Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File:                     C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier:          KWyC9zrxR0L/zt4cHtRSuTKO7SNVhI45w0QsqBd+J2E=
Subject key identifier:   F6:48:8C:05:44:1C:83:15:77:0E:49:01:F1:C8:82:9D:7F:02:69:6E
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer:       /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial:       019E1D9063CD2FDD23688F07483260E42251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number:          1904
Signing time:             Tue 12 May 2026 19:01:02 +0000
Manifest this update:     Tue 12 May 2026 19:01:02 +0000
Manifest next update:     Wed 13 May 2026 19:01:02 +0000
Files and hashes:         1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: 8aV4UmaxAkvFG5I7S3n0LvKmCzyJdFdECj0UQ/jczU4=)
                          2: Yt1VcCEjmlQDKKdsmlF9NNCAOVo.roa (hash: uwh0eGpdwABlDZD41+Scf8Ln/xjqhnaIPzab/PqpacI=)
                          3: hcS0FWEKBHU-zDotkcZOlJwtP2U.roa (hash: WtgqGoAtHK4QE/3S3ar/C9SyFwoXYF7WS3gKUYf+F7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:63:cd:2f:dd:23:68:8f:07:48:32:60:e4:22:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
        Validity
            Not Before: May 12 19:01:02 2026 GMT
            Not After : May 13 19:01:02 2026 GMT
        Subject: CN=f6488c05441c8315770e4901f1c8829d7f02696e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:80:a2:40:43:b3:ba:80:c2:22:9e:46:7b:59:
                    00:79:62:39:1c:17:fd:9c:27:bf:8c:4d:66:f0:19:
                    98:3a:97:0b:52:b6:77:e9:dd:87:b6:e2:c3:2f:37:
                    f6:26:0d:39:36:22:fd:a9:2c:68:dc:4e:64:e9:f9:
                    01:42:a6:8e:d4:aa:93:02:8c:ca:a5:17:2b:47:d7:
                    6b:ec:cc:fa:10:40:42:92:f0:ec:6d:cf:2f:94:f0:
                    22:5c:a0:14:f5:cb:b1:52:28:a3:8f:e6:fe:6b:db:
                    17:be:8d:58:52:6a:10:a0:dc:39:0f:ae:28:26:9a:
                    1d:8d:6a:b8:55:ad:b4:99:dd:0e:df:ee:a0:ac:f6:
                    09:6a:6d:19:d0:68:5a:90:74:0f:8e:72:45:4d:4f:
                    37:68:c0:13:2b:89:54:f5:11:7f:e5:5b:f2:5b:6c:
                    a1:5a:4e:8c:10:72:c6:61:a8:b1:c7:a9:fa:fe:97:
                    c8:b0:a2:10:55:4e:b0:47:73:cd:5b:05:2f:58:f7:
                    01:70:2f:77:d4:45:bc:0e:e4:f5:71:ce:19:04:8b:
                    62:24:1b:6f:c1:be:56:a7:60:60:7e:b1:06:e8:ee:
                    5e:80:be:70:63:6b:2e:4d:b2:a3:4c:ed:bb:64:b7:
                    97:99:8d:9a:1c:3e:24:cf:c1:82:cb:69:da:1d:6a:
                    d8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:48:8C:05:44:1C:83:15:77:0E:49:01:F1:C8:82:9D:7F:02:69:6E
