Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
File:                     L228auC1ihFzHyGe2gIkcdHhHts.mft (raw, json)
Hash identifier:          89LoNPnUkqX2lfQk0b8GjnO6b0Q5zKtKsSgDgTd0LhU=
Subject key identifier:   16:E3:9F:CB:A5:FC:F7:87:14:C7:BA:F8:54:C3:88:A1:EF:C0:43:73
Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
Certificate issuer:       /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Certificate serial:       019E1E6C3AA9CFE589450274AB3CB107AC97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
Manifest number:          072F
Signing time:             Tue 12 May 2026 23:01:09 +0000
Manifest this update:     Tue 12 May 2026 23:01:09 +0000
Manifest next update:     Wed 13 May 2026 23:01:09 +0000
Files and hashes:         1: L228auC1ihFzHyGe2gIkcdHhHts.crl (hash: /iv5vdtoSnOzPn70y5EaU+ycGU63myz/lb89KbNIwjo=)
                          2: moBWHmY5dUscCoFGFgkj8lgTo6k.roa (hash: SdWsLpL7bWufA3L06GIvSvKd8LEI6DM8Lhn01PlHx/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:3a:a9:cf:e5:89:45:02:74:ab:3c:b1:07:ac:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
        Validity
            Not Before: May 12 23:01:09 2026 GMT
            Not After : May 13 23:01:09 2026 GMT
        Subject: CN=16e39fcba5fcf78714c7baf854c388a1efc04373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:2d:f4:48:f7:3f:5e:d0:a5:21:9d:4c:a7:
                    dc:2b:40:ce:c9:90:3f:78:d4:91:08:63:03:a4:bc:
                    8f:24:7b:a8:37:14:35:b7:06:d3:bf:31:03:99:e5:
                    28:0d:58:0f:79:ce:aa:26:b6:78:6e:15:b8:47:b5:
                    41:a2:c1:6e:3c:51:c3:f2:5f:1c:f1:9c:eb:1b:62:
                    d4:77:0e:2c:bd:31:68:b4:a5:a8:72:21:7a:d5:f4:
                    a8:e8:52:f0:47:83:22:08:3d:cb:f9:98:a8:66:21:
                    c1:19:23:7e:16:87:71:dd:2d:6a:80:7b:55:00:19:
                    fb:f0:7d:90:78:80:43:d4:26:ad:3c:dd:37:bb:ba:
                    f6:b2:93:48:d7:7a:9a:3a:e7:8a:1c:c8:29:a4:93:
                    31:51:c5:76:5f:68:f8:04:25:6a:f8:0d:11:4f:c9:
                    71:40:ae:4a:38:16:c8:05:f4:c5:10:83:85:5f:f9:
                    d4:77:be:3a:19:89:b7:9d:0e:3d:7a:e0:29:ab:d3:
                    d0:7d:9a:5d:14:41:d2:fa:64:ab:e9:41:32:29:ff:
                    26:79:83:06:54:08:ba:e4:cf:3f:7d:bb:63:92:22:
                    8d:58:d0:a8:f7:bc:71:b0:5b:1a:8a:ce:52:07:90:
                    04:ba:71:df:27:19:4d:45:fd:3a:b9:42:79:fa:6e:
                    51:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E3:9F:CB:A5:FC:F7:87:14:C7:BA:F8:54:C3:88:A1:EF:C0:43:73
