWU1MGQzOGRjMWQz
ODI3OTMwHhcNMjYwNTEzMDEwMDU0WhcNMjYwNTE0MDEwMDU0WjAzMTEwLwYDVQQD
Eyg2ZTU3YzZkMGJlY2QzYzhkMzA5YWJjYzU5ZGE4MDI0ZWQ2YmI2ZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMZalG7SFloAkNBFAdrMI4OKSqy9
MXywZNhDbBu6mU8oNdFVWm8GtASw7hBSmRU+bMYbJR9YVo6LwTqTB5TerDKkXgI6
ZGmRz9pTqV3KsVpUDDECt7R4OzGVsBiyJuBYgQv88AYBVYR9Cx13wy2gnKPHSeYO
M7nKFUKPUoUKrA+UiPLLpc/d7zrqGFlLuV0vlNFILve7Npyi1SCU03ai7dpq0V37
tYTJdDHT0xnUjQlf7FFUe3h+e8zfeLiAUj4dmRB8jKvSyz9ASMBLicL99ywP4WQ/
IvA9MKxKfJ2vKd9Eh9L3ToQVofeA0YC12SbNlBZ6mfJu+LqcDt9RUKGYxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5XxtC+zTyNMJq8xZ2oAk7Wu20vMB8GA1UdIwQY
MBaAFDJ7NCDCUBN5XoIqKuUNONwdOCeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQt
NjY4MmIwN2ZhOTQ3LzEvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQtNjY4MmIwN2ZhOTQ3
LzEvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATL1ElNj8
4PJv/t4N6dMC1tk/Z4VqKWy867nfgauoOwM2SYQoZuYOdarpnUB24JYsDU9hrgWt
q6QzCQWmilC2td28XdJtaerSpxAw6aoGytLTDPEbWCLJvelCchDnSWB+vEHCOmrk
/oRObmlFUa8B4RcCcqORDSH6t/2KoRkrVCMsecYmgJEWcd9skCaBmD6r2eq8JE2/
mL7Yj/NoaJSvLlIGQqMJgzWhQHw8ojnN7Tx7eVWuV8voW3UasUE3NijvDyaC9NbL
Rom7AZ+lYqjqw06FgouOmArTNyfd2Yv3ldWySOKHHFn+Dx2OuZ3V1sFx6iQ9z/OJ
yvt2SZuCjuZ+SA==
-----END CERTIFICATE-----
Generated at Wed May 13 11:02:39 2026 by rpki-client