Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File:                     4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier:          QuhXocjuZLF4TE+5wYI03UXFkxMytPI5Ns31SMRPXxQ=
Subject key identifier:   FC:71:DC:81:EC:C6:7A:D2:6E:16:76:AA:C0:51:A1:C4:BC:B3:EB:BA
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer:       /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial:       019E1CEB5EE46873CABDFB27BE8D45BE5AA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number:          0B8B
Signing time:             Tue 12 May 2026 16:00:47 +0000
Manifest this update:     Tue 12 May 2026 16:00:47 +0000
Manifest next update:     Wed 13 May 2026 16:00:47 +0000
Files and hashes:         1: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: ltIC+0GzE4qlszo+LIVX9XlLceMMWCZWdu31DeQs86A=)
                          2: 5F_Lv04RXNd_Y46Aej2XB7OXRCs.roa (hash: OFOrOgL1BwCDJs6vNTJlxJXJgyRTHA3y/UE7TO8d/LM=)
                          3: jn-Hv0IYlCEKrmAbyK_6k7lqISQ.roa (hash: J+qsyRuhmSWKW099fqXxFsiGbbSUDzkgcakOMIwreHQ=)
                          4: oil7N-Cu9Bp_DmPdE_j9IZL0Ozo.roa (hash: sJuR4lvRXMBU3fcQ7PumT3oOEz1g58/Vsv/QWac8Orc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:5e:e4:68:73:ca:bd:fb:27:be:8d:45:be:5a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
        Validity
            Not Before: May 12 16:00:47 2026 GMT
            Not After : May 13 16:00:47 2026 GMT
        Subject: CN=fc71dc81ecc67ad26e1676aac051a1c4bcb3ebba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d9:f0:15:97:08:6b:45:88:1f:99:64:fb:de:
                    f8:33:b2:1d:65:d5:89:07:31:b5:2f:cb:6b:47:bf:
                    13:1e:d9:b5:1d:17:47:a2:21:b9:8e:52:b9:35:e6:
                    ae:63:b8:42:c8:77:fe:3b:ca:b6:96:8b:b8:a7:4b:
                    9e:7a:41:27:26:a7:9c:46:8e:6d:c7:02:f4:20:c4:
                    17:6f:0a:38:bc:ba:3f:f2:cf:74:df:5c:78:7b:38:
                    8e:3a:50:f3:22:71:63:42:29:d9:72:63:66:d5:f0:
                    63:c1:e0:ec:13:7d:ce:bc:c9:21:bc:69:95:7e:30:
                    a9:1b:02:29:53:73:1d:b8:43:7a:1d:2e:f9:2a:bb:
                    71:0e:b2:5e:26:9a:80:9d:bc:8b:83:33:d7:f7:9f:
                    2a:6b:34:8e:fe:cf:e2:97:bd:90:9c:aa:60:03:19:
                    be:1e:ca:1f:44:58:30:fa:c0:53:5c:6a:51:80:23:
                    35:21:e4:b5:6a:f0:65:f0:e5:3c:65:00:80:23:c4:
                    2d:8e:fd:4e:7d:a8:dc:6a:53:5c:90:d2:73:82:8d:
                    da:76:f8:16:0a:18:9c:7a:ec:19:49:1e:d5:c0:64:
                    b1:5f:51:cf:ba:ca:1a:00:1d:64:4d:10:d8:96:04:
                    64:57:9a:f8:a8:f1:a9:9d:81:8a:d0:23:6a:46:4d:
