Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
File:                     pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft (raw, json)
Hash identifier:          IZYvKjnxz+jeBJJXQX7QwAqhkGvZW0fFGIA+G7m/mm0=
Subject key identifier:   F4:37:E6:EB:04:DD:46:CC:0E:15:E1:18:7D:7D:E0:C6:52:BF:A9:90
Authority key identifier: A4:5A:3D:EE:A2:2A:D7:0F:44:BD:FF:F3:DA:CA:78:7C:FA:B7:3A:FC
Certificate issuer:       /CN=a45a3deea22ad70f44bdfff3daca787cfab73afc
Certificate serial:       019E1CDD786126E6BFB2BBB006C5F55EBFE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
Manifest number:          02
Signing time:             Tue 12 May 2026 15:45:36 +0000
Manifest this update:     Tue 12 May 2026 15:45:36 +0000
Manifest next update:     Wed 13 May 2026 15:45:36 +0000
Files and hashes:         1: ZhmfZOQthLNwaXu66U6ErWqlalA.asa (hash: qf+Z2Ej6j2Id/dJp4k8hFnsz0b10rm8/N0nNZYscrA0=)
                          2: pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl (hash: dTOi0hEQiB33gZ+RwLc2DNvmKx/Geae534k8ASe745w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:dd:78:61:26:e6:bf:b2:bb:b0:06:c5:f5:5e:bf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a45a3deea22ad70f44bdfff3daca787cfab73afc
        Validity
            Not Before: May 12 15:45:36 2026 GMT
            Not After : May 13 15:45:36 2026 GMT
        Subject: CN=f437e6eb04dd46cc0e15e1187d7de0c652bfa990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f0:c3:be:95:1e:d5:80:96:f3:f3:21:d9:af:
                    bf:f3:ae:8e:51:6b:8a:15:53:e5:1f:04:94:47:7e:
                    be:be:bf:88:82:23:2a:89:5e:dd:97:83:23:1c:c5:
                    c4:aa:cd:a7:15:79:cc:5f:30:32:67:de:af:0e:f2:
                    ed:88:91:43:4d:c3:e4:c4:e7:2a:7d:31:87:8d:00:
                    2a:9c:2b:41:c1:1e:c0:6a:22:83:89:c3:9c:e0:95:
                    d2:30:cd:46:0b:8f:2f:70:58:6d:89:72:4d:08:a4:
                    89:0d:b1:43:98:4a:c5:42:d0:d2:9a:a8:87:9a:db:
                    30:e0:c9:96:49:cb:00:f6:a3:98:55:fa:c5:f3:19:
                    11:79:3e:f5:6c:f6:fc:68:39:23:c3:0e:84:04:b2:
                    4c:d0:be:29:42:c3:37:fb:b5:85:00:fe:d4:2c:f5:
                    d0:33:3a:16:e0:cb:99:33:85:e2:4a:05:3b:a0:02:
                    2a:c6:3d:5d:31:2f:52:25:9f:6a:47:6f:de:25:81:
                    c6:63:cb:fd:43:d1:40:23:2c:97:a5:12:c1:ca:84:
                    85:4d:76:84:88:f0:d1:2e:08:73:33:7d:61:43:77:
                    16:eb:61:78:d8:2b:e5:c1:bc:a3:38:e9:21:6f:49:
                    16:e7:bb:d6:44:36:8b:fb:d5:ef:b8:4e:66:a7:da:
                    c9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:37:E6:EB:04:DD:46:CC:0E:15:E1:18:7D:7D:E0:C6:52:BF:A9:90
            X509v3 Authority Key Identifier:
