Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/60bf71-c44a-4dbe-bbbd-e5512fcbe246/1/d4EcuJvMiIm5oSXaMA8frpUDfsw.mft
File:                     d4EcuJvMiIm5oSXaMA8frpUDfsw.mft (raw, json)
Hash identifier:          yzfHjeK7YNaWD/QLIDyJQFUrtLF2ehOzBS/OwWnnmO4=
Subject key identifier:   BC:FF:97:82:5B:01:83:BA:FA:74:29:0D:A1:AE:1B:B6:3F:45:98:E8
Authority key identifier: 77:81:1C:B8:9B:CC:88:89:B9:A1:25:DA:30:0F:1F:AE:95:03:7E:CC
Certificate issuer:       /CN=77811cb89bcc8889b9a125da300f1fae95037ecc
Certificate serial:       019E1D90B855072ABD05EC9E0C6B084DF546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d4EcuJvMiIm5oSXaMA8frpUDfsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/60bf71-c44a-4dbe-bbbd-e5512fcbe246/1/d4EcuJvMiIm5oSXaMA8frpUDfsw.mft
Manifest number:          12
Signing time:             Tue 12 May 2026 19:01:23 +0000
Manifest this update:     Tue 12 May 2026 19:01:23 +0000
Manifest next update:     Wed 13 May 2026 19:01:23 +0000
Files and hashes:         1: d4EcuJvMiIm5oSXaMA8frpUDfsw.crl (hash: xPpMJVmbNqcUd7y86XJ2Al4224f7GdXrghk67rYuhYs=)
                          2: vrpJMRq--LU7egmQY6pj2VWmf8o.asa (hash: Y+k0dQCB6nSlVKkCd7bC0O2dU2Ogg04osi5deXawbYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/60bf71-c44a-4dbe-bbbd-e5512fcbe246/1/d4EcuJvMiIm5oSXaMA8frpUDfsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/60bf71-c44a-4dbe-bbbd-e5512fcbe246/1/d4EcuJvMiIm5oSXaMA8frpUDfsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d4EcuJvMiIm5oSXaMA8frpUDfsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:b8:55:07:2a:bd:05:ec:9e:0c:6b:08:4d:f5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77811cb89bcc8889b9a125da300f1fae95037ecc
        Validity
            Not Before: May 12 19:01:23 2026 GMT
            Not After : May 13 19:01:23 2026 GMT
        Subject: CN=bcff97825b0183bafa74290da1ae1bb63f4598e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c3:0f:6c:be:a8:eb:db:ac:ea:ca:ac:30:30:
                    27:46:12:85:e2:5e:59:e3:2a:bd:4a:ea:ee:36:2e:
                    4a:0d:4a:07:3c:a2:9f:1e:89:37:bd:2d:ff:44:a7:
                    b4:08:a5:82:bc:bd:09:ec:dc:d9:56:01:c9:9d:ee:
                    b3:08:d1:4f:5c:47:c5:af:9b:c6:60:9e:b4:2f:ed:
                    6d:d1:05:f4:11:95:fa:44:ac:a5:94:35:56:7e:2a:
                    5b:21:dd:a9:a9:1b:ff:b1:91:93:90:03:1a:dd:e2:
                    2f:d3:04:79:cc:ea:06:00:f8:b6:e3:33:50:76:18:
                    07:64:d3:fc:9e:d4:06:dd:e7:d3:c7:ed:76:42:43:
                    d2:2b:29:44:82:3a:4f:c2:48:e4:41:40:64:d4:eb:
                    e1:5e:86:29:5f:6f:1b:d7:34:eb:e2:ec:8d:c2:b9:
                    9b:5f:f4:e5:a4:8c:a9:cf:e2:c4:c3:20:fa:7f:37:
                    e5:58:25:ff:86:31:a6:eb:73:d9:18:bf:e7:d2:3e:
                    c8:70:3d:62:c0:8e:a5:42:84:d8:67:50:74:78:c6:
                    36:8e:5a:ee:41:b2:93:3a:dc:32:e3:fe:d7:3c:81:
                    67:9e:99:ae:87:51:82:05:15:ec:f0:ed:ed:fb:2e:
                    4e:86:d9:90:af:a1:ce:b8:82:6b:b8:fd:bb:6e:a8:
                    69:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FF:97:82:5B:01:83:BA:FA:74:29:0D:A1:AE:1B:B6:3F:45:98:E8
