Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
File:                     4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json)
Hash identifier:          YAFpiFSotmEkRsxqmPmBie/44EDaeq8MPXEPjnx193Q=
Subject key identifier:   06:3A:E3:02:A5:55:86:F7:F3:F8:75:DF:83:1F:45:94:C4:2D:C8:6B
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Certificate issuer:       /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial:       019E1F482AAF93C4B5D22D24FADB0FDDA6C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 03:01:23 +0000
Manifest this update:     Wed 13 May 2026 03:01:23 +0000
Manifest next update:     Thu 14 May 2026 03:01:23 +0000
Files and hashes:         1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: x88KORap/gDCzhEZuewVwbpR6YXpNjzd2rXkVOhP3Jg=)
                          2: nQKy6e2LccKKfVdgMJiI4DoR9BU.roa (hash: DkQsbrxnTq1yHz8jrN75m8LOYNoDRbUgrzZnY6/SqN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:2a:af:93:c4:b5:d2:2d:24:fa:db:0f:dd:a6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
        Validity
            Not Before: May 13 03:01:23 2026 GMT
            Not After : May 14 03:01:23 2026 GMT
        Subject: CN=063ae302a55586f7f3f875df831f4594c42dc86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a6:3a:3b:4e:da:a9:d0:2e:e4:d8:88:3c:28:
                    82:7e:11:45:d7:3d:dc:49:3f:2a:95:bd:7b:d1:be:
                    84:58:13:4c:28:d5:11:e7:1c:cb:e7:36:91:ba:07:
                    4c:ba:36:dc:b8:b1:9e:78:e4:15:99:56:ce:da:d8:
                    7d:bd:89:21:cc:2a:3f:bf:55:01:a0:e4:68:6d:14:
                    27:e2:ca:bd:53:e4:c2:2e:4d:02:d6:9d:63:7b:d0:
                    72:53:17:e1:89:ba:c6:27:f5:34:9a:20:80:d4:96:
                    8d:e9:fd:87:34:42:a0:73:0c:ef:82:c3:51:43:94:
                    a9:9a:3f:13:70:54:17:fe:91:0b:6c:15:0c:fe:44:
                    85:5b:4f:79:f4:6a:5a:68:3e:5f:43:c9:7f:6a:03:
                    89:8b:76:71:c2:d9:b8:28:33:5b:9d:6e:a4:27:dc:
                    88:bb:41:c8:1d:70:de:3a:dc:58:53:90:ed:5a:57:
                    ec:37:6a:4f:f7:81:77:0a:53:7c:c8:81:01:7c:32:
                    52:1e:58:9f:23:08:1e:4b:cb:3b:6c:31:b3:6d:1d:
                    de:92:77:44:64:fa:7e:4a:de:b7:71:36:3f:54:b6:
                    73:3f:3a:15:a3:b4:49:40:6b:54:c7:74:8c:47:2c:
                    6d:33:f0:28:22:da:c6:b0:31:d7:7f:18:32:ab:1c:
                    fb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3A:E3:02:A5:55:86:F7:F3:F8:75:DF:83:1F:45:94:C4:2D:C8:6B
            X509v3 Authority Key Identifier:
                keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a3:0f:87:2a:af:39:fc:b6:16:78:e3:06:3a:43:e7:1f:21:
         03:95:b4:56:b3:b7:b1:88:54:38:90:95:36:6d:0f:0f:41:df:
         ec:fd:45:b5:64:e0:65:5f:3a:e7:af:ea:bd:23:6f:e2:45:63:
         26:aa:26:e6:fb:39:e6:95:12:d5:3a:1a:54:2c:4e:f1:d9:80:
         3f:d6:87:ef:b0:72:ec:26:03:b3:c9:16:b6:eb:15:72:f0:0f:
         cf:36:2a:82:b4:31:a0:cd:9b:d3:b5:4f:bc:7d:c4:dc:cd:c3:
         f3:f8:78:87:02:cd:47:89:56:3d:94:2b:ac:7c:3e:4b:ed:70:
         76:78:5c:67:2b:c8:35:42:93:b7:5b:34:14:5d:41:e5:db:18:
         ac:46:7d:fd:1c:b8:98:5a:94:3b:be:80:7e:a4:b5:d4:1d:9c:
         2a:ad:72:4f:42:bb:22:46:a4:86:67:cd:5a:34:1f:c1:91:c1:
         06:a1:3c:fe:34:ef:cf:83:e9:0f:90:99:02:2a:78:9d:7b:8b:
         cc:fe:f7:d9:fd:5c:57:b3:0a:c3:d5:ef:bc:ed:3b:fb:1e:70:
         2f:ad:d3:43:ce:6e:69:bf:c3:31:0c:65:fc:94:20:e7:f4:65:
         b4:7c:61:94:b7:14:64:84:73:1d:9d:43:7b:39:0d:10:e9:4b:
         00:1e:00:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fSCqvk8S10i0k+tsP3abEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYjQ0NWIwMGE4NjAwYjgzMzRjMWQzYWFkZjFlZjcxOTE0
ZTY4YzkwHhcNMjYwNTEzMDMwMTIzWhcNMjYwNTE0MDMwMTIzWjAzMTEwLwYDVQQD
EygwNjNhZTMwMmE1NTU4NmY3ZjNmODc1ZGY4MzFmNDU5NGM0MmRjODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKY6O07aqdAu5NiIPCiCfhFF1z3c
ST8qlb170b6EWBNMKNUR5xzL5zaRugdMujbcuLGeeOQVmVbO2th9vYkhzCo/v1UB
oORobRQn4sq9U+TCLk0C1p1je9ByUxfhibrGJ/U0miCA1JaN6f2HNEKgcwzvgsNR
Q5Spmj8TcFQX/pELbBUM/kSFW0959GpaaD5fQ8l/agOJi3Zxwtm4KDNbnW6kJ9yI
u0HIHXDeOtxYU5DtWlfsN2pP94F3ClN8yIEBfDJSHlifIwgeS8s7bDGzbR3ekndE
ZPp+St63cTY/VLZzPzoVo7RJQGtUx3SMRyxtM/AoItrGsDHXfxgyqxz7wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAY64wKlVYb38/h134MfRZTELchrMB8GA1UdIwQY
MBaAFOK0RbAKhgC4M0wdOq3x73GRTmjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJSRnNBcUdBTGd6VEIwNnJmSHZjWkZPYU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hOTFhZmUtOTY1MS00ZGUzLWFkODgt
ZDgzOTNlMTg1NzMyLzEvNHJSRnNBcUdBTGd6VEIwNnJmSHZjWkZPYU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9hOTFhZmUtOTY1MS00ZGUzLWFkODgtZDgzOTNlMTg1NzMy
LzEvNHJSRnNBcUdBTGd6VEIwNnJmSHZjWkZPYU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaMPhyqv
Ofy2FnjjBjpD5x8hA5W0VrO3sYhUOJCVNm0PD0Hf7P1FtWTgZV8656/qvSNv4kVj
Jqom5vs55pUS1ToaVCxO8dmAP9aH77By7CYDs8kWtusVcvAPzzYqgrQxoM2b07VP
vH3E3M3D8/h4hwLNR4lWPZQrrHw+S+1wdnhcZyvINUKTt1s0FF1B5dsYrEZ9/Ry4
mFqUO76AfqS11B2cKq1yT0K7IkakhmfNWjQfwZHBBqE8/jTvz4PpD5CZAip4nXuL
zP732f1cV7MKw9XvvO07+x5wL63TQ85uab/DMQxl/JQg5/RltHxhlLcUZIRzHZ1D
ezkNEOlLAB4A/A==
-----END CERTIFICATE-----
Generated at Wed May 13 06:43:46 2026 by rpki-client