Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
File:                     4Rzmt92aasCzJLpa2HOwr0ajktQ.mft (raw, json)
Hash identifier:          F0prhJGy4X5WrgvijwQ2afnoV01SMUzKDH8QwYg5WS8=
Subject key identifier:   2A:26:AB:B0:2D:0A:6B:3C:7B:9C:4D:4A:12:4E:2B:28:D0:1E:32:B4
Authority key identifier: E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
Certificate issuer:       /CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Certificate serial:       019E1D232A80249190B4CDD46A12D79B698F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
Manifest number:          0319
Signing time:             Tue 12 May 2026 17:01:44 +0000
Manifest this update:     Tue 12 May 2026 17:01:44 +0000
Manifest next update:     Wed 13 May 2026 17:01:44 +0000
Files and hashes:         1: 4Rzmt92aasCzJLpa2HOwr0ajktQ.crl (hash: BwXahQ8QGnI2hqAPRwfxmEVLgDo/M2GiLbvRb8tzIfY=)
                          2: 8mGjCH9xqFpZOCJZc787zSGC4EE.roa (hash: kpbH01pKQ8NTLrxbYMEWBBlk5pUCb7DZ0viTFQjgJ0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:2a:80:24:91:90:b4:cd:d4:6a:12:d7:9b:69:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
        Validity
            Not Before: May 12 17:01:44 2026 GMT
            Not After : May 13 17:01:44 2026 GMT
        Subject: CN=2a26abb02d0a6b3c7b9c4d4a124e2b28d01e32b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:55:b6:a6:c3:ae:a6:d4:c9:1b:90:b9:92:f3:
                    f7:f5:73:94:6d:8d:a4:c7:b9:c4:1e:7c:a5:34:db:
                    3e:e0:f8:83:e7:38:d9:3c:3c:a5:26:d2:c6:ab:c5:
                    63:31:50:60:cd:da:34:89:b2:7b:ff:0b:a2:0a:b5:
                    8c:99:65:16:f1:c5:f6:b2:ae:a5:40:a4:5e:97:9a:
                    a5:fc:1d:70:fc:c3:8c:da:30:cb:bf:b4:09:05:43:
                    a2:ff:47:d0:f2:ac:9d:eb:66:1b:d9:4b:58:73:9a:
                    d2:00:5e:99:b7:4d:21:d4:06:ee:cb:9a:0a:3b:6d:
                    6b:44:95:bb:72:50:95:25:ec:f4:35:6e:96:65:a9:
                    e0:57:3b:c6:79:c4:46:6e:88:e0:00:cc:7b:83:6a:
                    b4:40:af:7f:e1:c1:f7:dd:d7:8e:dd:e7:7f:5f:3f:
                    41:ef:50:f4:6c:0c:3e:14:ed:f5:35:a0:0c:02:bc:
                    d0:6d:a9:29:ba:90:db:32:46:c5:bc:22:96:59:de:
                    e6:10:8a:c4:5c:36:2d:cc:22:67:be:e7:05:5a:c5:
                    d5:64:41:ae:22:3f:2f:b5:43:b2:b0:9b:06:d2:c1:
                    8b:48:8f:e8:2a:e8:04:f6:b8:fa:80:e5:5e:1b:74:
                    a0:f9:ef:55:62:12:75:f0:0e:c4:88:ba:ad:d7:76:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:26:AB:B0:2D:0A:6B:3C:7B:9C:4D:4A:12:4E:2B:28:D0:1E:32:B4
