Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
File:                     IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft (raw, json)
Hash identifier:          AGsC28pHQlGD6qYsZLezCrk4IZqD4qsmSw5uque+Fzs=
Subject key identifier:   61:18:BD:F0:AE:31:5F:FB:D6:BC:3C:24:6C:56:57:88:DF:AB:70:A3
Authority key identifier: 21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
Certificate issuer:       /CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Certificate serial:       019E1F109C96C33569852DC10F3196D24888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 02:00:42 +0000
Manifest this update:     Wed 13 May 2026 02:00:42 +0000
Manifest next update:     Thu 14 May 2026 02:00:42 +0000
Files and hashes:         1: IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl (hash: IELw0tkXN4qmuCryNtaLXG3Fed3puh65+zBFIlRgUgs=)
                          2: ToOm_DRG8L881LK0bTvQrJEi9zE.roa (hash: DCNqoXRqfdwODxjtc8J2/AVxGOKRF24UDLD2fHtc4vM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:9c:96:c3:35:69:85:2d:c1:0f:31:96:d2:48:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
        Validity
            Not Before: May 13 02:00:42 2026 GMT
            Not After : May 14 02:00:42 2026 GMT
        Subject: CN=6118bdf0ae315ffbd6bc3c246c565788dfab70a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d5:f4:9a:7d:ea:c4:43:5a:1d:e1:3f:de:af:
                    12:d2:ac:51:65:96:dc:79:99:56:f5:2f:9a:41:e9:
                    44:f7:85:ed:9e:21:6c:9a:88:54:47:ec:e5:c6:78:
                    0f:23:1d:09:c2:e8:3a:36:ba:3e:09:65:c4:55:6f:
                    10:2f:0a:bc:28:9b:c7:96:82:7d:4c:85:eb:39:19:
                    65:b2:2e:ab:8c:ee:18:20:ea:8c:cd:b4:cd:fd:c0:
                    8f:bb:58:eb:63:b4:0d:88:32:7e:da:35:f0:a9:86:
                    7f:19:56:e9:a9:e4:97:4b:b3:33:29:99:42:08:3a:
                    72:5f:31:db:4f:39:b2:4b:f8:fb:45:d9:01:b3:af:
                    3b:64:4c:3a:64:bf:18:97:87:d4:4d:5e:2b:5f:6b:
                    33:3d:72:a8:27:d6:55:6c:4d:ad:f2:d4:1c:4f:ce:
                    1f:4c:71:c4:ae:b2:20:56:a4:56:b5:1f:30:71:d9:
                    8e:97:ea:5d:25:08:17:40:66:a2:0c:36:97:d2:3f:
                    78:6a:3a:64:49:f9:ce:c3:b1:fd:2b:da:89:05:d5:
                    6e:95:49:1c:2a:52:4b:20:f3:ae:82:cd:68:5c:3a:
                    ee:76:7f:7b:3a:ed:c8:25:98:c9:34:55:9d:9a:8f:
                    59:cf:1b:ce:6a:e1:55:6d:09:b1:c6:e3:15:e0:4e:
                    0c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:18:BD:F0:AE:31:5F:FB:D6:BC:3C:24:6C:56:57:88:DF:AB:70:A3
            X509v3 Authority Key Identifier:
