Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
File:                     1-geuOnkY-TLqJMwVa0tum6VYG_o.mft (raw, json)
Hash identifier:          swKmW2V0A963WLFvYjClYrfTXE6M8JSa7nCetPHJ/7A=
Subject key identifier:   EF:5D:95:84:D4:DA:6B:B9:7D:2D:4E:CC:96:4D:8C:9B:12:2E:A4:F6
Authority key identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
Certificate issuer:       /CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Certificate serial:       019E1FB5736E9B4303CE5DA757356679173D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
Manifest number:          0615
Signing time:             Wed 13 May 2026 05:00:45 +0000
Manifest this update:     Wed 13 May 2026 05:00:45 +0000
Manifest next update:     Thu 14 May 2026 05:00:45 +0000
Files and hashes:         1: 1-geuOnkY-TLqJMwVa0tum6VYG_o.crl (hash: HOSgWiBIXxZs8CqhMSS6WR7hBFp2Q3rymQZFQTH3Ixo=)
                          2: X_QIXpc1D9Swl7RHSJxujli_8yk.roa (hash: 18pzA1Lx0ABoYaRYkMn900C2smbYbwmxYD/sh/UcCOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:73:6e:9b:43:03:ce:5d:a7:57:35:66:79:17:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
        Validity
            Not Before: May 13 05:00:45 2026 GMT
            Not After : May 14 05:00:45 2026 GMT
        Subject: CN=ef5d9584d4da6bb97d2d4ecc964d8c9b122ea4f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:af:8b:fa:63:30:8a:53:12:3e:44:61:56:1a:
                    fc:43:73:c3:73:05:8c:4a:81:15:ec:57:f9:37:a9:
                    dd:5e:96:d4:0a:1b:cb:9e:ac:0b:3c:c0:fe:cd:08:
                    f5:c9:40:11:ca:ad:28:d6:ec:eb:40:8f:9f:a7:b4:
                    f1:a3:92:e9:92:bb:53:04:ed:b1:55:4e:ca:86:f8:
                    ca:ce:c8:45:10:e5:af:bd:e5:47:69:e3:2e:0e:1e:
                    73:ec:3e:89:10:0c:ca:54:75:bb:7b:b9:1d:19:06:
                    27:54:5b:29:f6:4c:e4:c7:ed:c9:ea:e5:bc:22:d3:
                    52:9a:f1:48:6a:88:d8:85:37:dc:49:9f:f5:59:52:
                    f3:37:ec:27:99:cd:00:51:f6:61:d8:c4:c0:7e:55:
                    a5:81:b3:13:78:49:d4:9c:8d:21:fe:ad:95:db:21:
                    ab:cd:38:20:b5:d1:72:f2:aa:a8:aa:33:85:0c:93:
                    72:61:ef:40:32:e6:af:19:e0:36:63:f6:74:e3:b1:
                    31:e8:25:20:d7:b9:1b:0e:c7:09:c5:00:6c:41:af:
                    47:f5:62:60:e5:44:0f:ee:83:77:69:70:7c:73:37:
                    1e:03:1e:5c:05:2d:1a:86:1a:4d:d5:f7:af:f2:96:
                    76:63:3a:cd:81:49:03:48:5d:19:3a:8c:a1:9e:ff:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5D:95:84:D4:DA:6B:B9:7D:2D:4E:CC:96:4D:8C:9B:12:2E:A4:F6
            X509v3 Authority Key Identifier:
