Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
File:                     o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json)
Hash identifier:          shmHztqpO2tbr7D1EwGaHgbwCdOXic9Uy2w96LK9fSw=
Subject key identifier:   E2:E8:8A:08:51:96:2B:FE:A1:2E:57:A7:91:58:41:8C:E4:4D:9A:95
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Certificate issuer:       /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial:       019E1F7F1E66AFF3624C670F35D16D540EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
Manifest number:          14FC
Signing time:             Wed 13 May 2026 04:01:25 +0000
Manifest this update:     Wed 13 May 2026 04:01:25 +0000
Manifest next update:     Thu 14 May 2026 04:01:25 +0000
Files and hashes:         1: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: g+PqfCCkVVGDR9Cgn9+HZtizGNiAHxWRiDTvw1sVZ88=)
                          2: w4ITWrVOd87_9Oz-MtY7slczBow.roa (hash: /062+JMxPPoUdp7c8u+6Eta3MA3XDfRjmmRKaz0UrFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:1e:66:af:f3:62:4c:67:0f:35:d1:6d:54:0e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
        Validity
            Not Before: May 13 04:01:25 2026 GMT
            Not After : May 14 04:01:25 2026 GMT
        Subject: CN=e2e88a0851962bfea12e57a79158418ce44d9a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:3d:d8:e7:28:c9:8b:c8:9c:4a:03:0a:e4:
                    57:dd:c5:2f:24:23:12:f4:ba:aa:6d:05:e3:6c:b6:
                    03:a1:91:ad:f4:35:57:08:df:70:0e:47:84:e7:75:
                    2a:d7:ac:80:3d:c7:01:3d:1e:7e:f5:ea:13:08:bc:
                    f0:e8:84:69:c5:d6:dd:ae:5c:f8:58:21:f3:89:45:
                    46:9c:b0:de:91:4d:bd:8e:e9:73:5a:3f:be:bc:0a:
                    7b:18:93:40:4b:f5:ef:2c:1b:d5:b2:91:e6:cf:8a:
                    13:6b:88:ba:71:6c:cd:18:6e:6f:4d:b1:f4:ad:e1:
                    d2:63:ae:02:93:df:df:20:e6:db:42:95:dd:82:c6:
                    67:9a:97:8a:d4:12:6b:83:23:16:7a:a1:c5:ad:cf:
                    99:0e:a1:4a:d7:9c:3f:35:51:24:85:03:fb:69:e1:
                    6e:8b:4a:9b:33:8a:c9:31:20:40:d8:4a:60:8e:54:
                    9f:35:3e:90:bb:d3:af:5c:10:ac:ff:0a:98:49:3f:
                    8e:15:a9:a3:d3:6b:a4:de:09:38:6b:b2:f7:8f:7c:
                    dd:ed:76:73:45:78:a7:12:b6:5e:fd:11:9b:43:e9:
                    f5:e3:0e:66:74:25:d5:e9:5e:89:ed:16:61:1a:47:
                    86:39:be:24:9a:36:b8:a5:e4:e5:98:62:5a:de:09:
                    99:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E8:8A:08:51:96:2B:FE:A1:2E:57:A7:91:58:41:8C:E4:4D:9A:95
            X509v3 Authority Key Identifier:
                keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fe:8f:8d:f3:a6:04:d3:66:ef:38:9c:bd:c4:29:b3:59:ca:
         40:a8:aa:5e:88:8a:46:dc:f0:c0:04:64:8a:13:8f:c4:f1:1c:
         4b:b2:65:14:df:da:ee:9f:fb:4f:aa:f5:f2:ab:13:07:23:67:
         01:3e:f7:fa:ad:b3:9c:5b:68:f2:d5:4b:82:c6:2b:67:09:69:
         b9:6c:f3:bf:c5:ab:c3:05:ca:3e:c7:20:72:d5:39:d1:bc:eb:
         8b:fd:1c:29:08:41:73:00:78:a7:24:3e:0b:9c:30:e3:7a:64:
         29:0a:d6:4a:f4:93:c5:b0:35:50:e9:31:7f:4b:d1:81:1f:4c:
         2a:a7:9c:f7:b3:75:19:01:5d:c0:90:89:57:f6:99:91:16:e8:
         21:f7:0a:38:2e:0e:c4:e0:7d:17:1a:ba:bb:1d:98:97:12:61:
         57:46:9c:e8:20:49:db:80:10:d9:20:5c:53:b2:d3:d1:12:86:
         99:1d:7d:c1:09:9a:8e:03:c5:3b:62:9b:59:51:9c:b2:05:4d:
         d5:aa:cd:61:5e:9e:d5:cb:c5:e4:1c:9a:71:82:24:a9:c8:69:
         f3:52:6e:e8:71:8f:a9:6d:b5:78:3f:37:f2:ec:17:58:1c:e1:
         b5:47:5f:f0:cf:67:9c:dd:50:24:ca:cb:eb:ae:35:35:fe:c2:
         bc:f9:c0:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffx5mr/NiTGcPNdFtVA6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYjJmNGRhZWQ3YmVmMmE2YWI0YmJiOWFhZmFjNTY1NGRk
YzUzYzEwHhcNMjYwNTEzMDQwMTI1WhcNMjYwNTE0MDQwMTI1WjAzMTEwLwYDVQQD
EyhlMmU4OGEwODUxOTYyYmZlYTEyZTU3YTc5MTU4NDE4Y2U0NGQ5YTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvg92OcoyYvInEoDCuRX3cUvJCMS
9LqqbQXjbLYDoZGt9DVXCN9wDkeE53Uq16yAPccBPR5+9eoTCLzw6IRpxdbdrlz4
WCHziUVGnLDekU29julzWj++vAp7GJNAS/XvLBvVspHmz4oTa4i6cWzNGG5vTbH0
reHSY64Ck9/fIObbQpXdgsZnmpeK1BJrgyMWeqHFrc+ZDqFK15w/NVEkhQP7aeFu
i0qbM4rJMSBA2EpgjlSfNT6Qu9OvXBCs/wqYST+OFamj02uk3gk4a7L3j3zd7XZz
RXinErZe/RGbQ+n14w5mdCXV6V6J7RZhGkeGOb4kmja4peTlmGJa3gmZOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLoighRliv+oS5Xp5FYQYzkTZqVMB8GA1UdIwQY
MBaAFKOy9Nrte+8qarS7uar6xWVN3FPBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzdMMDJ1MTc3eXBxdEx1NXF2ckZaVTNjVThFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wNzMwZDEtYzY3Yi00MzVlLWIzMjkt
ZDgzMTBkYjk3OTUxLzEvbzdMMDJ1MTc3eXBxdEx1NXF2ckZaVTNjVThFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wNzMwZDEtYzY3Yi00MzVlLWIzMjktZDgzMTBkYjk3OTUx
LzEvbzdMMDJ1MTc3eXBxdEx1NXF2ckZaVTNjVThFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKv6PjfOm
BNNm7zicvcQps1nKQKiqXoiKRtzwwARkihOPxPEcS7JlFN/a7p/7T6r18qsTByNn
AT73+q2znFto8tVLgsYrZwlpuWzzv8WrwwXKPscgctU50bzri/0cKQhBcwB4pyQ+
C5ww43pkKQrWSvSTxbA1UOkxf0vRgR9MKqec97N1GQFdwJCJV/aZkRboIfcKOC4O
xOB9Fxq6ux2YlxJhV0ac6CBJ24AQ2SBcU7LT0RKGmR19wQmajgPFO2KbWVGcsgVN
1arNYV6e1cvF5ByacYIkqchp81Ju6HGPqW21eD838uwXWBzhtUdf8M9nnN1QJMrL
6641Nf7CvPnAhw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:00:22 2026 by rpki-client