Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File:                     HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier:          6O16vrM2qmMKyUuLNPsyIh89lcbxUvzPvQ5OmFVd65o=
Subject key identifier:   C1:31:36:44:11:98:4D:DD:53:19:1A:F1:10:87:11:41:37:F2:67:FE
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer:       /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial:       019E20C86BC3E2170FB14EE60027FC8631F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 10:01:06 +0000
Manifest this update:     Wed 13 May 2026 10:01:06 +0000
Manifest next update:     Thu 14 May 2026 10:01:06 +0000
Files and hashes:         1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: XyWFf58FqqKgendr3vuRMm9UUluvoMqxuq1oYq4LZ+g=)
                          2: Qq92xrncKE3gNgTmvbBvBWPB6qI.roa (hash: /9Dleb0yfYmR0zXREW6ew7jssIDQZBndb1NlB/cFqO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:6b:c3:e2:17:0f:b1:4e:e6:00:27:fc:86:31:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
        Validity
            Not Before: May 13 10:01:06 2026 GMT
            Not After : May 14 10:01:06 2026 GMT
        Subject: CN=c131364411984ddd53191af11087114137f267fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:51:cb:9b:49:0f:96:29:03:f3:49:b4:bf:
                    96:22:9e:8d:fc:4f:39:35:cc:6e:16:b5:bc:70:e9:
                    58:91:74:33:1a:47:99:37:97:db:45:62:eb:25:22:
                    37:af:6e:3b:12:89:05:b8:fc:d4:dd:56:65:57:24:
                    8f:09:28:d3:d7:f2:fb:70:f8:25:c1:4e:47:f7:a1:
                    ef:17:f9:8f:a0:ce:e5:f3:d6:7b:b0:fb:a4:2e:6e:
                    cd:f6:04:61:c1:41:50:2b:14:f9:61:ff:f9:1c:f1:
                    e4:1f:c3:3f:b3:94:a1:f1:03:3a:8c:c6:d0:58:29:
                    78:2f:b3:d4:22:05:76:ca:b1:5b:ff:49:f6:e8:5b:
                    6b:31:90:05:0e:2d:e0:8a:ce:78:24:68:be:4c:94:
                    99:1c:50:d7:75:ba:fb:c9:76:3e:5b:f2:bf:8e:28:
                    4d:91:ef:39:a5:c3:f7:f1:e1:76:a3:d3:cb:12:45:
                    5f:b7:f6:b3:32:6e:e9:95:bb:1e:74:cb:13:db:8e:
                    17:32:00:84:73:82:26:75:e3:ec:42:4d:6e:51:bd:
                    6f:58:40:d6:0d:29:ce:b8:34:7d:9f:6e:b9:5b:90:
                    39:81:84:18:86:7a:ce:f3:ee:e8:9d:53:5c:31:54:
                    3e:da:15:ee:e9:48:62:c4:61:b6:ad:8c:85:e7:38:
                    de:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:31:36:44:11:98:4D:DD:53:19:1A:F1:10:87:11:41:37:F2:67:FE
            X509v3 Authority Key Identifier:
                keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:82:96:93:48:57:83:26:26:25:f5:10:13:f3:69:37:10:47:
         ad:01:a5:99:84:47:27:99:f4:5b:0d:ec:51:ce:01:28:22:d7:
         24:09:5a:2d:c8:47:c3:91:cc:e5:22:bb:84:01:cb:da:ea:da:
         1a:8b:37:39:4f:54:a6:28:4d:ad:9b:0f:17:75:a2:d0:81:1a:
         2f:3e:47:b7:e8:65:8c:66:f5:38:6f:7b:80:eb:10:13:6c:bf:
         a4:b4:8b:2e:86:03:d8:18:a2:9f:05:33:82:55:9c:4d:4e:68:
         bb:d9:da:77:9f:12:c0:11:0b:1a:db:b1:c0:63:4d:08:e7:a5:
         af:9a:ad:aa:19:cd:46:e0:57:3b:51:ea:49:2c:68:a8:4d:8d:
         1a:b9:94:4e:9d:70:aa:31:c4:09:6e:24:49:f0:fa:20:4f:f1:
         da:2b:e7:1e:c3:d3:e7:ee:0a:57:1c:1d:b4:4c:49:13:bc:73:
         bd:2d:16:eb:f0:04:5a:c2:45:c8:3f:ec:12:4a:8b:24:a7:42:
         f8:f6:af:3b:39:6f:88:76:54:47:13:c6:eb:b4:b1:27:d7:e0:
         0a:9e:b3:36:e4:ba:cd:7d:b6:ad:88:b7:0c:4f:7f:2f:c3:e0:
         44:cc:b0:7b:2e:7c:47:cb:05:be:f0:37:74:65:a8:14:e1:db:
         ba:d9:28:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyGvD4hcPsU7mACf8hjH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMGUyMTZlNTc5MWUxYjAxZGEyMWJjYWYzMzAwNDFhZDcy
YTdlNmMwHhcNMjYwNTEzMTAwMTA2WhcNMjYwNTE0MTAwMTA2WjAzMTEwLwYDVQQD
EyhjMTMxMzY0NDExOTg0ZGRkNTMxOTFhZjExMDg3MTE0MTM3ZjI2N2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjJRy5tJD5YpA/NJtL+WIp6N/E85
NcxuFrW8cOlYkXQzGkeZN5fbRWLrJSI3r247EokFuPzU3VZlVySPCSjT1/L7cPgl
wU5H96HvF/mPoM7l89Z7sPukLm7N9gRhwUFQKxT5Yf/5HPHkH8M/s5Sh8QM6jMbQ
WCl4L7PUIgV2yrFb/0n26FtrMZAFDi3gis54JGi+TJSZHFDXdbr7yXY+W/K/jihN
ke85pcP38eF2o9PLEkVft/azMm7plbsedMsT244XMgCEc4ImdePsQk1uUb1vWEDW
DSnOuDR9n265W5A5gYQYhnrO8+7onVNcMVQ+2hXu6UhixGG2rYyF5zjeGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMExNkQRmE3dUxka8RCHEUE38mf+MB8GA1UdIwQY
MBaAFBwOIW5XkeGwHaIbyvMwBBrXKn5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEt
MmMwZmM2YmUxZTU3LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEtMmMwZmM2YmUxZTU3
LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYKWk0hX
gyYmJfUQE/NpNxBHrQGlmYRHJ5n0Ww3sUc4BKCLXJAlaLchHw5HM5SK7hAHL2ura
Gos3OU9UpihNrZsPF3Wi0IEaLz5Ht+hljGb1OG97gOsQE2y/pLSLLoYD2BiinwUz
glWcTU5ou9nad58SwBELGtuxwGNNCOelr5qtqhnNRuBXO1HqSSxoqE2NGrmUTp1w
qjHECW4kSfD6IE/x2ivnHsPT5+4KVxwdtExJE7xzvS0W6/AEWsJFyD/sEkqLJKdC
+PavOzlviHZURxPG67SxJ9fgCp6zNuS6zX22rYi3DE9/L8PgRMywey58R8sFvvA3
dGWoFOHbutkoqw==
-----END CERTIFICATE-----
Generated at Wed May 13 13:51:36 2026 by rpki-client