Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
File:                     A_JvJX_M8HUxzX5_6EFhtP9emmM.mft (raw, json)
Hash identifier:          CO29Q7jFjZMzt11dcpeLcAOlsOauUmxVWKtxhaUx/oA=
Subject key identifier:   83:07:CC:D6:D7:65:CE:61:DD:A9:53:C1:BD:67:95:22:C7:E6:42:61
Authority key identifier: 03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63
Certificate issuer:       /CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63
Certificate serial:       019E1E35CC0EDE7AB36015A4108FE0B4AEF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
Manifest number:          0EB5
Signing time:             Tue 12 May 2026 22:01:42 +0000
Manifest this update:     Tue 12 May 2026 22:01:42 +0000
Manifest next update:     Wed 13 May 2026 22:01:42 +0000
Files and hashes:         1: A_JvJX_M8HUxzX5_6EFhtP9emmM.crl (hash: ByvfcSeEhIZkJuV3YVuW3O7omz0TDhZ64POBnkzRUSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:cc:0e:de:7a:b3:60:15:a4:10:8f:e0:b4:ae:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63
        Validity
            Not Before: May 12 22:01:42 2026 GMT
            Not After : May 13 22:01:42 2026 GMT
        Subject: CN=8307ccd6d765ce61dda953c1bd679522c7e64261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:c1:fe:f9:14:d9:76:14:4f:b0:b7:6e:7d:
                    55:2f:cd:bb:2f:f6:14:75:da:67:24:1c:2a:3b:9e:
                    cd:3a:2b:08:a3:6a:ed:aa:b2:d1:b0:65:91:46:3f:
                    fb:ae:59:16:18:8c:b5:5d:bc:1b:e9:34:5e:04:c5:
                    2f:f7:85:2c:3b:26:da:26:90:34:d1:91:08:e0:2b:
                    dc:b3:13:24:7f:c4:ab:15:34:53:f7:5c:f9:2d:27:
                    0c:82:67:a1:e2:fa:60:af:04:ab:a4:99:6b:51:7d:
                    5e:33:a4:0b:51:ae:ff:6d:41:f2:14:e8:6d:9c:d5:
                    74:c6:8b:81:db:61:a8:90:3f:44:c2:27:3b:63:a2:
                    b0:9a:c7:46:83:32:2e:72:ee:d2:a6:f9:9e:8d:fc:
                    7f:10:61:ef:64:f6:86:ba:3e:8a:20:c2:2a:de:e0:
                    6d:57:cc:44:f1:45:1f:29:41:98:67:d2:f7:3a:2a:
                    c8:6a:50:29:02:68:32:45:42:a4:88:ba:ff:1e:a8:
                    34:e8:e5:2d:b5:67:18:51:a0:05:b1:13:43:7f:13:
                    bf:d8:3a:d1:d9:2f:3a:45:2f:77:75:9a:32:89:e3:
                    e7:c9:ee:db:ff:24:01:76:82:73:d8:77:ec:ce:b9:
                    71:8d:94:dc:d9:7a:65:6d:7a:bf:14:39:b5:8c:03:
                    1e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:07:CC:D6:D7:65:CE:61:DD:A9:53:C1:BD:67:95:22:C7:E6:42:61
            X509v3 Authority Key Identifier:
