Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
File:                     4Fx81akbRFhmDQcOBHf75pXBKws.mft (raw, json)
Hash identifier:          1gtyoiA5+jXRjPHVWLOgnXrMVXMSxS/8PRNuUwy09yc=
Subject key identifier:   B5:71:38:9B:EB:38:54:4D:B7:3C:22:E2:B2:C3:B2:37:AB:45:85:CA
Authority key identifier: E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
Certificate issuer:       /CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Certificate serial:       019E1D22424A7257C1BF06E15FC488127481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
Manifest number:          0F84
Signing time:             Tue 12 May 2026 17:00:44 +0000
Manifest this update:     Tue 12 May 2026 17:00:44 +0000
Manifest next update:     Wed 13 May 2026 17:00:44 +0000
Files and hashes:         1: 4Fx81akbRFhmDQcOBHf75pXBKws.crl (hash: eLaAfkieNsFhSYpCIYEx35c00b486oF+/yDlPFg6ElU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:42:4a:72:57:c1:bf:06:e1:5f:c4:88:12:74:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
        Validity
            Not Before: May 12 17:00:44 2026 GMT
            Not After : May 13 17:00:44 2026 GMT
        Subject: CN=b571389beb38544db73c22e2b2c3b237ab4585ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2f:f0:2a:0f:b3:7f:b3:7a:05:82:60:e9:24:
                    29:06:9d:90:34:c6:41:d0:3a:34:a9:00:c6:d8:32:
                    75:d9:df:24:ce:91:5c:c1:78:4e:48:82:3c:f0:91:
                    78:58:01:80:5b:29:a3:57:a0:ca:34:1b:07:c6:90:
                    cd:79:73:fb:29:13:9e:34:5f:cb:11:3e:ed:1e:d1:
                    c5:a6:70:0d:9a:8b:1c:9c:2e:9f:82:24:f0:4f:d4:
                    d5:e1:e6:b3:c9:34:df:65:ed:38:02:e5:cb:8e:a3:
                    f0:d5:3f:11:e6:a8:67:e1:02:6d:76:23:53:cd:f8:
                    20:30:91:a5:39:a7:ba:c2:2d:cd:46:7d:55:e5:99:
                    e7:68:fe:6d:1e:c2:f0:40:05:ab:1d:5f:87:70:4e:
                    43:d0:da:e0:36:10:f3:ac:c5:5a:75:c7:99:0e:19:
                    36:be:a6:f0:be:17:fc:18:7c:cb:84:34:52:c0:0c:
                    ee:5b:6c:17:31:a5:50:cc:4b:c2:e5:9e:fb:06:b1:
                    23:1a:d8:0e:2e:c9:55:a3:98:e4:66:cf:ce:20:05:
                    d4:ff:e4:b5:e0:be:49:05:51:b8:68:78:78:12:f4:
                    de:96:4e:13:c1:6d:91:8f:6a:35:e6:83:86:6b:bd:
                    f4:28:85:5c:07:64:32:39:97:8b:9c:73:ae:05:3b:
                    7e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:71:38:9B:EB:38:54:4D:B7:3C:22:E2:B2:C3:B2:37:AB:45:85:CA
            X509v3 Authority Key Identifier:
