Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
File:                     au27xW2vhfo_OHxgUtxy1dchO_c.mft (raw, json)
Hash identifier:          Ler/8DLSRCxRLeR12t9uNQp8jjmM3TUyL+vJVnmMxbA=
Subject key identifier:   A0:BC:15:21:8D:54:DC:A6:C5:7A:4A:25:DF:E6:BE:D1:53:73:94:FB
Authority key identifier: 6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
Certificate issuer:       /CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Certificate serial:       019E1F10D06C142EBC4D295395576E711547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
Manifest number:          0381
Signing time:             Wed 13 May 2026 02:00:56 +0000
Manifest this update:     Wed 13 May 2026 02:00:56 +0000
Manifest next update:     Thu 14 May 2026 02:00:56 +0000
Files and hashes:         1: Vd4ynB66sCEtEXPuV_O3x4PgW4A.roa (hash: 4UTBj4Zh6vSwwX6L/YeCbJsNnwD0s0UfjFqN/ZdD3NU=)
                          2: au27xW2vhfo_OHxgUtxy1dchO_c.crl (hash: 72UIrSg5ipd9e7iPnQdNCM4HVXpKfgRLbQ+ogeFaElY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:d0:6c:14:2e:bc:4d:29:53:95:57:6e:71:15:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
        Validity
            Not Before: May 13 02:00:56 2026 GMT
            Not After : May 14 02:00:56 2026 GMT
        Subject: CN=a0bc15218d54dca6c57a4a25dfe6bed1537394fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:9d:71:95:db:a5:85:2d:bc:72:5a:67:ff:
                    1e:a5:ee:fe:28:a3:e1:65:75:50:88:82:7f:9e:8b:
                    cd:a2:c3:9b:45:db:a1:e4:af:80:3e:e2:b8:df:f3:
                    7e:65:01:89:df:97:a2:3b:0e:be:77:c2:46:c7:8b:
                    72:57:43:2c:db:9d:f8:a3:27:c5:78:fb:4b:ba:a4:
                    53:ca:f8:e0:84:ed:5e:e8:21:23:ea:01:c3:97:78:
                    fe:49:69:7b:79:4f:7c:09:4d:3b:0e:0a:86:1b:4c:
                    1f:91:26:f7:9b:fb:a5:70:91:2f:27:97:5d:7d:61:
                    73:dc:5c:04:eb:c5:88:1c:68:87:5b:3e:10:f7:9f:
                    15:1a:21:4f:d3:56:38:e7:35:07:ba:be:3f:82:15:
                    fc:d4:71:4b:ea:45:06:7b:71:ba:05:24:fe:82:aa:
                    48:8f:b5:d6:17:ab:18:ee:7a:d8:5a:54:80:9d:59:
                    82:1d:58:9a:cf:1c:63:e0:10:01:8d:7c:dd:64:e7:
                    ad:46:e5:94:b2:22:0f:87:61:3a:94:23:6f:2f:7e:
                    ac:da:d2:df:35:c9:2d:54:55:40:96:93:8b:ef:1d:
                    60:ed:4d:47:36:22:21:1e:91:1c:8c:6c:34:a5:b4:
                    ed:9e:77:90:9c:e7:50:78:4b:49:83:40:25:fe:92:
                    6c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BC:15:21:8D:54:DC:A6:C5:7A:4A:25:DF:E6:BE:D1:53:73:94:FB
            X509v3 Authority Key Identifier:
