Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File:                     A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier:          Sg9fUSUEJIBSAQBqX8XpSvq1xdy88BTjGwRqoopgN5g=
Subject key identifier:   38:7D:BD:ED:A9:3C:B0:4F:30:87:29:59:66:F5:C2:CB:67:50:DB:EB
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer:       /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial:       019E1CEBA4047CA3886ACAEAF64D8FD0BB7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number:          0B4E
Signing time:             Tue 12 May 2026 16:01:05 +0000
Manifest this update:     Tue 12 May 2026 16:01:05 +0000
Manifest next update:     Wed 13 May 2026 16:01:05 +0000
Files and hashes:         1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: J0KUdovxog4zPGbDLmf/0wm/WSvvAmVbDkPCroeey3s=)
                          2: NU1chFo-5BLldjjUHOHACaYSPbk.roa (hash: mPNtrM0KZ13ZE9NQl/AWLpFJNMzjMXEfz7Z2RWOGx54=)
                          3: mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (hash: WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=)
                          4: n3LOmWNaywYcomz89nsEZwUgqLc.roa (hash: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c=)
                          5: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (hash: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:a4:04:7c:a3:88:6a:ca:ea:f6:4d:8f:d0:bb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
        Validity
            Not Before: May 12 16:01:05 2026 GMT
            Not After : May 13 16:01:05 2026 GMT
        Subject: CN=387dbdeda93cb04f3087295966f5c2cb6750dbeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:34:8f:4e:44:98:ef:16:49:74:7e:c8:bb:
                    b8:5c:e7:0e:ed:b6:52:81:a2:ae:3b:16:fd:86:e1:
                    32:b7:01:75:8b:1b:58:68:e6:4a:ce:1e:0a:03:92:
                    f4:d8:7a:17:44:08:0e:6c:c1:50:d6:14:e4:9d:04:
                    e8:1d:1b:49:71:e2:03:7c:40:7d:92:2a:83:48:fb:
                    db:b9:ff:d9:20:29:72:5d:96:e6:67:e4:44:f5:d1:
                    20:88:c0:db:49:91:0c:78:47:c5:7d:d5:c9:ea:31:
                    78:e3:b4:9c:1b:a0:4e:96:a4:fd:61:ab:63:84:33:
                    b5:b9:78:5f:6e:ef:9a:e1:50:8d:fe:a7:0d:ce:c3:
                    c6:f9:50:16:39:99:dd:0b:92:eb:aa:bb:c3:11:29:
                    03:12:d0:d4:27:96:13:90:04:8c:8d:0b:63:8d:b8:
                    86:2a:4b:6b:19:11:aa:8e:b7:89:b8:74:8f:d9:bb:
                    5b:d0:d3:8c:18:5d:24:d7:05:5e:e5:d8:b4:d9:38:
                    5e:c4:25:62:97:5a:39:3e:33:ac:9e:d0:c2:ed:49:
                    d9:93:aa:cf:55:56:4f:94:4f:76:44:86:a7:1e:ca:
                    d2:e1:f9:8d:5d:be:3c:ef:b4:8b:2d:6f:cf:c7:18:
                    21:e1:fe:da:33:04:24:3a:74:7d:fb:89:bf:16:93:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7D:BD:ED:A9:3C:B0:4F:30:87:29:59:66:F5:C2:CB:67:50:DB:EB
            X509v3 Authority Key Identifier:
                keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:24:61:f0:df:4e:b3:d9:c5:11:9e:d9:23:25:05:e3:4d:79:
         9c:a4:bd:a8:73:a4:e7:77:56:df:24:e8:c7:72:3b:4d:2e:56:
         0c:c7:18:3f:0b:19:d7:a6:35:17:e9:98:93:8c:00:ad:fa:24:
         e0:54:65:6c:47:a3:e2:a8:dd:c7:20:c3:2c:58:7e:da:6a:f3:
         42:01:3e:ce:b5:7e:94:36:5d:3b:fb:a9:03:e0:fe:f1:28:a4:
         c8:12:be:b8:1d:55:31:37:97:fb:ed:b4:2e:c2:71:53:81:ea:
         57:5a:3f:3b:46:05:ba:f0:f5:f3:77:c5:2f:f9:65:94:d3:8b:
         31:7b:0a:2c:67:03:22:7e:22:22:e9:3d:37:a3:c0:de:94:93:
         db:66:45:10:8f:39:19:47:44:95:aa:ce:5f:45:65:e9:5b:8a:
         e2:af:ac:18:df:89:8d:60:82:eb:b9:8f:e8:da:a4:c9:91:33:
         38:d9:39:9a:fa:13:48:b9:1c:42:52:c9:34:99:43:95:d7:30:
         9d:a1:57:32:6b:e0:0c:98:5c:e1:6a:d4:6d:76:fa:2d:47:c3:
         55:c1:20:6a:42:94:d2:0d:a3:6e:ba:23:1e:5a:c1:ff:c6:c2:
         21:c2:62:75:2a:ad:08:f2:b5:29:2b:03:af:30:3d:a1:5a:0e:
         e1:44:13:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c66QEfKOIasrq9k2P0Lt/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzN2I0ODQ0OWJhMWNhZTE1YmRlMmMyZjA4NmQ5NDIxOGUw
NzIwYmIwHhcNMjYwNTEyMTYwMTA1WhcNMjYwNTEzMTYwMTA1WjAzMTEwLwYDVQQD
EygzODdkYmRlZGE5M2NiMDRmMzA4NzI5NTk2NmY1YzJjYjY3NTBkYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCE0j05EmO8WSXR+yLu4XOcO7bZS
gaKuOxb9huEytwF1ixtYaOZKzh4KA5L02HoXRAgObMFQ1hTknQToHRtJceIDfEB9
kiqDSPvbuf/ZIClyXZbmZ+RE9dEgiMDbSZEMeEfFfdXJ6jF447ScG6BOlqT9Yatj
hDO1uXhfbu+a4VCN/qcNzsPG+VAWOZndC5LrqrvDESkDEtDUJ5YTkASMjQtjjbiG
KktrGRGqjreJuHSP2btb0NOMGF0k1wVe5di02ThexCVil1o5PjOsntDC7UnZk6rP
VVZPlE92RIanHsrS4fmNXb4877SLLW/Pxxgh4f7aMwQkOnR9+4m/FpPVRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDh9ve2pPLBPMIcpWWb1wstnUNvrMB8GA1UdIwQY
MBaAFAN7SESbocrhW94sLwhtlCGOByC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYt
NzQwM2UxMzY3NWFiLzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYtNzQwM2UxMzY3NWFi
LzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkiRh8N9O
s9nFEZ7ZIyUF4015nKS9qHOk53dW3yTox3I7TS5WDMcYPwsZ16Y1F+mYk4wArfok
4FRlbEej4qjdxyDDLFh+2mrzQgE+zrV+lDZdO/upA+D+8SikyBK+uB1VMTeX++20
LsJxU4HqV1o/O0YFuvD183fFL/lllNOLMXsKLGcDIn4iIuk9N6PA3pST22ZFEI85
GUdElarOX0Vl6VuK4q+sGN+JjWCC67mP6NqkyZEzONk5mvoTSLkcQlLJNJlDldcw
naFXMmvgDJhc4WrUbXb6LUfDVcEgakKU0g2jbrojHlrB/8bCIcJidSqtCPK1KSsD
rzA9oVoO4UQTSw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:59 2026 by rpki-client