Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
File:                     M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft (raw, json)
Hash identifier:          z54nB8UnXBRR9ZVsklwyqhHiNUTh5Mi1qYAcnAIqZbo=
Subject key identifier:   F5:54:C8:EF:F5:7B:C9:46:9F:96:E0:35:40:12:9F:70:1E:B3:0E:F2
Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
Certificate issuer:       /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Certificate serial:       019E1FB5CA29862A2614B8F15A7BC48E5B6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 05:01:07 +0000
Manifest this update:     Wed 13 May 2026 05:01:07 +0000
Manifest next update:     Thu 14 May 2026 05:01:07 +0000
Files and hashes:         1: 9_MYsPE4gd2lbb7TZYORycFaWd0.roa (hash: dw91LpI/SCTexr9LU7pGF2p5zGloMmSS6LWqMDLhx9U=)
                          2: M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl (hash: 0YFuLEzw1xKQFmgcqXduKyqJFaz+1HlCdMJii6OjMIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:ca:29:86:2a:26:14:b8:f1:5a:7b:c4:8e:5b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
        Validity
            Not Before: May 13 05:01:07 2026 GMT
            Not After : May 14 05:01:07 2026 GMT
        Subject: CN=f554c8eff57bc9469f96e03540129f701eb30ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c7:de:aa:88:13:55:cb:75:a8:58:37:c9:79:
                    b6:a4:20:ee:8e:d1:b4:d9:8e:5d:fe:d9:80:e8:71:
                    64:7b:3b:63:52:dc:0b:81:57:53:76:25:3b:5c:42:
                    27:83:13:86:4b:df:13:c6:b7:90:fe:f6:73:35:a3:
                    90:04:30:b2:8a:a2:6e:2c:3f:bb:50:31:fe:f7:38:
                    21:d6:eb:65:b9:62:3f:61:a6:be:b4:aa:e3:b1:12:
                    3c:fb:78:8f:64:fa:c7:9b:62:9e:c4:08:35:1b:7a:
                    54:ba:9b:62:9c:c3:0c:9c:6c:c2:6f:0f:03:fa:e4:
                    2d:61:9f:73:8e:e8:4e:8d:9e:0e:54:05:fc:b1:47:
                    22:74:c7:40:d6:7c:cb:4c:cd:52:b1:b2:9a:ae:40:
                    3d:06:02:5a:cd:20:1c:dd:77:35:4c:4d:33:ee:3e:
                    4c:25:7d:fd:63:34:32:16:0c:e3:7e:04:b5:66:e3:
                    b4:fd:8f:b1:39:12:f7:6a:8a:51:31:f7:dd:52:d3:
                    f4:bd:de:d5:76:5f:c9:b7:b7:8c:cc:63:ba:05:01:
                    96:31:46:91:39:7c:d8:d6:17:35:73:bd:f3:2e:54:
                    2f:2b:6b:6e:c8:1f:0b:86:9b:fc:72:b8:59:11:71:
                    81:43:83:be:cc:b7:05:66:d0:c9:fd:a3:a2:22:21:
                    f5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:54:C8:EF:F5:7B:C9:46:9F:96:E0:35:40:12:9F:70:1E:B3:0E:F2
            X509v3 Authority Key Identifier:
                keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:3a:5d:d1:45:05:b8:9b:f2:6f:d6:f3:e1:5c:f5:05:84:8d:
         65:d0:ab:69:e8:69:5e:43:ec:45:15:08:7c:5d:44:cd:66:1e:
         0f:e5:5f:71:82:11:ad:b7:5b:67:7c:75:38:0a:1b:00:38:0a:
         70:c0:59:52:20:fd:d8:b2:d2:46:32:6d:31:fb:b4:08:e5:90:
         1f:1f:37:14:6d:53:c9:1e:7b:e0:63:04:b9:36:63:67:61:4d:
         4c:6c:c0:d0:55:ea:df:d2:0d:40:71:75:83:50:2a:25:b5:ee:
         b0:54:00:bb:33:44:2e:be:53:c9:22:1c:ef:93:c0:5a:bb:b2:
         0f:18:c1:8b:78:62:c6:32:23:ce:00:fa:58:5f:c4:2a:ec:82:
         61:55:22:75:14:2f:4e:7f:6b:a3:05:75:cb:06:d6:f6:16:61:
         9c:1b:c6:a7:ca:cd:52:62:0f:86:44:1b:f6:22:4a:84:85:41:
         bb:a3:52:23:58:ed:2c:e8:f4:f8:96:9d:84:88:e1:e3:ed:9d:
         c7:71:93:8d:52:12:c5:c4:84:e7:2d:bf:8c:4f:53:8b:b7:22:
         85:fc:92:d1:44:e3:e1:d8:c2:f3:22:39:b7:8b:b2:70:f0:70:
         9d:07:dc:63:68:02:da:03:33:b8:e2:72:4b:87:e7:d4:55:4f:
         48:1f:95:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftcophiomFLjxWnvEjlttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZjY1MGMwYTBmMTY1MTVhNzJkZWE2MDFjZTljYTJkNGMx
NjQ5OTMwHhcNMjYwNTEzMDUwMTA3WhcNMjYwNTE0MDUwMTA3WjAzMTEwLwYDVQQD
EyhmNTU0YzhlZmY1N2JjOTQ2OWY5NmUwMzU0MDEyOWY3MDFlYjMwZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sfeqogTVct1qFg3yXm2pCDujtG0
2Y5d/tmA6HFkeztjUtwLgVdTdiU7XEIngxOGS98TxreQ/vZzNaOQBDCyiqJuLD+7
UDH+9zgh1utluWI/Yaa+tKrjsRI8+3iPZPrHm2KexAg1G3pUuptinMMMnGzCbw8D
+uQtYZ9zjuhOjZ4OVAX8sUcidMdA1nzLTM1SsbKarkA9BgJazSAc3Xc1TE0z7j5M
JX39YzQyFgzjfgS1ZuO0/Y+xORL3aopRMffdUtP0vd7Vdl/Jt7eMzGO6BQGWMUaR
OXzY1hc1c73zLlQvK2tuyB8Lhpv8crhZEXGBQ4O+zLcFZtDJ/aOiIiH1lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVUyO/1e8lGn5bgNUASn3Aesw7yMB8GA1UdIwQY
MBaAFDP2UMCg8WUVpy3qYBzpyi1MFkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjct
ODUwNjkxMjVkM2JmLzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjctODUwNjkxMjVkM2Jm
LzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDpd0UUF
uJvyb9bz4Vz1BYSNZdCraehpXkPsRRUIfF1EzWYeD+VfcYIRrbdbZ3x1OAobADgK
cMBZUiD92LLSRjJtMfu0COWQHx83FG1TyR574GMEuTZjZ2FNTGzA0FXq39INQHF1
g1AqJbXusFQAuzNELr5TySIc75PAWruyDxjBi3hixjIjzgD6WF/EKuyCYVUidRQv
Tn9rowV1ywbW9hZhnBvGp8rNUmIPhkQb9iJKhIVBu6NSI1jtLOj0+JadhIjh4+2d
x3GTjVISxcSE5y2/jE9Ti7cihfyS0UTj4djC8yI5t4uycPBwnQfcY2gC2gMzuOJy
S4fn1FVPSB+VKA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:35:33 2026 by rpki-client