            X509v3 Authority Key Identifier:
                keyid:E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ae:de:2c:d6:d1:a9:c1:5a:ab:db:00:6d:03:41:d5:f2:96:
         16:54:2e:fd:8c:08:65:de:84:02:6a:55:02:b2:1a:a9:92:97:
         6a:cf:70:c3:2e:88:c2:2f:88:8f:2c:e6:0f:57:0a:32:c4:1a:
         ed:83:31:50:b9:d0:1d:54:e1:96:dd:6e:b7:08:eb:ce:b7:c5:
         da:96:a4:40:92:9c:55:5c:f6:9b:1e:10:55:f8:a9:2a:bd:b3:
         12:61:c6:ed:2d:d1:c1:df:79:5f:93:29:44:ab:06:6b:c9:84:
         b8:67:d9:52:51:4a:14:b5:26:03:15:2a:93:ca:a8:bd:83:92:
         7e:9a:37:ee:30:1c:9d:96:75:5c:ec:0c:4c:23:4b:35:15:57:
         20:5e:7a:f2:f3:2f:43:e3:b9:49:b3:07:d5:c5:d7:98:26:13:
         ba:a9:61:c7:23:37:6e:e1:ee:e0:14:19:7f:b0:26:14:75:de:
         3b:a3:32:f8:d4:dc:be:d8:be:0d:67:69:6d:8e:61:b4:e0:3c:
         41:0e:fc:b7:d8:f5:6f:54:78:e6:42:17:27:fe:65:7d:19:0f:
         b7:4d:16:e8:e9:60:b9:85:a6:03:34:26:52:4d:7e:ba:66:19:
         c5:46:54:1d:80:a6:9a:89:bc:b9:e8:27:76:d4:af:5c:79:59:
         e2:ae:aa:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIyqAJJGQtM3UahLXm2mPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMWNlNmI3ZGQ5YTZhYzBiMzI0YmE1YWQ4NzNiMGFmNDZh
MzkyZDQwHhcNMjYwNTEyMTcwMTQ0WhcNMjYwNTEzMTcwMTQ0WjAzMTEwLwYDVQQD
EygyYTI2YWJiMDJkMGE2YjNjN2I5YzRkNGExMjRlMmIyOGQwMWUzMmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VW2psOuptTJG5C5kvP39XOUbY2k
x7nEHnylNNs+4PiD5zjZPDylJtLGq8VjMVBgzdo0ibJ7/wuiCrWMmWUW8cX2sq6l
QKRel5ql/B1w/MOM2jDLv7QJBUOi/0fQ8qyd62Yb2UtYc5rSAF6Zt00h1Abuy5oK
O21rRJW7clCVJez0NW6WZangVzvGecRGbojgAMx7g2q0QK9/4cH33deO3ed/Xz9B
71D0bAw+FO31NaAMArzQbakpupDbMkbFvCKWWd7mEIrEXDYtzCJnvucFWsXVZEGu
Ij8vtUOysJsG0sGLSI/oKugE9rj6gOVeG3Sg+e9VYhJ18A7EiLqt13ap9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFComq7AtCms8e5xNShJOKyjQHjK0MB8GA1UdIwQY
MBaAFOEc5rfdmmrAsyS6WthzsK9Go5LUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82MWRiNGUtM2VmYy00NjJkLWFiMWYt
ZTU5MGU2YjRjZDBlLzEvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82MWRiNGUtM2VmYy00NjJkLWFiMWYtZTU5MGU2YjRjZDBl
LzEvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANK7eLNbR
qcFaq9sAbQNB1fKWFlQu/YwIZd6EAmpVArIaqZKXas9wwy6Iwi+IjyzmD1cKMsQa
7YMxULnQHVThlt1utwjrzrfF2pakQJKcVVz2mx4QVfipKr2zEmHG7S3Rwd95X5Mp
RKsGa8mEuGfZUlFKFLUmAxUqk8qovYOSfpo37jAcnZZ1XOwMTCNLNRVXIF568vMv
Q+O5SbMH1cXXmCYTuqlhxyM3buHu4BQZf7AmFHXeO6My+NTcvti+DWdpbY5htOA8
QQ78t9j1b1R45kIXJ/5lfRkPt00W6OlguYWmAzQmUk1+umYZxUZUHYCmmom8uegn
dtSvXHlZ4q6q7A==
-----END CERTIFICATE-----
Generated at Wed May 13 02:21:51 2026 by rpki-client