Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
File:                     fFdTLhz9MccnMuRONTn_bglsKkc.mft (raw, json)
Hash identifier:          NZ9w5Lm76LMA3cdfvZEyckGQ3Z4hRF5dfJfbod1KctE=
Subject key identifier:   73:98:19:63:FF:FC:DF:76:42:4A:85:ED:8E:D5:28:89:E1:0D:8A:BC
Authority key identifier: 7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
Certificate issuer:       /CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Certificate serial:       019E1EA3D49F6D1208163D2518383AE8D8EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
Manifest number:          1905
Signing time:             Wed 13 May 2026 00:01:53 +0000
Manifest this update:     Wed 13 May 2026 00:01:53 +0000
Manifest next update:     Thu 14 May 2026 00:01:53 +0000
Files and hashes:         1: Lqhgyc6IMKrMNp2wbydLRdW6nVk.roa (hash: g6yY5v4VaNt82kgVP12KJ9l1UFY2H69e7wVLaxbWdeQ=)
                          2: fFdTLhz9MccnMuRONTn_bglsKkc.crl (hash: TXOtSAncKq76rpKybLMPHLmNHu+naaFdiYTXlbIoy2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:d4:9f:6d:12:08:16:3d:25:18:38:3a:e8:d8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
        Validity
            Not Before: May 13 00:01:53 2026 GMT
            Not After : May 14 00:01:53 2026 GMT
        Subject: CN=73981963fffcdf76424a85ed8ed52889e10d8abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:d0:81:e1:87:d9:05:ba:79:45:71:f4:9d:
                    29:59:63:d0:01:96:f5:82:07:d7:a4:47:13:cd:9b:
                    6d:35:ca:91:74:9e:0b:af:b8:7d:6f:8b:91:ed:ed:
                    9e:a1:06:ae:08:b0:1c:b3:ad:da:a3:cc:1a:c8:7a:
                    e9:80:16:54:c8:72:2a:82:2e:64:ba:7b:0d:10:b2:
                    bf:33:b4:ce:bf:fd:65:a0:d1:f8:5b:0d:be:f3:a7:
                    e3:87:8b:67:2d:e9:b1:50:32:b1:ef:4b:13:33:ba:
                    38:4c:b2:f0:da:da:5c:5b:3f:81:6e:a8:4b:ad:74:
                    df:b5:8d:4e:27:11:f3:e4:9a:82:be:ff:b1:60:7c:
                    6e:77:a9:f2:09:d5:07:29:83:14:08:2d:83:cb:22:
                    2e:05:14:fe:cd:b6:a9:89:75:7a:2f:aa:57:61:81:
                    c1:89:f8:d7:9a:a0:ea:61:ce:b3:07:a2:b3:a5:51:
                    43:0a:cc:11:d1:7c:ea:f1:fe:fc:76:3f:14:f1:be:
                    c4:af:18:c5:63:23:46:d9:f8:4d:a9:76:b4:9d:f9:
                    6c:7f:ed:c3:f5:ce:1f:61:7f:55:8d:17:bc:3c:dd:
                    da:3d:a1:b9:3f:65:b6:d5:76:37:14:83:0e:17:c0:
                    9b:7f:95:5e:4a:50:7b:dd:69:2a:22:7f:70:95:c9:
                    59:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:98:19:63:FF:FC:DF:76:42:4A:85:ED:8E:D5:28:89:E1:0D:8A:BC
            X509v3 Authority Key Identifier:
