Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
File:                     078oufsovtkGaqQRPLi-Bl7c9BI.mft (raw, json)
Hash identifier:          sAKqaSUET4Wrvva9uXSdCDG1yB10N6Acxlst5B05YMc=
Subject key identifier:   93:A3:56:F5:35:E8:AB:D3:F5:41:CE:0F:FC:C2:83:F9:BD:96:49:A0
Authority key identifier: D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12
Certificate issuer:       /CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
Certificate serial:       019E1D90A5DEFBB5369C883336C4374D8DB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
Manifest number:          138E
Signing time:             Tue 12 May 2026 19:01:19 +0000
Manifest this update:     Tue 12 May 2026 19:01:19 +0000
Manifest next update:     Wed 13 May 2026 19:01:19 +0000
Files and hashes:         1: 078oufsovtkGaqQRPLi-Bl7c9BI.crl (hash: BcIeSEq/ucDpDnxI68jLcwtUQ3VnS2+BOX7z/YhRZc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:a5:de:fb:b5:36:9c:88:33:36:c4:37:4d:8d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412
        Validity
            Not Before: May 12 19:01:19 2026 GMT
            Not After : May 13 19:01:19 2026 GMT
        Subject: CN=93a356f535e8abd3f541ce0ffcc283f9bd9649a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:b7:a0:81:65:b2:b8:dc:97:27:71:30:07:
                    8c:d9:91:26:ca:5b:4a:f3:6d:56:d7:68:8b:79:f2:
                    16:33:d6:9b:9c:59:d3:7a:52:9e:c4:c9:5d:a1:de:
                    e8:3f:05:f5:91:22:26:18:dd:26:7e:67:a6:da:f6:
                    f9:de:10:e9:86:7d:f9:e3:5c:2b:d6:97:1f:da:e2:
                    54:23:7f:4f:09:e0:53:a9:96:24:3c:05:ca:c7:e7:
                    0c:e1:6f:c9:29:62:bc:e6:f0:a3:c5:94:ab:ae:64:
                    54:68:7f:11:e1:46:a7:3b:c3:2c:a5:39:40:82:50:
                    a9:66:06:3b:27:83:56:e1:e7:0f:77:10:ac:c9:a7:
                    a2:68:84:11:2a:02:0d:fc:ce:a5:01:3d:b1:3c:b6:
                    3f:ab:87:93:5b:1f:dd:68:33:89:9b:9a:a6:bc:5e:
                    01:e8:79:ef:0b:e0:ba:84:fc:5f:71:07:12:a8:bf:
                    c6:8e:4a:5d:01:77:df:3b:8e:c3:25:58:8e:ba:6e:
                    f4:36:d1:05:9a:96:3d:03:fe:c6:fa:d7:0e:e7:10:
                    43:18:46:9c:92:7d:0b:a9:59:d5:8f:b2:5b:e7:5d:
                    1a:18:3a:78:07:93:69:de:ea:e4:36:51:12:b8:ab:
                    3a:76:55:da:7d:95:6a:c3:c8:3e:8d:e9:ed:ad:7c:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A3:56:F5:35:E8:AB:D3:F5:41:CE:0F:FC:C2:83:F9:BD:96:49:A0
            X509v3 Authority Key Identifier:
                keyid:D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c8:5a:1f:36:95:fe:0d:65:01:ae:e6:9b:25:4f:3b:35:52:
