Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
File:                     J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft (raw, json)
Hash identifier:          4/kfbdQQcYBoqfoeOjGjPQzHkGNx52LkF36eOnfuPYA=
Subject key identifier:   6B:76:3C:44:27:06:02:C4:1F:9B:6B:38:DA:5D:B2:07:45:46:B1:6E
Authority key identifier: 27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
Certificate issuer:       /CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Certificate serial:       019E1F4777EA14AC8E63E9EBA66EECE8AD4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
Manifest number:          036C
Signing time:             Wed 13 May 2026 03:00:37 +0000
Manifest this update:     Wed 13 May 2026 03:00:37 +0000
Manifest next update:     Thu 14 May 2026 03:00:37 +0000
Files and hashes:         1: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl (hash: F4rf4q8AHDojE5xgW2Kgw7G8NW0N+ZvLKUzC5E/9zEo=)
                          2: TKAcyjW-K2fMWFteP_AgVE5Sf58.roa (hash: EQ/0GqnYlDDezTnOJGpjIfUWvXw1RICNNg5+3Mf+uqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:77:ea:14:ac:8e:63:e9:eb:a6:6e:ec:e8:ad:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
        Validity
            Not Before: May 13 03:00:37 2026 GMT
            Not After : May 14 03:00:37 2026 GMT
        Subject: CN=6b763c44270602c41f9b6b38da5db2074546b16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:00:5f:89:7b:5d:95:91:a8:90:da:a6:e0:
                    89:68:fa:41:32:b4:d2:4b:8a:84:17:be:c4:99:4e:
                    ff:39:7c:54:17:d8:ba:ff:6d:e7:9f:29:61:b9:ea:
                    e4:d0:bb:44:15:0d:62:2f:f9:04:67:0b:9c:51:b0:
                    4c:98:9a:f7:a6:0e:8e:39:36:7c:8a:8f:67:a6:2e:
                    2d:22:a5:51:9f:22:25:72:ce:21:66:61:92:59:1c:
                    49:9a:92:fb:9e:be:11:48:d2:12:93:1f:7b:4d:ec:
                    a3:38:60:e4:46:21:f6:54:41:d0:39:86:a9:fd:ab:
                    4a:19:ea:1d:c3:41:b2:91:be:1c:ff:37:f1:01:6d:
                    98:d1:01:41:5f:73:82:f6:84:15:76:eb:7f:e5:9d:
                    e3:68:8d:47:bf:b0:27:6d:5e:e7:a5:d7:a5:d5:13:
                    84:44:c0:71:fe:58:ad:e0:90:4f:37:76:ad:0c:af:
                    e4:6c:15:62:92:50:7d:3e:e3:12:f6:cb:c3:3f:06:
                    97:33:1b:fc:10:05:40:df:56:5e:a5:1a:d8:a3:44:
                    85:9a:0a:03:b8:f7:e1:45:4d:52:86:e2:d0:c0:87:
                    6c:1d:8e:c9:c1:da:7a:ea:30:c7:b2:8e:99:14:9c:
                    33:b3:60:89:a4:6d:cb:5b:3d:5c:35:56:00:19:4a:
                    aa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:76:3C:44:27:06:02:C4:1F:9B:6B:38:DA:5D:B2:07:45:46:B1:6E
