Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File:                     VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier:          3JizPk77M04MXoN1FYcpqL6RwgAy++v0YlS9DtWTg18=
Subject key identifier:   15:39:0E:00:79:3F:37:85:29:F5:19:0A:72:CC:9F:8E:F5:71:B7:50
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer:       /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial:       019E1EA31D526B13A2204ABD5001E22AFFF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number:          049C
Signing time:             Wed 13 May 2026 00:01:06 +0000
Manifest this update:     Wed 13 May 2026 00:01:06 +0000
Manifest next update:     Thu 14 May 2026 00:01:06 +0000
Files and hashes:         1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: Zp1IreoFSr+fTcYQqmrkNMDkdJ9MdcFWLYFW/w0PAGo=)
                          2: _Oo5q5cK7WylvggoJmoqFYskB4c.roa (hash: 5KMQiMGpqj0Z920Fo72+vT0buVYau5a+ocsxOU9eZ5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:1d:52:6b:13:a2:20:4a:bd:50:01:e2:2a:ff:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
        Validity
            Not Before: May 13 00:01:06 2026 GMT
            Not After : May 14 00:01:06 2026 GMT
        Subject: CN=15390e00793f378529f5190a72cc9f8ef571b750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:6e:b4:7e:81:dd:c9:7a:9e:bd:74:62:eb:
                    cd:f4:29:b6:2b:92:4b:d9:0f:4c:df:81:6a:54:50:
                    a5:e9:7b:7d:6f:7e:e9:76:58:ad:34:ea:62:10:19:
                    4d:71:f7:b4:33:01:10:c6:44:ce:06:cc:3a:6a:d0:
                    7f:b4:93:70:96:bd:1c:55:0d:20:8b:36:8f:ea:9b:
                    85:fb:90:e2:44:e0:d7:f8:5d:09:e7:ef:66:ba:38:
                    c8:0d:5a:c7:91:3f:28:ee:bf:04:aa:1d:cb:11:62:
                    6e:f3:85:6b:81:c9:c2:32:2f:f1:df:8a:93:26:63:
                    42:f4:58:d6:d7:c5:b8:40:7f:4a:77:f6:f7:43:49:
                    87:14:64:fe:f6:e4:fa:0c:a5:06:f2:15:cf:96:b5:
                    17:17:28:3f:e6:2f:d1:50:50:19:f9:40:f2:47:44:
                    ab:94:3b:fa:47:a0:f5:a8:e2:8b:1b:2c:dd:8e:f4:
                    90:0c:2b:77:be:6a:39:69:dc:e5:c6:c9:29:51:0f:
                    1d:bc:70:22:4f:b4:64:df:65:de:d1:55:e4:d5:7a:
                    ed:f4:09:f7:ad:5c:c5:33:42:d5:60:c6:f1:39:83:
                    6d:45:70:92:fe:f8:68:3f:92:0b:27:ff:46:51:21:
                    be:df:c2:ee:7c:50:ee:76:de:59:c8:88:48:f7:9d:
                    63:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:39:0E:00:79:3F:37:85:29:F5:19:0A:72:CC:9F:8E:F5:71:B7:50
            X509v3 Authority Key Identifier:
                keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:70:94:aa:fa:8f:c6:81:3f:3c:4c:cf:e0:f1:10:d8:ea:18:
         6b:69:49:78:a2:9f:fd:45:5c:3c:d2:6b:ff:b2:89:21:87:df:
         4d:17:bb:e2:28:79:31:fa:9f:87:96:70:de:6b:a7:e3:81:0b:
         22:77:21:ac:b3:d0:70:f1:87:43:8b:c1:88:bb:fe:0d:86:61:
         07:e7:8f:bb:f8:10:9a:96:27:9c:e8:38:ed:d0:ae:c8:35:e3:
         9e:87:db:3d:60:4a:a1:40:b2:16:46:57:5e:e0:50:1f:0b:31:
         d2:5e:81:40:f0:05:6e:64:02:61:61:96:13:66:f7:5d:2e:89:
         9f:99:53:32:9d:ae:ad:e6:a1:34:ea:9b:04:fb:e4:79:10:cf:
         a5:1f:ad:40:d5:0e:dc:b3:cb:c7:4b:b6:2b:12:23:af:17:3c:
         2b:ea:a8:2b:4e:1e:03:62:fe:75:b2:07:a7:fe:14:cb:90:a1:
         48:cf:fc:0e:80:f3:1d:8c:80:b1:0e:d0:3d:34:62:b2:f5:16:
         b4:e6:c2:0d:3e:36:52:7c:68:08:68:65:f1:89:c9:47:f5:83:
         63:f9:5c:b6:ef:95:ef:eb:7e:06:62:84:73:3b:3f:5d:a8:4d:
         96:61:76:8b:26:eb:43:e9:c3:57:af:26:fe:d3:af:59:f3:77:
         08:22:49:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eox1SaxOiIEq9UAHiKv/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NjFkOTY0ZGY0YTg2ZGI4ZmZiOTlhYTg5NTgyZGE2OGEz
MDkwOGMwHhcNMjYwNTEzMDAwMTA2WhcNMjYwNTE0MDAwMTA2WjAzMTEwLwYDVQQD
EygxNTM5MGUwMDc5M2YzNzg1MjlmNTE5MGE3MmNjOWY4ZWY1NzFiNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn5utH6B3cl6nr10YuvN9Cm2K5JL
2Q9M34FqVFCl6Xt9b37pdlitNOpiEBlNcfe0MwEQxkTOBsw6atB/tJNwlr0cVQ0g
izaP6puF+5DiRODX+F0J5+9mujjIDVrHkT8o7r8Eqh3LEWJu84VrgcnCMi/x34qT
JmNC9FjW18W4QH9Kd/b3Q0mHFGT+9uT6DKUG8hXPlrUXFyg/5i/RUFAZ+UDyR0Sr
lDv6R6D1qOKLGyzdjvSQDCt3vmo5adzlxskpUQ8dvHAiT7Rk32Xe0VXk1Xrt9An3
rVzFM0LVYMbxOYNtRXCS/vhoP5ILJ/9GUSG+38LufFDudt5ZyIhI951juwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBU5DgB5PzeFKfUZCnLMn471cbdQMB8GA1UdIwQY
MBaAFFZh2WTfSobbj/uZqolYLaaKMJCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYt
M2Q0MzliN2NkZTcyLzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYtM2Q0MzliN2NkZTcy
LzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHCUqvqP
xoE/PEzP4PEQ2OoYa2lJeKKf/UVcPNJr/7KJIYffTRe74ih5Mfqfh5Zw3mun44EL
InchrLPQcPGHQ4vBiLv+DYZhB+ePu/gQmpYnnOg47dCuyDXjnofbPWBKoUCyFkZX
XuBQHwsx0l6BQPAFbmQCYWGWE2b3XS6Jn5lTMp2ureahNOqbBPvkeRDPpR+tQNUO
3LPLx0u2KxIjrxc8K+qoK04eA2L+dbIHp/4Uy5ChSM/8DoDzHYyAsQ7QPTRisvUW
tObCDT42UnxoCGhl8YnJR/WDY/lctu+V7+t+BmKEczs/XahNlmF2iybrQ+nDV68m
/tOvWfN3CCJJPw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:43:25 2026 by rpki-client