Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
File:                     _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json)
Hash identifier:          vljHYfLDNrn6rB0i30af4m62O7RnSudZ9fil+r6lP2I=
Subject key identifier:   8B:7A:14:45:F7:7A:0E:D6:06:5C:8D:D6:6C:35:BA:01:BB:F4:6B:5D
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Certificate issuer:       /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial:       019E1FECA185FA3B3FBFE50DB5F8A78B7AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 06:01:01 +0000
Manifest this update:     Wed 13 May 2026 06:01:01 +0000
Manifest next update:     Thu 14 May 2026 06:01:01 +0000
Files and hashes:         1: VN6UE1yUAoIOdq7FN7_6LWg0xFQ.roa (hash: i1/itHXENkjfqquOuYnqwae8exirw7XvZQTu+xWF/aw=)
                          2: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: 0li9jv5cMHhsZBSHob6tOWtwvTwqk8s/dWv+Q0K0Zmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:a1:85:fa:3b:3f:bf:e5:0d:b5:f8:a7:8b:7a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
        Validity
            Not Before: May 13 06:01:01 2026 GMT
            Not After : May 14 06:01:01 2026 GMT
        Subject: CN=8b7a1445f77a0ed6065c8dd66c35ba01bbf46b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:db:81:0a:d9:0f:9d:47:a0:81:f7:83:3b:17:
                    c7:5e:f7:44:45:96:7a:28:c3:40:c2:72:06:60:dc:
                    14:08:5e:b6:e2:2f:f6:d3:09:15:07:0e:42:c3:a6:
                    24:a3:ce:a1:89:f2:08:e1:9a:4d:3a:3f:18:25:45:
                    ec:6a:f9:eb:5e:f6:01:da:38:a9:78:6a:66:6d:e3:
                    c1:d7:de:81:09:71:5f:e0:65:57:07:0b:70:65:f6:
                    93:ab:d4:21:2c:9c:d4:24:17:d3:e7:97:be:10:f3:
                    97:fb:d4:8e:90:57:f8:b1:f9:8e:10:27:e7:61:b2:
                    ef:4e:94:49:df:0d:e8:2b:00:52:87:ee:9a:df:ef:
                    0d:0d:ab:85:1d:f7:b6:c5:4e:4d:b1:e0:57:e8:b1:
                    4b:4c:70:84:e0:de:88:89:77:a3:b1:f9:11:ad:d0:
                    fa:cf:ae:c6:91:10:a4:04:51:a5:ff:a7:66:59:a5:
                    b8:dc:92:db:10:93:65:3e:1e:3f:57:a6:4b:56:1f:
                    33:4f:ec:92:ab:24:b7:58:cb:31:18:56:d6:bc:f0:
                    e1:4f:17:52:96:5f:07:99:3a:ef:27:07:7b:38:c1:
                    ff:f7:06:44:1f:07:fb:2a:09:fd:b6:a3:fd:01:ca:
                    88:c8:4a:0f:b1:da:86:67:4c:70:4b:26:18:c3:8b:
                    16:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7A:14:45:F7:7A:0E:D6:06:5C:8D:D6:6C:35:BA:01:BB:F4:6B:5D
            X509v3 Authority Key Identifier:
                keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:be:32:5c:db:08:49:70:f7:9f:c7:43:dd:16:71:44:67:2c:
         9d:39:e7:b2:d9:55:ad:45:93:d3:a0:c4:5b:62:96:bc:d7:9b:
         e1:f0:ae:3d:13:fc:cf:01:4a:3c:8c:a7:ff:3c:4c:c7:1e:df:
         6a:3f:d6:ec:e1:3e:4a:66:03:32:7d:1a:9e:5e:e1:86:f0:e5:
         d5:81:6d:95:c1:2f:99:ed:86:14:33:98:aa:60:d3:91:0a:bb:
         ff:da:54:b5:0f:a5:9a:8c:c3:ec:59:29:26:6a:76:2f:c1:ef:
         62:f4:ad:83:52:65:8e:20:2b:f0:7d:01:b0:39:92:8f:b6:d5:
         af:9b:bb:19:d3:57:be:bc:64:bb:99:fb:8f:a4:5f:f3:9b:a6:
         ef:37:c9:c8:46:e7:d9:d5:56:d1:68:61:18:c8:53:ba:84:0b:
         45:d1:05:e7:0e:2f:28:a1:c7:6f:d7:5d:4c:a0:ac:a8:4b:3a:
         80:76:94:79:f8:66:d1:81:6c:c2:ea:92:bd:76:86:9e:5f:e5:
         2e:90:ad:99:66:3d:38:0d:70:ba:ce:33:e0:4f:da:09:3e:1c:
         85:88:eb:06:c8:e4:66:0b:94:b8:71:7c:a7:be:71:f6:07:65:
         a6:77:c4:a3:50:d4:9d:03:84:b5:fe:43:e6:88:6f:38:e9:d3:
         b7:d5:c6:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7KGF+js/v+UNtfini3rtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMjE1MTBlNzRhNWI2MTFhODgzNjZhNjRlZDJmYjhlNjAx
NTQyOTMwHhcNMjYwNTEzMDYwMTAxWhcNMjYwNTE0MDYwMTAxWjAzMTEwLwYDVQQD
Eyg4YjdhMTQ0NWY3N2EwZWQ2MDY1YzhkZDY2YzM1YmEwMWJiZjQ2YjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29uBCtkPnUeggfeDOxfHXvdERZZ6
KMNAwnIGYNwUCF624i/20wkVBw5Cw6Yko86hifII4ZpNOj8YJUXsavnrXvYB2jip
eGpmbePB196BCXFf4GVXBwtwZfaTq9QhLJzUJBfT55e+EPOX+9SOkFf4sfmOECfn
YbLvTpRJ3w3oKwBSh+6a3+8NDauFHfe2xU5NseBX6LFLTHCE4N6IiXejsfkRrdD6
z67GkRCkBFGl/6dmWaW43JLbEJNlPh4/V6ZLVh8zT+ySqyS3WMsxGFbWvPDhTxdS
ll8HmTrvJwd7OMH/9wZEHwf7Kgn9tqP9AcqIyEoPsdqGZ0xwSyYYw4sWdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIt6FEX3eg7WBlyN1mw1ugG79GtdMB8GA1UdIwQY
MBaAFP4hUQ50pbYRqINmpk7S+45gFUKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYt
NTlkNjQ5YzBkYjVkLzEvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYtNTlkNjQ5YzBkYjVk
LzEvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANr4yXNsI
SXD3n8dD3RZxRGcsnTnnstlVrUWT06DEW2KWvNeb4fCuPRP8zwFKPIyn/zxMxx7f
aj/W7OE+SmYDMn0anl7hhvDl1YFtlcEvme2GFDOYqmDTkQq7/9pUtQ+lmozD7Fkp
Jmp2L8HvYvStg1JljiAr8H0BsDmSj7bVr5u7GdNXvrxku5n7j6Rf85um7zfJyEbn
2dVW0WhhGMhTuoQLRdEF5w4vKKHHb9ddTKCsqEs6gHaUefhm0YFswuqSvXaGnl/l
LpCtmWY9OA1wus4z4E/aCT4chYjrBsjkZguUuHF8p75x9gdlpnfEo1DUnQOEtf5D
5ohvOOnTt9XG4g==
-----END CERTIFICATE-----
Generated at Wed May 13 12:32:10 2026 by rpki-client