Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
File:                     fBvFitldp4SStC2IY9Rej2qmqiQ.mft (raw, json)
Hash identifier:          zVucLfngmdv+iz+H5XKevU6n+frF5skA1seUPQVFVoo=
Subject key identifier:   55:BE:B9:9E:B3:5C:D7:11:35:98:C0:78:CA:10:EA:13:BE:56:B2:1E
Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
Certificate issuer:       /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Certificate serial:       019E1F110F94061605D3279E22CA2E1B5EC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
Manifest number:          1647
Signing time:             Wed 13 May 2026 02:01:12 +0000
Manifest this update:     Wed 13 May 2026 02:01:12 +0000
Manifest next update:     Thu 14 May 2026 02:01:12 +0000
Files and hashes:         1: fBvFitldp4SStC2IY9Rej2qmqiQ.crl (hash: EfGEmZYWeJZo604ebjIx6b7tqbD7/5VwToR0Q63hZ68=)
                          2: iS8uMVcfTxV4oFRPmDdhbpSZpws.roa (hash: MP/qvCm1sWW7tlIkjuMYgAfGTXxSGhkZeUhVHpOpueU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:0f:94:06:16:05:d3:27:9e:22:ca:2e:1b:5e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
        Validity
            Not Before: May 13 02:01:12 2026 GMT
            Not After : May 14 02:01:12 2026 GMT
        Subject: CN=55beb99eb35cd7113598c078ca10ea13be56b21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ac:6e:a3:72:f6:86:08:41:a3:76:5e:15:4d:
                    33:3c:37:78:cf:af:c3:7a:31:aa:d4:76:37:84:ad:
                    b8:18:50:32:6a:81:46:69:70:61:e5:ba:b5:fe:24:
                    0d:a4:9e:da:c2:87:cb:0b:44:1a:b9:7c:df:cf:47:
                    02:b5:67:9d:17:bb:50:be:c7:a2:96:ea:fb:43:cd:
                    40:a9:4c:1a:15:d3:fc:f9:37:01:8e:02:ee:c3:ee:
                    64:30:3a:31:1d:57:5a:76:2f:97:31:80:50:d9:eb:
                    17:e4:c7:c0:b4:51:84:4f:fc:a9:83:59:9c:b5:1e:
                    97:01:56:d7:0b:86:99:03:bd:10:f3:50:96:da:d6:
                    d4:2a:18:e3:3a:29:a9:58:51:5e:7b:03:99:41:09:
                    f5:e0:38:93:19:9f:23:45:a7:98:e3:37:ad:74:d2:
                    10:95:e3:0e:c4:be:21:95:97:5e:c5:b1:8a:03:7d:
                    e9:d2:c7:79:1c:5e:c6:a3:38:03:f6:09:4e:81:fb:
                    7a:a0:8b:49:50:7d:4d:b4:e4:8d:a6:70:fc:b1:48:
                    c5:99:db:44:14:06:4f:b0:f1:f6:76:03:55:c4:2e:
                    a9:f9:49:1a:37:bf:4c:80:cd:c9:fd:ed:17:36:ee:
                    a6:bb:30:83:fd:eb:8d:0a:12:f3:76:01:45:47:93:
                    73:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BE:B9:9E:B3:5C:D7:11:35:98:C0:78:CA:10:EA:13:BE:56:B2:1E
            X509v3 Authority Key Identifier:
                keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ba:10:a8:c5:77:e2:37:80:32:d3:87:3c:d1:23:50:8c:9c:
         a5:93:0c:14:f3:86:66:c3:5e:08:7a:6b:26:9a:06:22:a7:d1:
         8b:fe:79:b9:59:e9:25:ed:31:fb:01:50:54:3d:4a:e8:87:d0:
         7d:c9:3b:51:a4:c0:19:1c:d2:8a:e8:d2:6b:97:b7:f0:a2:e8:
         09:49:c0:e2:19:9b:7f:28:42:27:7b:6b:ba:5d:27:d8:df:3c:
         7a:f8:d7:e2:fe:34:29:2c:43:2c:8e:f9:e5:19:c1:2a:6d:c9:
         ed:61:a2:4a:97:09:16:13:0d:d6:21:b2:47:b4:8e:2a:49:51:
         ea:4b:e9:41:13:51:15:15:a7:5f:76:48:0e:1a:9a:ca:cf:73:
         10:34:14:9c:0a:af:6a:75:70:99:0a:f2:61:f2:1f:26:f9:f3:
         2d:b1:1f:3a:f6:a6:89:2a:e8:dc:05:5d:f4:98:bd:6c:e9:2c:
         4c:2e:57:7a:ca:c9:c2:23:c6:ff:fd:f8:95:96:cc:e4:62:8e:
         ce:3b:04:bf:25:c4:de:55:2b:a6:5b:fd:84:d0:59:fd:ae:f7:
         3c:3c:e9:bd:5b:33:03:69:72:fa:ee:c2:e0:82:5a:d4:b6:69:
         fa:ae:ab:4f:c3:bc:24:02:ba:e4:f8:4e:83:d0:8b:1a:64:59:
         2d:79:c7:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEQ+UBhYF0yeeIsouG17IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMWJjNThhZDk1ZGE3ODQ5MmI0MmQ4ODYzZDQ1ZThmNmFh
NmFhMjQwHhcNMjYwNTEzMDIwMTEyWhcNMjYwNTE0MDIwMTEyWjAzMTEwLwYDVQQD
Eyg1NWJlYjk5ZWIzNWNkNzExMzU5OGMwNzhjYTEwZWExM2JlNTZiMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKxuo3L2hghBo3ZeFU0zPDd4z6/D
ejGq1HY3hK24GFAyaoFGaXBh5bq1/iQNpJ7awofLC0QauXzfz0cCtWedF7tQvsei
lur7Q81AqUwaFdP8+TcBjgLuw+5kMDoxHVdadi+XMYBQ2esX5MfAtFGET/ypg1mc
tR6XAVbXC4aZA70Q81CW2tbUKhjjOimpWFFeewOZQQn14DiTGZ8jRaeY4zetdNIQ
leMOxL4hlZdexbGKA33p0sd5HF7GozgD9glOgft6oItJUH1NtOSNpnD8sUjFmdtE
FAZPsPH2dgNVxC6p+UkaN79MgM3J/e0XNu6muzCD/euNChLzdgFFR5Nz+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFW+uZ6zXNcRNZjAeMoQ6hO+VrIeMB8GA1UdIwQY
MBaAFHwbxYrZXaeEkrQtiGPUXo9qpqokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQt
NTE3ZjZmZjNlNGY5LzEvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQtNTE3ZjZmZjNlNGY5
LzEvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7oQqMV3
4jeAMtOHPNEjUIycpZMMFPOGZsNeCHprJpoGIqfRi/55uVnpJe0x+wFQVD1K6IfQ
fck7UaTAGRzSiujSa5e38KLoCUnA4hmbfyhCJ3trul0n2N88evjX4v40KSxDLI75
5RnBKm3J7WGiSpcJFhMN1iGyR7SOKklR6kvpQRNRFRWnX3ZIDhqays9zEDQUnAqv
anVwmQryYfIfJvnzLbEfOvamiSro3AVd9Ji9bOksTC5XesrJwiPG//34lZbM5GKO
zjsEvyXE3lUrplv9hNBZ/a73PDzpvVszA2ly+u7C4IJa1LZp+q6rT8O8JAK65PhO
g9CLGmRZLXnHpQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:46:05 2026 by rpki-client