Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File:                     F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier:          GLXxSWM+dAgAKxAcT3sND9BVmfMXGSUq8GP4NAwK/5M=
Subject key identifier:   A0:4B:8C:13:81:02:5C:FD:DF:33:FB:36:77:FC:E3:60:B4:98:0B:A4
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer:       /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial:       019E1F47B9E754DD7375AE25B060305FB36B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number:          1001
Signing time:             Wed 13 May 2026 03:00:54 +0000
Manifest this update:     Wed 13 May 2026 03:00:54 +0000
Manifest next update:     Thu 14 May 2026 03:00:54 +0000
Files and hashes:         1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: wGWyE0Y6VB/RfQfSELTC/VqEtQC4BcmBm8+UWCsX7SU=)
                          2: zzFYra5xZw5Yy-fz5dClERnnWlg.roa (hash: Wpga3aZynT3QdMPkk/GpaE5YFxq1IKAu5eZho4xu1iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:b9:e7:54:dd:73:75:ae:25:b0:60:30:5f:b3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
        Validity
            Not Before: May 13 03:00:54 2026 GMT
            Not After : May 14 03:00:54 2026 GMT
        Subject: CN=a04b8c1381025cfddf33fb3677fce360b4980ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:aa:04:90:a3:52:87:80:4c:b8:e5:42:93:
                    2f:88:f2:7e:dd:dd:77:07:3e:fd:ae:50:cb:87:9e:
                    b2:3c:4a:78:b6:07:27:ae:8d:f4:98:a9:f4:48:a8:
                    0f:ed:eb:eb:ab:78:e6:16:b8:19:ba:ca:05:85:98:
                    29:0b:23:c5:33:0a:2f:6d:81:fc:00:7d:a7:7a:db:
                    0a:0c:d6:c3:33:8f:50:9c:9f:6f:7f:32:49:d0:fb:
                    db:5b:7c:20:ee:86:a9:a7:17:19:8e:64:9d:23:6b:
                    fb:75:26:10:23:4c:ae:07:83:e0:e4:a3:c6:4f:57:
                    e6:d2:9a:7e:94:ad:27:99:7d:ac:c0:01:c5:ba:c0:
                    bf:05:6b:39:66:b7:3a:eb:00:4e:8b:7a:b0:e1:f4:
                    0a:52:06:9c:18:b0:f0:17:c7:6a:fb:41:20:5b:1a:
                    9f:5c:ac:89:e9:a4:84:af:9c:b9:33:f2:46:30:27:
                    61:7b:e6:48:30:9b:82:0d:48:e5:b3:2d:08:9c:d2:
                    0f:17:43:16:0a:c0:38:0c:01:cd:2a:e8:cb:c5:cd:
                    1a:ef:64:b1:bb:2f:6b:1a:a0:e2:b9:76:b5:b2:60:
                    19:89:e7:36:60:ea:ba:ed:48:65:f9:e1:b7:e1:91:
                    9b:2b:40:91:0c:44:88:ff:52:6b:a6:2a:13:d7:21:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4B:8C:13:81:02:5C:FD:DF:33:FB:36:77:FC:E3:60:B4:98:0B:A4
            X509v3 Authority Key Identifier:
                keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:14:90:bd:97:9d:dd:a7:e0:8e:56:f2:b8:40:0b:14:6d:48:
         5e:f4:71:e5:fd:af:90:3c:c4:42:27:0a:f8:a1:4a:85:64:49:
         83:72:e6:d2:76:e8:3d:71:40:b2:26:80:86:91:dc:29:2a:76:
         fc:65:74:ba:25:73:f7:b1:c6:0c:5a:02:53:2c:3d:79:f7:ba:
         93:39:56:6e:27:97:16:7c:d5:37:20:b0:15:3b:81:01:fe:0f:
         dd:6d:35:d0:36:a0:89:64:6d:5c:22:24:89:c1:eb:71:da:69:
         77:75:27:f9:a2:73:3d:06:da:72:ce:ea:17:a3:dd:57:6b:45:
         00:da:f5:b8:f2:11:e9:e3:51:e1:b6:5b:c3:97:94:d8:ef:50:
         98:4f:4e:96:fd:58:04:a8:23:3c:83:1e:22:6b:5c:86:90:65:
         c5:d3:61:56:ad:4e:87:62:2d:77:d4:aa:b4:e8:6e:7f:21:ec:
         53:60:c8:83:35:80:b1:54:45:0e:b7:47:bb:59:ca:28:04:42:
         b8:80:69:57:05:ad:1f:f5:7e:4b:65:34:05:b6:4e:aa:78:fa:
         e4:c6:8b:ae:4a:cf:b4:ec:50:ae:c2:2a:eb:9a:4e:0d:49:5d:
         37:a6:46:c9:fb:f5:39:48:58:33:bd:c1:a9:2f:b7:6f:90:40:
         cb:da:51:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR7nnVN1zda4lsGAwX7NrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTcyZDQzODM1Y2Q2YTY2ZTU0ZTVhNTg1NmNlNTdkZTI4
MmQ0M2EwHhcNMjYwNTEzMDMwMDU0WhcNMjYwNTE0MDMwMDU0WjAzMTEwLwYDVQQD
EyhhMDRiOGMxMzgxMDI1Y2ZkZGYzM2ZiMzY3N2ZjZTM2MGI0OTgwYmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgSqBJCjUoeATLjlQpMviPJ+3d13
Bz79rlDLh56yPEp4tgcnro30mKn0SKgP7evrq3jmFrgZusoFhZgpCyPFMwovbYH8
AH2netsKDNbDM49QnJ9vfzJJ0PvbW3wg7oappxcZjmSdI2v7dSYQI0yuB4Pg5KPG
T1fm0pp+lK0nmX2swAHFusC/BWs5Zrc66wBOi3qw4fQKUgacGLDwF8dq+0EgWxqf
XKyJ6aSEr5y5M/JGMCdhe+ZIMJuCDUjlsy0InNIPF0MWCsA4DAHNKujLxc0a72Sx
uy9rGqDiuXa1smAZiec2YOq67Uhl+eG34ZGbK0CRDESI/1JrpioT1yHqlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBLjBOBAlz93zP7Nnf842C0mAukMB8GA1UdIwQY
MBaAFBeXLUODXNamblTlpYVs5X3igtQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWIt
OTA5NWVjYzg3ODc4LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWItOTA5NWVjYzg3ODc4
LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxSQvZed
3afgjlbyuEALFG1IXvRx5f2vkDzEQicK+KFKhWRJg3Lm0nboPXFAsiaAhpHcKSp2
/GV0uiVz97HGDFoCUyw9efe6kzlWbieXFnzVNyCwFTuBAf4P3W010DagiWRtXCIk
icHrcdppd3Un+aJzPQbacs7qF6PdV2tFANr1uPIR6eNR4bZbw5eU2O9QmE9Olv1Y
BKgjPIMeImtchpBlxdNhVq1Oh2Itd9SqtOhufyHsU2DIgzWAsVRFDrdHu1nKKARC
uIBpVwWtH/V+S2U0BbZOqnj65MaLrkrPtOxQrsIq65pODUldN6ZGyfv1OUhYM73B
qS+3b5BAy9pRGg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:31:55 2026 by rpki-client