Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
File:                     Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json)
Hash identifier:          GANSt92wJDjwnB3g0ybL3gv2Z8OWJvB0nT+H3T3Azss=
Subject key identifier:   CA:CC:CE:EF:C6:F9:9D:A7:9B:30:43:29:57:D7:55:C3:81:71:C6:53
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Certificate issuer:       /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial:       019E1ED9E86A1B99BC268AADC1701EE2D989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
Manifest number:          1905
Signing time:             Wed 13 May 2026 01:00:57 +0000
Manifest this update:     Wed 13 May 2026 01:00:57 +0000
Manifest next update:     Thu 14 May 2026 01:00:57 +0000
Files and hashes:         1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: ZDINoUiaz5lK0rWhIw1MNZVNL6fsVY35Q4Mk50ni4A0=)
                          2: DAfU0D6FgxQd5_vEH2Qpid-IR7g.roa (hash: fxIk5AsChzngQysfi5it8JFJ1Q8x41MNpVTTV3uuLiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:e8:6a:1b:99:bc:26:8a:ad:c1:70:1e:e2:d9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
        Validity
            Not Before: May 13 01:00:57 2026 GMT
            Not After : May 14 01:00:57 2026 GMT
        Subject: CN=caccceefc6f99da79b30432957d755c38171c653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:5d:81:4e:78:3d:da:e8:51:8d:5a:db:a0:
                    d3:d8:ae:85:ab:77:de:42:25:7d:24:8c:e3:d6:7f:
                    aa:44:6f:5e:e7:6f:be:d3:5a:57:78:66:53:79:2a:
                    b0:55:fc:1f:e5:c1:9b:62:9d:00:81:8c:99:1b:13:
                    b3:d3:a9:a9:d4:72:b7:a8:7e:72:32:d1:ff:e1:95:
                    88:fc:9b:3f:ed:4c:54:e7:b8:ce:5d:00:80:f8:16:
                    ca:8e:d5:35:c8:b4:9c:45:3a:3c:61:d2:71:06:24:
                    90:ce:fb:b4:f1:71:1e:16:5a:05:0a:ac:69:d3:ba:
                    43:cf:af:b1:57:3a:4f:bf:3b:00:5f:38:63:bf:07:
                    d9:ed:e6:e0:a9:68:3a:b2:38:c3:b1:0f:80:3f:97:
                    88:86:13:c9:3c:ae:00:82:ed:74:de:c0:0a:70:e1:
                    31:11:84:f8:cb:ff:f3:70:8e:0b:c9:d7:b0:35:cf:
                    8b:29:99:74:4f:7b:13:66:03:bf:40:b1:4b:fa:ce:
                    f7:93:b1:0a:34:54:42:4f:fb:bd:70:3f:41:e0:2a:
                    f6:9f:bf:28:90:7f:03:b4:ee:3c:5f:6a:59:6e:5b:
                    3c:44:b7:27:18:a5:39:43:82:46:76:31:ab:0c:2b:
                    a9:51:b9:25:f7:fe:b7:0e:38:4b:34:f8:ee:56:7a:
                    6a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CC:CE:EF:C6:F9:9D:A7:9B:30:43:29:57:D7:55:C3:81:71:C6:53
            X509v3 Authority Key Identifier:
                keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:df:21:ca:5b:8b:a3:9e:d0:7e:ce:db:6f:7a:af:6d:61:29:
         13:95:78:d5:b7:16:0f:59:9a:53:dc:82:61:ad:15:19:24:10:
         01:e3:c3:81:ce:0b:b4:61:d3:3c:e1:51:03:79:db:f3:7c:1f:
         4e:53:98:79:d2:bc:e4:14:c9:78:59:f2:89:5e:ea:87:a4:76:
         b3:19:bd:34:74:37:1b:20:e8:ed:7c:a1:97:41:c6:6e:e0:ad:
         c2:83:82:bb:22:09:9e:30:9d:74:f7:e0:1b:7f:3d:70:f8:20:
         ec:cf:89:c3:cf:fd:46:ae:27:59:d7:9b:0c:37:5f:22:a4:2e:
         6d:9e:90:04:3f:2f:0c:c0:c3:55:59:6d:88:8b:51:e9:e4:a1:
         7b:55:6f:08:a3:4d:5a:01:df:54:1e:bb:10:43:ae:bb:83:e7:
         a1:a5:1a:b4:74:b6:44:76:f9:18:4a:cc:13:ab:7c:ba:c3:91:
         59:ab:05:99:3c:98:43:b6:70:18:56:59:bc:b3:ce:53:11:9b:
         be:4f:ff:86:f2:0a:df:3d:35:c2:12:73:61:ac:93:5c:4c:b3:
         38:4b:e1:d3:7a:77:66:3c:50:31:93:0c:fe:a3:a8:1b:1c:4b:
         57:84:4f:a4:ee:be:e5:9c:22:df:ae:67:5a:bb:06:4d:87:80:
         7e:91:2c:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2ehqG5m8JoqtwXAe4tmJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZWEyNWUzNTY5MzI4NzVjMDk2YTAzMTc1NTk4MDQxNTVm
NmM5OWQwHhcNMjYwNTEzMDEwMDU3WhcNMjYwNTE0MDEwMDU3WjAzMTEwLwYDVQQD
EyhjYWNjY2VlZmM2Zjk5ZGE3OWIzMDQzMjk1N2Q3NTVjMzgxNzFjNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq29dgU54PdroUY1a26DT2K6Fq3fe
QiV9JIzj1n+qRG9e52++01pXeGZTeSqwVfwf5cGbYp0AgYyZGxOz06mp1HK3qH5y
MtH/4ZWI/Js/7UxU57jOXQCA+BbKjtU1yLScRTo8YdJxBiSQzvu08XEeFloFCqxp
07pDz6+xVzpPvzsAXzhjvwfZ7ebgqWg6sjjDsQ+AP5eIhhPJPK4Agu103sAKcOEx
EYT4y//zcI4LydewNc+LKZl0T3sTZgO/QLFL+s73k7EKNFRCT/u9cD9B4Cr2n78o
kH8DtO48X2pZbls8RLcnGKU5Q4JGdjGrDCupUbkl9/63DjhLNPjuVnpqWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrMzu/G+Z2nmzBDKVfXVcOBccZTMB8GA1UdIwQY
MBaAFALqJeNWkyh1wJagMXVZgEFV9smdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXVvbDQxYVRLSFhBbHFBeGRWbUFRVlgyeVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85YjZiZTItZGE0NC00MmZjLTgxZTEt
ZDgxNGZkY2E1YmVkLzEvQXVvbDQxYVRLSFhBbHFBeGRWbUFRVlgyeVowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS85YjZiZTItZGE0NC00MmZjLTgxZTEtZDgxNGZkY2E1YmVk
LzEvQXVvbDQxYVRLSFhBbHFBeGRWbUFRVlgyeVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZd8hyluL
o57Qfs7bb3qvbWEpE5V41bcWD1maU9yCYa0VGSQQAePDgc4LtGHTPOFRA3nb83wf
TlOYedK85BTJeFnyiV7qh6R2sxm9NHQ3GyDo7Xyhl0HGbuCtwoOCuyIJnjCddPfg
G389cPgg7M+Jw8/9Rq4nWdebDDdfIqQubZ6QBD8vDMDDVVltiItR6eShe1VvCKNN
WgHfVB67EEOuu4PnoaUatHS2RHb5GErME6t8usORWasFmTyYQ7ZwGFZZvLPOUxGb
vk//hvIK3z01whJzYayTXEyzOEvh03p3ZjxQMZMM/qOoGxxLV4RPpO6+5Zwi365n
WrsGTYeAfpEsVQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:11:14 2026 by rpki-client