Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
File:                     Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft (raw, json)
Hash identifier:          W//cdru5AypUIiB/CO+T98ZsngeCuMj/uU3PH1/VtJs=
Subject key identifier:   8F:0F:7C:52:C6:17:AF:FF:B9:A5:3A:8C:02:71:3A:B0:AB:FD:EE:32
Authority key identifier: 0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
Certificate issuer:       /CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Certificate serial:       019E216D54512200BA685D2246A564BD05D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
Manifest number:          17B7
Signing time:             Wed 13 May 2026 13:01:13 +0000
Manifest this update:     Wed 13 May 2026 13:01:13 +0000
Manifest next update:     Thu 14 May 2026 13:01:13 +0000
Files and hashes:         1: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl (hash: tbYyT/jIzdn9Abo3m1Z/6gb0vv6lX2fYanVld7GTssk=)
                          2: vOLYbuZI2HiAQAMspaYJozGTYd4.roa (hash: 2GBF+iOAjgmkpYWuKiOs1PlAzGgzPUynmOp5R9AhrOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6d:54:51:22:00:ba:68:5d:22:46:a5:64:bd:05:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecbefe20e18866b8a490c95ee45992643bed69d
        Validity
            Not Before: May 13 13:01:13 2026 GMT
            Not After : May 14 13:01:13 2026 GMT
        Subject: CN=8f0f7c52c617afffb9a53a8c02713ab0abfdee32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e4:24:d7:a5:ef:9b:ca:95:7f:94:92:8f:11:
                    b1:59:23:3e:aa:d2:fd:e5:7e:13:1a:0f:67:07:f7:
                    0b:10:b2:19:fc:12:3f:8e:74:de:15:a2:25:12:58:
                    b1:30:45:86:78:05:ec:90:60:0b:64:13:53:32:96:
                    9f:16:11:e8:c3:12:58:60:28:1e:b5:e6:4f:76:bd:
                    c9:08:fc:f8:22:94:e0:25:a9:d0:58:20:a2:97:92:
                    61:38:08:85:4b:59:96:bb:79:c8:6c:22:1e:41:49:
                    4a:5e:43:23:a6:af:84:4c:5e:17:ad:e8:97:5e:88:
                    13:1d:26:86:f9:5b:52:b5:cc:52:38:14:3d:55:1a:
                    c1:f3:ce:76:2c:7b:9a:cd:00:01:38:65:b3:25:ca:
                    57:cb:6d:22:3d:ec:d5:bd:07:65:50:f1:49:cb:bb:
                    b2:30:f5:2c:c0:e0:74:b1:6e:40:51:c9:e4:9c:f4:
                    bf:61:dd:06:03:07:ef:87:e5:59:46:2e:da:37:4b:
                    5e:02:05:3b:f2:85:dc:95:6e:3c:33:cf:b5:11:58:
                    12:1b:f6:aa:37:09:05:88:a5:e2:f7:cc:ce:a2:15:
                    3e:39:2a:85:eb:81:73:00:34:b3:8d:5c:23:c7:b0:
                    75:e4:f4:b7:6d:9c:cc:d6:51:09:af:92:d5:15:d3:
                    ff:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0F:7C:52:C6:17:AF:FF:B9:A5:3A:8C:02:71:3A:B0:AB:FD:EE:32
