Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
File:                     CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json)
Hash identifier:          /GcpXWCsVElueQ121bRag150qeliljnC2tr82ipRVFg=
Subject key identifier:   A9:E5:60:52:8C:4E:D5:A4:68:A1:E4:99:15:AE:A8:76:76:B2:3D:84
Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Certificate issuer:       /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Certificate serial:       019E1BD8B100AAA24E09CD3591598D0892B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 11:00:46 +0000
Manifest this update:     Tue 12 May 2026 11:00:46 +0000
Manifest next update:     Wed 13 May 2026 11:00:46 +0000
Files and hashes:         1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: yJO8KuzMQfXRsVFOJcF1AhilYX2Ygextkl8xZ4M7AYQ=)
                          2: _GvT8qxHzJDdPdiDSUWqgsDN5bY.roa (hash: URfchAa4C28hUXRuersraUI9jXj6V/beN56FEsKLtdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:b1:00:aa:a2:4e:09:cd:35:91:59:8d:08:92:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
        Validity
            Not Before: May 12 11:00:46 2026 GMT
            Not After : May 13 11:00:46 2026 GMT
        Subject: CN=a9e560528c4ed5a468a1e49915aea87676b23d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1a:54:fe:c5:10:89:45:d8:f1:94:c6:ae:7e:
                    08:69:14:16:45:b2:e3:fd:92:7d:91:0b:60:b7:47:
                    94:bb:52:a0:82:6c:b0:58:51:9b:db:ce:d9:27:0c:
                    11:31:57:86:07:68:dc:93:53:44:54:dc:d5:37:78:
                    ea:7f:49:8d:79:93:88:f7:0b:e7:37:16:09:07:9f:
                    a3:8c:fe:e9:89:6f:de:4a:aa:f6:b8:a2:c7:8b:80:
                    b5:75:91:25:e1:b8:34:53:0f:22:2a:dd:2f:f7:cf:
                    23:5e:3d:3a:7f:86:3c:f3:a4:5d:a3:f5:a9:24:68:
                    37:d3:c7:6f:72:f6:16:4e:da:49:16:b6:f5:4a:8a:
                    1b:53:da:e9:25:3f:0b:07:13:d6:8a:23:46:38:b5:
                    e0:bb:f7:18:e3:29:86:d4:a9:2a:9d:3d:48:4a:3b:
                    4e:c8:de:bd:af:f2:4a:53:2f:e3:42:66:a0:8e:92:
                    35:fb:9b:e6:a4:dc:5f:e8:44:74:31:52:56:35:67:
                    91:3b:6c:8c:72:16:59:f9:9a:12:ee:8a:c6:7a:2b:
                    f0:a3:65:ea:1f:28:01:99:2b:1d:33:6d:f2:04:45:
                    57:ec:1b:8b:1c:72:f7:66:2a:ed:3d:71:bf:68:e6:
                    dc:b8:c6:8f:dd:4d:7e:dd:c3:62:8b:5b:da:0c:71:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E5:60:52:8C:4E:D5:A4:68:A1:E4:99:15:AE:A8:76:76:B2:3D:84
            X509v3 Authority Key Identifier:
                keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ea:73:0b:14:03:50:04:fe:6c:c2:76:78:6b:d3:6e:6b:5a:
         fd:20:14:17:17:66:55:c9:04:76:6f:08:58:e4:fe:7e:ff:86:
         56:a6:c7:a3:e7:b5:00:a0:8a:ff:a5:23:a4:02:8b:44:a5:69:
         97:a7:f9:10:b7:30:c2:56:eb:82:0b:da:c7:04:d2:3c:12:ca:
         a5:0d:86:9e:e5:7a:72:a1:d6:c9:cb:fb:8d:cc:0c:3e:2b:3e:
         43:c3:bc:bd:bd:8c:3a:ef:d9:7c:eb:47:e1:17:58:a9:50:49:
         d8:31:b6:e7:d7:57:71:f9:45:be:ea:d1:a2:3a:9f:d8:56:e8:
         77:99:4e:2f:05:f7:d5:0c:d1:7a:2c:9c:f0:28:0b:f7:bc:36:
         cb:3a:7c:52:99:b9:a8:2b:d9:e5:bd:39:6f:ba:99:5f:30:11:
         a4:c8:30:01:63:7b:67:f5:41:c3:a9:f9:39:b2:f6:b2:fa:ad:
         aa:5b:a6:d4:b2:29:52:03:6b:87:78:64:99:76:30:0e:0e:4d:
         5e:5d:94:35:70:33:9c:bf:c3:38:7c:9d:61:39:ef:a4:42:92:
         75:d3:b9:ce:fd:59:c4:fd:df:16:e5:aa:24:c4:c5:56:c3:ba:
         78:b8:61:42:34:40:47:f3:62:29:3c:a5:2f:64:58:78:25:06:
         b7:36:5a:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2LEAqqJOCc01kVmNCJKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YjAxMTBhZTRiODE3OTRhNTA4ODMxZmNiNWVkY2M4ZDVm
ZDJmMWIwHhcNMjYwNTEyMTEwMDQ2WhcNMjYwNTEzMTEwMDQ2WjAzMTEwLwYDVQQD
EyhhOWU1NjA1MjhjNGVkNWE0NjhhMWU0OTkxNWFlYTg3Njc2YjIzZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hpU/sUQiUXY8ZTGrn4IaRQWRbLj
/ZJ9kQtgt0eUu1KggmywWFGb287ZJwwRMVeGB2jck1NEVNzVN3jqf0mNeZOI9wvn
NxYJB5+jjP7piW/eSqr2uKLHi4C1dZEl4bg0Uw8iKt0v988jXj06f4Y886Rdo/Wp
JGg308dvcvYWTtpJFrb1SoobU9rpJT8LBxPWiiNGOLXgu/cY4ymG1KkqnT1ISjtO
yN69r/JKUy/jQmagjpI1+5vmpNxf6ER0MVJWNWeRO2yMchZZ+ZoS7orGeivwo2Xq
HygBmSsdM23yBEVX7BuLHHL3ZirtPXG/aObcuMaP3U1+3cNii1vaDHFupQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnlYFKMTtWkaKHkmRWuqHZ2sj2EMB8GA1UdIwQY
MBaAFAmwEQrkuBeUpQiDH8te3MjV/S8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iM2NlMWItZjFmNy00MGNiLWIzZDAt
NmQyMGY1YzE5N2Y2LzEvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9iM2NlMWItZjFmNy00MGNiLWIzZDAtNmQyMGY1YzE5N2Y2
LzEvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+pzCxQD
UAT+bMJ2eGvTbmta/SAUFxdmVckEdm8IWOT+fv+GVqbHo+e1AKCK/6UjpAKLRKVp
l6f5ELcwwlbrggvaxwTSPBLKpQ2GnuV6cqHWycv7jcwMPis+Q8O8vb2MOu/ZfOtH
4RdYqVBJ2DG259dXcflFvurRojqf2Fbod5lOLwX31QzReiyc8CgL97w2yzp8Upm5
qCvZ5b05b7qZXzARpMgwAWN7Z/VBw6n5ObL2svqtqlum1LIpUgNrh3hkmXYwDg5N
Xl2UNXAznL/DOHydYTnvpEKSddO5zv1ZxP3fFuWqJMTFVsO6eLhhQjRAR/NiKTyl
L2RYeCUGtzZamg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:36:53 2026 by rpki-client