Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
File:                     4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json)
Hash identifier:          rFmotAZsr+mbhdw71n84wEz+NIfAx0rQSopOkjhnxl4=
Subject key identifier:   CC:50:8C:69:6D:35:BE:BF:31:FC:FA:57:1D:CC:EC:5E:B5:A1:8C:41
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Certificate issuer:       /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial:       019E1D22B060AB20B19EAC41037BE6FD4D82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 17:01:13 +0000
Manifest this update:     Tue 12 May 2026 17:01:13 +0000
Manifest next update:     Wed 13 May 2026 17:01:13 +0000
Files and hashes:         1: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: UVhZxKMkq6E3T9KJVH/rva3S3Owy0xm07E4cjea5KKA=)
                          2: fe1imW15nJcWqPFUEtzxex8TfJY.roa (hash: 7SyOd5vhLLHK1X5KDoXQcbr6Cl3ba3LVf0tf6U/sBZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:b0:60:ab:20:b1:9e:ac:41:03:7b:e6:fd:4d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
        Validity
            Not Before: May 12 17:01:13 2026 GMT
            Not After : May 13 17:01:13 2026 GMT
        Subject: CN=cc508c696d35bebf31fcfa571dccec5eb5a18c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:86:08:9d:8a:bd:76:ec:15:b1:bc:53:10:
                    81:74:9f:79:26:d6:0c:6e:0a:f0:fe:87:78:50:0d:
                    4e:83:ef:28:35:23:42:9c:75:c0:4a:cb:80:6f:9d:
                    0a:74:5f:6d:b6:6b:c4:a5:5c:9d:b8:d4:01:71:32:
                    09:71:10:51:f5:fb:3c:9e:ef:0e:14:bb:6b:fa:10:
                    1e:b9:df:c3:3d:b3:fb:80:ee:84:43:08:07:de:dc:
                    98:03:c3:fc:72:66:99:f5:38:70:98:ef:56:4b:02:
                    6c:bf:e4:a0:fd:6d:44:a9:8a:6c:ef:f9:69:96:48:
                    b5:ee:05:27:88:df:37:03:c6:25:1b:e7:94:87:a9:
                    0e:5f:9e:16:58:41:20:61:bd:93:0b:64:33:07:b6:
                    ea:0b:d4:8a:d0:bb:eb:92:c0:90:20:86:61:a4:ab:
                    93:83:43:ca:38:c0:09:c1:2e:a8:c1:e3:5e:b0:ca:
                    5e:52:d4:45:73:48:cf:38:53:7e:5f:16:dd:29:30:
                    64:a9:14:17:86:25:34:8d:a6:0c:06:b0:7b:08:c7:
                    f3:ad:f2:65:43:88:12:3d:32:f9:c7:4c:40:dc:f3:
                    d7:9a:8d:2e:c6:8f:5a:2c:c8:3e:88:45:42:58:e4:
                    57:19:e0:5f:11:fa:95:38:67:33:7e:80:d5:8b:41:
                    4a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:50:8C:69:6D:35:BE:BF:31:FC:FA:57:1D:CC:EC:5E:B5:A1:8C:41
            X509v3 Authority Key Identifier:
                keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c9:c7:64:48:65:23:6a:e4:8c:8d:e2:3e:98:c9:ed:2e:89:
         4e:60:b7:2c:f6:b0:1a:8e:15:a4:df:2d:eb:95:77:2b:a0:04:
         b9:31:16:ed:cb:f8:8d:4a:0c:11:35:3a:ff:c2:88:58:83:09:
         24:32:bc:94:e6:b4:06:fa:77:79:a8:8a:7d:d0:ca:c8:35:f0:
         4e:69:84:b6:f4:5b:2b:43:2d:a5:58:3b:ad:78:d9:ce:60:f3:
         22:bb:71:76:31:c2:15:9c:17:88:16:40:f6:16:c0:ba:a4:c1:
         c2:1d:b7:1f:69:d2:36:e4:7f:6a:60:74:87:25:29:40:7e:51:
         18:0a:ce:72:68:47:03:7f:d8:e8:f1:8e:6b:ca:00:e6:17:53:
         99:97:cc:c6:93:e8:f6:39:74:af:a9:e7:4e:d0:7a:2a:3a:e1:
         4a:cc:86:26:59:be:eb:f0:4c:c8:56:1f:44:85:d7:c5:8d:c3:
         27:e3:a3:0e:0a:ee:29:71:ad:9c:98:b6:58:52:13:de:5b:7e:
         bd:39:2e:93:0c:b0:cf:09:18:54:c1:13:ca:7a:70:6e:b6:3d:
         b6:93:ca:81:b3:40:06:67:a1:c9:93:1b:79:93:68:7d:37:14:
         ed:a6:7e:0a:68:a3:89:32:a8:10:32:4f:17:5c:24:23:1e:d9:
         30:d0:3e:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIrBgqyCxnqxBA3vm/U2CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMzRlYzM5MzQ0OGQ4M2JmMTUxNWY0OTY3YTQ0ODA5OGU1
NWZiNDMwHhcNMjYwNTEyMTcwMTEzWhcNMjYwNTEzMTcwMTEzWjAzMTEwLwYDVQQD
EyhjYzUwOGM2OTZkMzViZWJmMzFmY2ZhNTcxZGNjZWM1ZWI1YTE4YzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxmGCJ2KvXbsFbG8UxCBdJ95JtYM
bgrw/od4UA1Og+8oNSNCnHXASsuAb50KdF9ttmvEpVyduNQBcTIJcRBR9fs8nu8O
FLtr+hAeud/DPbP7gO6EQwgH3tyYA8P8cmaZ9ThwmO9WSwJsv+Sg/W1EqYps7/lp
lki17gUniN83A8YlG+eUh6kOX54WWEEgYb2TC2QzB7bqC9SK0LvrksCQIIZhpKuT
g0PKOMAJwS6oweNesMpeUtRFc0jPOFN+XxbdKTBkqRQXhiU0jaYMBrB7CMfzrfJl
Q4gSPTL5x0xA3PPXmo0uxo9aLMg+iEVCWORXGeBfEfqVOGczfoDVi0FKgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxQjGltNb6/Mfz6Vx3M7F61oYxBMB8GA1UdIwQY
MBaAFOM07Dk0SNg78VFfSWekSAmOVftDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAt
Y2RhYjE5YTNmZGViLzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAtY2RhYjE5YTNmZGVi
LzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8nHZEhl
I2rkjI3iPpjJ7S6JTmC3LPawGo4VpN8t65V3K6AEuTEW7cv4jUoMETU6/8KIWIMJ
JDK8lOa0Bvp3eaiKfdDKyDXwTmmEtvRbK0MtpVg7rXjZzmDzIrtxdjHCFZwXiBZA
9hbAuqTBwh23H2nSNuR/amB0hyUpQH5RGArOcmhHA3/Y6PGOa8oA5hdTmZfMxpPo
9jl0r6nnTtB6KjrhSsyGJlm+6/BMyFYfRIXXxY3DJ+OjDgruKXGtnJi2WFIT3lt+
vTkukwywzwkYVMETynpwbrY9tpPKgbNABmehyZMbeZNofTcU7aZ+CmijiTKoEDJP
F1wkIx7ZMNA+SA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:26:00 2026 by rpki-client