Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
File:                     71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json)
Hash identifier:          J5mn4G8FvV/YMGMKShEdivqlv/lsshGVeWHgbma2yYg=
Subject key identifier:   D4:65:2E:B2:B0:7F:85:D9:1D:31:3E:38:0E:50:F8:74:E3:6C:9E:56
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Certificate issuer:       /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial:       019E1D59C059191C23953935CB9CEA0BF7D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
Manifest number:          136F
Signing time:             Tue 12 May 2026 18:01:21 +0000
Manifest this update:     Tue 12 May 2026 18:01:21 +0000
Manifest next update:     Wed 13 May 2026 18:01:21 +0000
Files and hashes:         1: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: iW8VT/3GK7Gr/4a0BMosoiCbrLZP7Pq/TBzsaFM36LY=)
                          2: FUAG3jq8oW-DG-4OVip2j9_K6zM.roa (hash: X1mjWztgnVQSSGLyPzOsDPZqwti1AiSyexfKdPbUPdM=)
                          3: MkcX9GenTKmR5jedlZaDXtOqlb8.roa (hash: HYFxXiizcZIEgsQl7ewj/koOWIU6qo+dNkAHdlTz/+A=)
                          4: U0tl-UVjdgoquFk_RP8dvu9_bzA.roa (hash: fvBK5Ool8MKV1KD0bY966e8iK9zhJNvA5b6LpcKGcn8=)
                          5: WTuF7GM_g7zyE_8wXHuTXrCUE8Q.roa (hash: ToxcyUtODIjk+vfIoE2fDiyxO6Xp7CGXZG+vHQsn3hA=)
                          6: i8DSsz1zrzQenpw3T2bP8cFRsq8.roa (hash: oEuQy5j/C31ArjuLYoalrrQGCWj0f7zf2ngtaCvBjYo=)
                          7: sUrIEpm5C4rBhagjdZq3jf6wqrY.roa (hash: jRLTkZKX0jd/Ii5LEPQsVlaAGfAK0xdao7SE2gBfvAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:c0:59:19:1c:23:95:39:35:cb:9c:ea:0b:f7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
        Validity
            Not Before: May 12 18:01:21 2026 GMT
            Not After : May 13 18:01:21 2026 GMT
        Subject: CN=d4652eb2b07f85d91d313e380e50f874e36c9e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:cf:80:43:f6:79:0f:05:8e:63:d3:29:58:
                    a6:e1:28:8b:eb:88:6d:22:1a:07:61:2d:a9:30:e9:
                    26:6d:c9:86:65:6b:7c:8f:c3:ae:ea:68:62:2c:c8:
                    12:27:9b:86:89:fc:b7:5b:af:6f:19:59:59:31:75:
                    bf:5d:89:c4:6f:cb:01:1e:6a:34:ee:6c:fc:48:fd:
                    87:38:a3:77:83:11:44:42:fe:62:51:ba:05:2a:7e:
                    24:08:8c:70:e7:81:61:01:6e:0f:dd:1c:65:b5:d2:
                    b5:09:38:ae:9e:24:c9:ea:c5:6b:8b:bd:58:b3:55:
                    ba:76:d8:83:2e:e5:5d:12:e7:5a:3e:c4:5d:7d:02:
                    6f:9d:df:25:dc:f4:26:0f:01:03:20:d1:d0:f1:4f:
                    68:c5:cc:90:d4:ec:e6:ad:f4:7a:55:97:17:5b:a6:
                    58:cf:52:0d:9c:ae:ee:27:f0:eb:72:b0:31:da:69:
                    1c:1e:33:7a:44:89:fb:39:49:9e:25:85:be:59:7e:
