Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
File:                     F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json)
Hash identifier:          AsIhjPrjbx0cksMdw3BQyrEH4uWL0B8AfJ8HIl78Ltc=
Subject key identifier:   7E:9C:46:1A:8F:67:FA:6A:6C:B3:9E:ED:46:2A:2B:9A:DF:04:BD:2D
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Certificate issuer:       /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial:       019E20FF5069FD93B907E53B2C83F08DA367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
Manifest number:          1899
Signing time:             Wed 13 May 2026 11:01:03 +0000
Manifest this update:     Wed 13 May 2026 11:01:03 +0000
Manifest next update:     Thu 14 May 2026 11:01:03 +0000
Files and hashes:         1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: ZpmWxssahA+/BVC2u2T666GjVEfISYE4CpFF0ckBLCM=)
                          2: PnmMPjc4F5uoJXYfqJ1sZSQuC6I.roa (hash: /5mkx4+jtWUqD/pZZ8CzGZwV8K0K77VUycNPiYZySbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:50:69:fd:93:b9:07:e5:3b:2c:83:f0:8d:a3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
        Validity
            Not Before: May 13 11:01:03 2026 GMT
            Not After : May 14 11:01:03 2026 GMT
        Subject: CN=7e9c461a8f67fa6a6cb39eed462a2b9adf04bd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:52:2d:d1:03:35:a7:13:30:c0:97:d7:ef:
                    56:d4:38:dd:f8:d9:c7:b6:4d:57:b2:83:0a:13:c8:
                    7b:e0:50:96:88:e6:2c:53:3e:87:3e:a9:2f:5f:68:
                    fa:28:14:5d:b0:b8:f2:0a:41:5a:cc:78:d6:62:dd:
                    7e:56:a8:7a:9a:5d:d2:70:e1:5d:08:b8:c9:e3:19:
                    77:c4:f7:c7:52:58:6a:22:e7:f0:57:e0:af:ae:f3:
                    09:db:08:0f:24:d6:57:34:85:cb:64:9d:71:d7:91:
                    39:1f:e9:06:85:4f:36:9c:20:30:93:86:30:f2:85:
                    0c:85:5b:b4:a2:b9:f8:c0:e0:16:33:8a:29:0b:27:
                    e5:41:88:fd:ac:3d:4e:83:f8:e6:92:24:1c:5a:74:
                    29:46:dd:1a:63:d0:5f:a3:db:56:86:b1:92:2f:34:
                    20:bf:31:ef:85:ae:67:29:ae:f1:98:32:81:bc:fe:
                    4b:86:d7:a3:f4:81:e1:7b:db:1b:0a:f3:50:2e:45:
                    42:73:29:64:6c:ab:7c:8f:92:9a:d4:c6:48:15:b3:
                    85:78:04:e9:1a:a8:d1:c2:05:fe:5c:85:1b:52:2e:
                    1c:9e:55:c6:9e:25:0a:23:bd:d4:fa:a4:d6:80:2c:
                    81:f5:cc:b1:14:34:1c:5c:bb:5b:97:d9:ca:20:35:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9C:46:1A:8F:67:FA:6A:6C:B3:9E:ED:46:2A:2B:9A:DF:04:BD:2D
            X509v3 Authority Key Identifier:
                keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:bb:53:57:e8:98:91:a4:ba:5b:09:e7:2c:e8:61:33:21:e9:
         21:eb:10:1a:78:2c:d5:1e:bf:0a:59:f3:c7:91:8e:0c:8a:6c:
         3f:f6:38:a0:1b:33:80:01:d4:9b:0e:f3:c2:8d:69:cc:db:9d:
         12:6c:8f:e5:3d:36:d5:4e:bf:a1:66:94:8e:73:36:e8:b8:fb:
         9b:11:36:e2:6b:16:cb:79:cb:3e:c0:80:09:bc:03:3d:92:94:
         78:ee:c4:9d:72:a8:31:b6:2c:11:1d:ce:e6:32:0d:6d:5a:f7:
         fd:1b:ab:35:52:ca:27:7b:57:3b:97:e0:ab:79:e2:78:e4:4f:
         fb:53:4c:ba:5a:0f:d7:22:ae:d6:bb:04:46:e1:70:6d:84:9d:
         3d:df:90:01:ef:49:95:4e:77:1e:ac:c8:0a:fe:15:e1:d6:a8:
         d0:c9:ea:01:20:c9:f6:a5:37:8e:38:c6:e0:3c:ac:dc:d5:53:
         d8:4a:f0:bf:e0:a1:3e:ef:13:1b:77:c2:2e:2a:de:c3:44:1b:
         89:78:48:7d:48:a3:1f:c3:a1:7e:4f:e4:51:4f:dd:7b:1d:08:
         03:14:1a:f1:2e:e7:10:70:b8:1a:4b:23:85:32:db:1b:5b:1c:
         a7:2a:d6:f0:e8:4b:da:9c:70:a4:2c:ad:bc:97:0b:ce:ff:8d:
         69:8f:52:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/1Bp/ZO5B+U7LIPwjaNnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZmZlZTI1MDUyYzBhYWJmNmNiMzcxZTNmMmUwNzZmNDRm
YzFjM2MwHhcNMjYwNTEzMTEwMTAzWhcNMjYwNTE0MTEwMTAzWjAzMTEwLwYDVQQD
Eyg3ZTljNDYxYThmNjdmYTZhNmNiMzllZWQ0NjJhMmI5YWRmMDRiZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCNSLdEDNacTMMCX1+9W1Djd+NnH
tk1XsoMKE8h74FCWiOYsUz6HPqkvX2j6KBRdsLjyCkFazHjWYt1+Vqh6ml3ScOFd
CLjJ4xl3xPfHUlhqIufwV+CvrvMJ2wgPJNZXNIXLZJ1x15E5H+kGhU82nCAwk4Yw
8oUMhVu0orn4wOAWM4opCyflQYj9rD1Og/jmkiQcWnQpRt0aY9Bfo9tWhrGSLzQg
vzHvha5nKa7xmDKBvP5Lhtej9IHhe9sbCvNQLkVCcylkbKt8j5Ka1MZIFbOFeATp
GqjRwgX+XIUbUi4cnlXGniUKI73U+qTWgCyB9cyxFDQcXLtbl9nKIDXfgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6cRhqPZ/pqbLOe7UYqK5rfBL0tMB8GA1UdIwQY
MBaAFBf/7iUFLAqr9ss3Hj8uB29E/Bw8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wNDUyMjItNWFjZS00ZTdlLTk1YjIt
YTJlODgwZmQ1ODUwLzEvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8wNDUyMjItNWFjZS00ZTdlLTk1YjItYTJlODgwZmQ1ODUw
LzEvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7tTV+iY
kaS6WwnnLOhhMyHpIesQGngs1R6/Clnzx5GODIpsP/Y4oBszgAHUmw7zwo1pzNud
EmyP5T021U6/oWaUjnM26Lj7mxE24msWy3nLPsCACbwDPZKUeO7EnXKoMbYsER3O
5jINbVr3/RurNVLKJ3tXO5fgq3nieORP+1NMuloP1yKu1rsERuFwbYSdPd+QAe9J
lU53HqzICv4V4dao0MnqASDJ9qU3jjjG4Dys3NVT2Erwv+ChPu8TG3fCLirew0Qb
iXhIfUijH8Ohfk/kUU/dex0IAxQa8S7nEHC4GksjhTLbG1scpyrW8OhL2pxwpCyt
vJcLzv+NaY9S3Q==
-----END CERTIFICATE-----
Generated at Wed May 13 13:22:02 2026 by rpki-client