Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
File:                     1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft (raw, json)
Hash identifier:          nx9MrDbE4YlCy8VyrkAiC6o/OlY+wz251L88RSbFdhI=
Subject key identifier:   6D:9C:A7:63:37:E4:54:B2:99:E4:90:0E:8C:5B:58:6F:43:97:59:73
Authority key identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
Certificate issuer:       /CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Certificate serial:       019E1F10DA744CA849DABBEE699CFF8AB0B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 02:00:58 +0000
Manifest this update:     Wed 13 May 2026 02:00:58 +0000
Manifest next update:     Thu 14 May 2026 02:00:58 +0000
Files and hashes:         1: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl (hash: rBCMY2PW4zpTMvdiUOmShGCq3Kllo+hrxnc+GtsV3cc=)
                          2: _mlWLWGEeY126ouf9N2RBXWxQWs.roa (hash: hRcT7FQAvX81ZtVwVTQnfnVplPzsGoXPbu1Og6gLElU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:da:74:4c:a8:49:da:bb:ee:69:9c:ff:8a:b0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
        Validity
            Not Before: May 13 02:00:58 2026 GMT
            Not After : May 14 02:00:58 2026 GMT
        Subject: CN=6d9ca76337e454b299e4900e8c5b586f43975973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:8e:b8:9a:be:3d:67:9f:b5:f9:25:f5:65:
                    42:08:97:57:79:98:42:9c:09:8f:f4:99:62:27:d6:
                    c9:b4:c7:14:04:db:59:1b:8d:f3:65:4d:31:fe:7f:
                    41:50:44:de:b9:ab:e0:a0:f0:6a:ae:d3:45:24:ce:
                    79:5f:33:e6:bd:97:24:cc:4d:ef:6c:28:87:59:cf:
                    da:62:01:2e:05:b9:e0:d4:be:12:08:c3:af:7c:67:
                    7f:a4:d0:32:9d:d5:4b:43:b0:5c:40:16:2a:c0:e6:
                    d4:64:a0:72:e6:12:b8:b9:42:81:6c:e7:cf:a2:f7:
                    5b:19:5b:e4:a3:e8:73:a0:71:ba:d2:d3:3c:71:9e:
                    43:eb:8f:22:c4:1d:5f:88:e9:0e:92:e7:f6:96:38:
                    41:82:5d:15:be:9e:d8:97:a9:6f:e2:02:49:c5:d4:
                    f9:27:b5:03:58:fa:aa:d0:94:3f:bf:ac:6d:0a:db:
                    c9:d8:a5:94:04:52:2c:95:2f:ff:3a:5f:02:d0:69:
                    9b:aa:15:6d:4c:b2:69:ee:82:00:cd:a0:c3:24:52:
                    d4:ab:df:e0:34:1a:28:27:8d:c7:52:75:a2:22:9a:
                    e2:5b:70:7f:1f:08:27:15:6b:fe:96:ee:db:a1:31:
                    e6:2e:82:04:d0:fe:01:60:7c:a2:f8:77:8e:db:82:
                    75:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9C:A7:63:37:E4:54:B2:99:E4:90:0E:8C:5B:58:6F:43:97:59:73
            X509v3 Authority Key Identifier:
