Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
File:                     eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json)
Hash identifier:          DiIiQoXemdt1A5Rl+VYDccxvlCIKaQm3SagEg3FeiTI=
Subject key identifier:   BB:FD:CF:AE:6D:94:15:14:AB:9A:AA:B2:CA:46:64:B0:A0:30:4B:B9
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Certificate issuer:       /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial:       019E1DFEC4E75D48984DCC47306D25848263
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
Manifest number:          0DF7
Signing time:             Tue 12 May 2026 21:01:36 +0000
Manifest this update:     Tue 12 May 2026 21:01:36 +0000
Manifest next update:     Wed 13 May 2026 21:01:36 +0000
Files and hashes:         1: cqkPcUlhylPWROpeUvaKpM1IHzI.roa (hash: Vj/WfOnXkP6T4SuWUuZJIwljoQd2+9R6QoAl56Tye4o=)
                          2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: HyrNWPdvbpMHRfmsUKZwsecLdZf3pDr6VcE/UVqvp5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:c4:e7:5d:48:98:4d:cc:47:30:6d:25:84:82:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
        Validity
            Not Before: May 12 21:01:36 2026 GMT
            Not After : May 13 21:01:36 2026 GMT
        Subject: CN=bbfdcfae6d941514ab9aaab2ca4664b0a0304bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ff:87:66:51:75:c7:bf:a8:0c:91:e0:20:9c:
                    b7:db:0d:04:9e:1e:53:3c:2c:28:77:b8:e6:e8:5e:
                    59:ed:48:7b:d9:ae:b6:26:ef:8f:96:f8:b4:a7:bd:
                    d8:62:e6:ad:01:86:a2:79:b3:95:3c:62:35:54:6d:
                    b0:b4:94:a4:ad:cb:54:2f:91:f7:7a:af:63:39:47:
                    d9:b6:9c:d6:e8:d4:f8:97:a3:e8:8e:6c:0d:08:ae:
                    ce:06:69:92:3c:8a:93:3d:d2:e7:81:98:9f:29:63:
                    44:e2:c8:97:1e:01:28:eb:b8:c8:18:21:51:d7:11:
                    f6:3e:e4:7e:11:7a:7b:cc:93:de:3f:c8:a7:c5:0f:
                    eb:7b:fb:c5:a7:cf:a2:7b:3d:7f:02:c5:64:5e:85:
                    3e:4a:fc:1f:0c:81:c8:ed:96:65:86:4c:31:70:b2:
                    aa:69:75:fb:ef:9c:6c:49:88:4c:d3:f3:f4:74:16:
                    d9:b5:34:52:92:4c:61:a0:2e:8e:b1:1d:95:78:90:
                    48:47:ae:e5:6a:65:02:5c:d8:74:cd:a7:4c:9d:e4:
                    ec:13:85:2a:58:17:08:c1:2e:27:53:19:23:43:7d:
                    0b:b6:1a:87:7c:77:d6:3e:68:7e:c5:71:a4:bb:4a:
                    3e:eb:37:e8:32:6c:6c:27:ad:74:a9:dc:b0:b4:be:
                    a4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FD:CF:AE:6D:94:15:14:AB:9A:AA:B2:CA:46:64:B0:A0:30:4B:B9
            X509v3 Authority Key Identifier:
                keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:88:a2:54:7f:8c:4e:ea:8c:45:0a:9b:70:07:e9:7f:8f:35:
         f3:e7:9c:83:65:7c:13:23:92:b5:f4:e9:62:6b:89:38:14:e9:
         40:90:7e:db:33:84:c6:cf:5b:e9:32:b7:6f:56:63:45:16:71:
         d6:f7:c0:84:d9:bf:7e:91:6b:3b:f8:e3:d5:59:4b:14:e3:04:
         dd:96:78:e2:60:0e:f9:ef:34:5d:9f:f9:99:e3:88:4f:e2:c9:
         0a:0b:6e:24:8a:d7:cf:7c:82:d8:c1:ec:c3:69:82:e5:4a:28:
         4a:80:10:b1:ae:b6:ea:01:cd:42:8f:00:93:a9:50:c6:1a:db:
         eb:1f:ca:f2:14:87:76:1c:5c:25:cd:9c:d6:ca:c0:ef:6f:21:
         55:40:2c:a1:88:71:67:2c:39:89:0c:3b:6f:c4:97:cb:c5:dc:
         9f:b0:02:9a:66:15:37:f2:6e:5d:69:7d:03:49:8b:68:b3:5e:
         65:93:2f:b2:34:9f:b6:2b:bb:13:6f:29:7b:12:3c:ce:73:f6:
         2c:71:a6:c5:f2:de:8c:07:8f:2d:6b:73:e6:05:5a:32:2b:dd:
         38:f7:52:aa:84:72:f4:a9:ac:87:c8:e9:73:be:cf:7f:14:9b:
         14:0b:6f:a9:35:fd:76:8c:53:6c:83:9a:17:eb:fa:db:8a:cb:
         97:63:cf:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/sTnXUiYTcxHMG0lhIJjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4M2YyZTkyYWQ1OWM3MGM4Y2RjMjhiMjgwMjllMjI5NzA1
YzZjOTEwHhcNMjYwNTEyMjEwMTM2WhcNMjYwNTEzMjEwMTM2WjAzMTEwLwYDVQQD
EyhiYmZkY2ZhZTZkOTQxNTE0YWI5YWFhYjJjYTQ2NjRiMGEwMzA0YmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv+HZlF1x7+oDJHgIJy32w0Enh5T
PCwod7jm6F5Z7Uh72a62Ju+Plvi0p73YYuatAYaiebOVPGI1VG2wtJSkrctUL5H3
eq9jOUfZtpzW6NT4l6PojmwNCK7OBmmSPIqTPdLngZifKWNE4siXHgEo67jIGCFR
1xH2PuR+EXp7zJPeP8inxQ/re/vFp8+iez1/AsVkXoU+SvwfDIHI7ZZlhkwxcLKq
aXX775xsSYhM0/P0dBbZtTRSkkxhoC6OsR2VeJBIR67lamUCXNh0zadMneTsE4Uq
WBcIwS4nUxkjQ30LthqHfHfWPmh+xXGku0o+6zfoMmxsJ610qdywtL6kpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLv9z65tlBUUq5qqsspGZLCgMEu5MB8GA1UdIwQY
MBaAFHg/LpKtWccMjNwosoAp4ilwXGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQt
ZTlhZjU2NmYyYzE0LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQtZTlhZjU2NmYyYzE0
LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4iiVH+M
TuqMRQqbcAfpf4818+ecg2V8EyOStfTpYmuJOBTpQJB+2zOExs9b6TK3b1ZjRRZx
1vfAhNm/fpFrO/jj1VlLFOME3ZZ44mAO+e80XZ/5meOIT+LJCgtuJIrXz3yC2MHs
w2mC5UooSoAQsa626gHNQo8Ak6lQxhrb6x/K8hSHdhxcJc2c1srA728hVUAsoYhx
Zyw5iQw7b8SXy8Xcn7ACmmYVN/JuXWl9A0mLaLNeZZMvsjSftiu7E28pexI8znP2
LHGmxfLejAePLWtz5gVaMivdOPdSqoRy9Kmsh8jpc77PfxSbFAtvqTX9doxTbIOa
F+v624rLl2PPYw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:21:28 2026 by rpki-client