                keyid:A4:5A:3D:EE:A2:2A:D7:0F:44:BD:FF:F3:DA:CA:78:7C:FA:B7:3A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:34:8e:4c:7e:d4:dc:5e:87:68:41:17:8d:a9:42:90:00:6a:
         99:11:d8:a3:ff:78:5a:fb:cb:c2:a6:cc:8b:e2:96:fa:98:e3:
         ec:56:da:2a:06:9c:9e:5b:b1:85:81:76:b6:2c:a5:6a:2c:ea:
         4d:0d:a0:2c:30:d1:7e:98:74:d5:4f:44:b9:90:42:21:ed:5c:
         27:35:b9:b4:2e:6c:59:7c:a2:cf:25:87:e6:1f:25:5d:a0:70:
         2a:93:36:dc:43:1e:19:e2:7d:63:2c:b7:64:39:e6:a8:39:c8:
         95:41:79:38:cf:46:af:9e:8d:54:b5:48:a7:2c:c1:c4:26:33:
         2c:f3:35:c0:b5:01:a0:f1:1d:d6:be:b7:9b:02:16:6e:86:41:
         c2:94:03:cf:5f:ba:02:fd:c3:f5:6b:eb:a7:d2:35:40:72:7f:
         21:c6:a5:87:19:cd:69:67:dc:d5:c0:ff:28:1c:ad:d2:12:2b:
         1a:0b:fe:5e:b7:93:0e:1a:12:56:4e:a1:d6:b3:4c:b5:4a:18:
         6f:3e:50:03:3f:37:8d:8e:d3:20:91:1b:4f:fe:60:3c:91:63:
         50:44:19:8d:f3:4f:b1:25:ff:a5:06:b2:82:c1:08:ca:90:53:
         5c:16:6b:7d:eb:f4:14:6e:4e:4c:89:ed:e6:a2:3b:40:1f:cd:
         0a:a8:57:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c3XhhJua/sruwBsX1Xr/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NWEzZGVlYTIyYWQ3MGY0NGJkZmZmM2RhY2E3ODdjZmFi
NzNhZmMwHhcNMjYwNTEyMTU0NTM2WhcNMjYwNTEzMTU0NTM2WjAzMTEwLwYDVQQD
EyhmNDM3ZTZlYjA0ZGQ0NmNjMGUxNWUxMTg3ZDdkZTBjNjUyYmZhOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvDDvpUe1YCW8/Mh2a+/866OUWuK
FVPlHwSUR36+vr+IgiMqiV7dl4MjHMXEqs2nFXnMXzAyZ96vDvLtiJFDTcPkxOcq
fTGHjQAqnCtBwR7AaiKDicOc4JXSMM1GC48vcFhtiXJNCKSJDbFDmErFQtDSmqiH
mtsw4MmWScsA9qOYVfrF8xkReT71bPb8aDkjww6EBLJM0L4pQsM3+7WFAP7ULPXQ
MzoW4MuZM4XiSgU7oAIqxj1dMS9SJZ9qR2/eJYHGY8v9Q9FAIyyXpRLByoSFTXaE
iPDRLghzM31hQ3cW62F42CvlwbyjOOkhb0kW57vWRDaL+9XvuE5mp9rJPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ35usE3UbMDhXhGH194MZSv6mQMB8GA1UdIwQY
MBaAFKRaPe6iKtcPRL3/89rKeHz6tzr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEZvOTdxSXExdzlFdmZfejJzcDRmUHEzT3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85YTUwMGQtOTE3Ny00MjQxLWI0MzIt
NGNjMjhkMGJkMzVkLzEvcEZvOTdxSXExdzlFdmZfejJzcDRmUHEzT3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85YTUwMGQtOTE3Ny00MjQxLWI0MzItNGNjMjhkMGJkMzVk
LzEvcEZvOTdxSXExdzlFdmZfejJzcDRmUHEzT3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjSOTH7U
3F6HaEEXjalCkABqmRHYo/94WvvLwqbMi+KW+pjj7FbaKgacnluxhYF2tiylaizq
TQ2gLDDRfph01U9EuZBCIe1cJzW5tC5sWXyizyWH5h8lXaBwKpM23EMeGeJ9Yyy3
ZDnmqDnIlUF5OM9Gr56NVLVIpyzBxCYzLPM1wLUBoPEd1r63mwIWboZBwpQDz1+6
Av3D9Wvrp9I1QHJ/IcalhxnNaWfc1cD/KByt0hIrGgv+XreTDhoSVk6h1rNMtUoY
bz5QAz83jY7TIJEbT/5gPJFjUEQZjfNPsSX/pQaygsEIypBTXBZrfev0FG5OTInt
5qI7QB/NCqhXNw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:41:59 2026 by rpki-client