Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
File:                     Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft (raw, json)
Hash identifier:          Kc1cvG5OoyTW+s0uBXCvB3UItGH6KXXE9CNkTLCpIAw=
Subject key identifier:   6D:EE:92:8D:EB:5E:DB:0E:93:82:5E:DC:1D:68:A1:C6:E3:15:FA:5F
Authority key identifier: 03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
Certificate issuer:       /CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Certificate serial:       019E1EA3936541B878FC872FD51DDFFA6907
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
Manifest number:          011E
Signing time:             Wed 13 May 2026 00:01:37 +0000
Manifest this update:     Wed 13 May 2026 00:01:37 +0000
Manifest next update:     Thu 14 May 2026 00:01:37 +0000
Files and hashes:         1: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl (hash: 5hluGi52XYK/OtopLRXwsPIGmCkyCAHJ73mDswsQObA=)
                          2: eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa (hash: OdzMUAVnw7I56wJuOq/9aOkYjscK9Sg8yKOxq15PvwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:93:65:41:b8:78:fc:87:2f:d5:1d:df:fa:69:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
        Validity
            Not Before: May 13 00:01:37 2026 GMT
            Not After : May 14 00:01:37 2026 GMT
        Subject: CN=6dee928deb5edb0e93825edc1d68a1c6e315fa5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0a:9a:db:39:21:3f:b8:42:36:a8:d9:a3:7b:
                    8c:33:b2:73:52:36:c3:16:cd:e5:c8:c2:34:a8:68:
                    1b:78:64:45:39:2e:68:92:cf:29:61:02:31:3a:76:
                    cc:0f:d4:48:d8:23:b7:0f:ef:d4:9f:82:7e:7e:97:
                    97:54:34:55:25:5c:b5:51:0b:83:a9:c2:b2:f7:40:
                    81:c1:2a:e3:71:7c:df:8e:18:c1:c5:fc:b8:13:5f:
                    b8:a0:4b:95:19:8f:26:fb:06:f7:f0:c6:48:1f:d9:
                    fb:6f:92:3c:2b:0c:5f:f7:27:85:c8:7c:1d:7e:2d:
                    33:f3:08:14:97:e3:14:a5:cd:46:47:0c:29:54:54:
                    c0:c0:19:e5:3b:d6:8f:a0:4b:3b:ef:3c:e8:b0:58:
                    a7:13:65:42:5f:82:d5:d1:0e:ff:8a:19:50:31:f2:
                    2d:af:fb:f7:17:36:ee:b7:7b:fe:4e:da:85:19:75:
                    81:d4:58:7e:e8:6d:be:f2:d3:ed:f6:c3:d3:a7:c5:
                    d1:a1:a3:27:a5:17:c9:9d:10:73:c0:bf:32:ad:9f:
                    48:f5:83:f8:91:87:f4:5d:03:b1:c4:4b:f3:1f:fd:
                    18:3b:d0:61:68:ae:5f:17:3c:14:09:e7:e0:92:d5:
                    ef:20:74:d7:9b:0f:eb:f4:36:61:0f:84:2c:e7:fc:
                    6b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EE:92:8D:EB:5E:DB:0E:93:82:5E:DC:1D:68:A1:C6:E3:15:FA:5F