            X509v3 Authority Key Identifier:
                keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:79:7e:d0:b2:56:d3:d2:71:aa:e3:c0:b4:25:ef:af:af:6a:
         92:23:33:55:94:be:0b:24:45:4b:36:5e:b4:2f:40:71:32:6c:
         46:57:f4:00:6f:ad:e9:b3:9e:e9:e8:c9:05:0d:95:81:05:17:
         cd:bc:9c:3d:3a:63:77:04:fe:89:2f:ed:ea:c3:62:e3:48:84:
         80:b2:99:b4:ef:f0:46:0d:cb:e7:9b:b2:7e:4d:e8:78:b6:9a:
         ac:46:3c:ea:e5:7b:61:80:e2:37:36:dd:34:d5:81:d7:3c:f3:
         48:ae:f6:2c:5c:77:10:30:8b:8b:30:db:3f:9f:a1:23:f4:77:
         11:5e:2f:3f:d8:6e:cb:8e:fc:4b:de:d2:87:07:a4:0a:51:79:
         ee:90:d6:53:68:b6:d9:4e:40:1f:0d:db:d5:19:5e:ba:d3:34:
         3a:cc:d0:7e:2a:e8:aa:de:5d:38:20:62:7f:63:eb:66:64:cc:
         64:f6:0d:f6:2d:0a:24:82:09:50:61:4a:8b:ae:fc:cd:07:c7:
         6b:84:17:e4:b8:03:8b:10:0c:32:13:51:2a:33:c5:7d:81:45:
         80:eb:70:4e:db:55:43:d7:67:39:52:f0:35:89:69:46:1d:4d:
         1c:cc:1d:e3:3d:30:cd:5e:07:64:1d:03:36:1b:32:61:b4:98:
         d0:e1:fb:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkGPNL90jaI8HSDJg5CJRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGNmYWJlNDdlOTI4NWY2NWYxZjJkNjg2YmFhZjE1Yjhi
NDE3NzMwHhcNMjYwNTEyMTkwMTAyWhcNMjYwNTEzMTkwMTAyWjAzMTEwLwYDVQQD
EyhmNjQ4OGMwNTQ0MWM4MzE1NzcwZTQ5MDFmMWM4ODI5ZDdmMDI2OTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ICiQEOzuoDCIp5Ge1kAeWI5HBf9
nCe/jE1m8BmYOpcLUrZ36d2HtuLDLzf2Jg05NiL9qSxo3E5k6fkBQqaO1KqTAozK
pRcrR9dr7Mz6EEBCkvDsbc8vlPAiXKAU9cuxUiijj+b+a9sXvo1YUmoQoNw5D64o
JpodjWq4Va20md0O3+6grPYJam0Z0GhakHQPjnJFTU83aMATK4lU9RF/5VvyW2yh
Wk6MEHLGYaixx6n6/pfIsKIQVU6wR3PNWwUvWPcBcC931EW8DuT1cc4ZBItiJBtv
wb5Wp2BgfrEG6O5egL5wY2suTbKjTO27ZLeXmY2aHD4kz8GCy2naHWrYVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZIjAVEHIMVdw5JAfHIgp1/AmluMB8GA1UdIwQY
MBaAFAtM+r5H6ShfZfHy1oa6rxW4tBdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzB6NnZrZnBLRjlsOGZMV2hycXZGYmkwRjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xYWJlOGEtNDVhMi00MTU2LTk4ZDct
NjgwNmUzZDRjZTRmLzEvQzB6NnZrZnBLRjlsOGZMV2hycXZGYmkwRjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8xYWJlOGEtNDVhMi00MTU2LTk4ZDctNjgwNmUzZDRjZTRm
LzEvQzB6NnZrZnBLRjlsOGZMV2hycXZGYmkwRjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHl+0LJW
09JxquPAtCXvr69qkiMzVZS+CyRFSzZetC9AcTJsRlf0AG+t6bOe6ejJBQ2VgQUX
zbycPTpjdwT+iS/t6sNi40iEgLKZtO/wRg3L55uyfk3oeLaarEY86uV7YYDiNzbd
NNWB1zzzSK72LFx3EDCLizDbP5+hI/R3EV4vP9huy478S97ShwekClF57pDWU2i2
2U5AHw3b1RleutM0OszQfiroqt5dOCBif2PrZmTMZPYN9i0KJIIJUGFKi678zQfH
a4QX5LgDixAMMhNRKjPFfYFFgOtwTttVQ9dnOVLwNYlpRh1NHMwd4z0wzV4HZB0D
NhsyYbSY0OH7qw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:54:50 2026 by rpki-client