Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File:                     C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier:          i3w1YwXwnK4mmyEKJPBkn3auDNqhguykKo99UZQWiJo=
Subject key identifier:   84:49:D1:B6:9F:86:87:AA:E6:5F:41:72:A5:CC:39:89:EC:91:6A:BB
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer:       /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial:       019E1DFE2D3019FBCFDE3C59E6BE229A096E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 21:00:57 +0000
Manifest this update:     Tue 12 May 2026 21:00:57 +0000
Manifest next update:     Wed 13 May 2026 21:00:57 +0000
Files and hashes:         1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: cL5ZRIefMdvBUJsLuavCYh1bRRhuuQjTXh7aaR7ldWw=)
                          2: NVXaED00Tks0cffjpQE1Y8p8He4.roa (hash: dC5/5uYQHiqKfAa0wK/7KjwQ7hQBtAToi6muCDxU9EI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:2d:30:19:fb:cf:de:3c:59:e6:be:22:9a:09:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
        Validity
            Not Before: May 12 21:00:57 2026 GMT
            Not After : May 13 21:00:57 2026 GMT
        Subject: CN=8449d1b69f8687aae65f4172a5cc3989ec916abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ce:75:a5:e3:37:aa:e6:7a:5c:67:cc:03:d0:
                    cd:82:2c:46:bc:1d:8f:d6:66:f2:98:a1:ab:6d:97:
                    1a:4d:67:97:dc:7c:1b:22:1e:d7:d4:ea:97:f5:e5:
                    c0:d2:72:5d:2b:9f:74:f5:d5:b0:d8:07:e3:bc:6b:
                    8c:ff:ae:5a:ad:c5:de:cc:56:f9:13:f7:f5:b9:be:
                    83:26:5b:05:a6:96:5f:f3:28:b7:37:05:7d:d8:71:
                    ac:eb:3d:dc:f0:9b:8b:60:86:82:1f:2d:26:05:64:
                    49:11:b7:96:7c:f2:d8:2d:9e:04:af:ac:a2:74:3b:
                    e5:63:f6:22:0a:cd:a8:c5:7c:2e:65:c4:ba:80:fa:
                    5f:61:57:12:f3:b6:4b:30:a5:47:b8:8f:7c:f5:8d:
                    f2:b5:e0:03:78:c1:b6:b5:b6:de:c3:8e:9f:b0:72:
                    58:3f:8f:04:68:db:78:53:23:ee:f3:2d:02:0f:de:
                    84:08:64:0f:cb:6f:f7:46:29:17:9b:92:98:c3:23:
                    d9:97:b2:74:fd:89:2b:24:89:6b:0f:0b:02:48:d6:
                    49:db:54:fe:1f:dc:c8:12:2c:3f:b0:b7:f9:be:fc:
                    c1:49:c4:c6:1f:5f:5d:da:66:38:9a:be:5e:d1:6c:
                    c2:4c:e7:75:5a:0a:55:76:ad:f1:15:1b:6b:39:ae:
                    12:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:49:D1:B6:9F:86:87:AA:E6:5F:41:72:A5:CC:39:89:EC:91:6A:BB
            X509v3 Authority Key Identifier:
                keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:60:58:8c:5d:30:d4:53:91:2d:fd:fd:2d:fe:fd:72:ba:12:
         88:1f:94:44:2b:37:d7:09:c2:b3:f9:9a:77:bc:9b:46:4b:b0:
         77:80:4b:ad:47:c9:5c:db:50:22:6b:78:52:20:88:0f:dc:ec:
         18:8b:e6:97:48:08:8c:dc:1d:17:bd:bb:c6:ee:66:d1:38:7a:
         4a:85:c5:41:7a:13:85:0f:a8:24:53:dc:26:c0:ec:2b:da:2f:
         05:7b:11:1a:e7:92:2b:c1:27:80:f9:bc:6a:42:d0:ac:1a:80:
         b5:74:41:d9:f8:8f:b9:bd:60:82:5b:8f:5e:9c:89:00:c1:75:
         4e:db:4e:2f:86:1c:6f:aa:4d:b2:85:77:1d:ba:41:b0:8b:5c:
         26:a3:80:20:55:f6:03:8a:4f:4d:a5:8d:98:03:41:ab:e7:55:
         15:b2:71:5a:df:a3:e7:15:88:7c:47:22:d3:1f:89:92:6d:a8:
         b4:f0:d2:33:0e:46:0e:27:e4:4a:86:f7:68:81:6f:c7:96:8e:
         a5:36:e3:4f:f1:e4:f1:41:e9:ba:1e:29:4f:c3:d8:fb:80:cc:
         50:dc:c7:52:23:e8:52:fa:d2:c9:76:1c:ea:96:91:bc:89:f2:
         c9:d6:7b:bf:e4:65:01:a9:74:65:5b:06:35:0f:36:ff:e2:12:
         5d:fe:64:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/i0wGfvP3jxZ5r4imgluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjJiYmFjYjQ3NGRkNjEwM2U4OTExN2E2MzY3NDU2OTY0
ZGYzMTkwHhcNMjYwNTEyMjEwMDU3WhcNMjYwNTEzMjEwMDU3WjAzMTEwLwYDVQQD
Eyg4NDQ5ZDFiNjlmODY4N2FhZTY1ZjQxNzJhNWNjMzk4OWVjOTE2YWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7s51peM3quZ6XGfMA9DNgixGvB2P
1mbymKGrbZcaTWeX3HwbIh7X1OqX9eXA0nJdK5909dWw2AfjvGuM/65arcXezFb5
E/f1ub6DJlsFppZf8yi3NwV92HGs6z3c8JuLYIaCHy0mBWRJEbeWfPLYLZ4Er6yi
dDvlY/YiCs2oxXwuZcS6gPpfYVcS87ZLMKVHuI989Y3yteADeMG2tbbew46fsHJY
P48EaNt4UyPu8y0CD96ECGQPy2/3RikXm5KYwyPZl7J0/YkrJIlrDwsCSNZJ21T+
H9zIEiw/sLf5vvzBScTGH19d2mY4mr5e0WzCTOd1WgpVdq3xFRtrOa4SUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRJ0bafhoeq5l9BcqXMOYnskWq7MB8GA1UdIwQY
MBaAFAvyu6y0dN1hA+iRF6Y2dFaWTfMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUt
ZDZiOTZlODhhNjExLzEvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUtZDZiOTZlODhhNjEx
LzEvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGBYjF0w
1FORLf39Lf79croSiB+URCs31wnCs/mad7ybRkuwd4BLrUfJXNtQImt4UiCID9zs
GIvml0gIjNwdF727xu5m0Th6SoXFQXoThQ+oJFPcJsDsK9ovBXsRGueSK8EngPm8
akLQrBqAtXRB2fiPub1ggluPXpyJAMF1TttOL4Ycb6pNsoV3HbpBsItcJqOAIFX2
A4pPTaWNmANBq+dVFbJxWt+j5xWIfEci0x+Jkm2otPDSMw5GDifkSob3aIFvx5aO
pTbjT/Hk8UHpuh4pT8PY+4DMUNzHUiPoUvrSyXYc6paRvInyydZ7v+RlAal0ZVsG
NQ82/+ISXf5kqg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:35:35 2026 by rpki-client