Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
File:                     1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft (raw, json)
Hash identifier:          Lt0JBM62keRYD2zrnLDi6T7WBU969gzA/rT2iWecPWU=
Subject key identifier:   5B:B5:BA:CA:BE:92:71:13:D6:45:78:84:86:25:DE:9F:60:29:87:E0
Authority key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
Certificate issuer:       /CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Certificate serial:       019E20238EB7C0B232FCF7C6F7D3B4DAC4E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
Manifest number:          0DEB
Signing time:             Wed 13 May 2026 07:01:01 +0000
Manifest this update:     Wed 13 May 2026 07:01:01 +0000
Manifest next update:     Thu 14 May 2026 07:01:01 +0000
Files and hashes:         1: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl (hash: q+MmBupDP5x6NB+6v7wi+UNoMKTJ2Sry7qWqLNVPj9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:8e:b7:c0:b2:32:fc:f7:c6:f7:d3:b4:da:c4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
        Validity
            Not Before: May 13 07:01:01 2026 GMT
            Not After : May 14 07:01:01 2026 GMT
        Subject: CN=5bb5bacabe927113d64578848625de9f602987e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:94:cb:00:44:fa:af:19:4d:73:c0:c1:3b:
                    65:b0:0e:dc:61:cf:55:c4:61:04:fa:3a:e7:67:55:
                    df:71:43:56:47:00:89:04:d3:4c:e6:e8:c0:a7:52:
                    b3:32:43:2e:19:01:75:58:f4:7b:d2:31:ae:2d:cb:
                    d8:65:71:4e:eb:89:9a:fc:0c:60:3f:d1:3f:66:ec:
                    1a:ed:9f:76:2e:78:47:bb:cd:43:cd:98:1e:49:9a:
                    90:7e:53:fa:b7:5c:c9:01:28:5d:e3:3e:a4:0c:1a:
                    d2:f5:21:96:5b:a4:3d:e3:aa:a0:55:a3:a0:32:65:
                    d8:c7:81:0e:68:db:4a:b1:31:4e:8b:83:ff:b8:d3:
                    18:2f:38:ab:b0:74:48:ba:74:66:d3:8c:ab:7f:de:
                    8d:0b:8a:8b:cf:ef:bc:8f:18:1c:75:a7:05:7f:22:
                    c1:2c:60:7d:e0:73:85:dc:8e:e8:27:5c:d9:a0:4c:
                    35:25:b1:85:e5:0c:e4:bc:94:74:94:9a:45:27:9b:
                    db:c8:29:a3:5c:50:da:76:44:fd:3d:23:1a:ae:04:
                    8a:44:7b:e5:c3:09:70:28:58:98:d0:c3:55:17:d8:
                    81:c6:68:2c:5c:4f:cd:9c:26:f7:5e:42:b2:ed:f8:
                    55:b5:40:04:9c:a6:33:e8:4c:b4:28:de:3f:fd:2e:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B5:BA:CA:BE:92:71:13:D6:45:78:84:86:25:DE:9F:60:29:87:E0
            X509v3 Authority Key Identifier:
                keyid:D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:19:fb:39:5d:eb:c6:75:f6:f5:b9:a3:53:b9:50:1a:75:d4:
         7a:aa:5f:eb:37:0e:0e:8c:1a:e9:2f:a8:59:71:59:03:a7:6a:
         12:e1:0b:e2:34:3c:66:a8:44:3c:86:32:5f:45:5b:f6:46:41:
         ea:92:1b:0a:d2:0c:56:8d:80:7d:0f:bc:2e:4e:dd:c1:2c:5b:
         bc:b3:c1:47:58:72:b0:99:2a:43:5b:c1:46:94:8d:5c:29:af:
         29:48:a4:d6:d0:ab:a5:b6:0f:ce:e4:e1:02:8d:ba:8f:14:de:
         78:63:df:0f:85:0b:a2:00:d4:a5:a2:25:aa:f8:3c:04:2d:ed:
         ae:1f:0c:11:49:b1:1a:57:41:6e:ed:62:48:b2:24:ed:e8:17:
         76:c5:7a:5e:d1:92:70:59:3c:a6:37:9a:d2:d0:34:be:26:d8:
         ed:be:fc:d2:5c:f4:e8:7f:80:92:9a:df:af:e1:bb:be:c6:88:
         ed:56:4e:24:1c:e2:5a:25:1c:50:6f:e1:60:4e:f1:c9:fb:2c:
         22:7f:b5:5e:48:2a:24:50:9b:2f:b0:56:0f:57:dd:07:75:ee:
         55:4b:2c:c8:4e:ca:a7:4b:9c:7a:73:6a:af:a4:b4:6f:2e:7a:
         ac:e0:17:71:29:82:9a:9a:8a:77:9d:71:3f:23:48:f6:7c:f9:
         cb:d0:42:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI463wLIy/PfG99O02sThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTViM2JkN2IwNGY0YzA2YjJhYWZlZTk2MzRlY2RjMTU3
MmY0MTcwHhcNMjYwNTEzMDcwMTAxWhcNMjYwNTE0MDcwMTAxWjAzMTEwLwYDVQQD
Eyg1YmI1YmFjYWJlOTI3MTEzZDY0NTc4ODQ4NjI1ZGU5ZjYwMjk4N2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0qUywBE+q8ZTXPAwTtlsA7cYc9V
xGEE+jrnZ1XfcUNWRwCJBNNM5ujAp1KzMkMuGQF1WPR70jGuLcvYZXFO64ma/Axg
P9E/Zuwa7Z92LnhHu81DzZgeSZqQflP6t1zJAShd4z6kDBrS9SGWW6Q946qgVaOg
MmXYx4EOaNtKsTFOi4P/uNMYLzirsHRIunRm04yrf96NC4qLz++8jxgcdacFfyLB
LGB94HOF3I7oJ1zZoEw1JbGF5QzkvJR0lJpFJ5vbyCmjXFDadkT9PSMargSKRHvl
wwlwKFiY0MNVF9iBxmgsXE/NnCb3XkKy7fhVtUAEnKYz6Ey0KN4//S6eaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFu1usq+knET1kV4hIYl3p9gKYfgMB8GA1UdIwQY
MBaAFNYVs717BPTAayqv7pY07NwVcvQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xOGRlMzUtYjkzMS00YTZjLWJhYmQt
OGQ2NjUxMTQ4NTYwLzEvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xOGRlMzUtYjkzMS00YTZjLWJhYmQtOGQ2NjUxMTQ4NTYw
LzEvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsRn7OV3r
xnX29bmjU7lQGnXUeqpf6zcODowa6S+oWXFZA6dqEuEL4jQ8ZqhEPIYyX0Vb9kZB
6pIbCtIMVo2AfQ+8Lk7dwSxbvLPBR1hysJkqQ1vBRpSNXCmvKUik1tCrpbYPzuTh
Ao26jxTeeGPfD4ULogDUpaIlqvg8BC3trh8MEUmxGldBbu1iSLIk7egXdsV6XtGS
cFk8pjea0tA0vibY7b780lz06H+Akprfr+G7vsaI7VZOJBziWiUcUG/hYE7xyfss
In+1XkgqJFCbL7BWD1fdB3XuVUssyE7Kp0ucenNqr6S0by56rOAXcSmCmpqKd51x
PyNI9nz5y9BCvA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:11:21 2026 by rpki-client