Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
File:                     9IOBPbTT97DwLDH4W1JDww9F4lI.mft (raw, json)
Hash identifier:          ohLI6S4wfA+ZoKNirln2TbqLYkxsgUGzxn9016yh/xk=
Subject key identifier:   E8:6D:BD:02:89:40:10:78:47:91:AA:4B:E1:D4:88:CC:6F:83:75:4F
Authority key identifier: F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
Certificate issuer:       /CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Certificate serial:       019E1C47061468DEA22C69A85B044674C964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
Manifest number:          1902
Signing time:             Tue 12 May 2026 13:01:16 +0000
Manifest this update:     Tue 12 May 2026 13:01:16 +0000
Manifest next update:     Wed 13 May 2026 13:01:16 +0000
Files and hashes:         1: 9IOBPbTT97DwLDH4W1JDww9F4lI.crl (hash: tXWTIIHX3hyrV/Y4Jf0JJKO/ry/O2Q0ZwrjLbnp8L2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:06:14:68:de:a2:2c:69:a8:5b:04:46:74:c9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
        Validity
            Not Before: May 12 13:01:16 2026 GMT
            Not After : May 13 13:01:16 2026 GMT
        Subject: CN=e86dbd02894010784791aa4be1d488cc6f83754f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:83:3c:60:96:79:54:ec:45:e6:16:1b:ac:50:
                    5a:7c:a1:fc:94:05:ba:b8:fc:fe:d5:b6:4c:f6:15:
                    44:35:18:ca:02:79:92:dd:a3:75:0c:39:65:03:c7:
                    ea:d7:af:f3:84:e0:ff:20:58:1d:77:0c:fb:4f:a6:
                    dd:ea:e9:15:dd:bb:4f:46:63:3e:f2:8e:7c:15:ee:
                    b3:0f:22:06:40:23:b3:c1:f9:48:b0:a1:3f:09:bd:
                    e1:6f:e6:fc:b5:41:e6:cd:6d:d5:ef:d5:65:cf:11:
                    5a:18:06:ff:8f:f0:33:16:dd:26:dd:df:c2:83:95:
                    1b:51:5d:23:eb:41:cc:90:12:08:50:ea:29:b7:a2:
                    4f:4b:6e:01:53:8f:1a:5a:ba:ab:68:df:39:90:01:
                    d9:18:f3:af:ee:c8:38:d3:d8:4a:0e:82:09:7a:6f:
                    d2:43:a4:45:26:c5:c5:3d:21:24:ad:9b:a9:f2:b9:
                    e9:46:c8:44:85:21:66:71:d7:80:50:a5:75:0e:4d:
                    9a:44:ad:4e:83:07:04:fc:06:be:62:4e:56:2a:02:
                    2f:ff:17:84:76:cd:c4:17:54:dc:02:e1:2a:35:04:
                    52:ad:c5:26:0b:7b:4e:4d:64:32:b4:65:5b:f8:3e:
                    d8:87:bf:14:4c:84:8c:5c:2d:67:a7:2b:95:85:1a:
                    02:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6D:BD:02:89:40:10:78:47:91:AA:4B:E1:D4:88:CC:6F:83:75:4F
            X509v3 Authority Key Identifier:
                keyid:F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:45:0a:71:bf:e6:51:cc:f6:ad:32:12:a4:a4:b5:e4:ab:e2:
         4b:34:8d:b7:f8:25:48:f1:32:ac:a7:e9:3f:dd:a7:c2:dd:19:
         d0:34:4a:c6:5e:69:13:aa:18:23:e2:38:4c:33:cc:00:87:85:
         34:48:5e:be:8c:38:14:bd:c3:ff:ae:fa:f2:7b:c5:cc:af:a8:
         64:06:67:3f:2a:4a:4f:16:79:fb:34:50:25:27:ac:f8:48:8a:
         c1:40:66:85:fc:3b:a4:ce:4c:aa:8d:32:03:eb:7b:40:c3:c8:
         cc:fc:56:64:05:1a:3f:23:c5:53:25:43:93:31:b6:5d:de:cc:
         30:37:08:91:ac:fa:e2:67:cc:8d:8d:c7:7a:04:76:ee:1f:0f:
         a8:0f:c3:f8:34:ce:fc:6f:58:de:21:03:12:8d:48:9b:79:5b:
         03:4d:9b:eb:85:25:23:e4:8f:d4:b5:22:41:a6:7c:16:06:df:
         cf:8f:c6:93:1c:a6:c4:6a:b6:18:b6:60:6d:96:71:96:b7:83:
         ab:d4:92:5c:95:ce:48:50:bf:bf:4e:54:91:f9:75:ed:cc:fc:
         66:ca:ce:01:08:f8:c4:25:e0:83:be:b9:1f:15:0d:6e:b2:79:
         4b:02:9a:58:73:f1:a5:7e:db:ad:62:ec:99:b1:1e:d2:13:9e:
         04:9d:3b:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRwYUaN6iLGmoWwRGdMlkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODM4MTNkYjRkM2Y3YjBmMDJjMzFmODViNTI0M2MzMGY0
NWUyNTIwHhcNMjYwNTEyMTMwMTE2WhcNMjYwNTEzMTMwMTE2WjAzMTEwLwYDVQQD
EyhlODZkYmQwMjg5NDAxMDc4NDc5MWFhNGJlMWQ0ODhjYzZmODM3NTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YM8YJZ5VOxF5hYbrFBafKH8lAW6
uPz+1bZM9hVENRjKAnmS3aN1DDllA8fq16/zhOD/IFgddwz7T6bd6ukV3btPRmM+
8o58Fe6zDyIGQCOzwflIsKE/Cb3hb+b8tUHmzW3V79VlzxFaGAb/j/AzFt0m3d/C
g5UbUV0j60HMkBIIUOopt6JPS24BU48aWrqraN85kAHZGPOv7sg409hKDoIJem/S
Q6RFJsXFPSEkrZup8rnpRshEhSFmcdeAUKV1Dk2aRK1OgwcE/Aa+Yk5WKgIv/xeE
ds3EF1TcAuEqNQRSrcUmC3tOTWQytGVb+D7Yh78UTISMXC1npyuVhRoCHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhtvQKJQBB4R5GqS+HUiMxvg3VPMB8GA1UdIwQY
MBaAFPSDgT200/ew8Cwx+FtSQ8MPReJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mZDJhNzMtMjE1Ny00NmNmLTk4MWEt
ZTcxOGM4NDNhMjk0LzEvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mZDJhNzMtMjE1Ny00NmNmLTk4MWEtZTcxOGM4NDNhMjk0
LzEvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkUKcb/m
Ucz2rTISpKS15KviSzSNt/glSPEyrKfpP92nwt0Z0DRKxl5pE6oYI+I4TDPMAIeF
NEhevow4FL3D/6768nvFzK+oZAZnPypKTxZ5+zRQJSes+EiKwUBmhfw7pM5Mqo0y
A+t7QMPIzPxWZAUaPyPFUyVDkzG2Xd7MMDcIkaz64mfMjY3HegR27h8PqA/D+DTO
/G9Y3iEDEo1Im3lbA02b64UlI+SP1LUiQaZ8Fgbfz4/GkxymxGq2GLZgbZZxlreD
q9SSXJXOSFC/v05Ukfl17cz8ZsrOAQj4xCXgg765HxUNbrJ5SwKaWHPxpX7brWLs
mbEe0hOeBJ07rA==
-----END CERTIFICATE-----
Generated at Tue May 12 22:57:31 2026 by rpki-client