Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
File:                     0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json)
Hash identifier:          K4XZxKIq6n9uh3A4LZm0d2kq17chqCVRAE4Kwdu9LkE=
Subject key identifier:   30:4E:08:05:7A:21:F3:0B:18:E6:4D:4B:EA:86:7E:61:BA:72:BF:4E
Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
Certificate issuer:       /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Certificate serial:       019E1C7D57AA39F1617DCF6972D6EE07BD0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
Manifest number:          0ED0
Signing time:             Tue 12 May 2026 14:00:36 +0000
Manifest this update:     Tue 12 May 2026 14:00:36 +0000
Manifest next update:     Wed 13 May 2026 14:00:36 +0000
Files and hashes:         1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: vSlECkUaicM+Dlar82VezDkWCJUzw2WLoY89Be127bE=)
                          2: SxTqFSaVYKNp7RXjp-9P-WYLFPk.roa (hash: ZmAlezL/eOxIgz3wvBspKHt49atyoUhtEGugoI4vkno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:57:aa:39:f1:61:7d:cf:69:72:d6:ee:07:bd:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
        Validity
            Not Before: May 12 14:00:36 2026 GMT
            Not After : May 13 14:00:36 2026 GMT
        Subject: CN=304e08057a21f30b18e64d4bea867e61ba72bf4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:8b:ca:b0:e1:6c:97:5f:5c:4b:23:30:69:
                    7c:6a:fb:23:1a:17:8c:53:21:90:9f:5a:66:b8:6d:
                    d0:9c:c3:a4:c5:d9:65:a8:91:74:2d:9b:73:4e:04:
                    fa:5e:c5:0a:f3:93:f7:e4:c5:02:0b:b6:87:5f:e4:
                    b7:bd:b9:e4:a7:38:b6:74:34:b9:dc:bc:e4:41:a9:
                    f7:e0:0a:92:a2:b5:73:5a:23:81:71:d9:7c:4d:eb:
                    a7:ab:3d:29:3b:8e:4d:e7:44:8a:aa:78:1e:ac:6f:
                    a9:56:b3:51:03:35:a4:28:bc:b9:2b:e2:46:75:93:
                    45:77:7b:5e:95:58:eb:c2:f1:f9:eb:47:e8:1d:37:
                    70:92:59:c0:8d:96:35:f9:ac:1b:58:5e:16:97:31:
                    d8:01:7d:15:b1:07:b0:5c:e4:81:f2:53:77:8b:88:
                    79:b3:12:a4:cb:d8:74:bc:8a:3d:84:29:fa:2f:87:
                    7d:ae:40:e0:69:36:95:a4:05:47:d8:12:42:99:29:
                    0a:b5:42:08:8e:89:f9:5f:9c:58:1a:49:25:33:38:
                    67:e7:d1:01:69:88:ce:60:a2:b6:9a:6f:a4:24:45:
                    70:09:23:b3:3d:c2:23:dc:8b:c1:14:7b:d3:49:9f:
                    bc:aa:7d:aa:bb:cf:eb:ff:be:d5:24:b2:0e:9d:5e:
                    2a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4E:08:05:7A:21:F3:0B:18:E6:4D:4B:EA:86:7E:61:BA:72:BF:4E
            X509v3 Authority Key Identifier:
                keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5f:aa:dd:95:7f:cf:e4:3e:02:6a:fa:c3:97:f8:68:a3:c2:
         be:6f:0f:a4:f7:7a:a6:de:d2:d1:9a:99:f9:e8:2e:a0:1f:33:
         d9:62:01:4b:db:fc:7c:a0:4a:dc:97:61:7b:d4:67:b0:31:25:
         e7:64:1a:25:7b:1e:cb:7f:df:db:64:24:f8:ac:d0:58:f4:1e:
         14:b1:bc:96:70:41:61:1c:1b:14:66:56:88:02:b2:d4:f9:24:
         43:36:ed:39:56:31:96:2d:e9:75:29:02:a6:92:62:d7:f4:a8:
         55:e9:db:84:03:65:5a:1e:2d:9b:73:87:e9:74:ab:93:bf:0f:
         29:ad:07:73:08:f2:5a:7a:51:21:c0:39:ec:03:0d:b7:f4:3f:
         7b:3c:bd:da:1b:62:7b:f6:7c:c6:48:1e:a6:e6:7f:a0:8c:ea:
         ef:4c:1e:26:34:3d:a6:57:66:09:78:2e:cc:d3:3f:46:db:7e:
         51:70:94:7c:2c:81:87:48:fe:ee:d1:64:3d:bc:0e:0c:1e:6b:
         5c:f5:84:07:09:c1:0c:e4:ec:b9:8b:74:5a:dd:78:a9:4f:ce:
         e0:38:08:20:91:3b:49:ec:dc:8e:b5:db:19:9c:47:84:26:16:
         2d:35:5a:79:01:68:37:3a:87:43:ff:ff:ee:3c:22:eb:48:d1:
         f5:c2:e0:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfVeqOfFhfc9pctbuB70KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmQ0Y2E3ZjMzMWFhMmFkOTEyNDBhNjU4M2ExNzZjMDA1
ZThhNjMwHhcNMjYwNTEyMTQwMDM2WhcNMjYwNTEzMTQwMDM2WjAzMTEwLwYDVQQD
EygzMDRlMDgwNTdhMjFmMzBiMThlNjRkNGJlYTg2N2U2MWJhNzJiZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKeLyrDhbJdfXEsjMGl8avsjGheM
UyGQn1pmuG3QnMOkxdllqJF0LZtzTgT6XsUK85P35MUCC7aHX+S3vbnkpzi2dDS5
3LzkQan34AqSorVzWiOBcdl8Teunqz0pO45N50SKqngerG+pVrNRAzWkKLy5K+JG
dZNFd3telVjrwvH560foHTdwklnAjZY1+awbWF4WlzHYAX0VsQewXOSB8lN3i4h5
sxKky9h0vIo9hCn6L4d9rkDgaTaVpAVH2BJCmSkKtUIIjon5X5xYGkklMzhn59EB
aYjOYKK2mm+kJEVwCSOzPcIj3IvBFHvTSZ+8qn2qu8/r/77VJLIOnV4qTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBOCAV6IfMLGOZNS+qGfmG6cr9OMB8GA1UdIwQY
MBaAFNC9TKfzMaoq2RJAplg6F2wAXopjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xZDk0NDAtY2VlOC00MzgzLWIwYTAt
ZTBiNWE5MmRmOTQwLzEvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xZDk0NDAtY2VlOC00MzgzLWIwYTAtZTBiNWE5MmRmOTQw
LzEvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1+q3ZV/
z+Q+Amr6w5f4aKPCvm8PpPd6pt7S0ZqZ+eguoB8z2WIBS9v8fKBK3Jdhe9RnsDEl
52QaJXsey3/f22Qk+KzQWPQeFLG8lnBBYRwbFGZWiAKy1PkkQzbtOVYxli3pdSkC
ppJi1/SoVenbhANlWh4tm3OH6XSrk78PKa0HcwjyWnpRIcA57AMNt/Q/ezy92hti
e/Z8xkgepuZ/oIzq70weJjQ9pldmCXguzNM/Rtt+UXCUfCyBh0j+7tFkPbwODB5r
XPWEBwnBDOTsuYt0Wt14qU/O4DgIIJE7SezcjrXbGZxHhCYWLTVaeQFoNzqHQ///
7jwi60jR9cLgOQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:09:19 2026 by rpki-client