Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
File:                     l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json)
Hash identifier:          82OeMrhhrTnCvhEQseSAkxA8bGrFrH2YTLMMrB7VDRs=
Subject key identifier:   F5:A6:5F:31:64:84:C6:46:F0:0E:65:29:D4:48:D7:29:4E:5C:BF:EA
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Certificate issuer:       /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial:       019E20FF38A844B08CEC71E0BE8FFA560F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
Manifest number:          0DEA
Signing time:             Wed 13 May 2026 11:00:57 +0000
Manifest this update:     Wed 13 May 2026 11:00:57 +0000
Manifest next update:     Thu 14 May 2026 11:00:57 +0000
Files and hashes:         1: HQ9in2gPerdxnIF0h-xK9cg53u8.roa (hash: XzbavZekgRPq70hu9alvl/LqU0pRSF/b7Peoc0VfuYg=)
                          2: RZOthdT6C9nuwbu3UIjhWwOwnms.roa (hash: 4fpWeQoxlDupX+sNQZiRpRjPM8u1NiZ4u0eyQTGiQO8=)
                          3: W9BSfJR_Mh1sxRdUNbIw0z_Nuio.roa (hash: 1JlHRLvbAOq6rKIVKlBTqSD7sE9lvV18Y1IWJ6XjyXw=)
                          4: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: 6Rwo0yiypED/+7pTE6/SXova9o3BTRKregRWcE+tAvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:38:a8:44:b0:8c:ec:71:e0:be:8f:fa:56:0f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
        Validity
            Not Before: May 13 11:00:57 2026 GMT
            Not After : May 14 11:00:57 2026 GMT
        Subject: CN=f5a65f316484c646f00e6529d448d7294e5cbfea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c9:ce:76:a4:ad:9d:cb:eb:2b:99:b1:6f:99:
                    86:c3:06:a9:2b:66:24:82:ec:94:ac:da:a4:cd:5b:
                    a5:9c:b8:79:0a:1a:90:d5:08:41:fa:9c:9c:54:c3:
                    04:a3:b0:7b:22:76:4a:53:7e:b1:54:04:a1:99:82:
                    21:59:6a:6f:bd:67:79:65:00:8e:98:e6:b5:47:1d:
                    82:52:a6:7b:eb:cc:37:d8:a8:eb:82:32:00:d9:60:
                    9f:52:dd:6c:2a:ed:85:dc:c1:9a:9c:77:4a:a7:c7:
                    9e:a8:a9:21:3f:99:31:5e:31:81:85:01:97:a5:0f:
                    c2:38:ad:80:f2:50:f3:11:4a:89:81:14:6d:fa:38:
                    23:15:fc:39:c5:d0:45:cd:be:e3:43:5b:1e:58:cf:
                    96:d4:8e:ee:51:5f:e3:80:33:4f:07:aa:11:dd:c6:
                    1c:10:8b:e7:52:eb:d4:39:b2:62:e6:51:3e:bf:15:
                    44:a5:a2:8a:3b:f9:80:b3:2d:51:45:b6:f9:1c:fb:
                    e6:b0:28:d9:e1:8e:b5:f5:18:f6:ff:d7:2a:29:da:
                    08:f2:21:64:88:3d:60:66:1d:cc:96:7f:7d:f1:21:
                    14:02:48:3d:d8:bb:89:b7:81:54:9c:f8:58:4c:83:
