Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
File:                     1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json)
Hash identifier:          3kUH3EasfSdWP3O9vVuYCj7Mcwc7tBO0MgIkqZjbOF8=
Subject key identifier:   44:B8:B5:D0:D5:84:CE:17:C6:54:C1:D7:86:10:4D:16:78:AA:A9:68
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Certificate issuer:       /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial:       019E1F118D685770105825D5D656CD8BB985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
Manifest number:          0C61
Signing time:             Wed 13 May 2026 02:01:44 +0000
Manifest this update:     Wed 13 May 2026 02:01:44 +0000
Manifest next update:     Thu 14 May 2026 02:01:44 +0000
Files and hashes:         1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: mcN/lL8bGI3ewGe3xtTRRhbwm2gvnjZMxlykKK/2o+8=)
                          2: ERk4GXsIm4eHgca_Hp8ZDKKXt6M.roa (hash: dcFF9g5BS39gpPUrlypM3KPzuStbqdjSPSt1zZxl6YU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:8d:68:57:70:10:58:25:d5:d6:56:cd:8b:b9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
        Validity
            Not Before: May 13 02:01:44 2026 GMT
            Not After : May 14 02:01:44 2026 GMT
        Subject: CN=44b8b5d0d584ce17c654c1d786104d1678aaa968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:21:cf:bc:6a:05:72:a2:0c:8f:7e:75:2d:
                    4b:67:e0:7d:ad:db:82:1b:f6:4a:1d:37:17:8c:99:
                    48:a5:84:3d:da:1c:82:21:d2:f4:a3:4a:d5:92:52:
                    a9:b2:c7:b6:d7:71:c3:d7:f6:54:7b:82:38:f7:2e:
                    51:d3:af:b6:a8:b7:55:62:d5:91:d8:13:a5:f6:8c:
                    9e:33:ee:8c:7d:96:23:b2:ee:35:00:25:7b:ac:f5:
                    9a:53:f9:82:bb:de:22:67:da:74:b8:1c:50:07:31:
                    dd:a4:84:33:11:93:9d:4a:e8:ba:36:77:ff:18:1b:
                    dc:15:12:43:df:3c:07:1c:45:1b:43:f6:75:8b:29:
                    08:01:33:c1:46:e3:17:9f:f0:67:35:e1:2c:f6:9e:
                    d0:4d:33:d9:a8:9c:60:ab:13:6d:3c:47:21:92:b0:
                    42:7d:e5:ee:19:09:f9:7c:33:af:8c:5e:56:94:0a:
                    02:81:c1:dc:8b:06:be:3d:8b:04:af:03:23:f5:eb:
                    d4:eb:2a:a1:ca:52:97:31:dc:57:72:4e:11:04:26:
                    0b:e7:c1:ac:e1:83:10:29:68:cf:ae:5a:a1:6b:30:
                    d4:64:b2:11:ed:fa:23:89:aa:f7:e0:e2:f3:9f:98:
                    ff:7a:9c:c6:e0:e0:fc:c4:80:5e:a9:23:03:a8:c4:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B8:B5:D0:D5:84:CE:17:C6:54:C1:D7:86:10:4D:16:78:AA:A9:68
            X509v3 Authority Key Identifier:
                keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:25:d8:ff:51:53:af:9d:d2:c1:ab:b0:23:ba:40:dd:89:35:
         cb:5a:91:16:b8:96:ec:99:11:ac:f2:c2:b7:5e:42:36:ac:a1:
         31:de:17:d1:c4:71:5e:1a:ef:28:5b:29:75:a4:7f:4c:91:01:
         10:47:d1:29:01:fd:d0:cc:17:7a:95:9a:cc:b0:db:a7:7a:c9:
         49:cd:d5:15:6c:74:20:7e:59:68:f7:d4:5a:59:7b:33:e7:0b:
         54:69:bf:ca:94:95:8f:80:00:02:53:cb:bc:b1:2a:04:3d:c9:
         b2:c5:85:69:0c:38:77:dd:83:e4:8b:86:21:41:41:fd:38:dc:
         7b:29:c5:35:f6:d3:5b:c8:f0:70:b7:57:ae:4b:11:ff:40:dc:
         ea:bf:19:27:d6:15:c3:9a:76:c8:d6:1d:16:cd:ca:36:85:10:
         74:3e:b1:85:cb:23:83:70:dd:da:5e:46:79:46:2d:0f:2d:ab:
         d2:db:a8:c7:ea:34:b6:0c:58:44:22:d5:f4:d3:af:10:c7:17:
         cb:63:ca:c3:c6:ed:6c:0b:54:08:4f:c8:33:a4:07:dd:c4:3d:
         9a:89:2d:e6:45:5c:33:d4:7d:82:05:93:70:b9:02:e1:ec:43:
         7f:63:87:34:58:02:aa:1a:af:26:53:9d:c0:e3:51:8a:27:f2:
         2c:f7:ae:77
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4fEY1oV3AQWCXV1lbNi7mFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYjY1MTI0YWViNjAzYTBkZDVjNWNlZTFhMGFiNjUyMTM5
N2RiNjAwHhcNMjYwNTEzMDIwMTQ0WhcNMjYwNTE0MDIwMTQ0WjAzMTEwLwYDVQQD
Eyg0NGI4YjVkMGQ1ODRjZTE3YzY1NGMxZDc4NjEwNGQxNjc4YWFhOTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNohz7xqBXKiDI9+dS1LZ+B9rduC
G/ZKHTcXjJlIpYQ92hyCIdL0o0rVklKpsse213HD1/ZUe4I49y5R06+2qLdVYtWR
2BOl9oyeM+6MfZYjsu41ACV7rPWaU/mCu94iZ9p0uBxQBzHdpIQzEZOdSui6Nnf/
GBvcFRJD3zwHHEUbQ/Z1iykIATPBRuMXn/BnNeEs9p7QTTPZqJxgqxNtPEchkrBC
feXuGQn5fDOvjF5WlAoCgcHciwa+PYsErwMj9evU6yqhylKXMdxXck4RBCYL58Gs
4YMQKWjPrlqhazDUZLIR7fojiar34OLzn5j/epzG4OD8xIBeqSMDqMSMjwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFES4tdDVhM4XxlTB14YQTRZ4qqloMB8GA1UdIwQY
MBaAFPq2USSutgOg3Vxc7hoKtlITl9tgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1yWlJKSzYyQTZEZFhGenVHZ3EyVWhPWDIyQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvZWYxNjk5LThjMTMtNDIzNS1hNTg5
LTYzZmU2YmU2MmRjOS8xLzEtclpSSks2MkE2RGRYRnp1R2dxMlVoT1gyMkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzllL2VmMTY5OS04YzEzLTQyMzUtYTU4OS02M2ZlNmJlNjJk
YzkvMS8xLXJaUkpLNjJBNkRkWEZ6dUdncTJVaE9YMjJBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiXY
/1FTr53SwauwI7pA3Yk1y1qRFriW7JkRrPLCt15CNqyhMd4X0cRxXhrvKFspdaR/
TJEBEEfRKQH90MwXepWazLDbp3rJSc3VFWx0IH5ZaPfUWll7M+cLVGm/ypSVj4AA
AlPLvLEqBD3JssWFaQw4d92D5IuGIUFB/TjceynFNfbTW8jwcLdXrksR/0Dc6r8Z
J9YVw5p2yNYdFs3KNoUQdD6xhcsjg3Dd2l5GeUYtDy2r0tuox+o0tgxYRCLV9NOv
EMcXy2PKw8btbAtUCE/IM6QH3cQ9mokt5kVcM9R9ggWTcLkC4exDf2OHNFgCqhqv
JlOdwONRiifyLPeudw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:19:55 2026 by rpki-client