                    9f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:71:DC:81:EC:C6:7A:D2:6E:16:76:AA:C0:51:A1:C4:BC:B3:EB:BA
            X509v3 Authority Key Identifier:
                keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a8:c9:f1:72:bb:6f:e5:45:80:1f:8c:c8:7f:db:28:8a:43:
         68:6a:b3:a8:4a:cd:d6:d3:64:35:f4:8c:34:66:c8:5e:1a:e5:
         34:55:63:d6:6a:49:b8:ce:43:09:a6:ca:41:9b:e2:40:c9:e5:
         69:96:81:3f:31:c0:cf:54:80:f4:c6:3d:f2:2d:21:8d:52:94:
         7e:74:3d:c9:de:98:b1:33:1c:d1:6f:ee:1a:8c:22:77:23:a1:
         48:49:43:20:44:1a:7e:3d:fe:63:4b:43:32:32:53:39:1a:b5:
         8b:a4:21:fe:31:09:d9:46:ab:e2:ba:eb:c3:50:de:14:8d:32:
         c1:fa:c8:af:b0:b7:f3:3c:5a:1e:e6:1f:1b:5e:c6:a4:1a:4e:
         ba:ef:4e:89:a2:46:94:f8:89:af:e6:a7:39:ea:8d:b0:06:5c:
         48:e5:69:cd:8d:a9:16:11:b3:c9:21:20:63:9e:6a:2d:15:e0:
         f4:e0:d5:b7:68:d2:6c:59:76:6a:79:f5:fb:ff:b6:3d:64:eb:
         28:06:56:ad:a0:38:e7:e7:40:eb:1b:40:77:1e:9b:06:36:6d:
         64:dd:10:02:66:2d:46:39:e4:d6:55:e7:bd:39:b9:b9:ee:1d:
         98:e1:9c:35:b9:40:14:1c:3c:15:9c:48:e5:38:b0:7a:48:6d:
         81:2c:17:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c617kaHPKvfsnvo1FvlqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYWVjM2M4YWIxMWZjMDU4YzlhOGVmNDAwZWYxYzNkMTQ0
YTdiYTgwHhcNMjYwNTEyMTYwMDQ3WhcNMjYwNTEzMTYwMDQ3WjAzMTEwLwYDVQQD
EyhmYzcxZGM4MWVjYzY3YWQyNmUxNjc2YWFjMDUxYTFjNGJjYjNlYmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9nwFZcIa0WIH5lk+974M7IdZdWJ
BzG1L8trR78THtm1HRdHoiG5jlK5NeauY7hCyHf+O8q2lou4p0ueekEnJqecRo5t
xwL0IMQXbwo4vLo/8s9031x4eziOOlDzInFjQinZcmNm1fBjweDsE33OvMkhvGmV
fjCpGwIpU3MduEN6HS75KrtxDrJeJpqAnbyLgzPX958qazSO/s/il72QnKpgAxm+
HsofRFgw+sBTXGpRgCM1IeS1avBl8OU8ZQCAI8Qtjv1OfajcalNckNJzgo3advgW
ChiceuwZSR7VwGSxX1HPusoaAB1kTRDYlgRkV5r4qPGpnYGK0CNqRk2fAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxx3IHsxnrSbhZ2qsBRocS8s+u6MB8GA1UdIwQY
MBaAFOKuw8irEfwFjJqO9ADvHD0USnuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iYTE5ZTQtNzFjYy00NzBlLWJkYTUt
OWRhNGNjNjIwNTMzLzEvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iYTE5ZTQtNzFjYy00NzBlLWJkYTUtOWRhNGNjNjIwNTMz
LzEvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPajJ8XK7
b+VFgB+MyH/bKIpDaGqzqErN1tNkNfSMNGbIXhrlNFVj1mpJuM5DCabKQZviQMnl
aZaBPzHAz1SA9MY98i0hjVKUfnQ9yd6YsTMc0W/uGowidyOhSElDIEQafj3+Y0tD
MjJTORq1i6Qh/jEJ2Uar4rrrw1DeFI0ywfrIr7C38zxaHuYfG17GpBpOuu9OiaJG
lPiJr+anOeqNsAZcSOVpzY2pFhGzySEgY55qLRXg9ODVt2jSbFl2ann1+/+2PWTr
KAZWraA45+dA6xtAdx6bBjZtZN0QAmYtRjnk1lXnvTm5ue4dmOGcNblAFBw8FZxI
5TiwekhtgSwXGw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:42:37 2026 by rpki-client