                    3c:a7:01:fe:37:67:0a:7f:4e:d2:f5:16:63:c8:26:
                    c8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A6:5F:31:64:84:C6:46:F0:0E:65:29:D4:48:D7:29:4E:5C:BF:EA
            X509v3 Authority Key Identifier:
                keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5f:91:f7:e7:91:d1:c1:ac:c5:ee:f1:10:2f:3d:30:9e:0d:
         26:0c:e0:5d:95:9f:39:ab:e8:94:1b:84:a5:4c:e4:3c:21:10:
         15:c9:17:89:4b:6e:e3:04:48:9f:ee:41:c8:46:c7:5d:9b:28:
         d6:4f:2e:ce:cf:43:dd:c7:64:37:9a:ed:0e:af:3f:29:9f:6c:
         5b:13:d9:00:ef:1a:4b:d4:39:d3:d5:47:4c:f9:d7:17:40:35:
         ce:05:0d:9c:45:2b:03:f6:a0:22:49:30:9f:08:77:79:80:7f:
         22:f8:cb:0c:38:1a:9f:d8:e5:e5:c2:3f:81:72:16:ba:d5:87:
         eb:39:7e:06:43:df:93:2a:70:70:7b:9d:54:a0:ff:c0:f3:59:
         82:20:6d:3e:52:3f:ff:22:43:25:d1:0b:82:11:e0:67:23:77:
         74:ef:07:93:47:16:5e:fe:a4:90:a9:18:e5:49:3f:36:a7:79:
         52:d9:61:7c:a3:6e:f8:31:b8:b4:d9:48:4e:5f:20:73:cc:60:
         51:49:39:d4:c3:95:cb:37:57:5a:a0:e0:84:36:2e:73:34:81:
         e7:a3:33:55:55:04:2e:8a:2e:5e:90:79:85:c7:19:a5:5a:7a:
         61:84:29:20:2f:2b:a6:0b:5e:ac:25:65:e0:42:b8:75:5a:46:
         90:4c:5a:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/zioRLCM7HHgvo/6Vg93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWFjNzUzMzc5ZmQyMmZmNjUxNTAzM2Y1MTNkYzI4MjQ2
M2FkMmQwHhcNMjYwNTEzMTEwMDU3WhcNMjYwNTE0MTEwMDU3WjAzMTEwLwYDVQQD
EyhmNWE2NWYzMTY0ODRjNjQ2ZjAwZTY1MjlkNDQ4ZDcyOTRlNWNiZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMnOdqStncvrK5mxb5mGwwapK2Yk
guyUrNqkzVulnLh5ChqQ1QhB+pycVMMEo7B7InZKU36xVAShmYIhWWpvvWd5ZQCO
mOa1Rx2CUqZ768w32KjrgjIA2WCfUt1sKu2F3MGanHdKp8eeqKkhP5kxXjGBhQGX
pQ/COK2A8lDzEUqJgRRt+jgjFfw5xdBFzb7jQ1seWM+W1I7uUV/jgDNPB6oR3cYc
EIvnUuvUObJi5lE+vxVEpaKKO/mAsy1RRbb5HPvmsCjZ4Y619Rj2/9cqKdoI8iFk
iD1gZh3Mln998SEUAkg92LuJt4FUnPhYTIM8pwH+N2cKf07S9RZjyCbImQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWmXzFkhMZG8A5lKdRI1ylOXL/qMB8GA1UdIwQY
MBaAFJfqx1M3n9Iv9lFQM/UT3CgkY60tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQt
ZWY1OTBjMWM4ZTEyLzEvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQtZWY1OTBjMWM4ZTEy
LzEvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbF+R9+eR
0cGsxe7xEC89MJ4NJgzgXZWfOavolBuEpUzkPCEQFckXiUtu4wRIn+5ByEbHXZso
1k8uzs9D3cdkN5rtDq8/KZ9sWxPZAO8aS9Q509VHTPnXF0A1zgUNnEUrA/agIkkw
nwh3eYB/IvjLDDgan9jl5cI/gXIWutWH6zl+BkPfkypwcHudVKD/wPNZgiBtPlI/
/yJDJdELghHgZyN3dO8Hk0cWXv6kkKkY5Uk/Nqd5UtlhfKNu+DG4tNlITl8gc8xg
UUk51MOVyzdXWqDghDYuczSB56MzVVUELoouXpB5hccZpVp6YYQpIC8rpgterCVl
4EK4dVpGkExabw==
-----END CERTIFICATE-----
Generated at Wed May 13 19:48:58 2026 by rpki-client