Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File:                     aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier:          sqUu08oDFXF2xFHIZmwQo87ZbjqXYU7shgOUHW8Zwqw=
Subject key identifier:   04:FE:E3:05:41:5F:C5:4E:56:30:58:C5:AB:22:9A:81:0D:0E:4D:4B
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer:       /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial:       019E1ED9CD9111EAF77DB0B3A4DF6A79F657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number:          11D0
Signing time:             Wed 13 May 2026 01:00:50 +0000
Manifest this update:     Wed 13 May 2026 01:00:50 +0000
Manifest next update:     Thu 14 May 2026 01:00:50 +0000
Files and hashes:         1: D4GHE_c53IHvHkUBh4LIawNFIyQ.roa (hash: NUBjNGx9Rik5s+zS4waPKPJW6nist/TqjrBXjlH3lto=)
                          2: Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa (hash: lMQFG5A2ZEM00HvhF0MbgWXroNtVKP+zZ/D7DoKQ2cs=)
                          3: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: FcAMaNcDxniUiDNAgG+K6niFeat0PSN5+4C9/udRY/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:cd:91:11:ea:f7:7d:b0:b3:a4:df:6a:79:f6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
        Validity
            Not Before: May 13 01:00:50 2026 GMT
            Not After : May 14 01:00:50 2026 GMT
        Subject: CN=04fee305415fc54e563058c5ab229a810d0e4d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:34:5f:6e:33:b4:72:c3:e9:05:57:53:34:be:
                    4e:f1:b6:28:98:f8:3b:bc:05:02:9a:3b:22:37:b1:
                    15:13:17:d0:fd:79:16:a7:aa:66:2f:79:06:c1:07:
                    a3:d3:65:c2:f5:5d:2a:d0:2e:1f:7d:1d:51:de:db:
                    af:cc:7d:3f:68:0e:72:b6:1e:82:e5:49:ea:f7:cb:
                    11:a0:03:74:35:63:8a:43:99:a6:84:a2:fd:da:a7:
                    e9:36:0a:af:4e:93:a0:fe:03:2d:24:de:bd:8e:2f:
                    de:87:52:1d:63:c2:c6:08:a1:29:bb:45:3c:15:d0:
                    9c:24:13:b4:3f:61:fe:50:99:d1:ef:b6:45:c5:33:
                    d2:2d:41:ab:b8:20:93:36:aa:f5:48:e9:50:cb:fc:
                    11:a6:e2:52:f5:8f:a4:02:7f:68:b4:f9:b8:4a:cf:
                    b7:b8:95:bb:aa:63:80:3c:96:2d:ba:06:ae:0f:72:
                    48:73:55:b6:95:87:67:4b:6a:4f:b5:5e:89:d3:9f:
                    3e:4e:9b:0d:b6:03:8e:5e:1b:a9:d0:d7:d5:55:d5:
                    ae:42:75:28:1a:d0:7e:56:f6:1a:19:03:26:13:55:
                    f6:73:85:54:61:5f:ba:dc:31:df:c6:8c:f9:ab:e2:
                    49:9e:e6:40:9b:f4:72:77:0a:90:44:c3:bc:73:cc:
                    ab:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FE:E3:05:41:5F:C5:4E:56:30:58:C5:AB:22:9A:81:0D:0E:4D:4B
            X509v3 Authority Key Identifier:
                keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6b:54:b7:83:9f:bb:a9:75:7c:d2:30:ba:15:50:06:36:94:
         fc:cd:1f:2c:03:e3:40:5a:21:26:ea:a6:72:05:ae:a3:30:5e:
         4d:5e:8d:fa:69:0d:e4:ac:be:ee:e5:77:f4:9c:6d:c4:a2:33:
         62:7d:03:cb:49:c7:89:19:51:21:13:c5:e1:69:44:f9:0f:0e:
         45:68:75:af:1d:09:cc:a9:a9:a2:fd:27:bd:8e:5a:43:fd:88:
         34:4d:74:aa:20:7a:dc:7d:7a:c1:31:33:2c:c4:52:6f:31:2c:
         94:89:39:a5:af:85:49:f5:74:9c:57:5d:16:53:79:40:58:25:
         37:d8:90:78:98:53:3b:58:8d:70:2d:f5:41:12:ce:31:77:0b:
         e6:37:da:61:ed:78:08:c1:61:1a:54:75:01:19:8a:1c:08:d9:
         23:cf:42:95:c6:85:a3:43:8e:1b:4f:fd:95:8b:ac:2b:b0:26:
         f4:dd:57:d8:45:18:c8:03:dd:69:6a:e8:00:4e:4d:d8:fc:25:
         94:a0:af:39:1c:55:a9:58:b8:83:b4:74:19:38:a3:42:b0:ea:
         2e:4b:44:2b:91:d4:80:1e:55:7a:1f:a1:fb:be:7c:4d:68:01:
         3a:c0:ae:5c:1b:df:04:e5:9c:bd:4b:7d:f8:75:cc:ac:7a:e1:
         64:f7:c4:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2c2REer3fbCzpN9qefZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MDQyYzFmMjdhN2Q3ODYyNDc1MDg3MDIzZGM5N2MzMzMw
ZjczYzYwHhcNMjYwNTEzMDEwMDUwWhcNMjYwNTE0MDEwMDUwWjAzMTEwLwYDVQQD
EygwNGZlZTMwNTQxNWZjNTRlNTYzMDU4YzVhYjIyOWE4MTBkMGU0ZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TRfbjO0csPpBVdTNL5O8bYomPg7
vAUCmjsiN7EVExfQ/XkWp6pmL3kGwQej02XC9V0q0C4ffR1R3tuvzH0/aA5yth6C
5Unq98sRoAN0NWOKQ5mmhKL92qfpNgqvTpOg/gMtJN69ji/eh1IdY8LGCKEpu0U8
FdCcJBO0P2H+UJnR77ZFxTPSLUGruCCTNqr1SOlQy/wRpuJS9Y+kAn9otPm4Ss+3
uJW7qmOAPJYtugauD3JIc1W2lYdnS2pPtV6J058+TpsNtgOOXhup0NfVVdWuQnUo
GtB+VvYaGQMmE1X2c4VUYV+63DHfxoz5q+JJnuZAm/RydwqQRMO8c8yriQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAT+4wVBX8VOVjBYxasimoENDk1LMB8GA1UdIwQY
MBaAFGkELB8np9eGJHUIcCPcl8MzD3PGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgt
Y2JiM2Q2MzVkODJmLzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgtY2JiM2Q2MzVkODJm
LzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2tUt4Of
u6l1fNIwuhVQBjaU/M0fLAPjQFohJuqmcgWuozBeTV6N+mkN5Ky+7uV39JxtxKIz
Yn0Dy0nHiRlRIRPF4WlE+Q8ORWh1rx0JzKmpov0nvY5aQ/2INE10qiB63H16wTEz
LMRSbzEslIk5pa+FSfV0nFddFlN5QFglN9iQeJhTO1iNcC31QRLOMXcL5jfaYe14
CMFhGlR1ARmKHAjZI89ClcaFo0OOG0/9lYusK7Am9N1X2EUYyAPdaWroAE5N2Pwl
lKCvORxVqVi4g7R0GTijQrDqLktEK5HUgB5Veh+h+758TWgBOsCuXBvfBOWcvUt9
+HXMrHrhZPfEcA==
-----END CERTIFICATE-----
Generated at Wed May 13 10:19:59 2026 by rpki-client