Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
File:                     VsEHoT1YB7eS96VXsvutWPlEoZ8.mft (raw, json)
Hash identifier:          tMHKae99VwqUn3SUPOoR5ForqcXl3yDi75o2qsikRZM=
Subject key identifier:   CE:9E:91:0E:19:52:09:58:E8:7F:BB:4B:66:4C:E9:E2:A8:06:EA:1D
Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
Certificate issuer:       /CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Certificate serial:       019E1E6CBAFDED4C46BF09D9453290BD2F88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
Manifest number:          1131
Signing time:             Tue 12 May 2026 23:01:42 +0000
Manifest this update:     Tue 12 May 2026 23:01:42 +0000
Manifest next update:     Wed 13 May 2026 23:01:42 +0000
Files and hashes:         1: VsEHoT1YB7eS96VXsvutWPlEoZ8.crl (hash: lFQ78ZKtHzx0Af6fo3VlKEt8bQE8LRGn7FoH5liaFRk=)
                          2: qwRgsQyWceddvM_GZ0mcBzGmfsw.roa (hash: u5m7OeUQAJztt6tYqPBa102kwAghmU7lU7GBR2CQZGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:ba:fd:ed:4c:46:bf:09:d9:45:32:90:bd:2f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f
        Validity
            Not Before: May 12 23:01:42 2026 GMT
            Not After : May 13 23:01:42 2026 GMT
        Subject: CN=ce9e910e19520958e87fbb4b664ce9e2a806ea1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:30:a7:78:8c:51:0e:03:47:98:66:9f:15:
                    da:00:8f:a8:17:a7:35:98:2e:86:7d:14:f3:3d:5f:
                    bf:56:a0:ae:4e:6d:7b:14:0b:59:6b:bc:9b:b0:1f:
                    23:c7:cf:ea:67:9a:0e:3a:54:42:30:2c:51:44:ba:
                    af:96:83:29:c2:38:af:e9:77:0d:31:21:59:cc:71:
                    8c:c4:ff:36:72:f4:87:eb:be:f8:60:1b:b0:b1:53:
                    45:1e:21:e1:37:bd:a4:41:c8:bb:38:7f:42:12:11:
                    93:7a:8f:85:e6:af:fd:68:9c:d0:f6:0c:e5:c4:ff:
                    3c:cd:e2:8b:5a:35:f5:f1:ee:0d:c0:1f:59:e1:db:
                    79:cd:8f:de:5f:85:08:ac:22:2e:0a:49:bb:1d:73:
                    8b:a1:04:5e:c5:b0:93:14:d2:22:b7:b1:b3:a2:d1:
                    19:30:f9:e6:c0:ae:f0:3d:52:1b:c2:33:64:0c:d7:
                    65:42:78:47:ac:ee:0f:5d:c6:7e:10:b2:c3:4d:53:
                    28:b1:16:02:f5:e7:be:b4:67:1c:d2:77:1b:a3:93:
                    69:98:d7:8f:20:0f:7b:cb:4a:1e:82:37:64:aa:b8:
                    dc:b8:bc:4f:17:6c:d6:49:84:ee:a3:c1:11:89:44:
                    25:b6:ed:84:59:96:bc:3d:87:ec:e0:97:f2:48:93:
                    57:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9E:91:0E:19:52:09:58:E8:7F:BB:4B:66:4C:E9:E2:A8:06:EA:1D
