Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File:                     S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier:          WH0eQEf0g0ptNT04mBsHUvCXCl6qkD62pfC/3t3agTI=
Subject key identifier:   4F:C2:C2:2C:22:90:86:A6:9F:06:39:93:77:8C:2C:80:45:05:5D:72
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer:       /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial:       019E1D2251E757DCBE866081C82A516C8A85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number:          1895
Signing time:             Tue 12 May 2026 17:00:48 +0000
Manifest this update:     Tue 12 May 2026 17:00:48 +0000
Manifest next update:     Wed 13 May 2026 17:00:48 +0000
Files and hashes:         1: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: qWQ1tUrt2rs78V1yB7iRbhpE6+XVSeNYnpsaHBoJf64=)
                          2: eng9RYXhOr-5HaI5uOyelA6wzbc.roa (hash: LlIBH4V68aJMu/FCHYy8zCpNmTkO2PE9LFtoa1D1JsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:51:e7:57:dc:be:86:60:81:c8:2a:51:6c:8a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
        Validity
            Not Before: May 12 17:00:48 2026 GMT
            Not After : May 13 17:00:48 2026 GMT
        Subject: CN=4fc2c22c229086a69f063993778c2c8045055d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:31:59:a2:63:d4:e2:0e:85:54:57:70:09:18:
                    44:85:5b:4b:52:db:69:b3:7d:be:93:b2:72:e4:77:
                    0c:33:0d:e1:60:4b:2d:3d:20:f3:11:04:58:d2:4c:
                    7d:a1:d2:62:b5:65:c7:8e:94:5b:ff:ab:5e:0a:5d:
                    0f:f5:12:2b:c9:d1:e7:6c:f8:7d:06:7a:0c:5c:5a:
                    73:c9:23:3c:11:61:97:6b:6b:ba:fc:5b:59:b4:66:
                    6a:43:99:6b:b0:e9:80:ed:3c:06:c3:08:2c:d4:dc:
                    c6:24:16:fb:a4:c8:33:7a:eb:08:b8:b3:bb:fd:30:
                    21:63:1d:19:f2:a0:da:38:93:26:7c:08:68:83:60:
                    62:01:9a:83:52:c8:2e:09:e4:a4:30:fb:52:3e:f4:
                    ee:b9:54:c3:3e:ab:0d:c9:84:a1:44:6c:47:3c:c4:
                    fa:a9:8b:5d:77:f3:49:44:84:ba:52:61:3d:ca:2c:
                    68:fd:33:06:59:61:12:f0:ce:13:ff:c8:43:79:00:
                    b6:d4:1d:13:18:14:92:97:88:e9:89:90:3d:2d:88:
                    b5:96:44:f0:dd:f5:be:80:a6:ef:97:72:3f:a6:3b:
                    c0:96:dd:e9:8b:8e:b6:0d:69:77:9a:5c:a0:4b:d4:
                    ea:61:e2:e9:88:3d:2c:0f:6e:65:cb:95:b0:b6:e7:
                    be:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C2:C2:2C:22:90:86:A6:9F:06:39:93:77:8C:2C:80:45:05:5D:72
            X509v3 Authority Key Identifier:
                keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8c:6b:90:90:ec:01:e6:a3:20:f1:95:29:10:b7:8f:06:5b:
         6c:59:fa:3a:26:23:5e:7d:62:16:df:25:9b:b8:7c:95:99:23:
         c2:ec:49:56:28:17:ea:7e:2e:22:e3:68:4d:95:d6:a7:d5:91:
         9b:98:5a:61:9d:8c:2a:9f:8b:4f:44:51:c0:25:e6:44:55:3f:
         94:6b:87:29:29:e5:e1:3a:dc:d1:77:d2:da:f7:30:e9:4e:e0:
         c8:81:41:e4:2e:68:a5:a4:28:a1:2b:6f:27:29:0a:e3:de:c4:
         e9:62:b2:35:f2:05:59:10:af:dc:d1:c8:41:fc:60:d2:77:9b:
         8e:07:6e:f9:a5:ab:af:04:53:c5:b6:de:7f:da:59:16:05:04:
         0a:50:c0:66:c4:d5:1a:14:da:17:1a:e1:69:de:86:76:69:76:
         89:5b:c2:9b:f5:02:cd:3d:f0:40:14:08:03:17:10:1f:52:d8:
         5e:27:98:a9:7a:c2:84:56:7c:72:89:82:a8:01:a2:e9:cd:a8:
         78:1b:72:e0:7c:04:f8:40:13:79:cb:3f:1b:87:43:a0:a8:7e:
         3e:0f:21:12:db:ed:b6:15:7f:2d:23:9a:51:72:84:da:85:41:
         ba:ef:23:c0:b8:d0:af:96:4e:fc:b3:bb:04:7c:7a:bb:e3:c6:
         a9:bb:50:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIlHnV9y+hmCByCpRbIqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiN2I3M2NkOWJkMTc0M2Y3ZDNmNWVjNmJkNTBhMTkzNWVm
NDgwMWUwHhcNMjYwNTEyMTcwMDQ4WhcNMjYwNTEzMTcwMDQ4WjAzMTEwLwYDVQQD
Eyg0ZmMyYzIyYzIyOTA4NmE2OWYwNjM5OTM3NzhjMmM4MDQ1MDU1ZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TFZomPU4g6FVFdwCRhEhVtLUttp
s32+k7Jy5HcMMw3hYEstPSDzEQRY0kx9odJitWXHjpRb/6teCl0P9RIrydHnbPh9
BnoMXFpzySM8EWGXa2u6/FtZtGZqQ5lrsOmA7TwGwwgs1NzGJBb7pMgzeusIuLO7
/TAhYx0Z8qDaOJMmfAhog2BiAZqDUsguCeSkMPtSPvTuuVTDPqsNyYShRGxHPMT6
qYtdd/NJRIS6UmE9yixo/TMGWWES8M4T/8hDeQC21B0TGBSSl4jpiZA9LYi1lkTw
3fW+gKbvl3I/pjvAlt3pi462DWl3mlygS9TqYeLpiD0sD25ly5Wwtue+9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/CwiwikIamnwY5k3eMLIBFBV1yMB8GA1UdIwQY
MBaAFEt7c82b0XQ/fT9exr1QoZNe9IAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMt
ZTJiNThmNWU0YWJiLzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMtZTJiNThmNWU0YWJi
LzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4xrkJDs
AeajIPGVKRC3jwZbbFn6OiYjXn1iFt8lm7h8lZkjwuxJVigX6n4uIuNoTZXWp9WR
m5haYZ2MKp+LT0RRwCXmRFU/lGuHKSnl4Trc0XfS2vcw6U7gyIFB5C5opaQooStv
JykK497E6WKyNfIFWRCv3NHIQfxg0nebjgdu+aWrrwRTxbbef9pZFgUEClDAZsTV
GhTaFxrhad6Gdml2iVvCm/UCzT3wQBQIAxcQH1LYXieYqXrChFZ8comCqAGi6c2o
eBty4HwE+EATecs/G4dDoKh+Pg8hEtvtthV/LSOaUXKE2oVBuu8jwLjQr5ZO/LO7
BHx6u+PGqbtQzg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:40:20 2026 by rpki-client