                keyid:FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c3:97:62:15:8a:bb:d9:d8:8e:5e:e5:bc:91:c3:01:58:bc:
         75:7a:92:18:65:05:b4:84:84:2f:9d:04:88:ff:3a:6e:9c:32:
         1e:6a:c1:e3:8e:e9:94:20:e9:b4:35:a0:b8:16:bb:7a:50:ca:
         c8:cb:9f:7c:0f:2d:54:4e:6c:51:e8:ed:80:50:fb:9d:31:7c:
         0b:4c:f1:01:1d:75:bf:27:94:06:60:2e:5d:f0:80:5f:65:da:
         b0:36:50:83:70:6b:19:c4:05:42:77:60:7c:17:bf:54:d2:23:
         1c:f0:db:8c:d2:8e:e3:c2:1c:de:e8:3c:bf:89:f2:16:c8:e4:
         14:f9:62:b6:12:b8:02:4b:90:6b:ce:e5:0f:5b:ac:4b:b7:5c:
         55:b1:e2:7b:d6:c5:be:9b:ec:f7:61:b9:27:ec:da:9f:4b:18:
         4b:f6:5a:c3:d7:f5:6d:48:f0:97:1c:b5:bc:33:44:d9:29:f5:
         b7:0e:bc:7b:d3:29:43:84:1f:ad:2d:f9:72:79:5e:03:3c:94:
         dd:cd:0c:29:c0:82:7f:33:c3:66:13:e5:72:3d:8e:46:71:6c:
         8a:45:95:4e:cd:3b:a3:76:6d:eb:f9:2f:8c:00:53:62:a4:41:
         55:90:ba:99:b2:6b:3b:e6:c8:b4:10:27:ec:dc:2c:96:58:af:
         82:65:c0:6f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4fENp0TKhJ2rvuaZz/irC5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNDgwYzczMzU0MzA1Y2M0MGY4ZmFiYTllNTQwMmVmMzdk
ZTJlYWEwHhcNMjYwNTEzMDIwMDU4WhcNMjYwNTE0MDIwMDU4WjAzMTEwLwYDVQQD
Eyg2ZDljYTc2MzM3ZTQ1NGIyOTllNDkwMGU4YzViNTg2ZjQzOTc1OTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdiOuJq+PWeftfkl9WVCCJdXeZhC
nAmP9JliJ9bJtMcUBNtZG43zZU0x/n9BUETeuavgoPBqrtNFJM55XzPmvZckzE3v
bCiHWc/aYgEuBbng1L4SCMOvfGd/pNAyndVLQ7BcQBYqwObUZKBy5hK4uUKBbOfP
ovdbGVvko+hzoHG60tM8cZ5D648ixB1fiOkOkuf2ljhBgl0Vvp7Yl6lv4gJJxdT5
J7UDWPqq0JQ/v6xtCtvJ2KWUBFIslS//Ol8C0GmbqhVtTLJp7oIAzaDDJFLUq9/g
NBooJ43HUnWiIpriW3B/HwgnFWv+lu7boTHmLoIE0P4BYHyi+HeO24J1BwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG2cp2M35FSymeSQDoxbWG9Dl1lzMB8GA1UdIwQY
MBaAFPtIDHM1QwXMQPj6up5UAu833i6qMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0wZ01jelZEQmN4QS1QcTZubFFDN3pmZUxxby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMGRjNDg5LWUwMjgtNGYzNy1hOTcy
LTUwOWY0NGU5MjAyMi8xLzEtMGdNY3pWREJjeEEtUHE2bmxRQzd6ZmVMcW8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M1LzBkYzQ4OS1lMDI4LTRmMzctYTk3Mi01MDlmNDRlOTIw
MjIvMS8xLTBnTWN6VkRCY3hBLVBxNm5sUUM3emZlTHFvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMOX
YhWKu9nYjl7lvJHDAVi8dXqSGGUFtISEL50EiP86bpwyHmrB447plCDptDWguBa7
elDKyMuffA8tVE5sUejtgFD7nTF8C0zxAR11vyeUBmAuXfCAX2XasDZQg3BrGcQF
QndgfBe/VNIjHPDbjNKO48Ic3ug8v4nyFsjkFPlithK4AkuQa87lD1usS7dcVbHi
e9bFvpvs92G5J+zan0sYS/Zaw9f1bUjwlxy1vDNE2Sn1tw68e9MpQ4QfrS35cnle
AzyU3c0MKcCCfzPDZhPlcj2ORnFsikWVTs07o3Zt6/kvjABTYqRBVZC6mbJrO+bI
tBAn7NwsllivgmXAbw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:38:35 2026 by rpki-client