                keyid:21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8a:26:4d:16:7d:3e:3e:f5:ec:00:8e:0e:ed:db:61:c8:52:
         14:5b:40:cc:09:e0:14:e8:a1:b1:72:71:63:2c:1c:f1:66:2b:
         d6:ba:ab:1a:8c:64:a0:2a:e3:65:b1:70:07:85:06:e7:fc:1e:
         b9:bf:20:54:bd:6b:7d:89:1e:58:dd:1b:b9:a5:b0:d6:76:1b:
         25:6c:d6:28:9c:de:db:a6:9b:dc:0c:d7:02:eb:c5:43:79:62:
         b7:fe:5d:3b:8d:f4:6d:d0:e1:9d:c4:07:7d:f8:fc:76:bb:c0:
         0f:2e:e0:03:7b:b5:09:df:60:cb:35:6c:a6:3e:2e:b1:0b:af:
         7d:ca:44:9d:1a:a8:79:b3:c1:8a:2d:82:34:09:69:06:e2:4d:
         74:b5:11:24:58:6c:dd:b0:31:73:86:16:78:bb:56:4d:0c:b1:
         e7:ff:c2:63:37:0e:75:3f:87:f9:05:56:99:4c:5c:31:41:80:
         0b:7a:b7:6f:75:b5:be:4e:53:c2:29:bc:67:4a:95:6e:ec:ba:
         b3:3f:ad:b0:40:e2:d5:9d:91:d3:0d:e7:a8:84:05:b7:65:a6:
         c3:35:dc:7c:5e:88:8b:19:c9:74:19:e1:8a:fd:d1:3f:eb:25:
         c3:23:18:ba:ce:ea:2c:1b:c0:56:e0:a6:4c:3a:ee:c8:f6:db:
         9d:cd:cf:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEJyWwzVphS3BDzGW0kiIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNGEwZjQyMTkwOTQ0YWM2YjQ1ZTAwYTI0YWU0MWEzNDVm
ZGNiMzUwHhcNMjYwNTEzMDIwMDQyWhcNMjYwNTE0MDIwMDQyWjAzMTEwLwYDVQQD
Eyg2MTE4YmRmMGFlMzE1ZmZiZDZiYzNjMjQ2YzU2NTc4OGRmYWI3MGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NX0mn3qxENaHeE/3q8S0qxRZZbc
eZlW9S+aQelE94XtniFsmohUR+zlxngPIx0Jwug6Nro+CWXEVW8QLwq8KJvHloJ9
TIXrORllsi6rjO4YIOqMzbTN/cCPu1jrY7QNiDJ+2jXwqYZ/GVbpqeSXS7MzKZlC
CDpyXzHbTzmyS/j7RdkBs687ZEw6ZL8Yl4fUTV4rX2szPXKoJ9ZVbE2t8tQcT84f
THHErrIgVqRWtR8wcdmOl+pdJQgXQGaiDDaX0j94ajpkSfnOw7H9K9qJBdVulUkc
KlJLIPOugs1oXDrudn97Ou3IJZjJNFWdmo9ZzxvOauFVbQmxxuMV4E4M/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEYvfCuMV/71rw8JGxWV4jfq3CjMB8GA1UdIwQY
MBaAFCFKD0IZCUSsa0XgCiSuQaNF/cs1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVvUFFoa0pSS3hyUmVBS0pLNUJvMFg5eXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8wZDU3ZmYtNTUzMC00NjBkLThiNTMt
YjY2NTZjYzFiZDU5LzEvSVVvUFFoa0pSS3hyUmVBS0pLNUJvMFg5eXpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8wZDU3ZmYtNTUzMC00NjBkLThiNTMtYjY2NTZjYzFiZDU5
LzEvSVVvUFFoa0pSS3hyUmVBS0pLNUJvMFg5eXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4omTRZ9
Pj717ACODu3bYchSFFtAzAngFOihsXJxYywc8WYr1rqrGoxkoCrjZbFwB4UG5/we
ub8gVL1rfYkeWN0buaWw1nYbJWzWKJze26ab3AzXAuvFQ3lit/5dO430bdDhncQH
ffj8drvADy7gA3u1Cd9gyzVspj4usQuvfcpEnRqoebPBii2CNAlpBuJNdLURJFhs
3bAxc4YWeLtWTQyx5//CYzcOdT+H+QVWmUxcMUGAC3q3b3W1vk5Twim8Z0qVbuy6
sz+tsEDi1Z2R0w3nqIQFt2WmwzXcfF6IixnJdBnhiv3RP+slwyMYus7qLBvAVuCm
TDruyPbbnc3Pkg==
-----END CERTIFICATE-----
Generated at Wed May 13 11:28:44 2026 by rpki-client