Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File:                     Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier:          Cd+WxKoInOk9EtloOEBNgOqyGNKXlgyAqToRbxDiRiI=
Subject key identifier:   DA:F8:8D:C2:77:67:63:AC:3A:4F:3F:A4:AF:AA:05:2A:E8:C9:B3:8C
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer:       /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial:       019E1D227E98CC69CB1FB675DE369C5A3F61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number:          05F9
Signing time:             Tue 12 May 2026 17:01:00 +0000
Manifest this update:     Tue 12 May 2026 17:01:00 +0000
Manifest next update:     Wed 13 May 2026 17:01:00 +0000
Files and hashes:         1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: skUzl6tmFhjWls4RQ2EiHuDeGMSy363Ncif3SoMNGzs=)
                          2: Db42gVIOc-r6U0XdkPGEkaUQ_F8.roa (hash: +dorelrzD6UM9OjrHdBTn8xKkODdpeZOExmq1+y6uHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:7e:98:cc:69:cb:1f:b6:75:de:36:9c:5a:3f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
        Validity
            Not Before: May 12 17:01:00 2026 GMT
            Not After : May 13 17:01:00 2026 GMT
        Subject: CN=daf88dc2776763ac3a4f3fa4afaa052ae8c9b38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:47:f1:68:0e:4b:01:c4:c3:63:ee:5d:06:59:
                    53:fb:f1:c3:7f:7b:79:3b:c5:76:ad:2b:52:26:25:
                    01:d1:da:a0:18:fb:b4:95:8a:ef:f6:d4:93:6b:ed:
                    c6:54:de:eb:03:bc:59:b7:76:7b:8d:fe:66:12:e7:
                    df:f1:a4:ba:a7:3d:dd:0a:3e:83:4f:f4:9e:9f:87:
                    e8:b5:81:91:16:67:2d:99:ac:3c:a9:00:6c:85:c8:
                    cb:b1:5c:5c:25:c2:89:8e:9e:b9:d3:9a:c8:e6:30:
                    78:c9:2a:78:72:ee:c1:17:66:8e:18:d0:da:86:c1:
                    8c:05:75:bb:33:d0:ff:d9:9a:24:7f:bc:9b:39:1f:
                    95:bb:37:bd:72:65:ff:dc:3f:c0:91:9f:2a:a0:77:
                    6f:01:b4:23:4c:a6:fd:6e:25:9d:df:97:86:72:a3:
                    85:ef:9f:5e:3f:33:1c:97:fd:87:2f:60:10:f4:bf:
                    e0:c6:80:13:92:f9:c1:f5:f2:17:77:a6:f7:0c:91:
                    88:79:7b:bd:54:d2:18:74:a7:9c:98:12:25:5d:9d:
                    73:63:53:5f:f5:9a:42:b9:9a:f1:15:7c:43:b4:54:
                    f1:71:dc:59:e9:15:69:5b:5a:b4:af:14:c2:ba:82:
                    a8:5e:8d:4c:f8:95:e4:4c:b1:87:5b:f2:a7:70:96:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F8:8D:C2:77:67:63:AC:3A:4F:3F:A4:AF:AA:05:2A:E8:C9:B3:8C
            X509v3 Authority Key Identifier:
                keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:19:3c:cf:a7:16:c7:9e:b6:1d:cf:2e:b1:1f:a9:d7:0e:b4:
         2b:5f:9e:9f:de:d4:8f:74:39:0a:3c:e9:f7:1c:2d:3b:c6:7d:
         ed:01:dc:59:c8:7b:61:78:42:38:b5:ab:bc:05:d2:e4:5d:06:
         c3:fb:8e:9b:0a:29:1f:31:7e:f4:87:8a:0f:11:74:62:f9:81:
         a7:7d:be:e7:4e:4f:08:34:7e:17:b7:80:c6:29:7d:eb:40:26:
         96:13:5e:59:15:f0:36:75:28:e8:8e:a0:a7:33:5f:e4:fd:c5:
         71:88:7f:0a:8d:8d:77:ad:af:5d:65:36:1b:74:2d:a7:75:16:
         52:ef:fd:df:af:8a:b3:2c:e7:6a:b7:1f:e1:27:79:56:c7:28:
         66:ca:85:14:df:4f:d6:fa:db:94:9d:fc:f6:c2:a4:78:0d:5f:
         8a:4f:7e:f5:17:18:77:38:ab:b6:59:37:0d:54:39:2f:a4:9a:
         96:43:12:24:05:54:c8:a5:7f:6f:c5:c7:99:0f:60:52:dd:99:
         ec:68:dd:21:27:01:98:3c:28:8f:01:d9:b6:ea:2f:42:de:c5:
         29:29:d0:94:e7:74:39:60:20:b2:11:4b:cb:b3:69:53:0b:88:
         e0:d4:9d:63:dc:81:07:fe:f5:15:94:b4:e5:03:87:79:1b:c5:
         84:d9:8e:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIn6YzGnLH7Z13jacWj9hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWYwYjhlNWJiYWIyOWExMzMwZmEwZTc0OTNmMmExNzk4
NDdiYjIwHhcNMjYwNTEyMTcwMTAwWhcNMjYwNTEzMTcwMTAwWjAzMTEwLwYDVQQD
EyhkYWY4OGRjMjc3Njc2M2FjM2E0ZjNmYTRhZmFhMDUyYWU4YzliMzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/kfxaA5LAcTDY+5dBllT+/HDf3t5
O8V2rStSJiUB0dqgGPu0lYrv9tSTa+3GVN7rA7xZt3Z7jf5mEuff8aS6pz3dCj6D
T/Sen4fotYGRFmctmaw8qQBshcjLsVxcJcKJjp6505rI5jB4ySp4cu7BF2aOGNDa
hsGMBXW7M9D/2Zokf7ybOR+Vuze9cmX/3D/AkZ8qoHdvAbQjTKb9biWd35eGcqOF
759ePzMcl/2HL2AQ9L/gxoATkvnB9fIXd6b3DJGIeXu9VNIYdKecmBIlXZ1zY1Nf
9ZpCuZrxFXxDtFTxcdxZ6RVpW1q0rxTCuoKoXo1M+JXkTLGHW/KncJbTbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr4jcJ3Z2OsOk8/pK+qBSroybOMMB8GA1UdIwQY
MBaAFAnvC45burKaEzD6DnST8qF5hHuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80MDU0M2UtMTk1YS00MzMyLWE4ZWQt
MzczNzRlMzk2YzdkLzEvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80MDU0M2UtMTk1YS00MzMyLWE4ZWQtMzczNzRlMzk2Yzdk
LzEvQ2U4TGpsdTZzcG9UTVBvT2RKUHlvWG1FZTdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhk8z6cW
x562Hc8usR+p1w60K1+en97Uj3Q5Cjzp9xwtO8Z97QHcWch7YXhCOLWrvAXS5F0G
w/uOmwopHzF+9IeKDxF0YvmBp32+505PCDR+F7eAxil960AmlhNeWRXwNnUo6I6g
pzNf5P3FcYh/Co2Nd62vXWU2G3Qtp3UWUu/936+Ksyznarcf4Sd5VscoZsqFFN9P
1vrblJ389sKkeA1fik9+9RcYdzirtlk3DVQ5L6SalkMSJAVUyKV/b8XHmQ9gUt2Z
7GjdIScBmDwojwHZtuovQt7FKSnQlOd0OWAgshFLy7NpUwuI4NSdY9yBB/71FZS0
5QOHeRvFhNmOZA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:22:29 2026 by rpki-client