            X509v3 Authority Key Identifier:
                keyid:27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c6:03:dd:c1:75:f2:87:06:c6:84:f1:59:3e:16:a1:16:b1:
         04:f5:0a:99:47:92:fa:1c:01:bc:67:04:45:28:a8:64:ac:c8:
         db:35:f2:39:88:c0:3e:cc:45:57:99:60:b9:41:f8:70:53:ff:
         c1:c9:3e:24:15:50:31:4d:35:f6:98:dd:ba:76:94:95:1b:7e:
         4a:02:10:51:96:9a:17:b1:5e:9a:fa:4c:26:82:ab:11:d6:23:
         44:89:75:bc:6e:38:78:c8:db:aa:c7:70:b8:6d:f7:64:0e:22:
         a4:41:44:2a:c1:f1:89:cf:fd:89:23:66:49:33:00:2b:19:4a:
         4f:eb:3d:91:9c:4d:3b:c3:aa:09:ee:4e:90:0c:42:c3:a9:88:
         70:61:74:9d:e3:0d:0a:5c:44:36:ec:07:3f:52:f9:ad:a3:d2:
         28:70:b1:9c:f0:4a:cd:9b:5e:86:36:40:7b:d3:f3:ab:82:d1:
         76:16:ba:ab:a1:ca:9a:b1:a7:c0:6e:15:d2:0f:72:e0:0f:b5:
         15:a6:a5:57:29:5d:40:56:a6:da:f7:75:0d:05:2a:88:c5:79:
         f4:d2:ae:3b:3c:62:bb:97:59:c0:86:d1:b1:5c:8d:f0:50:4a:
         8b:3c:3b:73:ff:f4:a5:37:5f:67:c0:86:2f:29:ef:53:f7:d0:
         85:e2:9d:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR3fqFKyOY+nrpm7s6K1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NTBmM2Q3ZWQ4MjU2MTdlMjZiZTA5YWVjY2M2MmRkYTRl
YTMxNGYwHhcNMjYwNTEzMDMwMDM3WhcNMjYwNTE0MDMwMDM3WjAzMTEwLwYDVQQD
Eyg2Yjc2M2M0NDI3MDYwMmM0MWY5YjZiMzhkYTVkYjIwNzQ1NDZiMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCcAX4l7XZWRqJDapuCJaPpBMrTS
S4qEF77EmU7/OXxUF9i6/23nnylhuerk0LtEFQ1iL/kEZwucUbBMmJr3pg6OOTZ8
io9npi4tIqVRnyIlcs4hZmGSWRxJmpL7nr4RSNISkx97TeyjOGDkRiH2VEHQOYap
/atKGeodw0Gykb4c/zfxAW2Y0QFBX3OC9oQVdut/5Z3jaI1Hv7AnbV7npdel1ROE
RMBx/lit4JBPN3atDK/kbBViklB9PuMS9svDPwaXMxv8EAVA31ZepRrYo0SFmgoD
uPfhRU1ShuLQwIdsHY7Jwdp66jDHso6ZFJwzs2CJpG3LWz1cNVYAGUqq6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGt2PEQnBgLEH5trONpdsgdFRrFuMB8GA1UdIwQY
MBaAFCdQ89ftglYX4mvgmuzMYt2k6jFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjFEejEtMkNWaGZpYS1DYTdNeGkzYVRxTVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84NTdhMmYtMzI4OC00NjdlLWIwNDMt
MjQzMWU2YmE2MzExLzEvSjFEejEtMkNWaGZpYS1DYTdNeGkzYVRxTVU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84NTdhMmYtMzI4OC00NjdlLWIwNDMtMjQzMWU2YmE2MzEx
LzEvSjFEejEtMkNWaGZpYS1DYTdNeGkzYVRxTVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsYD3cF1
8ocGxoTxWT4WoRaxBPUKmUeS+hwBvGcERSioZKzI2zXyOYjAPsxFV5lguUH4cFP/
wck+JBVQMU019pjdunaUlRt+SgIQUZaaF7FemvpMJoKrEdYjRIl1vG44eMjbqsdw
uG33ZA4ipEFEKsHxic/9iSNmSTMAKxlKT+s9kZxNO8OqCe5OkAxCw6mIcGF0neMN
ClxENuwHP1L5raPSKHCxnPBKzZtehjZAe9Pzq4LRdha6q6HKmrGnwG4V0g9y4A+1
FaalVyldQFam2vd1DQUqiMV59NKuOzxiu5dZwIbRsVyN8FBKizw7c//0pTdfZ8CG
LynvU/fQheKdcg==
-----END CERTIFICATE-----
Generated at Wed May 13 09:10:29 2026 by rpki-client