Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File:                     7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier:          OQf3+JQ38dTFCHXjkk2GinUZuwhFff9nS7/7SVH1Kmc=
Subject key identifier:   43:A3:8E:5B:8D:FF:20:46:C6:85:D5:22:17:1F:1E:33:0C:EF:50:08
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer:       /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial:       019E1E35F1D06FCF183978A019705B0F487A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number:          0E61
Signing time:             Tue 12 May 2026 22:01:52 +0000
Manifest this update:     Tue 12 May 2026 22:01:52 +0000
Manifest next update:     Wed 13 May 2026 22:01:52 +0000
Files and hashes:         1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: T5XCH1GzRSJ17B/FtaFrravMUJw0nb2mcaROUUTQ008=)
                          2: _bZKuF7AFVv9FOPtEDmaIyaLkgc.roa (hash: /OjfGerjj4MNTsCbNROwrp1Es3nNekhRr//F8a0HSXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:f1:d0:6f:cf:18:39:78:a0:19:70:5b:0f:48:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
        Validity
            Not Before: May 12 22:01:52 2026 GMT
            Not After : May 13 22:01:52 2026 GMT
        Subject: CN=43a38e5b8dff2046c685d522171f1e330cef5008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:d8:c3:e8:a3:42:df:f3:59:86:c2:d4:a2:
                    23:d2:14:05:22:ec:28:7d:7c:b3:24:1f:85:81:cf:
                    85:91:10:18:34:ba:2b:6f:c6:55:8a:49:b7:c1:8c:
                    2f:a5:0c:47:2a:03:4b:87:f6:49:49:d1:51:e8:d7:
                    9e:fd:73:3b:5e:c7:b2:f1:1b:00:cf:5e:24:a6:cc:
                    df:10:f6:22:93:a5:85:bc:24:87:1d:22:a1:58:40:
                    90:de:5b:45:7c:3e:11:c8:e8:f0:51:70:bf:ca:81:
                    5c:36:f2:93:64:27:75:80:38:d7:0a:9f:8d:90:7c:
                    51:0e:c1:d3:59:af:ab:88:ab:6d:eb:82:29:c1:53:
                    32:88:a4:f9:8a:fd:05:0d:97:89:bb:7d:22:d0:a4:
                    c3:98:4c:6e:8c:4c:4b:f7:c9:2d:eb:55:51:d0:58:
                    fa:2a:0e:de:e7:98:21:80:c1:50:88:9f:0a:f1:2e:
                    0f:ef:a2:c7:49:57:d1:6b:bb:a3:dc:1e:62:b8:31:
                    42:d8:fc:4b:a1:0b:2b:c4:7c:9f:d9:d8:97:f4:be:
                    bf:6f:ca:61:a7:12:0c:f1:91:bb:de:d2:c1:e3:e9:
                    76:86:e9:a0:91:d7:eb:5b:39:2c:a0:d4:54:eb:50:
                    50:b4:05:5c:7e:72:dc:23:93:76:66:2e:c5:ce:77:
                    34:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A3:8E:5B:8D:FF:20:46:C6:85:D5:22:17:1F:1E:33:0C:EF:50:08
            X509v3 Authority Key Identifier:
                keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:99:21:e1:d9:29:7f:55:e3:d6:77:27:a2:58:fa:07:04:0e:
         3b:53:65:ab:9b:fe:2b:4d:e9:11:1c:0a:cd:84:28:3d:b9:a0:
         03:a3:68:a7:db:1a:10:65:f3:b3:dd:bd:58:1a:c6:a3:64:12:
         79:64:95:73:2c:b7:9f:6a:d3:f5:d6:29:d2:c3:cf:ec:dd:44:
         e3:d5:de:35:cd:97:6f:a3:9e:68:d9:75:06:bc:ec:df:8f:a5:
         a8:0d:a5:f1:d5:80:f1:68:5d:8c:01:ac:16:38:76:82:a2:4e:
         47:61:19:df:93:c2:70:fe:e5:66:8a:2c:85:8a:5b:e3:21:96:
         a6:db:88:06:59:cd:e1:86:b7:8a:91:5f:b6:9a:4e:d1:66:dd:
         06:07:b5:86:3b:37:15:ee:f7:29:0d:fa:99:08:7a:99:da:99:
         b9:08:59:5a:d9:b3:29:e3:e8:d3:c4:bf:49:20:49:37:d0:61:
         2f:07:df:9c:cd:a7:1f:9e:ad:a9:3e:d7:21:f9:a1:8d:58:85:
         81:70:10:5d:60:9d:08:4c:02:a6:91:8a:79:7a:d8:dd:55:c8:
         e5:73:03:36:a0:26:fc:92:28:f2:48:be:fd:be:bb:b5:8f:af:
         88:1b:6b:a5:da:c8:9b:4a:7e:a3:f6:61:e4:32:a6:cf:01:b2:
         e0:6b:77:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNfHQb88YOXigGXBbD0h6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNWUzZDZmNjlmYTJiNDI1MTc5MTFlYWU1Njk1NzMwMzA3
OTkxNTYwHhcNMjYwNTEyMjIwMTUyWhcNMjYwNTEzMjIwMTUyWjAzMTEwLwYDVQQD
Eyg0M2EzOGU1YjhkZmYyMDQ2YzY4NWQ1MjIxNzFmMWUzMzBjZWY1MDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB7Yw+ijQt/zWYbC1KIj0hQFIuwo
fXyzJB+Fgc+FkRAYNLorb8ZVikm3wYwvpQxHKgNLh/ZJSdFR6Nee/XM7Xsey8RsA
z14kpszfEPYik6WFvCSHHSKhWECQ3ltFfD4RyOjwUXC/yoFcNvKTZCd1gDjXCp+N
kHxRDsHTWa+riKtt64IpwVMyiKT5iv0FDZeJu30i0KTDmExujExL98kt61VR0Fj6
Kg7e55ghgMFQiJ8K8S4P76LHSVfRa7uj3B5iuDFC2PxLoQsrxHyf2diX9L6/b8ph
pxIM8ZG73tLB4+l2humgkdfrWzksoNRU61BQtAVcfnLcI5N2Zi7Fznc0LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOjjluN/yBGxoXVIhcfHjMM71AIMB8GA1UdIwQY
MBaAFO9ePW9p+itCUXkR6uVpVzAweZFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yNzJkNTAtN2JiMy00NGIwLTgyNTQt
ZmNmZjllODQ3Y2EyLzEvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8yNzJkNTAtN2JiMy00NGIwLTgyNTQtZmNmZjllODQ3Y2Ey
LzEvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZkh4dkp
f1Xj1ncnolj6BwQOO1Nlq5v+K03pERwKzYQoPbmgA6Nop9saEGXzs929WBrGo2QS
eWSVcyy3n2rT9dYp0sPP7N1E49XeNc2Xb6OeaNl1Brzs34+lqA2l8dWA8WhdjAGs
Fjh2gqJOR2EZ35PCcP7lZooshYpb4yGWptuIBlnN4Ya3ipFftppO0WbdBge1hjs3
Fe73KQ36mQh6mdqZuQhZWtmzKePo08S/SSBJN9BhLwffnM2nH56tqT7XIfmhjViF
gXAQXWCdCEwCppGKeXrY3VXI5XMDNqAm/JIo8ki+/b67tY+viBtrpdrIm0p+o/Zh
5DKmzwGy4Gt34Q==
-----END CERTIFICATE-----
Generated at Wed May 13 05:10:40 2026 by rpki-client