                keyid:6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d6:c0:0f:c0:ee:84:b5:62:fd:01:51:55:55:a7:2d:4e:65:
         03:7f:58:ca:7d:c7:e8:8d:fb:6c:92:42:66:74:36:67:9c:1a:
         b7:35:45:52:bd:43:10:59:3a:d0:e6:76:07:42:f8:f9:91:34:
         2f:06:cd:72:8e:73:ab:43:51:cd:d0:e1:f5:04:07:d1:ae:4b:
         66:34:fe:5e:d5:3a:a4:80:b1:4d:51:1e:03:27:24:05:11:65:
         54:a5:78:d4:ed:76:3a:7a:dd:40:10:30:5a:fa:f8:60:a4:8d:
         51:04:56:de:07:f4:22:20:bf:9d:11:4a:d9:d7:84:53:be:3a:
         f0:fd:d3:99:1d:e0:f4:41:5d:e6:6e:b4:ba:44:69:f4:1b:1c:
         6f:1b:0e:f3:65:15:0e:e7:06:19:7f:e8:78:17:bc:93:8e:84:
         e0:1a:18:d0:9c:fc:a8:db:ca:36:34:01:61:a3:f3:9e:5c:cf:
         4f:84:93:d1:52:97:bd:08:73:cf:7c:14:cd:b1:7a:99:68:32:
         e5:9a:da:d0:57:4b:50:8c:db:a9:71:c3:6f:cd:8e:ae:16:bb:
         84:89:bf:77:76:59:07:db:fd:64:d7:14:3e:bb:41:f6:81:49:
         af:a7:54:fc:20:44:b8:a4:23:47:97:7f:86:8e:3a:a0:69:9d:
         b2:f3:bb:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fENBsFC68TSlTlVducRVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZWRiYmM1NmRhZjg1ZmEzZjM4N2M2MDUyZGM3MmQ1ZDcy
MTNiZjcwHhcNMjYwNTEzMDIwMDU2WhcNMjYwNTE0MDIwMDU2WjAzMTEwLwYDVQQD
EyhhMGJjMTUyMThkNTRkY2E2YzU3YTRhMjVkZmU2YmVkMTUzNzM5NGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH6dcZXbpYUtvHJaZ/8epe7+KKPh
ZXVQiIJ/novNosObRduh5K+APuK43/N+ZQGJ35eiOw6+d8JGx4tyV0Ms2534oyfF
ePtLuqRTyvjghO1e6CEj6gHDl3j+SWl7eU98CU07DgqGG0wfkSb3m/ulcJEvJ5dd
fWFz3FwE68WIHGiHWz4Q958VGiFP01Y45zUHur4/ghX81HFL6kUGe3G6BST+gqpI
j7XWF6sY7nrYWlSAnVmCHViazxxj4BABjXzdZOetRuWUsiIPh2E6lCNvL36s2tLf
NcktVFVAlpOL7x1g7U1HNiIhHpEcjGw0pbTtnneQnOdQeEtJg0Al/pJslQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKC8FSGNVNymxXpKJd/mvtFTc5T7MB8GA1UdIwQY
MBaAFGrtu8Vtr4X6Pzh8YFLcctXXITv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXUyN3hXMnZoZm9fT0h4Z1V0eHkxZGNoT19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNGI3OTEtZmZkNS00OWYwLTg3MTgt
NDliNzVjMTgzNDlhLzEvYXUyN3hXMnZoZm9fT0h4Z1V0eHkxZGNoT19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zNGI3OTEtZmZkNS00OWYwLTg3MTgtNDliNzVjMTgzNDlh
LzEvYXUyN3hXMnZoZm9fT0h4Z1V0eHkxZGNoT19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNbAD8Du
hLVi/QFRVVWnLU5lA39Yyn3H6I37bJJCZnQ2Z5watzVFUr1DEFk60OZ2B0L4+ZE0
LwbNco5zq0NRzdDh9QQH0a5LZjT+XtU6pICxTVEeAyckBRFlVKV41O12OnrdQBAw
Wvr4YKSNUQRW3gf0IiC/nRFK2deEU7468P3TmR3g9EFd5m60ukRp9BscbxsO82UV
DucGGX/oeBe8k46E4BoY0Jz8qNvKNjQBYaPznlzPT4ST0VKXvQhzz3wUzbF6mWgy
5Zra0FdLUIzbqXHDb82Orha7hIm/d3ZZB9v9ZNcUPrtB9oFJr6dU/CBEuKQjR5d/
ho46oGmdsvO7Eg==
-----END CERTIFICATE-----
Generated at Wed May 13 10:58:35 2026 by rpki-client