            X509v3 Authority Key Identifier:
                keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:83:31:19:0a:0c:5e:81:d2:2a:71:18:4c:95:e9:93:1b:09:
         8f:ae:1f:77:cd:73:34:8b:9d:5e:63:a0:e3:d4:fa:a0:a3:b1:
         d2:15:3b:87:36:61:88:da:50:b7:a5:22:82:26:2d:bf:f2:6b:
         3f:17:e4:ab:b0:bf:8c:54:2c:17:3a:39:48:ce:a7:a2:a3:b8:
         68:73:1b:d7:ce:7b:55:6f:10:f0:c2:f7:8b:da:76:1f:ca:ce:
         4c:c5:7d:bd:9a:20:f8:f9:cc:1a:71:1f:2c:c2:4e:1d:27:2e:
         0c:01:b5:57:00:75:86:e4:94:64:4f:f2:4c:3f:dc:a1:3e:27:
         60:32:9c:74:0f:da:37:3e:42:12:27:b0:83:f4:de:e3:3e:41:
         76:e2:7a:48:c9:a9:84:6c:80:56:47:00:b4:9a:8f:83:de:1d:
         cd:7d:b1:ac:a8:a6:c0:02:d0:0f:94:92:a3:90:86:4b:52:51:
         af:d5:82:dd:61:7e:0c:4c:bb:85:e5:9c:c9:3c:7b:92:1e:b2:
         5e:9c:30:7f:32:16:6c:38:d7:65:df:14:f1:68:44:14:5b:dc:
         dd:10:0b:33:a8:24:e1:10:48:c7:52:3b:03:89:62:8d:bd:24:
         70:c2:f3:bb:5a:75:ad:ea:00:56:00:6e:7b:34:2a:99:26:fd:
         95:8c:81:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebLr97UxGvwnZRTKQvS+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YzEwN2ExM2Q1ODA3Yjc5MmY3YTU1N2IyZmJhZDU4Zjk0
NGExOWYwHhcNMjYwNTEyMjMwMTQyWhcNMjYwNTEzMjMwMTQyWjAzMTEwLwYDVQQD
EyhjZTllOTEwZTE5NTIwOTU4ZTg3ZmJiNGI2NjRjZTllMmE4MDZlYTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7Iwp3iMUQ4DR5hmnxXaAI+oF6c1
mC6GfRTzPV+/VqCuTm17FAtZa7ybsB8jx8/qZ5oOOlRCMCxRRLqvloMpwjiv6XcN
MSFZzHGMxP82cvSH6774YBuwsVNFHiHhN72kQci7OH9CEhGTeo+F5q/9aJzQ9gzl
xP88zeKLWjX18e4NwB9Z4dt5zY/eX4UIrCIuCkm7HXOLoQRexbCTFNIit7GzotEZ
MPnmwK7wPVIbwjNkDNdlQnhHrO4PXcZ+ELLDTVMosRYC9ee+tGcc0ncbo5NpmNeP
IA97y0oegjdkqrjcuLxPF2zWSYTuo8ERiUQltu2EWZa8PYfs4JfySJNXwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6ekQ4ZUglY6H+7S2ZM6eKoBuodMB8GA1UdIwQY
MBaAFFbBB6E9WAe3kvelV7L7rVj5RKGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wMWEwYTEtOTRhZi00YTNkLWEwNWUt
ZjMwZTE3NDU0ZTRiLzEvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wMWEwYTEtOTRhZi00YTNkLWEwNWUtZjMwZTE3NDU0ZTRi
LzEvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4MxGQoM
XoHSKnEYTJXpkxsJj64fd81zNIudXmOg49T6oKOx0hU7hzZhiNpQt6UigiYtv/Jr
Pxfkq7C/jFQsFzo5SM6noqO4aHMb1857VW8Q8ML3i9p2H8rOTMV9vZog+PnMGnEf
LMJOHScuDAG1VwB1huSUZE/yTD/coT4nYDKcdA/aNz5CEiewg/Te4z5BduJ6SMmp
hGyAVkcAtJqPg94dzX2xrKimwALQD5SSo5CGS1JRr9WC3WF+DEy7heWcyTx7kh6y
XpwwfzIWbDjXZd8U8WhEFFvc3RALM6gk4RBIx1I7A4lijb0kcMLzu1p1reoAVgBu
ezQqmSb9lYyBHA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:45:24 2026 by rpki-client