                    45:71:c4:a2:d1:2c:10:de:7e:31:83:8c:9f:be:ac:
                    d0:ac:ea:f2:af:b0:01:9a:76:af:f7:70:ba:aa:35:
                    38:aa:7b:71:62:4f:e8:31:cf:ae:1b:28:fb:4c:6f:
                    d6:d2:6d:cc:54:77:98:e1:3a:3e:f7:a0:52:c0:c0:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:65:2E:B2:B0:7F:85:D9:1D:31:3E:38:0E:50:F8:74:E3:6C:9E:56
            X509v3 Authority Key Identifier:
                keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:80:6f:47:31:d6:40:ef:e9:c7:68:e5:7c:54:17:14:c0:55:
         bd:ce:c9:48:56:1d:78:8f:e7:47:7b:20:e1:ca:1c:7f:88:72:
         d2:ae:34:54:4d:f1:f4:6d:64:66:1f:aa:de:d2:9c:83:f5:ea:
         e6:21:66:8f:8c:82:69:14:b0:9a:d2:10:55:a0:eb:4b:19:98:
         a8:96:93:71:9f:bb:6e:ed:d0:5d:73:9f:4e:38:cc:14:60:6f:
         fb:7c:47:3b:aa:0c:f2:bd:c2:0e:42:2b:a4:e0:a1:b0:1e:c0:
         e6:7b:bb:f5:e4:ce:5e:5c:70:eb:65:de:0b:56:0a:dc:7b:af:
         8d:5e:0d:bb:bd:6e:75:e4:02:84:24:64:28:70:d6:84:16:9d:
         60:f3:49:ca:73:71:a2:7c:24:ed:2f:d2:7b:84:5d:8f:d7:b2:
         a2:d8:30:70:46:21:9f:bc:5e:e5:e7:90:37:e5:c1:3e:c4:71:
         d2:e1:6e:f3:c3:1e:67:6d:01:a0:09:1b:af:cf:d8:78:e7:8d:
         38:2b:6f:67:65:42:cb:33:55:49:ba:80:ba:85:64:da:17:db:
         c0:76:56:6e:43:e2:46:c5:5c:0d:09:49:63:15:5f:8f:44:26:
         3b:59:95:af:46:7d:37:a4:d3:87:2d:5a:8d:fb:50:fe:d3:0c:
         2e:58:f1:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWcBZGRwjlTk1y5zqC/fXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy
NDhlMTQwHhcNMjYwNTEyMTgwMTIxWhcNMjYwNTEzMTgwMTIxWjAzMTEwLwYDVQQD
EyhkNDY1MmViMmIwN2Y4NWQ5MWQzMTNlMzgwZTUwZjg3NGUzNmM5ZTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh7PgEP2eQ8FjmPTKVim4SiL64ht
IhoHYS2pMOkmbcmGZWt8j8Ou6mhiLMgSJ5uGify3W69vGVlZMXW/XYnEb8sBHmo0
7mz8SP2HOKN3gxFEQv5iUboFKn4kCIxw54FhAW4P3RxltdK1CTiuniTJ6sVri71Y
s1W6dtiDLuVdEudaPsRdfQJvnd8l3PQmDwEDINHQ8U9oxcyQ1OzmrfR6VZcXW6ZY
z1INnK7uJ/DrcrAx2mkcHjN6RIn7OUmeJYW+WX5FccSi0SwQ3n4xg4yfvqzQrOry
r7ABmnav93C6qjU4qntxYk/oMc+uGyj7TG/W0m3MVHeY4To+96BSwMCLQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRlLrKwf4XZHTE+OA5Q+HTjbJ5WMB8GA1UdIwQY
MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt
ZmJjNmZjYjVlN2E2LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2
LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoBvRzHW
QO/px2jlfFQXFMBVvc7JSFYdeI/nR3sg4cocf4hy0q40VE3x9G1kZh+q3tKcg/Xq
5iFmj4yCaRSwmtIQVaDrSxmYqJaTcZ+7bu3QXXOfTjjMFGBv+3xHO6oM8r3CDkIr
pOChsB7A5nu79eTOXlxw62XeC1YK3HuvjV4Nu71udeQChCRkKHDWhBadYPNJynNx
onwk7S/Se4Rdj9eyotgwcEYhn7xe5eeQN+XBPsRx0uFu88MeZ20BoAkbr8/YeOeN
OCtvZ2VCyzNVSbqAuoVk2hfbwHZWbkPiRsVcDQlJYxVfj0QmO1mVr0Z9N6TThy1a
jftQ/tMMLljxow==
-----END CERTIFICATE-----
Generated at Wed May 13 00:19:09 2026 by rpki-client