                keyid:03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:7d:e2:1d:0e:af:d5:14:a1:e7:ed:17:d6:98:9b:59:d7:c2:
         d0:10:c7:2b:5f:44:24:ea:3d:72:41:9a:de:be:fc:ce:1a:0e:
         4c:64:2b:1e:71:13:eb:2c:bf:43:12:d4:38:1a:cb:95:66:ae:
         21:fb:d4:de:8d:d2:32:bc:3b:5e:93:c8:1b:56:da:5c:08:7d:
         a1:a1:78:44:ab:29:16:7d:c1:9e:6d:f1:d1:d9:47:f3:64:cf:
         de:62:47:41:27:10:62:17:79:7a:3b:5b:4d:db:09:b0:a8:29:
         56:3d:48:10:62:d1:23:0b:7b:ab:64:dd:f5:d6:7f:1e:d2:79:
         a8:ad:b1:10:ba:4d:aa:80:8a:53:cf:89:48:6b:e3:96:6b:95:
         b3:fb:ac:db:9b:9a:3a:34:d1:a4:99:25:e2:79:a4:04:25:1b:
         8d:73:4c:87:7c:95:4c:07:1c:3c:3b:8f:35:8b:9a:eb:8c:84:
         7e:00:1f:78:3c:07:f6:c3:d1:d2:e5:59:ff:5f:2f:69:c3:e6:
         47:79:b0:a6:42:57:d3:c1:87:1a:4e:cc:02:d5:d4:5e:5c:c4:
         77:15:c2:51:bc:80:a3:63:1b:d5:d6:6f:56:16:f5:22:90:db:
         18:8d:02:b6:a0:7d:81:d9:e0:93:35:91:10:04:8a:bd:ce:d5:
         86:63:5e:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNcwO3nqzYBWkEI/gtK75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjI2ZjI1N2ZjY2YwNzUzMWNkN2U3ZmU4NDE2MWI0ZmY1
ZTlhNjMwHhcNMjYwNTEyMjIwMTQyWhcNMjYwNTEzMjIwMTQyWjAzMTEwLwYDVQQD
Eyg4MzA3Y2NkNmQ3NjVjZTYxZGRhOTUzYzFiZDY3OTUyMmM3ZTY0MjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpLB/vkU2XYUT7C3bn1VL827L/YU
ddpnJBwqO57NOisIo2rtqrLRsGWRRj/7rlkWGIy1Xbwb6TReBMUv94UsOybaJpA0
0ZEI4CvcsxMkf8SrFTRT91z5LScMgmeh4vpgrwSrpJlrUX1eM6QLUa7/bUHyFOht
nNV0xouB22GokD9Ewic7Y6KwmsdGgzIucu7Spvmejfx/EGHvZPaGuj6KIMIq3uBt
V8xE8UUfKUGYZ9L3OirIalApAmgyRUKkiLr/Hqg06OUttWcYUaAFsRNDfxO/2DrR
2S86RS93dZoyiePnye7b/yQBdoJz2HfszrlxjZTc2XplbXq/FDm1jAMe6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMHzNbXZc5h3alTwb1nlSLH5kJhMB8GA1UdIwQY
MBaAFAPybyV/zPB1Mc1+f+hBYbT/XppjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9KdkpYX004SFV4elg1XzZFRmh0UDllbW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81NDE3ZTQtZDBiOC00MzA0LWFiMjYt
NGE5OTQwZTAwMzY2LzEvQV9KdkpYX004SFV4elg1XzZFRmh0UDllbW1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny81NDE3ZTQtZDBiOC00MzA0LWFiMjYtNGE5OTQwZTAwMzY2
LzEvQV9KdkpYX004SFV4elg1XzZFRmh0UDllbW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA333iHQ6v
1RSh5+0X1pibWdfC0BDHK19EJOo9ckGa3r78zhoOTGQrHnET6yy/QxLUOBrLlWau
IfvU3o3SMrw7XpPIG1baXAh9oaF4RKspFn3Bnm3x0dlH82TP3mJHQScQYhd5ejtb
TdsJsKgpVj1IEGLRIwt7q2Td9dZ/HtJ5qK2xELpNqoCKU8+JSGvjlmuVs/us25ua
OjTRpJkl4nmkBCUbjXNMh3yVTAccPDuPNYua64yEfgAfeDwH9sPR0uVZ/18vacPm
R3mwpkJX08GHGk7MAtXUXlzEdxXCUbyAo2Mb1dZvVhb1IpDbGI0CtqB9gdngkzWR
EASKvc7VhmNeCg==
-----END CERTIFICATE-----
Generated at Wed May 13 06:41:30 2026 by rpki-client