Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
File:                     1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft (raw, json)
Hash identifier:          g/5n1Z5fnUqGBkc8O9sTen9ac/TKXer4ezyg6d9xcw4=
Subject key identifier:   31:C0:60:BA:A9:E1:0D:E9:9A:3B:6D:52:45:03:EE:91:08:03:CD:74
Authority key identifier: F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
Certificate issuer:       /CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Certificate serial:       019E1C0FF8723949C3B2E20779C6060E1FAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
Manifest number:          1904
Signing time:             Tue 12 May 2026 12:01:08 +0000
Manifest this update:     Tue 12 May 2026 12:01:08 +0000
Manifest next update:     Wed 13 May 2026 12:01:08 +0000
Files and hashes:         1: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl (hash: 4V0PmolLIoKNlFc9Nri+AutmzzfOttef2WlsijhnPJc=)
                          2: bruVcNNMC7Mp6aE6rGzw_JEfi0E.roa (hash: ejjZC1z5chW7R3pjzGKPMBf9E9b1c0msIw7AVev8LY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:f8:72:39:49:c3:b2:e2:07:79:c6:06:0e:1f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
        Validity
            Not Before: May 12 12:01:08 2026 GMT
            Not After : May 13 12:01:08 2026 GMT
        Subject: CN=31c060baa9e10de99a3b6d524503ee910803cd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:88:54:60:52:69:07:c1:90:c4:93:6a:7a:
                    b9:3e:60:ea:96:a2:af:9e:1b:fb:72:6a:70:3c:d3:
                    0a:0e:55:3a:a7:d6:ec:70:2e:6c:a0:06:c5:04:16:
                    f4:53:0e:18:37:f4:f4:bc:1a:f7:d9:d6:76:70:9b:
                    95:90:01:21:6c:c0:fd:55:10:0c:6d:9f:5d:94:38:
                    44:3c:e2:33:aa:7c:6f:35:8f:4c:67:21:59:0b:dd:
                    11:5d:76:7a:4f:2e:69:9a:4f:e9:56:f9:2f:23:8b:
                    2d:14:45:11:f9:b8:31:0d:83:d9:f6:d2:80:67:f3:
                    1b:52:c2:8a:9a:e3:4e:d6:b4:84:8c:3c:af:26:0c:
                    81:bb:09:05:ed:e7:0a:98:3a:ec:bb:b6:9f:c5:bb:
                    c4:c8:0f:71:85:7d:ab:02:e5:51:6d:16:f5:2f:bc:
                    44:90:81:4a:bb:25:06:a9:21:71:79:49:f9:dc:b9:
                    5d:00:37:94:99:c6:34:fc:0d:0c:5b:8c:87:45:48:
                    f5:3f:bb:d8:b7:2f:12:20:35:6f:ff:65:fb:f5:1d:
                    f2:93:3e:e3:bd:2c:fa:72:8e:c5:ee:11:4e:6e:52:
                    c1:0d:c4:f3:4e:5d:06:ed:0f:76:43:b8:0b:a7:a3:
                    13:f7:15:b7:98:00:ad:be:a6:47:a0:6f:70:15:0e:
                    1f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C0:60:BA:A9:E1:0D:E9:9A:3B:6D:52:45:03:EE:91:08:03:CD:74
            X509v3 Authority Key Identifier:
