Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
File:                     L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft (raw, json)
Hash identifier:          jZ4EPxsRatRF6t7C3PLrQW2kyklpunKxLhRuKh3WDlA=
Subject key identifier:   B1:63:76:95:AC:66:E8:9A:65:10:A4:C3:82:A9:FD:4F:B9:16:5B:B4
Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
Certificate issuer:       /CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Certificate serial:       019E1E6C89612385AAEB49878980B068BA6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
Manifest number:          0D09
Signing time:             Tue 12 May 2026 23:01:29 +0000
Manifest this update:     Tue 12 May 2026 23:01:29 +0000
Manifest next update:     Wed 13 May 2026 23:01:29 +0000
Files and hashes:         1: H6q8h__WeJINLNS-JCWvRE5rrpQ.roa (hash: wliRsZf6kHIWennhhOkB1e0svy01r5HVaziAUGbDu0c=)
                          2: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl (hash: ib0oT5rU0XxYAhJ2qMxyvGgn2FDOO4CUYeLoSSjh5y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:89:61:23:85:aa:eb:49:87:89:80:b0:68:ba:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85
        Validity
            Not Before: May 12 23:01:29 2026 GMT
            Not After : May 13 23:01:29 2026 GMT
        Subject: CN=b1637695ac66e89a6510a4c382a9fd4fb9165bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:40:8d:06:39:28:77:e6:c2:3d:af:63:16:
                    16:ed:a0:32:16:0f:0f:09:eb:95:35:2c:e7:54:5e:
                    3e:9b:d8:31:b9:3a:dd:ca:be:f1:6d:70:c5:f2:be:
                    c2:94:79:81:42:22:4b:ec:e1:58:83:06:55:f8:ee:
                    47:37:bb:30:1c:67:03:95:3d:ff:d9:22:90:88:75:
                    7d:3b:3f:79:2d:68:aa:91:11:af:9c:49:17:fb:95:
                    69:20:3a:9e:fd:a1:bd:3e:a3:77:37:a6:78:d2:f6:
                    c9:64:b9:c6:a7:4b:3b:d9:e7:3a:b9:b4:4f:e9:b5:
                    6e:c0:a4:55:9e:33:bc:40:c5:18:e3:c0:35:a4:d5:
                    90:aa:90:af:06:48:9e:0b:e5:4c:bf:88:95:91:6b:
                    bb:4a:a2:65:80:46:f0:ad:fc:97:ea:f1:55:d4:75:
                    a3:ef:2f:82:c9:f6:d8:a0:03:d7:87:9f:e4:6c:60:
                    b9:63:e4:54:19:2f:b5:85:f0:53:2f:97:6a:78:f1:
                    59:a4:d0:6e:1f:3f:9b:6e:bf:c8:da:21:c0:55:2b:
                    7b:0c:ac:fe:49:e5:40:ec:bd:72:f5:df:9a:1b:a9:
                    a7:4c:ac:e7:44:f3:48:26:10:d9:6c:bf:2b:91:e6:
                    aa:ac:0e:4c:59:69:c9:e4:f7:12:a0:3b:7b:e3:74:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:63:76:95:AC:66:E8:9A:65:10:A4:C3:82:A9:FD:4F:B9:16:5B:B4
            X509v3 Authority Key Identifier:
                keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:45:69:ae:64:fc:82:d3:36:dc:41:66:6e:c0:4d:e3:e5:a2:
         9b:d6:81:82:0b:3a:5b:3d:88:4d:58:d0:d0:39:62:39:ae:e7:
         9b:da:86:66:13:94:0a:73:b5:28:ce:f9:ae:03:e4:a8:1c:a1:
         cb:fc:ff:db:2e:ce:69:83:b1:55:d8:38:9a:c6:fd:97:4c:22:
         9c:56:8e:f7:73:6c:23:f9:73:25:b4:83:54:d0:81:7e:f5:7c:
         3b:09:37:a3:e5:0c:2b:7f:32:ad:7b:91:e9:05:3e:95:96:ae:
         8f:7f:3a:ca:88:bf:dc:4e:2b:26:bf:d3:54:9f:03:f1:1d:b4:
         38:69:ae:be:98:cf:1d:af:4f:a3:0b:78:fd:bc:af:50:c8:09:
         87:03:95:3c:e6:87:a2:9c:fe:a8:be:2c:fa:b2:59:df:9c:6a:
         4f:db:6e:8d:a5:01:79:0b:80:5b:c2:11:a2:e5:10:7a:74:dd:
         3b:8e:b1:2f:b0:70:d5:3c:51:ce:6a:9f:80:72:ed:6e:c7:01:
         3f:01:4f:13:f2:d5:8f:29:d5:35:3c:b0:9b:ad:60:06:78:9f:
         1c:13:a3:1b:84:de:c6:53:f4:18:87:9c:db:03:90:35:1b:c0:
         e9:2c:e4:16:98:1d:82:4b:31:15:25:39:f4:1e:a4:26:d3:c7:
         f5:eb:20:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebIlhI4Wq60mHiYCwaLprMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNTkzYjI1NGE5YzNmYWM4MTY1MjUwMmYxYzQzYzIyMDFj
MTZhODUwHhcNMjYwNTEyMjMwMTI5WhcNMjYwNTEzMjMwMTI5WjAzMTEwLwYDVQQD
EyhiMTYzNzY5NWFjNjZlODlhNjUxMGE0YzM4MmE5ZmQ0ZmI5MTY1YmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGJAjQY5KHfmwj2vYxYW7aAyFg8P
CeuVNSznVF4+m9gxuTrdyr7xbXDF8r7ClHmBQiJL7OFYgwZV+O5HN7swHGcDlT3/
2SKQiHV9Oz95LWiqkRGvnEkX+5VpIDqe/aG9PqN3N6Z40vbJZLnGp0s72ec6ubRP
6bVuwKRVnjO8QMUY48A1pNWQqpCvBkieC+VMv4iVkWu7SqJlgEbwrfyX6vFV1HWj
7y+CyfbYoAPXh5/kbGC5Y+RUGS+1hfBTL5dqePFZpNBuHz+bbr/I2iHAVSt7DKz+
SeVA7L1y9d+aG6mnTKznRPNIJhDZbL8rkeaqrA5MWWnJ5PcSoDt743TxiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFjdpWsZuiaZRCkw4Kp/U+5Flu0MB8GA1UdIwQY
MBaAFC9ZOyVKnD+sgWUlAvHEPCIBwWqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lZjM2MDgtYWNkNC00NWUxLTlkMzIt
YzNiYjg0NzYwMGNkLzEvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9lZjM2MDgtYWNkNC00NWUxLTlkMzItYzNiYjg0NzYwMGNk
LzEvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0VprmT8
gtM23EFmbsBN4+Wim9aBggs6Wz2ITVjQ0DliOa7nm9qGZhOUCnO1KM75rgPkqByh
y/z/2y7OaYOxVdg4msb9l0winFaO93NsI/lzJbSDVNCBfvV8Owk3o+UMK38yrXuR
6QU+lZauj386yoi/3E4rJr/TVJ8D8R20OGmuvpjPHa9Powt4/byvUMgJhwOVPOaH
opz+qL4s+rJZ35xqT9tujaUBeQuAW8IRouUQenTdO46xL7Bw1TxRzmqfgHLtbscB
PwFPE/LVjynVNTywm61gBnifHBOjG4TexlP0GIec2wOQNRvA6SzkFpgdgksxFSU5
9B6kJtPH9esg9Q==
-----END CERTIFICATE-----
Generated at Wed May 13 05:09:59 2026 by rpki-client