            X509v3 Authority Key Identifier:
                keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:16:6a:54:a0:e2:3d:2a:0c:f0:28:33:13:ba:8e:9c:17:6d:
         75:4d:ab:f8:07:98:5a:cd:d8:d0:88:07:92:77:02:0e:6b:d4:
         71:c8:52:3a:fd:58:6f:dc:b7:51:c6:b8:de:3f:71:3d:0d:c9:
         4f:89:eb:19:6f:5d:83:01:97:b5:0d:44:98:b2:71:e1:91:5c:
         3f:0f:ef:14:23:d0:6d:7b:5a:fe:1c:2f:a3:d3:05:02:7a:71:
         84:0e:62:a4:1c:6e:ce:94:7a:dc:09:8a:25:a2:ab:25:4d:82:
         86:e3:bd:44:d1:82:d9:95:a0:81:56:c5:80:68:d1:18:6c:80:
         83:b9:96:a3:f9:c8:9a:39:a9:fb:c0:3f:4f:85:0e:46:f1:3b:
         67:dc:96:26:f6:1d:a5:48:b9:38:a1:fc:13:fd:bf:32:54:f0:
         5e:92:ab:28:a0:fb:44:47:4e:84:31:bd:c0:5b:e4:83:6a:2e:
         4b:1c:3d:b4:66:20:79:8d:be:f1:0c:23:b6:ec:1d:4e:4f:f1:
         d6:7a:35:b0:bb:b3:47:11:d7:7b:04:b8:34:0e:0d:49:95:f4:
         e7:57:63:40:55:68:4d:02:7a:e7:28:85:74:ea:52:c8:1c:80:
         ca:79:23:bc:78:fc:1d:7b:9a:31:bb:5d:e1:ef:78:a1:d1:d1:
         57:d4:59:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebDqpz+WJRQJ0qzyxB6yXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmRiYzZhZTBiNThhMTE3MzFmMjE5ZWRhMDIyNDcxZDFl
MTFlZGIwHhcNMjYwNTEyMjMwMTA5WhcNMjYwNTEzMjMwMTA5WjAzMTEwLwYDVQQD
EygxNmUzOWZjYmE1ZmNmNzg3MTRjN2JhZjg1NGMzODhhMWVmYzA0MzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMot9Ej3P17QpSGdTKfcK0DOyZA/
eNSRCGMDpLyPJHuoNxQ1twbTvzEDmeUoDVgPec6qJrZ4bhW4R7VBosFuPFHD8l8c
8ZzrG2LUdw4svTFotKWociF61fSo6FLwR4MiCD3L+ZioZiHBGSN+Fodx3S1qgHtV
ABn78H2QeIBD1CatPN03u7r2spNI13qaOueKHMgppJMxUcV2X2j4BCVq+A0RT8lx
QK5KOBbIBfTFEIOFX/nUd746GYm3nQ49euApq9PQfZpdFEHS+mSr6UEyKf8meYMG
VAi65M8/fbtjkiKNWNCo97xxsFsais5SB5AEunHfJxlNRf06uUJ5+m5RpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbjn8ul/PeHFMe6+FTDiKHvwENzMB8GA1UdIwQY
MBaAFC9tvGrgtYoRcx8hntoCJHHR4R7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNmQwNjItOGY3Ny00OTdkLWIxODEt
MjUxMGRhYzMyNDk2LzEvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lNmQwNjItOGY3Ny00OTdkLWIxODEtMjUxMGRhYzMyNDk2
LzEvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBZqVKDi
PSoM8CgzE7qOnBdtdU2r+AeYWs3Y0IgHkncCDmvUcchSOv1Yb9y3Uca43j9xPQ3J
T4nrGW9dgwGXtQ1EmLJx4ZFcPw/vFCPQbXta/hwvo9MFAnpxhA5ipBxuzpR63AmK
JaKrJU2ChuO9RNGC2ZWggVbFgGjRGGyAg7mWo/nImjmp+8A/T4UORvE7Z9yWJvYd
pUi5OKH8E/2/MlTwXpKrKKD7REdOhDG9wFvkg2ouSxw9tGYgeY2+8QwjtuwdTk/x
1no1sLuzRxHXewS4NA4NSZX051djQFVoTQJ65yiFdOpSyByAynkjvHj8HXuaMbtd
4e94odHRV9RZow==
-----END CERTIFICATE-----
Generated at Wed May 13 05:29:48 2026 by rpki-client