            X509v3 Authority Key Identifier:
                keyid:0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0c:a6:48:f3:00:0b:f1:a4:fc:58:4e:79:e1:b4:26:d2:64:
         04:7d:0b:98:12:68:5d:eb:5d:40:78:74:bf:d1:60:97:43:d4:
         33:84:71:c5:5f:06:56:1c:96:1b:2b:26:f6:05:04:e8:81:8f:
         6d:4f:a7:06:31:76:33:49:de:ad:f0:ce:b7:5b:0e:d8:86:17:
         2f:46:d7:3e:f1:89:da:33:cd:a2:ec:14:e7:1d:5d:93:43:e8:
         e1:60:39:25:cc:9d:91:3c:b7:33:a1:6c:8c:f5:c8:07:43:8d:
         06:ee:99:6d:43:b0:0f:7b:2e:d3:43:3b:2d:9e:86:2e:18:b8:
         93:bf:dc:09:24:93:4e:86:8c:55:9c:ad:24:39:50:38:7f:be:
         ee:e8:97:2a:8d:c4:f9:99:e9:d7:71:9e:0f:22:fc:9e:29:62:
         89:b2:0f:cd:16:a4:ac:5f:22:fa:67:e3:2e:4c:d0:90:70:2e:
         42:45:20:e6:14:60:1e:c5:be:6c:f1:a2:b6:24:6c:32:3c:7e:
         92:39:91:10:31:4d:89:a6:ea:63:4c:22:35:34:c0:a4:c7:89:
         8c:d4:60:91:06:03:e3:d5:32:8a:34:f4:80:5d:c5:e6:99:80:
         76:0f:e7:13:5f:8a:73:18:35:63:8a:d1:78:67:a7:ec:10:55:
         ea:94:de:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hbVRRIgC6aF0iRqVkvQXQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2JlZmUyMGUxODg2NmI4YTQ5MGM5NWVlNDU5OTI2NDNi
ZWQ2OWQwHhcNMjYwNTEzMTMwMTEzWhcNMjYwNTE0MTMwMTEzWjAzMTEwLwYDVQQD
Eyg4ZjBmN2M1MmM2MTdhZmZmYjlhNTNhOGMwMjcxM2FiMGFiZmRlZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+Qk16Xvm8qVf5SSjxGxWSM+qtL9
5X4TGg9nB/cLELIZ/BI/jnTeFaIlElixMEWGeAXskGALZBNTMpafFhHowxJYYCge
teZPdr3JCPz4IpTgJanQWCCil5JhOAiFS1mWu3nIbCIeQUlKXkMjpq+ETF4XreiX
XogTHSaG+VtStcxSOBQ9VRrB8852LHuazQABOGWzJcpXy20iPezVvQdlUPFJy7uy
MPUswOB0sW5AUcnknPS/Yd0GAwfvh+VZRi7aN0teAgU78oXclW48M8+1EVgSG/aq
NwkFiKXi98zOohU+OSqF64FzADSzjVwjx7B15PS3bZzM1lEJr5LVFdP/QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8PfFLGF6//uaU6jAJxOrCr/e4yMB8GA1UdIwQY
MBaAFA7L7+IOGIZrikkMle5FmSZDvtadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHN2djRnNFlobXVLU1F5VjdrV1pKa08tMXAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jNzU1Y2MtNWY5MC00N2Y1LWFkZWMt
OTA1ZjI0YzI1OGVlLzEvRHN2djRnNFlobXVLU1F5VjdrV1pKa08tMXAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jNzU1Y2MtNWY5MC00N2Y1LWFkZWMtOTA1ZjI0YzI1OGVl
LzEvRHN2djRnNFlobXVLU1F5VjdrV1pKa08tMXAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgymSPMA
C/Gk/FhOeeG0JtJkBH0LmBJoXetdQHh0v9Fgl0PUM4RxxV8GVhyWGysm9gUE6IGP
bU+nBjF2M0nerfDOt1sO2IYXL0bXPvGJ2jPNouwU5x1dk0Po4WA5JcydkTy3M6Fs
jPXIB0ONBu6ZbUOwD3su00M7LZ6GLhi4k7/cCSSTToaMVZytJDlQOH++7uiXKo3E
+Znp13GeDyL8niliibIPzRakrF8i+mfjLkzQkHAuQkUg5hRgHsW+bPGitiRsMjx+
kjmREDFNiabqY0wiNTTApMeJjNRgkQYD49UyijT0gF3F5pmAdg/nE1+Kcxg1Y4rR
eGen7BBV6pTeCg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:28:08 2026 by rpki-client