Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
File:                     U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft (raw, json)
Hash identifier:          MR2PHkl07eSfxQLwFXSIWW7i95hhHXm6fqNPIjaedjQ=
Subject key identifier:   E7:FD:79:14:26:D7:36:0F:58:4C:2D:E9:F3:10:F1:F6:16:69:18:C1
Authority key identifier: 53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C
Certificate issuer:       /CN=5349c2d00ba46be9244b76194baa10f33ce3462c
Certificate serial:       019E1FECA3CD5D56E0203461823AFBE2FB7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
Manifest number:          0994
Signing time:             Wed 13 May 2026 06:01:02 +0000
Manifest this update:     Wed 13 May 2026 06:01:02 +0000
Manifest next update:     Thu 14 May 2026 06:01:02 +0000
Files and hashes:         1: U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl (hash: i6SU/HwDQs3anMt95FS/svS4GG5TbT7SKKJgO0vOR9E=)
                          2: XcRX1RAJL4NGdzyun1ejeZqAF24.roa (hash: YNAZegeHiWzquonxoxjxpFIiVyp3kn/I+1eygwpZVIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:a3:cd:5d:56:e0:20:34:61:82:3a:fb:e2:fb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5349c2d00ba46be9244b76194baa10f33ce3462c
        Validity
            Not Before: May 13 06:01:02 2026 GMT
            Not After : May 14 06:01:02 2026 GMT
        Subject: CN=e7fd791426d7360f584c2de9f310f1f6166918c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2b:49:1f:e9:d7:a4:65:3d:8b:75:19:ae:db:
                    a7:01:dc:59:e8:88:75:0b:a8:27:70:11:01:a7:2e:
                    b1:d1:16:4d:7d:82:9a:22:fe:ce:63:3e:2d:8e:22:
                    c1:11:ca:0a:df:36:d2:76:2b:45:39:96:f6:0a:8a:
                    4f:14:50:ca:4f:68:8a:41:c4:16:7d:12:79:e5:c6:
                    0d:90:a5:ee:45:52:38:03:8e:31:f0:37:24:e3:96:
                    03:9e:67:51:fb:19:af:10:31:50:e0:07:11:dd:a8:
                    80:91:ee:e3:89:cf:80:77:cc:4b:04:e4:1a:b0:58:
                    31:c9:2e:8f:5a:12:5a:3a:d7:dd:74:75:ed:56:91:
                    64:95:d1:da:5f:15:b5:a0:17:15:da:39:46:c3:93:
                    38:a1:aa:e9:bf:f5:f1:32:d6:e9:49:cf:d6:c1:32:
                    16:f9:d2:65:51:7a:dd:e3:b7:bf:d9:b1:9c:0f:bb:
                    7d:21:32:9a:49:65:7f:22:78:ff:f5:92:29:6b:6e:
                    ac:23:f9:ad:89:31:3e:26:09:d2:be:61:f6:bc:49:
                    f2:00:96:3e:8f:89:ab:61:67:b9:ad:a8:35:fb:92:
                    d9:05:42:09:79:6c:41:59:87:47:89:44:ab:30:58:
                    f9:82:c8:90:f3:33:a0:11:d0:19:22:6e:fb:97:44:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FD:79:14:26:D7:36:0F:58:4C:2D:E9:F3:10:F1:F6:16:69:18:C1