                keyid:FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2a:7a:6f:13:e3:b6:ad:11:72:a0:e8:5a:c4:74:a0:c8:02:
         91:d9:d8:52:db:18:4d:56:d3:4d:c2:4b:2e:a7:9b:08:69:a6:
         1a:ff:ed:0b:e7:64:13:9d:73:24:ba:d0:0c:8c:40:da:4f:87:
         88:a7:4f:ef:6a:2b:5a:de:44:a2:de:a3:ba:18:e6:bf:8b:fc:
         f9:0b:a3:60:36:7c:4b:77:d3:09:a0:38:b4:09:e9:d8:e5:de:
         5b:e8:d8:0f:a9:bb:64:48:4d:ee:f4:f1:ec:e6:73:d1:24:6b:
         e2:61:03:b1:08:d1:23:61:e5:14:53:65:9b:ab:70:ea:a4:83:
         6c:2f:88:76:3f:b1:2c:1c:dd:8a:8a:6b:4a:17:40:16:9a:db:
         99:cb:7e:19:39:16:1b:46:c1:7f:79:ff:6e:af:27:64:33:23:
         0e:32:cc:a2:58:56:3c:54:6a:47:bf:70:d6:50:4f:e3:ac:9e:
         1c:5a:c5:f2:98:67:52:30:2b:25:ba:ae:bf:d0:b1:80:06:90:
         6d:30:04:f7:0a:16:3f:68:a0:6f:71:ea:dd:96:3c:f3:de:9c:
         e0:35:6b:a2:66:b9:36:ff:be:d8:02:05:f3:a2:7e:dc:9e:d1:
         3a:41:dc:08:ec:36:9f:03:48:7c:5d:ad:85:19:b6:c8:5f:8b:
         a2:f8:a2:05
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4ftXNum0MDzl2nVzVmeRc9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMDdhZTNhNzkxOGY5MzJlYTI0Y2MxNTZiNGI2ZTliYTU1
ODFiZmEwHhcNMjYwNTEzMDUwMDQ1WhcNMjYwNTE0MDUwMDQ1WjAzMTEwLwYDVQQD
EyhlZjVkOTU4NGQ0ZGE2YmI5N2QyZDRlY2M5NjRkOGM5YjEyMmVhNGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a+L+mMwilMSPkRhVhr8Q3PDcwWM
SoEV7Ff5N6ndXpbUChvLnqwLPMD+zQj1yUARyq0o1uzrQI+fp7Txo5LpkrtTBO2x
VU7KhvjKzshFEOWvveVHaeMuDh5z7D6JEAzKVHW7e7kdGQYnVFsp9kzkx+3J6uW8
ItNSmvFIaojYhTfcSZ/1WVLzN+wnmc0AUfZh2MTAflWlgbMTeEnUnI0h/q2V2yGr
zTggtdFy8qqoqjOFDJNyYe9AMuavGeA2Y/Z047Ex6CUg17kbDscJxQBsQa9H9WJg
5UQP7oN3aXB8czceAx5cBS0ahhpN1fev8pZ2YzrNgUkDSF0ZOoyhnv9eRwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFO9dlYTU2mu5fS1OzJZNjJsSLqT2MB8GA1UdIwQY
MBaAFPoHrjp5GPky6iTMFWtLbpulWBv6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1nZXVPbmtZLVRMcUpNd1ZhMHR1bTZWWUdfby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvYTk3ZGMwLTU2ODUtNGY2ZS05ODdm
LTJhNWE2ZTJkNzk0OC8xLzEtZ2V1T25rWS1UTHFKTXdWYTB0dW02VllHX28ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk1L2E5N2RjMC01Njg1LTRmNmUtOTg3Zi0yYTVhNmUyZDc5
NDgvMS8xLWdldU9ua1ktVExxSk13VmEwdHVtNlZZR19vLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSp6
bxPjtq0RcqDoWsR0oMgCkdnYUtsYTVbTTcJLLqebCGmmGv/tC+dkE51zJLrQDIxA
2k+HiKdP72orWt5Eot6juhjmv4v8+QujYDZ8S3fTCaA4tAnp2OXeW+jYD6m7ZEhN
7vTx7OZz0SRr4mEDsQjRI2HlFFNlm6tw6qSDbC+Idj+xLBzdioprShdAFprbmct+
GTkWG0bBf3n/bq8nZDMjDjLMolhWPFRqR79w1lBP46yeHFrF8phnUjArJbquv9Cx
gAaQbTAE9woWP2igb3Hq3ZY8896c4DVroma5Nv++2AIF86J+3J7ROkHcCOw2nwNI
fF2thRm2yF+LoviiBQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:44:45 2026 by rpki-client