         f8:b3:d3:78:e1:d0:56:f7:ea:40:d9:56:24:e0:5d:ce:82:fa:
         ae:ef:b9:48:df:f4:9c:9c:1e:97:bf:10:31:b0:6c:c5:18:82:
         31:70:92:6c:ed:df:9a:3f:55:ad:33:d4:65:2f:58:67:3b:34:
         fd:8e:6d:be:5b:b5:6f:23:42:97:dd:d7:d6:27:ac:32:83:fb:
         ff:e9:1a:fc:8f:8e:2f:1e:6c:e7:88:35:2e:64:14:4c:34:d1:
         70:7e:a6:89:eb:aa:7e:ce:c3:56:b6:e6:1c:0d:e6:4a:0b:61:
         20:46:9d:e1:cb:3a:4c:cb:e7:f2:89:08:ec:ee:c0:64:17:ec:
         23:a0:1f:1c:1f:f0:72:75:4e:e8:a1:f9:e3:71:17:bb:f0:07:
         82:6e:cb:23:33:9c:75:14:89:8b:5e:7e:ab:3a:a8:b6:2a:b8:
         a6:79:c9:c5:45:a3:b9:a3:0a:83:e6:14:45:84:0e:e1:9f:c5:
         26:fc:16:0b:b2:ea:b7:ff:7f:05:5c:05:bc:f0:15:79:d3:76:
         8a:72:0d:b6:eb:1d:37:be:24:3c:dc:f7:fa:aa:15:5f:94:60:
         2b:76:53:20:50:c7:6e:9e:5a:98:3e:a4:57:b7:af:e2:54:42:
         d6:04:8e:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkKXe+7U2nIgzNsQ3TY2yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYmYyOGI5ZmIyOGJlZDkwNjZhYTQxMTNjYjhiZTA2NWVk
Y2Y0MTIwHhcNMjYwNTEyMTkwMTE5WhcNMjYwNTEzMTkwMTE5WjAzMTEwLwYDVQQD
Eyg5M2EzNTZmNTM1ZThhYmQzZjU0MWNlMGZmY2MyODNmOWJkOTY0OWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukS3oIFlsrjclydxMAeM2ZEmyltK
821W12iLefIWM9abnFnTelKexMldod7oPwX1kSImGN0mfmem2vb53hDphn3541wr
1pcf2uJUI39PCeBTqZYkPAXKx+cM4W/JKWK85vCjxZSrrmRUaH8R4UanO8MspTlA
glCpZgY7J4NW4ecPdxCsyaeiaIQRKgIN/M6lAT2xPLY/q4eTWx/daDOJm5qmvF4B
6HnvC+C6hPxfcQcSqL/GjkpdAXffO47DJViOum70NtEFmpY9A/7G+tcO5xBDGEac
kn0LqVnVj7Jb510aGDp4B5Np3urkNlESuKs6dlXafZVqw8g+jentrXxryQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOjVvU16KvT9UHOD/zCg/m9lkmgMB8GA1UdIwQY
MBaAFNO/KLn7KL7ZBmqkETy4vgZe3PQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDc4b3Vmc292dGtHYXFRUlBMaS1CbDdjOUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81NjI4MTEtYzU5Yy00YmFiLWI5MjAt
MTgwNGQyMDJkNDZkLzEvMDc4b3Vmc292dGtHYXFRUlBMaS1CbDdjOUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81NjI4MTEtYzU5Yy00YmFiLWI5MjAtMTgwNGQyMDJkNDZk
LzEvMDc4b3Vmc292dGtHYXFRUlBMaS1CbDdjOUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8haHzaV
/g1lAa7mmyVPOzVS+LPTeOHQVvfqQNlWJOBdzoL6ru+5SN/0nJwel78QMbBsxRiC
MXCSbO3fmj9VrTPUZS9YZzs0/Y5tvlu1byNCl93X1iesMoP7/+ka/I+OLx5s54g1
LmQUTDTRcH6mieuqfs7DVrbmHA3mSgthIEad4cs6TMvn8okI7O7AZBfsI6AfHB/w
cnVO6KH543EXu/AHgm7LIzOcdRSJi15+qzqotiq4pnnJxUWjuaMKg+YURYQO4Z/F
JvwWC7Lqt/9/BVwFvPAVedN2inINtusdN74kPNz3+qoVX5RgK3ZTIFDHbp5amD6k
V7ev4lRC1gSOIg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:54 2026 by rpki-client