            X509v3 Authority Key Identifier:
                keyid:53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:6b:2e:a2:62:32:de:93:07:2f:28:47:09:af:25:7c:dc:d1:
         7c:ec:a9:ae:3b:08:90:a0:0b:7d:8f:a7:e4:6f:57:02:bf:f1:
         e0:10:9a:bb:ac:5f:17:af:4e:b6:7d:47:06:25:7c:30:d8:78:
         b6:88:34:03:c4:41:8d:ff:a8:b9:98:3b:93:1a:41:16:59:16:
         86:a7:cf:2a:0a:f6:ac:d6:a0:2f:56:eb:6c:d6:5b:b9:08:18:
         7b:34:ee:f7:6e:ff:58:2f:6a:b6:28:c2:9c:45:89:39:98:c6:
         c4:dc:33:c9:05:63:a5:6f:80:d1:0d:85:78:dd:a5:5e:4e:6e:
         59:4e:6e:e9:ad:5d:d2:04:4d:dd:46:59:46:7d:c0:7b:40:75:
         5e:39:37:d1:73:c7:ef:2f:a7:ee:db:d2:a1:12:58:f0:81:61:
         32:c5:f4:10:8f:31:69:e9:7a:07:e1:03:b1:8d:85:0a:c1:85:
         ae:dd:5c:b0:f1:73:0f:63:d5:ee:56:af:cb:35:74:0b:2b:d6:
         02:96:1f:e3:84:cc:dd:58:6b:2c:25:4d:bd:92:bd:67:b3:32:
         09:c1:fe:c1:1d:19:28:35:a7:3c:48:25:5d:62:64:ed:ad:1f:
         f5:d9:19:b8:42:54:1a:5e:6a:d2:79:c5:9e:20:d2:f7:74:55:
         9b:e8:1f:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7KPNXVbgIDRhgjr74vt9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDljMmQwMGJhNDZiZTkyNDRiNzYxOTRiYWExMGYzM2Nl
MzQ2MmMwHhcNMjYwNTEzMDYwMTAyWhcNMjYwNTE0MDYwMTAyWjAzMTEwLwYDVQQD
EyhlN2ZkNzkxNDI2ZDczNjBmNTg0YzJkZTlmMzEwZjFmNjE2NjkxOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmitJH+nXpGU9i3UZrtunAdxZ6Ih1
C6gncBEBpy6x0RZNfYKaIv7OYz4tjiLBEcoK3zbSditFOZb2CopPFFDKT2iKQcQW
fRJ55cYNkKXuRVI4A44x8Dck45YDnmdR+xmvEDFQ4AcR3aiAke7jic+Ad8xLBOQa
sFgxyS6PWhJaOtfddHXtVpFkldHaXxW1oBcV2jlGw5M4oarpv/XxMtbpSc/WwTIW
+dJlUXrd47e/2bGcD7t9ITKaSWV/Inj/9ZIpa26sI/mtiTE+JgnSvmH2vEnyAJY+
j4mrYWe5rag1+5LZBUIJeWxBWYdHiUSrMFj5gsiQ8zOgEdAZIm77l0SoRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf9eRQm1zYPWEwt6fMQ8fYWaRjBMB8GA1UdIwQY
MBaAFFNJwtALpGvpJEt2GUuqEPM840YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBuQzBBdWthLWtrUzNZWlM2b1E4enpqUml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mOGFlNDctMGVkNC00NjgxLTljMTIt
ZmExMjYwODUwNzA5LzEvVTBuQzBBdWthLWtrUzNZWlM2b1E4enpqUml3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mOGFlNDctMGVkNC00NjgxLTljMTItZmExMjYwODUwNzA5
LzEvVTBuQzBBdWthLWtrUzNZWlM2b1E4enpqUml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWsuomIy
3pMHLyhHCa8lfNzRfOyprjsIkKALfY+n5G9XAr/x4BCau6xfF69Otn1HBiV8MNh4
tog0A8RBjf+ouZg7kxpBFlkWhqfPKgr2rNagL1brbNZbuQgYezTu927/WC9qtijC
nEWJOZjGxNwzyQVjpW+A0Q2FeN2lXk5uWU5u6a1d0gRN3UZZRn3Ae0B1Xjk30XPH
7y+n7tvSoRJY8IFhMsX0EI8xael6B+EDsY2FCsGFrt1csPFzD2PV7lavyzV0CyvW
ApYf44TM3VhrLCVNvZK9Z7MyCcH+wR0ZKDWnPEglXWJk7a0f9dkZuEJUGl5q0nnF
niDS93RVm+gf0g==
-----END CERTIFICATE-----
Generated at Wed May 13 14:30:19 2026 by rpki-client