Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File:                     0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier:          f+lVwFpcQEqZEeW3DvVrYzwH7iE8sKB/lqqxq8nCatI=
Subject key identifier:   33:F7:49:C1:35:BC:AB:54:0A:4E:2B:5E:EC:65:E9:0E:11:CB:0B:FC
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer:       /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial:       019E202354875158E6253C45BF69F6D49B82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number:          0E8B
Signing time:             Wed 13 May 2026 07:00:46 +0000
Manifest this update:     Wed 13 May 2026 07:00:46 +0000
Manifest next update:     Thu 14 May 2026 07:00:46 +0000
Files and hashes:         1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: ZrGkdzn1jI3Y21uyeGs5HuD8v3iDbS9pPxbTWdtrXmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:54:87:51:58:e6:25:3c:45:bf:69:f6:d4:9b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
        Validity
            Not Before: May 13 07:00:46 2026 GMT
            Not After : May 14 07:00:46 2026 GMT
        Subject: CN=33f749c135bcab540a4e2b5eec65e90e11cb0bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:80:5d:c4:d5:6f:0d:92:92:a3:4e:5e:5b:
                    e7:ea:b9:0d:b9:a0:72:0b:bf:d0:6a:fb:2f:2d:a0:
                    d8:b5:69:83:4b:ff:ae:f1:41:8f:5e:5c:d7:28:45:
                    43:ec:1a:39:37:d6:4c:e4:f4:66:76:da:5b:4d:7f:
                    00:65:3e:81:a7:d0:4d:ce:c5:8a:24:c4:e9:cf:93:
                    9b:ab:e2:0d:e5:48:a3:5f:ad:08:48:03:80:c3:f6:
                    09:a0:34:fc:2e:42:05:80:ac:f1:5b:19:13:b8:5f:
                    41:9e:76:c8:45:7c:23:a6:6e:f5:2a:bf:a8:23:3e:
                    f3:da:e9:23:07:25:c6:40:ff:0c:cd:12:9a:a1:30:
                    58:6d:0a:f4:c2:84:62:a9:38:51:1a:b9:67:61:71:
                    76:41:76:b3:41:dd:df:0d:cd:62:9c:09:62:68:1e:
                    2e:5e:5a:ea:c4:16:9d:ef:be:1d:fc:fa:0c:69:a9:
                    f2:02:25:88:8d:e5:de:0e:73:a1:da:94:94:a6:c8:
                    46:48:02:b7:e2:1a:93:29:24:13:1f:44:b8:1a:c8:
                    31:05:97:4b:c6:1b:38:9e:0a:68:25:94:ff:60:9f:
                    6f:fb:5c:5e:d4:c4:23:a6:2f:6d:27:d5:18:8e:df:
                    aa:bf:99:6b:8a:cf:30:82:f3:e1:cd:dc:d6:da:fb:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F7:49:C1:35:BC:AB:54:0A:4E:2B:5E:EC:65:E9:0E:11:CB:0B:FC
            X509v3 Authority Key Identifier:
                keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5e:b2:e2:6d:86:17:1f:41:e7:33:a7:f2:7b:8e:79:0f:3e:
         5f:da:49:ed:b8:ab:de:29:12:0c:70:5c:df:ce:29:17:2f:7a:
         f3:d2:2b:0a:4b:e1:64:2a:8c:d5:7b:8d:0e:5a:03:a1:cb:50:
         11:d9:33:a3:15:42:a9:fd:e5:4c:55:da:e5:ef:e8:9f:e7:77:
         01:6c:a9:f5:5d:47:74:65:46:74:34:20:33:aa:3a:0d:40:fd:
         8d:2c:fd:d7:86:4b:14:17:f8:b2:a7:17:fa:80:8d:f8:fe:0b:
         b8:b7:13:52:91:82:8e:c3:d3:36:c1:73:90:83:a0:74:c6:ee:
         38:2a:71:6f:22:43:9d:c4:ca:6f:da:16:c1:17:a9:5a:a9:90:
         b0:c2:00:3c:3f:fa:15:83:6e:4c:d8:88:0a:53:0d:67:1a:48:
         6e:4f:e6:d9:8b:7a:ea:a1:74:72:f7:9a:d9:c4:55:81:4c:31:
         a1:e4:a8:f9:a3:9b:5a:27:0a:11:84:41:40:86:68:ea:bb:b6:
         4a:9d:78:79:54:7c:d2:8d:d5:33:06:97:4a:97:42:41:c6:df:
         d2:5e:9c:ee:e9:03:3d:1b:8b:a4:f5:55:76:dd:22:38:ad:d3:
         19:6c:f6:6c:a9:4f:f3:6a:10:4b:10:6a:39:5e:fd:e2:5f:2b:
         ed:f9:f8:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI1SHUVjmJTxFv2n21JuCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODIyMjYzYTg3MDdjNzZmM2RiM2I2YmU3MTIyMjY5Yzgy
N2FlNTUwHhcNMjYwNTEzMDcwMDQ2WhcNMjYwNTE0MDcwMDQ2WjAzMTEwLwYDVQQD
EygzM2Y3NDljMTM1YmNhYjU0MGE0ZTJiNWVlYzY1ZTkwZTExY2IwYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuiAXcTVbw2SkqNOXlvn6rkNuaBy
C7/QavsvLaDYtWmDS/+u8UGPXlzXKEVD7Bo5N9ZM5PRmdtpbTX8AZT6Bp9BNzsWK
JMTpz5Obq+IN5UijX60ISAOAw/YJoDT8LkIFgKzxWxkTuF9BnnbIRXwjpm71Kr+o
Iz7z2ukjByXGQP8MzRKaoTBYbQr0woRiqThRGrlnYXF2QXazQd3fDc1inAliaB4u
XlrqxBad774d/PoMaanyAiWIjeXeDnOh2pSUpshGSAK34hqTKSQTH0S4GsgxBZdL
xhs4ngpoJZT/YJ9v+1xe1MQjpi9tJ9UYjt+qv5lris8wgvPhzdzW2vvijwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDP3ScE1vKtUCk4rXuxl6Q4Rywv8MB8GA1UdIwQY
MBaAFNGCImOocHx289s7a+cSImnIJ65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjIt
NGE3OTA0MTA2ZTNiLzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjItNGE3OTA0MTA2ZTNi
LzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgl6y4m2G
Fx9B5zOn8nuOeQ8+X9pJ7bir3ikSDHBc384pFy9689IrCkvhZCqM1XuNDloDoctQ
EdkzoxVCqf3lTFXa5e/on+d3AWyp9V1HdGVGdDQgM6o6DUD9jSz914ZLFBf4sqcX
+oCN+P4LuLcTUpGCjsPTNsFzkIOgdMbuOCpxbyJDncTKb9oWwRepWqmQsMIAPD/6
FYNuTNiIClMNZxpIbk/m2Yt66qF0cvea2cRVgUwxoeSo+aObWicKEYRBQIZo6ru2
Sp14eVR80o3VMwaXSpdCQcbf0l6c7ukDPRuLpPVVdt0iOK3TGWz2bKlP82oQSxBq
OV794l8r7fn4BA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:10:22 2026 by rpki-client