                keyid:F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:71:5a:40:2b:da:1a:99:3b:78:07:95:f6:f3:3a:64:96:e0:
         b8:96:45:d9:59:00:c8:e0:ee:0c:86:f8:30:a7:92:c7:c1:0b:
         08:ae:d6:f5:b2:d0:7a:8c:01:14:76:65:15:33:c1:36:86:2d:
         16:d1:7b:3c:fa:8b:51:3b:a0:6a:79:5d:b3:0b:0d:e8:b1:ec:
         fc:24:75:e0:93:96:cd:7f:00:e0:90:2c:61:50:25:3f:ba:23:
         88:a5:cf:c6:ba:2a:e6:2e:c5:5a:76:be:24:8b:fd:32:e2:31:
         95:12:8a:29:e5:d6:f1:20:92:03:e6:bc:a1:17:83:b1:3f:a2:
         31:71:a3:c4:de:89:f9:84:47:63:0b:f6:95:09:d0:72:cd:0e:
         b9:99:21:c3:eb:fe:cf:6f:83:69:b2:5f:1f:28:79:bc:6e:63:
         46:13:76:de:f8:70:88:d2:b6:37:a1:f2:bb:d9:f2:70:90:16:
         09:d9:8c:3f:02:90:7c:21:32:86:07:81:7e:66:c7:c8:8f:90:
         d7:4e:f8:79:7c:24:3a:2f:65:aa:d9:f8:27:ec:7a:a2:44:b4:
         22:05:1c:f8:03:25:91:b9:e5:91:a4:8c:d2:ce:b5:6e:93:0b:
         10:c0:f5:c0:5b:9a:81:2a:65:ed:3e:08:d4:a4:61:48:90:01:
         b8:6e:fd:8d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4cD/hyOUnDsuIHecYGDh+tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWQxMTBkMzllOTViNTQyZGY4ZDIwNzFkOTI0NTQ2OWEx
YjlmNDIwHhcNMjYwNTEyMTIwMTA4WhcNMjYwNTEzMTIwMTA4WjAzMTEwLwYDVQQD
EygzMWMwNjBiYWE5ZTEwZGU5OWEzYjZkNTI0NTAzZWU5MTA4MDNjZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmyIVGBSaQfBkMSTanq5PmDqlqKv
nhv7cmpwPNMKDlU6p9bscC5soAbFBBb0Uw4YN/T0vBr32dZ2cJuVkAEhbMD9VRAM
bZ9dlDhEPOIzqnxvNY9MZyFZC90RXXZ6Ty5pmk/pVvkvI4stFEUR+bgxDYPZ9tKA
Z/MbUsKKmuNO1rSEjDyvJgyBuwkF7ecKmDrsu7afxbvEyA9xhX2rAuVRbRb1L7xE
kIFKuyUGqSFxeUn53LldADeUmcY0/A0MW4yHRUj1P7vYty8SIDVv/2X79R3ykz7j
vSz6co7F7hFOblLBDcTzTl0G7Q92Q7gLp6MT9xW3mACtvqZHoG9wFQ4fzQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDHAYLqp4Q3pmjttUkUD7pEIA810MB8GA1UdIwQY
MBaAFPitEQ056VtULfjSBx2SRUaaG59CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LMFJEVG5wVzFRdC1OSUhIWkpGUnBvYm4wSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvNjBlNjNjLWU2M2ItNGUxNi1hNWVi
LTc5YTViMzk3OGZmMi8xLzEtSzBSRFRucFcxUXQtTklISFpKRlJwb2JuMEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdiLzYwZTYzYy1lNjNiLTRlMTYtYTVlYi03OWE1YjM5Nzhm
ZjIvMS8xLUswUkRUbnBXMVF0LU5JSEhaSkZScG9ibjBJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx3Fa
QCvaGpk7eAeV9vM6ZJbguJZF2VkAyODuDIb4MKeSx8ELCK7W9bLQeowBFHZlFTPB
NoYtFtF7PPqLUTuganldswsN6LHs/CR14JOWzX8A4JAsYVAlP7ojiKXPxroq5i7F
Wna+JIv9MuIxlRKKKeXW8SCSA+a8oReDsT+iMXGjxN6J+YRHYwv2lQnQcs0OuZkh
w+v+z2+DabJfHyh5vG5jRhN23vhwiNK2N6Hyu9nycJAWCdmMPwKQfCEyhgeBfmbH
yI+Q1074eXwkOi9lqtn4J+x6okS0IgUc+AMlkbnlkaSM0s61bpMLEMD1wFuagSpl
7T4I1KRhSJABuG79jQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:51:27 2026 by rpki-client