Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File:                     iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier:          wS3zV6GcEkBeNtUCw9+h4ziqoD5al0aiaJeU0EK4MQk=
Subject key identifier:   5A:EE:78:C6:F6:CE:D3:9E:31:20:14:EF:F0:34:D9:93:BA:17:F1:A6
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer:       /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial:       019E20C808B1D26DDEF24CC8EC5791214E95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 10:00:40 +0000
Manifest this update:     Wed 13 May 2026 10:00:40 +0000
Manifest next update:     Thu 14 May 2026 10:00:40 +0000
Files and hashes:         1: XCD8aXlAzGnzxXRVOLV38VoENzs.roa (hash: nXyOSXVfXWMbU4dphXnH7dDUeGh2mNE9IwSEdv2yiZs=)
                          2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: LdbAPANDWBAlWDOkVfRXZaZazPofClxF5WNe8+oVj7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:08:b1:d2:6d:de:f2:4c:c8:ec:57:91:21:4e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
        Validity
            Not Before: May 13 10:00:40 2026 GMT
            Not After : May 14 10:00:40 2026 GMT
        Subject: CN=5aee78c6f6ced39e312014eff034d993ba17f1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:78:7d:5f:6b:04:49:2a:cc:3d:97:9c:33:08:
                    db:c1:b9:d8:41:47:4f:b3:ca:00:6f:78:3c:6a:d6:
                    67:40:c5:0c:d9:03:56:4e:dd:ed:95:7f:8f:6a:5a:
                    52:82:a1:3a:e1:f2:95:b9:ed:42:5d:11:d6:43:84:
                    09:eb:1a:21:6f:f9:d2:da:37:d3:dc:57:61:47:c7:
                    73:6e:20:c5:87:7c:d4:96:01:86:12:3d:e9:51:25:
                    51:0b:58:c9:58:0a:46:9b:6f:3f:9b:72:f2:0b:88:
                    fd:15:6c:2a:c6:6d:af:1f:0a:47:32:e0:76:d7:8b:
                    7d:ee:64:66:69:ae:17:87:61:91:88:e6:79:9c:74:
                    a0:77:6c:6a:9e:92:b2:ce:8a:76:78:e0:7c:ef:a5:
                    cf:a6:b5:46:f2:03:5b:db:25:a8:80:d4:97:2c:a6:
                    9c:e3:cf:74:34:07:26:a3:20:76:5d:e4:71:bc:56:
                    c0:21:89:43:c2:c2:3d:cb:0c:a0:77:6a:94:d9:6d:
                    4d:84:c1:0e:f8:78:ad:67:a0:f8:00:bc:eb:3b:e2:
                    d2:ec:1d:23:15:4b:46:b8:00:9a:4f:a0:b1:73:ea:
                    45:7b:bd:a9:64:f4:7e:a0:96:0f:92:33:f1:a5:2b:
                    1a:ce:f5:d4:25:c9:a0:19:4a:a9:f3:0e:f7:f9:c4:
                    08:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EE:78:C6:F6:CE:D3:9E:31:20:14:EF:F0:34:D9:93:BA:17:F1:A6
            X509v3 Authority Key Identifier:
                keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:67:8e:9f:5b:04:aa:38:39:fe:7e:dc:85:04:96:80:28:24:
         49:91:ba:ab:f7:01:e5:11:7b:78:0c:2a:00:54:5f:d4:d2:6c:
         d9:6e:d3:b7:31:5c:2c:6d:e9:d9:f1:e8:aa:34:da:5d:e0:c4:
         f3:0e:c3:3b:aa:68:a0:82:59:7a:45:a0:81:be:05:1d:a8:b1:
         dd:c9:61:31:a0:3f:38:1e:9d:9b:16:48:2d:4d:a1:fe:3d:f4:
         54:38:5a:8d:fb:36:78:5e:a5:4f:00:e9:9d:0c:29:ca:6e:fb:
         c7:c2:f6:98:8a:9c:58:90:4b:67:0d:d1:7d:73:46:fd:a0:8f:
         97:9b:07:d2:30:0c:0f:21:5e:16:03:07:fd:f0:62:13:e8:0e:
         ca:a9:59:80:ea:2d:be:ce:d6:35:18:7e:bd:8e:30:04:de:8c:
         c9:da:1c:f4:cd:a4:0e:31:d6:c1:27:85:e7:91:71:f8:33:15:
         0b:97:60:e7:9a:a5:cb:a0:0d:64:61:d3:3f:ef:68:db:60:aa:
         2d:f1:c3:49:77:b8:aa:a9:9c:9d:e4:ef:2c:98:79:5d:3e:75:
         6e:30:1d:ce:8a:97:b3:58:a2:f7:5d:31:2d:14:0e:c9:62:91:
         92:07:a3:90:7c:bb:cc:e6:f9:cf:76:73:fc:f2:b3:9a:45:57:
         50:be:c7:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyAix0m3e8kzI7FeRIU6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Yjc1YWVlZmU4ZWVhMWFjNWMyMTlkODc1MDVkMmU3YzVm
MzJmNDgwHhcNMjYwNTEzMTAwMDQwWhcNMjYwNTE0MTAwMDQwWjAzMTEwLwYDVQQD
Eyg1YWVlNzhjNmY2Y2VkMzllMzEyMDE0ZWZmMDM0ZDk5M2JhMTdmMWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73h9X2sESSrMPZecMwjbwbnYQUdP
s8oAb3g8atZnQMUM2QNWTt3tlX+PalpSgqE64fKVue1CXRHWQ4QJ6xohb/nS2jfT
3FdhR8dzbiDFh3zUlgGGEj3pUSVRC1jJWApGm28/m3LyC4j9FWwqxm2vHwpHMuB2
14t97mRmaa4Xh2GRiOZ5nHSgd2xqnpKyzop2eOB876XPprVG8gNb2yWogNSXLKac
4890NAcmoyB2XeRxvFbAIYlDwsI9ywygd2qU2W1NhMEO+HitZ6D4ALzrO+LS7B0j
FUtGuACaT6Cxc+pFe72pZPR+oJYPkjPxpSsazvXUJcmgGUqp8w73+cQITwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrueMb2ztOeMSAU7/A02ZO6F/GmMB8GA1UdIwQY
MBaAFIi3Wu7+juoaxcIZ2HUF0ufF8y9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZDI4MzEtMTJlYy00NzcwLTljZWEt
OWFjMDhjM2VhYWExLzEvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ZDI4MzEtMTJlYy00NzcwLTljZWEtOWFjMDhjM2VhYWEx
LzEvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGeOn1sE
qjg5/n7chQSWgCgkSZG6q/cB5RF7eAwqAFRf1NJs2W7TtzFcLG3p2fHoqjTaXeDE
8w7DO6pooIJZekWggb4FHaix3clhMaA/OB6dmxZILU2h/j30VDhajfs2eF6lTwDp
nQwpym77x8L2mIqcWJBLZw3RfXNG/aCPl5sH0jAMDyFeFgMH/fBiE+gOyqlZgOot
vs7WNRh+vY4wBN6Mydoc9M2kDjHWwSeF55Fx+DMVC5dg55qly6ANZGHTP+9o22Cq
LfHDSXe4qqmcneTvLJh5XT51bjAdzoqXs1ii910xLRQOyWKRkgejkHy7zOb5z3Zz
/PKzmkVXUL7HKA==
-----END CERTIFICATE-----
Generated at Wed May 13 13:11:54 2026 by rpki-client