Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
File:                     E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft (raw, json)
Hash identifier:          d8vug7zNsiHvOiGTsZoH0zZCYAoCXrz9AjhGwnnhtsA=
Subject key identifier:   B1:4A:E4:F8:FD:65:ED:B7:CD:DB:59:A7:D0:09:23:91:9B:31:DD:02
Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Certificate issuer:       /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Certificate serial:       019E209219CA27602DC9C598BEF9033F5FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
Manifest number:          0FEF
Signing time:             Wed 13 May 2026 09:01:46 +0000
Manifest this update:     Wed 13 May 2026 09:01:46 +0000
Manifest next update:     Thu 14 May 2026 09:01:46 +0000
Files and hashes:         1: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl (hash: 10o2IUb1SODQt0SzU11pC8j8raALUj9+/WbNb12abJk=)
                          2: sjVifTsqCFnPEPjh_BafeqtcnzE.roa (hash: U+Qobqemfwl34W+0l2bHf3Kc8qUqCwokA6NOdvQQ/0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:19:ca:27:60:2d:c9:c5:98:be:f9:03:3f:5f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
        Validity
            Not Before: May 13 09:01:46 2026 GMT
            Not After : May 14 09:01:46 2026 GMT
        Subject: CN=b14ae4f8fd65edb7cddb59a7d00923919b31dd02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:f1:31:d4:96:12:30:fa:b7:c5:74:54:e5:
                    23:ec:15:f4:0c:31:35:85:1a:aa:8f:85:a9:0f:b8:
                    78:3b:2f:24:ac:d0:34:b7:33:e1:f2:ba:25:20:20:
                    04:6c:07:94:0d:26:d8:fa:ca:d0:ae:c6:46:41:9a:
                    7b:88:60:c3:a6:43:d2:f0:3b:09:f5:0f:9a:ec:35:
                    f7:c0:33:b9:d5:e8:68:07:a0:33:33:ec:89:a1:69:
                    e6:a2:63:3f:84:c2:a9:e2:25:0a:95:09:aa:bc:ac:
                    06:0f:7a:28:1b:11:c7:51:5f:5b:06:b6:35:70:16:
                    77:17:cc:3d:98:9e:73:a9:32:c7:43:d6:ae:14:4e:
                    ab:f6:d0:77:14:ce:00:c9:15:78:f6:75:ef:e2:d3:
                    77:4c:e5:ae:1b:19:69:38:1c:70:44:84:ed:83:29:
                    6f:14:8c:c7:a1:67:0f:da:41:bf:0c:29:e8:55:04:
                    75:1e:9b:94:84:4c:bb:b3:94:b1:20:ab:6e:6a:5a:
                    10:12:7c:e1:8a:0c:40:5f:cd:d7:70:14:60:4d:70:
                    34:60:df:4a:5a:29:51:f7:c1:76:76:1c:a5:d3:8a:
                    aa:f0:e8:20:b7:53:ca:89:dd:02:49:da:32:50:5c:
                    b2:57:fb:69:c5:30:95:21:ba:83:a3:ce:c9:3f:ed:
                    6d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4A:E4:F8:FD:65:ED:B7:CD:DB:59:A7:D0:09:23:91:9B:31:DD:02
            X509v3 Authority Key Identifier:
                keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:18:76:15:ef:30:81:56:67:da:db:64:66:cc:ac:49:7b:63:
         ad:60:f4:5e:c6:fe:84:0d:3f:b2:2b:51:68:ec:3e:d4:2f:d8:
         55:09:71:19:01:93:52:f4:8e:5c:77:f1:aa:74:7e:d8:c1:26:
         36:88:4d:47:72:34:0d:70:b0:1b:58:1b:b8:30:fb:01:5a:35:
         62:c2:32:62:2f:5a:9b:58:d1:9c:b0:ca:87:f4:ca:57:70:8a:
         ff:7c:4f:59:39:64:7a:be:f5:08:9b:ce:33:61:70:07:9f:a8:
         08:2a:0c:2a:47:bb:75:c0:5b:7f:96:b3:70:bb:56:26:0a:e2:
         48:7d:79:60:38:ed:40:14:27:02:ac:59:ba:54:f5:b3:b5:5b:
         44:ed:84:78:53:94:2a:68:ae:4d:6b:22:27:94:4d:ab:87:53:
         7e:02:4f:e6:b7:94:56:45:8f:8a:4d:7b:99:bb:9a:60:9b:e1:
         fb:0f:1c:db:29:a7:38:cc:fa:05:09:09:86:b2:81:c3:7e:81:
         6b:74:2d:f0:3f:72:2b:06:ba:63:0f:05:dc:99:8c:fe:db:ba:
         b6:82:c1:a3:bd:31:f4:6d:27:1d:74:e6:fd:0e:62:ee:d3:ab:
         82:6e:84:53:8e:88:1c:bc:4e:6a:5c:e2:d7:67:f3:de:2d:5e:
         18:3f:c4:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkhnKJ2AtycWYvvkDP1+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNDZlMzAyNzZlMGM2MDNkMGRlZTJmMmQ0MmZjZDlhNDQx
NWUyNTYwHhcNMjYwNTEzMDkwMTQ2WhcNMjYwNTE0MDkwMTQ2WjAzMTEwLwYDVQQD
EyhiMTRhZTRmOGZkNjVlZGI3Y2RkYjU5YTdkMDA5MjM5MTliMzFkZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAnxMdSWEjD6t8V0VOUj7BX0DDE1
hRqqj4WpD7h4Oy8krNA0tzPh8rolICAEbAeUDSbY+srQrsZGQZp7iGDDpkPS8DsJ
9Q+a7DX3wDO51ehoB6AzM+yJoWnmomM/hMKp4iUKlQmqvKwGD3ooGxHHUV9bBrY1
cBZ3F8w9mJ5zqTLHQ9auFE6r9tB3FM4AyRV49nXv4tN3TOWuGxlpOBxwRITtgylv
FIzHoWcP2kG/DCnoVQR1HpuUhEy7s5SxIKtualoQEnzhigxAX83XcBRgTXA0YN9K
WilR98F2dhyl04qq8Oggt1PKid0CSdoyUFyyV/tpxTCVIbqDo87JP+1t8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFK5Pj9Ze23zdtZp9AJI5GbMd0CMB8GA1UdIwQY
MBaAFBNG4wJ24MYD0N7i8tQvzZpEFeJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYt
YzQzNzYyNzNhMmRmLzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYtYzQzNzYyNzNhMmRm
LzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahh2Fe8w
gVZn2ttkZsysSXtjrWD0Xsb+hA0/sitRaOw+1C/YVQlxGQGTUvSOXHfxqnR+2MEm
NohNR3I0DXCwG1gbuDD7AVo1YsIyYi9am1jRnLDKh/TKV3CK/3xPWTlker71CJvO
M2FwB5+oCCoMKke7dcBbf5azcLtWJgriSH15YDjtQBQnAqxZulT1s7VbRO2EeFOU
KmiuTWsiJ5RNq4dTfgJP5reUVkWPik17mbuaYJvh+w8c2ymnOMz6BQkJhrKBw36B
a3Qt8D9yKwa6Yw8F3JmM/tu6toLBo70x9G0nHXTm/Q5i7tOrgm6EU46IHLxOalzi
12fz3i1eGD/E2g==
-----END CERTIFICATE-----
Generated at Wed May 13 13:16:02 2026 by rpki-client