            X509v3 Authority Key Identifier:
                keyid:77:81:1C:B8:9B:CC:88:89:B9:A1:25:DA:30:0F:1F:AE:95:03:7E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4EcuJvMiIm5oSXaMA8frpUDfsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/60bf71-c44a-4dbe-bbbd-e5512fcbe246/1/d4EcuJvMiIm5oSXaMA8frpUDfsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/60bf71-c44a-4dbe-bbbd-e5512fcbe246/1/d4EcuJvMiIm5oSXaMA8frpUDfsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:8c:36:cc:25:fb:6e:82:63:11:51:92:27:e6:50:d7:f2:7b:
         8b:63:4d:45:dc:d6:e3:a2:d3:4e:0d:c2:f3:fd:ba:43:26:c7:
         11:85:88:ab:51:53:aa:46:31:08:71:bb:ad:aa:3d:e4:81:ea:
         a3:12:bb:9e:10:10:5c:62:b8:88:ac:c9:86:25:76:1b:1e:70:
         23:e6:06:a2:3f:da:f6:9d:67:80:c5:7e:c9:c9:e2:42:ca:df:
         7e:99:c0:ac:d0:34:67:01:c2:db:77:a3:df:d1:0a:fb:cc:48:
         dc:de:63:33:0a:42:75:cf:7e:e8:fa:5d:98:8f:c6:46:b5:1f:
         99:60:07:0a:07:13:e3:86:f7:11:93:db:9c:4d:9e:63:21:c4:
         3c:d4:51:d6:6f:e6:fb:ec:f3:cb:78:a4:89:e8:b0:70:28:f4:
         ee:1d:82:ce:e8:12:d1:1d:50:7a:4d:4f:23:7b:74:ee:55:59:
         35:4a:8e:bc:18:46:f3:33:2d:b1:39:f3:47:b2:49:35:28:c0:
         a9:65:47:1f:59:d5:32:ad:a5:08:e3:12:42:cb:dc:22:fc:e5:
         3f:fc:81:c5:a1:3f:cb:35:1a:16:fe:bf:78:f6:4a:7e:d8:9e:
         e0:8b:c0:ed:d7:cb:b4:74:f2:4d:8b:93:ee:58:5f:93:05:26:
         32:ad:cc:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkLhVByq9BeyeDGsITfVGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ODExY2I4OWJjYzg4ODliOWExMjVkYTMwMGYxZmFlOTUw
MzdlY2MwHhcNMjYwNTEyMTkwMTIzWhcNMjYwNTEzMTkwMTIzWjAzMTEwLwYDVQQD
EyhiY2ZmOTc4MjViMDE4M2JhZmE3NDI5MGRhMWFlMWJiNjNmNDU5OGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38MPbL6o69us6sqsMDAnRhKF4l5Z
4yq9SuruNi5KDUoHPKKfHok3vS3/RKe0CKWCvL0J7NzZVgHJne6zCNFPXEfFr5vG
YJ60L+1t0QX0EZX6RKyllDVWfipbId2pqRv/sZGTkAMa3eIv0wR5zOoGAPi24zNQ
dhgHZNP8ntQG3efTx+12QkPSKylEgjpPwkjkQUBk1OvhXoYpX28b1zTr4uyNwrmb
X/TlpIypz+LEwyD6fzflWCX/hjGm63PZGL/n0j7IcD1iwI6lQoTYZ1B0eMY2jlru
QbKTOtwy4/7XPIFnnpmuh1GCBRXs8O3t+y5OhtmQr6HOuIJruP27bqhplwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLz/l4JbAYO6+nQpDaGuG7Y/RZjoMB8GA1UdIwQY
MBaAFHeBHLibzIiJuaEl2jAPH66VA37MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDRFY3VKdk1pSW01b1NYYU1BOGZycFVEZnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82MGJmNzEtYzQ0YS00ZGJlLWJiYmQt
ZTU1MTJmY2JlMjQ2LzEvZDRFY3VKdk1pSW01b1NYYU1BOGZycFVEZnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82MGJmNzEtYzQ0YS00ZGJlLWJiYmQtZTU1MTJmY2JlMjQ2
LzEvZDRFY3VKdk1pSW01b1NYYU1BOGZycFVEZnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWow2zCX7
boJjEVGSJ+ZQ1/J7i2NNRdzW46LTTg3C8/26QybHEYWIq1FTqkYxCHG7rao95IHq
oxK7nhAQXGK4iKzJhiV2Gx5wI+YGoj/a9p1ngMV+ycniQsrffpnArNA0ZwHC23ej
39EK+8xI3N5jMwpCdc9+6PpdmI/GRrUfmWAHCgcT44b3EZPbnE2eYyHEPNRR1m/m
++zzy3ikieiwcCj07h2CzugS0R1Qek1PI3t07lVZNUqOvBhG8zMtsTnzR7JJNSjA
qWVHH1nVMq2lCOMSQsvcIvzlP/yBxaE/yzUaFv6/ePZKftie4IvA7dfLtHTyTYuT
7lhfkwUmMq3MRA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:53:55 2026 by rpki-client