Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File:                     2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier:          MK6dOCRwEnU+c2PkzEGINQ5wuMchYQ4Q7TvsOUyzs90=
Subject key identifier:   40:B9:F7:32:76:F2:2A:C8:75:AF:95:46:7D:61:5B:7F:35:69:A0:02
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer:       /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial:       019E1D5962F578D720A416BC5191E56888C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number:          07B7
Signing time:             Tue 12 May 2026 18:00:57 +0000
Manifest this update:     Tue 12 May 2026 18:00:57 +0000
Manifest next update:     Wed 13 May 2026 18:00:57 +0000
Files and hashes:         1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: O7KBucZGLIkW6tr7V8sMDoKVxBg1yrBiHSfqryY5jts=)
                          2: GxtZLx_v4ZawHyhAp_9x0t2x-Bc.roa (hash: dCxYAJ2dCEl4aeNXHPw7bhwKpVSx+0iwsl5Y1tfVG2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:62:f5:78:d7:20:a4:16:bc:51:91:e5:68:88:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
        Validity
            Not Before: May 12 18:00:57 2026 GMT
            Not After : May 13 18:00:57 2026 GMT
        Subject: CN=40b9f73276f22ac875af95467d615b7f3569a002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:d0:94:aa:bb:0e:99:1e:cd:c2:6a:7c:e6:
                    19:25:b7:13:60:d4:76:45:26:41:a9:d5:23:bc:39:
                    56:c2:de:ee:62:48:9f:6a:d3:71:46:ef:f3:e0:a8:
                    82:5c:ae:6d:1a:cb:e7:82:26:52:6c:a5:a2:dc:94:
                    6e:02:1d:01:1f:4f:1b:89:39:fa:ed:6e:a1:51:51:
                    23:46:97:0a:98:db:5d:2b:19:91:e2:bb:ed:7c:a6:
                    b2:81:26:9b:eb:42:9e:8d:56:e0:64:84:a3:b8:cd:
                    5e:aa:47:2d:59:1c:00:d3:85:e9:1d:ef:ee:16:cf:
                    ae:14:67:9c:e5:d4:88:53:2a:a5:e4:36:59:07:e0:
                    fa:84:b9:2c:8a:08:68:ff:30:6b:ee:16:51:ad:3b:
                    84:0a:63:2f:d1:8b:de:60:60:c2:db:92:22:b9:6a:
                    b3:a0:fe:89:83:80:20:44:3b:be:fc:86:ca:76:54:
                    2d:5a:18:32:15:9d:31:06:1b:cf:35:7c:8c:56:f0:
                    bc:13:88:c8:bd:ae:57:7c:45:93:bb:6d:8d:55:62:
                    03:a4:e5:81:aa:2f:c1:f5:0f:f5:45:19:ff:6a:19:
                    ff:01:db:de:ca:12:48:66:65:ea:da:ad:84:4e:32:
                    e9:86:6b:25:fa:be:67:fe:4b:a6:7c:0a:e7:85:b8:
                    73:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B9:F7:32:76:F2:2A:C8:75:AF:95:46:7D:61:5B:7F:35:69:A0:02
            X509v3 Authority Key Identifier:
                keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:31:58:d2:f3:7c:30:25:1d:7d:5b:3a:29:e7:2e:81:b5:
         2a:1b:de:21:6b:7b:ff:56:7f:b2:fe:31:ec:98:9a:28:3a:31:
         60:20:db:84:2d:b4:d8:e0:54:59:ff:a4:bb:b7:5d:6f:9a:c8:
         39:a4:a1:a2:50:e3:0d:6e:c5:7c:3d:96:fa:28:63:ac:d0:89:
         05:75:05:22:4a:45:d3:ee:61:f8:95:fa:a6:6d:29:8c:07:6c:
         99:94:79:16:50:1d:0c:f8:44:d1:1d:5b:90:0b:e3:07:0c:ee:
         43:88:a0:87:22:e0:5c:b7:79:50:97:d9:dd:c9:86:26:29:24:
         d7:a1:78:f3:b0:3a:6b:b9:60:5a:86:ff:1e:69:3c:77:40:84:
         07:bd:8c:11:c6:73:b3:1b:b8:e4:c7:8f:a7:59:31:ca:60:36:
         a8:e2:48:28:b9:5a:db:e6:1c:20:5e:cc:cf:da:ec:27:23:be:
         c0:21:a9:d3:b7:68:32:84:9e:d6:b9:14:f5:b7:b5:c6:25:00:
         10:45:f4:c5:f8:75:7e:4b:d0:db:7f:df:8d:4d:49:a3:60:d1:
         93:3a:e7:b9:88:d2:c1:f9:f7:00:ea:ad:d4:fd:2c:c7:ff:b3:
         4d:2f:6c:e2:c3:ac:39:f5:29:a8:63:7a:5e:05:45:66:3b:b7:
         0b:ca:10:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWWL1eNcgpBa8UZHlaIjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZWNlYzk2YTAzNzFhM2FlNjJkN2FhNmRkN2Q5ZTQzYWM1
NWQwMjUwHhcNMjYwNTEyMTgwMDU3WhcNMjYwNTEzMTgwMDU3WjAzMTEwLwYDVQQD
Eyg0MGI5ZjczMjc2ZjIyYWM4NzVhZjk1NDY3ZDYxNWI3ZjM1NjlhMDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiDQlKq7DpkezcJqfOYZJbcTYNR2
RSZBqdUjvDlWwt7uYkifatNxRu/z4KiCXK5tGsvngiZSbKWi3JRuAh0BH08biTn6
7W6hUVEjRpcKmNtdKxmR4rvtfKaygSab60KejVbgZISjuM1eqkctWRwA04XpHe/u
Fs+uFGec5dSIUyql5DZZB+D6hLksigho/zBr7hZRrTuECmMv0YveYGDC25IiuWqz
oP6Jg4AgRDu+/IbKdlQtWhgyFZ0xBhvPNXyMVvC8E4jIva5XfEWTu22NVWIDpOWB
qi/B9Q/1RRn/ahn/AdveyhJIZmXq2q2ETjLphmsl+r5n/kumfArnhbhz9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEC59zJ28irIda+VRn1hW381aaACMB8GA1UdIwQY
MBaAFNvs7JagNxo65i16pt19nkOsVdAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xMzRmMGMtZDkxMS00ODg3LTk2Yjct
YTg3NjY1MjBmZWEyLzEvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xMzRmMGMtZDkxMS00ODg3LTk2YjctYTg3NjY1MjBmZWEy
LzEvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADv0xWNLz
fDAlHX1bOinnLoG1KhveIWt7/1Z/sv4x7JiaKDoxYCDbhC202OBUWf+ku7ddb5rI
OaSholDjDW7FfD2W+ihjrNCJBXUFIkpF0+5h+JX6pm0pjAdsmZR5FlAdDPhE0R1b
kAvjBwzuQ4ighyLgXLd5UJfZ3cmGJikk16F487A6a7lgWob/Hmk8d0CEB72MEcZz
sxu45MePp1kxymA2qOJIKLla2+YcIF7Mz9rsJyO+wCGp07doMoSe1rkU9be1xiUA
EEX0xfh1fkvQ23/fjU1Jo2DRkzrnuYjSwfn3AOqt1P0sx/+zTS9s4sOsOfUpqGN6
XgVFZju3C8oQ4w==
-----END CERTIFICATE-----
Generated at Tue May 12 21:31:24 2026 by rpki-client