                keyid:7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b9:f6:62:f9:e2:c9:14:13:e0:21:c0:1a:5a:80:16:4f:43:
         ec:09:a7:c8:a9:f1:87:28:e1:57:f6:3e:19:4d:df:7e:4a:b5:
         62:95:af:1e:2a:62:b3:9d:65:7c:c8:74:90:53:ac:ab:f5:7f:
         0a:6b:07:46:94:f5:5c:e5:d4:b3:07:08:4d:01:07:e6:ad:75:
         df:48:6f:43:fb:a1:82:67:ed:d1:a6:ca:d4:e3:4e:2b:6f:63:
         15:fc:32:a2:34:11:cf:96:c8:5e:8c:95:15:52:38:c4:98:96:
         9f:26:63:71:67:d4:11:2b:e6:6c:e6:5c:b2:7b:68:3a:aa:e1:
         79:7c:81:14:4b:d5:36:35:f0:07:27:c4:8c:1a:a8:3f:1b:1f:
         4b:46:d7:73:c9:5e:d5:b5:1e:c5:53:31:58:41:3c:b1:b4:05:
         61:ff:f9:19:80:c6:92:7c:a7:a5:67:1a:40:8c:bf:12:58:77:
         3d:c3:6d:85:af:0e:36:eb:45:82:b8:a6:b9:9d:78:af:29:44:
         dd:b5:ce:ba:4e:bc:3b:9f:96:70:f0:48:4f:82:38:41:91:a6:
         4b:bc:62:2f:16:9c:01:cc:16:f4:76:cb:f2:21:38:63:48:52:
         5a:fa:dd:c2:2f:28:99:2e:b2:40:07:57:e9:f0:66:d5:72:63:
         e3:1c:3f:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo9SfbRIIFj0lGDg66NjvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNTc1MzJlMWNmZDMxYzcyNzMyZTQ0ZTM1MzlmZjZlMDk2
YzJhNDcwHhcNMjYwNTEzMDAwMTUzWhcNMjYwNTE0MDAwMTUzWjAzMTEwLwYDVQQD
Eyg3Mzk4MTk2M2ZmZmNkZjc2NDI0YTg1ZWQ4ZWQ1Mjg4OWUxMGQ4YWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6DQgeGH2QW6eUVx9J0pWWPQAZb1
ggfXpEcTzZttNcqRdJ4Lr7h9b4uR7e2eoQauCLAcs63ao8wayHrpgBZUyHIqgi5k
unsNELK/M7TOv/1loNH4Ww2+86fjh4tnLemxUDKx70sTM7o4TLLw2tpcWz+BbqhL
rXTftY1OJxHz5JqCvv+xYHxud6nyCdUHKYMUCC2DyyIuBRT+zbapiXV6L6pXYYHB
ifjXmqDqYc6zB6KzpVFDCswR0Xzq8f78dj8U8b7ErxjFYyNG2fhNqXa0nflsf+3D
9c4fYX9VjRe8PN3aPaG5P2W21XY3FIMOF8Cbf5VeSlB73WkqIn9wlclZGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOYGWP//N92QkqF7Y7VKInhDYq8MB8GA1UdIwQY
MBaAFHxXUy4c/THHJzLkTjU5/24JbCpHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkZkVExoejlNY2NuTXVST05Ubl9iZ2xzS2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZDlmNzctNDY4NC00ZDgyLWFlMzgt
MzFlNTBiYWI3MTZlLzEvZkZkVExoejlNY2NuTXVST05Ubl9iZ2xzS2tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84ZDlmNzctNDY4NC00ZDgyLWFlMzgtMzFlNTBiYWI3MTZl
LzEvZkZkVExoejlNY2NuTXVST05Ubl9iZ2xzS2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbn2Yvni
yRQT4CHAGlqAFk9D7AmnyKnxhyjhV/Y+GU3ffkq1YpWvHipis51lfMh0kFOsq/V/
CmsHRpT1XOXUswcITQEH5q1130hvQ/uhgmft0abK1ONOK29jFfwyojQRz5bIXoyV
FVI4xJiWnyZjcWfUESvmbOZcsntoOqrheXyBFEvVNjXwByfEjBqoPxsfS0bXc8le
1bUexVMxWEE8sbQFYf/5GYDGknynpWcaQIy/Elh3PcNtha8ONutFgrimuZ14rylE
3bXOuk68O5+WcPBIT4I4QZGmS7xiLxacAcwW9HbL8iE4Y0hSWvrdwi8omS6yQAdX
6fBm1XJj4xw/GQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:23:14 2026 by rpki-client