Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
File:                     e1l6Sw_khublyFue4D5ym97H570.mft (raw, json)
Hash identifier:          AoWYmppAYCWb43JXmhzOZNH9dM4DiYFpuLIrXsukgF0=
Subject key identifier:   31:01:03:BF:3E:B4:A4:E2:BD:35:50:C8:2D:78:0F:32:97:57:C4:51
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Certificate issuer:       /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial:       019E1EDA26B5639BBA1DFD3CD1BCEB90F30F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
Manifest number:          0C8A
Signing time:             Wed 13 May 2026 01:01:13 +0000
Manifest this update:     Wed 13 May 2026 01:01:13 +0000
Manifest next update:     Thu 14 May 2026 01:01:13 +0000
Files and hashes:         1: V9PWKj4xB85axZ-pPoY3y8jfmGI.roa (hash: IXWd/a+RKpFfjxBBgClFTno9TLNCTt1rJRxcU8qS3Bw=)
                          2: e1l6Sw_khublyFue4D5ym97H570.crl (hash: Pn5yQrP/gp+ApdxY1CmPqLlB1Zz/ZhKRGTnSuNCZl5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:26:b5:63:9b:ba:1d:fd:3c:d1:bc:eb:90:f3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
        Validity
            Not Before: May 13 01:01:13 2026 GMT
            Not After : May 14 01:01:13 2026 GMT
        Subject: CN=310103bf3eb4a4e2bd3550c82d780f329757c451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:c5:68:b1:c8:21:9f:56:20:2c:64:f1:a2:
                    f5:0e:2a:75:c7:f9:0c:5a:47:03:28:1e:df:20:9d:
                    5c:a2:76:66:17:0a:32:ef:bb:5e:a9:6e:9d:19:52:
                    66:e1:25:20:9b:6d:72:8c:b4:65:5a:ff:61:5d:62:
                    3c:66:3a:0e:3b:7e:c5:0f:9c:f1:73:8e:89:96:77:
                    fc:09:58:e6:f9:4f:16:4a:86:64:59:a9:3d:11:d2:
                    3a:c0:7b:55:37:98:b8:0a:13:b1:72:df:a3:37:4d:
                    6a:72:86:44:a2:85:7d:45:c3:cb:6c:34:34:fe:08:
                    37:2f:e5:ec:22:1a:e3:8f:6e:87:43:9b:45:9e:cc:
                    2a:af:94:4e:29:72:7e:9d:44:82:5c:e8:43:25:a0:
                    59:02:fa:89:76:e2:9b:2a:8d:9d:d3:f3:23:82:3b:
                    e0:db:67:9c:61:b0:f5:b7:bb:97:83:e0:39:c4:e4:
                    ce:ad:36:7d:73:8e:71:4b:04:79:64:4a:e9:2c:1d:
                    e9:7f:94:45:b2:fb:73:ac:3a:41:34:85:cd:61:1d:
                    77:09:f1:b2:27:3c:bf:38:ec:c0:ec:eb:c8:d8:7c:
                    55:40:0f:23:d6:1f:26:61:b6:04:2b:ba:0e:57:1d:
                    1f:7e:f6:6c:06:54:b0:23:52:8f:1e:d3:31:bb:66:
                    91:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:01:03:BF:3E:B4:A4:E2:BD:35:50:C8:2D:78:0F:32:97:57:C4:51
            X509v3 Authority Key Identifier:
                keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c5:ed:18:61:58:c5:15:18:36:4b:d3:38:f4:a4:9c:52:d0:
         32:4f:c8:56:2f:9b:e3:27:2f:f6:fa:54:c5:79:5e:8d:6b:ca:
         c6:d6:eb:d5:68:bb:63:93:2c:f7:b0:9f:53:a8:ea:24:9a:35:
         b3:9f:9c:d5:cd:92:c1:e7:13:88:e0:49:c6:a0:13:6b:04:58:
         8e:a7:57:db:3e:fb:27:49:f8:25:9d:bb:1d:97:5d:15:fe:c7:
         dd:d5:58:f3:b2:51:9e:4f:9f:24:52:2d:3e:29:26:ab:86:86:
         7c:86:8c:2c:27:ea:4a:84:64:82:28:61:41:19:5f:52:6d:7c:
         d1:f2:ae:8f:7d:23:7f:d7:ef:6b:ad:a5:93:e6:8a:03:48:c3:
         34:65:f0:97:8a:44:3d:a5:6c:9a:f3:70:72:00:46:31:0b:4e:
         41:db:ea:4f:05:1b:bf:5c:24:04:af:5a:23:c8:ab:0d:35:a4:
         4e:83:61:74:69:7b:ec:3a:91:13:d1:84:fe:a3:36:4b:e3:dd:
         5b:2f:53:05:59:dd:b7:30:f5:79:77:fb:5e:cc:1f:38:ec:6f:
         ed:1f:90:0a:27:47:f8:53:9c:1e:76:ad:d4:74:cf:e4:00:59:
         14:73:14:dd:42:18:9d:21:44:c0:d1:70:44:2f:76:b8:35:ab:
         bd:09:61:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2ia1Y5u6Hf080bzrkPMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTk3YTRiMGZlNDg2ZTZlNWM4NWI5ZWUwM2U3MjliZGVj
N2U3YmQwHhcNMjYwNTEzMDEwMTEzWhcNMjYwNTE0MDEwMTEzWjAzMTEwLwYDVQQD
EygzMTAxMDNiZjNlYjRhNGUyYmQzNTUwYzgyZDc4MGYzMjk3NTdjNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzULFaLHIIZ9WICxk8aL1Dip1x/kM
WkcDKB7fIJ1conZmFwoy77teqW6dGVJm4SUgm21yjLRlWv9hXWI8ZjoOO37FD5zx
c46Jlnf8CVjm+U8WSoZkWak9EdI6wHtVN5i4ChOxct+jN01qcoZEooV9RcPLbDQ0
/gg3L+XsIhrjj26HQ5tFnswqr5ROKXJ+nUSCXOhDJaBZAvqJduKbKo2d0/Mjgjvg
22ecYbD1t7uXg+A5xOTOrTZ9c45xSwR5ZErpLB3pf5RFsvtzrDpBNIXNYR13CfGy
Jzy/OOzA7OvI2HxVQA8j1h8mYbYEK7oOVx0ffvZsBlSwI1KPHtMxu2aRHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEBA78+tKTivTVQyC14DzKXV8RRMB8GA1UdIwQY
MBaAFHtZeksP5Ibm5chbnuA+cpvex+e9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFsNlN3X2todWJseUZ1ZTRENXltOTdINTcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDQ2MzYtYjI5NS00YWM4LWE4NmYt
ZTdhMzgyNzUwYmI5LzEvZTFsNlN3X2todWJseUZ1ZTRENXltOTdINTcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMDQ2MzYtYjI5NS00YWM4LWE4NmYtZTdhMzgyNzUwYmI5
LzEvZTFsNlN3X2todWJseUZ1ZTRENXltOTdINTcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8XtGGFY
xRUYNkvTOPSknFLQMk/IVi+b4ycv9vpUxXlejWvKxtbr1Wi7Y5Ms97CfU6jqJJo1
s5+c1c2SwecTiOBJxqATawRYjqdX2z77J0n4JZ27HZddFf7H3dVY87JRnk+fJFIt
Pikmq4aGfIaMLCfqSoRkgihhQRlfUm180fKuj30jf9fva62lk+aKA0jDNGXwl4pE
PaVsmvNwcgBGMQtOQdvqTwUbv1wkBK9aI8irDTWkToNhdGl77DqRE9GE/qM2S+Pd
Wy9TBVndtzD1eXf7XswfOOxv7R+QCidH+FOcHnat1HTP5ABZFHMU3UIYnSFEwNFw
RC92uDWrvQlhag==
-----END CERTIFICATE-----
Generated at Wed May 13 08:17:17 2026 by rpki-client