                keyid:E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:64:96:68:2d:e0:10:06:78:8b:67:20:11:54:de:5e:7d:26:
         50:7a:ad:aa:d3:d6:e3:37:b2:62:44:0c:88:1d:cb:81:f9:ce:
         30:d2:f0:39:85:54:b8:7f:3c:7f:e1:ee:88:fc:a6:13:58:94:
         80:84:55:f3:1f:f5:00:df:ab:35:9a:69:3e:90:24:e9:5a:33:
         a8:af:c9:5a:3d:e2:f7:8d:3c:88:3a:c6:4f:49:bf:4d:f5:fc:
         2e:47:a3:bd:e6:47:1b:f1:90:7b:79:ee:79:a6:25:0d:8c:1e:
         9c:4f:ad:a9:ea:db:55:fe:e6:b0:08:64:e6:d1:d1:3e:c4:de:
         40:da:e4:09:25:ca:d0:71:bc:7a:b7:43:7a:6b:a9:18:b6:98:
         67:b9:6c:cc:db:c4:60:5f:df:77:8a:87:1d:51:db:9f:af:88:
         82:54:ba:5b:34:26:37:f0:10:8e:36:c0:96:16:95:58:b6:87:
         c0:be:f9:f0:b4:65:18:50:41:1a:66:04:1c:3f:20:36:e6:f3:
         f1:bb:b4:7a:d4:a3:bf:dc:ca:5e:e8:1f:65:b9:de:bf:8c:89:
         08:48:cf:86:37:21:b8:e4:33:68:ba:65:71:c4:b3:7d:f2:87:
         38:6f:da:2e:7a:3c:e3:42:e2:a5:42:6c:df:62:e7:24:1b:71:
         5a:5c:c5:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIkJKclfBvwbhX8SIEnSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNWM3Y2Q1YTkxYjQ0NTg2NjBkMDcwZTA0NzdmYmU2OTVj
MTJiMGIwHhcNMjYwNTEyMTcwMDQ0WhcNMjYwNTEzMTcwMDQ0WjAzMTEwLwYDVQQD
EyhiNTcxMzg5YmViMzg1NDRkYjczYzIyZTJiMmMzYjIzN2FiNDU4NWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC/wKg+zf7N6BYJg6SQpBp2QNMZB
0Do0qQDG2DJ12d8kzpFcwXhOSII88JF4WAGAWymjV6DKNBsHxpDNeXP7KROeNF/L
ET7tHtHFpnANmoscnC6fgiTwT9TV4eazyTTfZe04AuXLjqPw1T8R5qhn4QJtdiNT
zfggMJGlOae6wi3NRn1V5ZnnaP5tHsLwQAWrHV+HcE5D0NrgNhDzrMVadceZDhk2
vqbwvhf8GHzLhDRSwAzuW2wXMaVQzEvC5Z77BrEjGtgOLslVo5jkZs/OIAXU/+S1
4L5JBVG4aHh4EvTelk4TwW2Rj2o15oOGa730KIVcB2QyOZeLnHOuBTt+1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVxOJvrOFRNtzwi4rLDsjerRYXKMB8GA1UdIwQY
MBaAFOBcfNWpG0RYZg0HDgR3++aVwSsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZ4ODFha2JSRmhtRFFjT0JIZjc1cFhCS3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mMTE5MTMtMTA0NS00YWJhLWI4NzEt
ODMyYjVkZWY1YWQ4LzEvNEZ4ODFha2JSRmhtRFFjT0JIZjc1cFhCS3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mMTE5MTMtMTA0NS00YWJhLWI4NzEtODMyYjVkZWY1YWQ4
LzEvNEZ4ODFha2JSRmhtRFFjT0JIZjc1cFhCS3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGSWaC3g
EAZ4i2cgEVTeXn0mUHqtqtPW4zeyYkQMiB3LgfnOMNLwOYVUuH88f+HuiPymE1iU
gIRV8x/1AN+rNZppPpAk6VozqK/JWj3i9408iDrGT0m/TfX8LkejveZHG/GQe3nu
eaYlDYwenE+tqerbVf7msAhk5tHRPsTeQNrkCSXK0HG8erdDemupGLaYZ7lszNvE
YF/fd4qHHVHbn6+IglS6WzQmN/AQjjbAlhaVWLaHwL758LRlGFBBGmYEHD8gNubz
8bu0etSjv9zKXugfZbnev4yJCEjPhjchuOQzaLplccSzffKHOG/aLno840LipUJs
32LnJBtxWlzFsQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:17:28 2026 by rpki-client