            X509v3 Authority Key Identifier:
                keyid:03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b5:5a:11:06:3f:51:4e:cb:1d:a5:3f:5d:11:1b:19:8a:61:
         39:62:91:ac:89:0e:bb:68:f0:72:a3:09:71:6e:e8:8e:a3:7d:
         49:dd:a5:98:76:e4:e0:81:23:4e:1f:90:c8:0d:84:a0:88:61:
         ba:42:05:17:bb:d5:8e:50:e0:d1:c7:e5:00:1c:a9:5a:6f:9c:
         b0:24:2f:29:a9:58:73:89:0a:65:94:c8:8d:55:b6:f7:c4:09:
         a7:0a:50:9e:7f:4d:df:2f:2e:71:33:a0:a4:78:21:83:03:86:
         57:c4:48:eb:cd:e0:e5:f2:5e:9d:21:23:88:cf:c6:b2:11:ff:
         e7:ec:44:e5:56:50:c9:c0:3a:d8:18:b8:ce:db:70:e2:0b:c0:
         5a:50:04:17:62:15:72:74:24:c4:85:6b:68:82:d0:de:73:e5:
         0c:d6:4e:a3:64:3f:cc:2a:90:37:c2:62:a4:df:d8:0a:ae:bb:
         b3:a3:37:f1:c7:5a:c7:16:d4:be:69:0b:33:77:c3:43:06:71:
         52:d9:0d:a4:c9:af:05:b1:1a:5a:62:ae:d0:fc:5c:e5:a6:06:
         7d:76:12:e3:71:15:f0:6b:6a:33:28:ae:6d:20:e2:3a:81:42:
         e6:86:23:2d:5c:0c:bb:45:60:f7:75:a1:aa:5d:46:a8:2e:af:
         02:fb:50:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo5NlQbh4/Icv1R3f+mkHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjc3NjljMWEwMWUxMjUwZjFmMjhhNjA1YjVjOWQ5YjZk
MzQxOWEwHhcNMjYwNTEzMDAwMTM3WhcNMjYwNTE0MDAwMTM3WjAzMTEwLwYDVQQD
Eyg2ZGVlOTI4ZGViNWVkYjBlOTM4MjVlZGMxZDY4YTFjNmUzMTVmYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowqa2zkhP7hCNqjZo3uMM7JzUjbD
Fs3lyMI0qGgbeGRFOS5oks8pYQIxOnbMD9RI2CO3D+/Un4J+fpeXVDRVJVy1UQuD
qcKy90CBwSrjcXzfjhjBxfy4E1+4oEuVGY8m+wb38MZIH9n7b5I8Kwxf9yeFyHwd
fi0z8wgUl+MUpc1GRwwpVFTAwBnlO9aPoEs77zzosFinE2VCX4LV0Q7/ihlQMfIt
r/v3Fzbut3v+TtqFGXWB1Fh+6G2+8tPt9sPTp8XRoaMnpRfJnRBzwL8yrZ9I9YP4
kYf0XQOxxEvzH/0YO9BhaK5fFzwUCefgktXvIHTXmw/r9DZhD4Qs5/xrGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3uko3rXtsOk4Je3B1oocbjFfpfMB8GA1UdIwQY
MBaAFAMndpwaAeElDx8opgW1ydm200GaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlkMm5Cb0I0U1VQSHlpbUJiWEoyYmJUUVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kOTRlMjktYWQ5NC00YjBlLWFmYTIt
NjUzM2I3MmM2YTZiLzEvQXlkMm5Cb0I0U1VQSHlpbUJiWEoyYmJUUVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kOTRlMjktYWQ5NC00YjBlLWFmYTItNjUzM2I3MmM2YTZi
LzEvQXlkMm5Cb0I0U1VQSHlpbUJiWEoyYmJUUVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbVaEQY/
UU7LHaU/XREbGYphOWKRrIkOu2jwcqMJcW7ojqN9Sd2lmHbk4IEjTh+QyA2EoIhh
ukIFF7vVjlDg0cflABypWm+csCQvKalYc4kKZZTIjVW298QJpwpQnn9N3y8ucTOg
pHghgwOGV8RI683g5fJenSEjiM/GshH/5+xE5VZQycA62Bi4zttw4gvAWlAEF2IV
cnQkxIVraILQ3nPlDNZOo2Q/zCqQN8JipN/YCq67s6M38cdaxxbUvmkLM3fDQwZx
UtkNpMmvBbEaWmKu0Pxc5aYGfXYS43EV8GtqMyiubSDiOoFC5oYjLVwMu0Vg93Wh
ql1GqC6vAvtQ2g==
-----END CERTIFICATE-----
Generated at Wed May 13 02:21:22 2026 by rpki-client