Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
File:                     5yaSa26JcM-E1rR1b6nFYhEgBTc.mft (raw, json)
Hash identifier:          QKzE3wcdIRu5slVqlseUnmKRfOXbsrPe8f7y9kjG4vg=
Subject key identifier:   01:4B:91:72:BD:94:2C:81:19:25:0D:86:A2:E7:0B:00:29:05:EF:B0
Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
Certificate issuer:       /CN=e726926b6e8970cf84d6b4756fa9c56211200537
Certificate serial:       019E1F1188753775EC31BB4BA5562E3B93F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
Manifest number:          1207
Signing time:             Wed 13 May 2026 02:01:43 +0000
Manifest this update:     Wed 13 May 2026 02:01:43 +0000
Manifest next update:     Thu 14 May 2026 02:01:43 +0000
Files and hashes:         1: 5yaSa26JcM-E1rR1b6nFYhEgBTc.crl (hash: IJ3X4OQ0SPuE5Z+mqwdLvAV6HtwHNSCvyOYTvzMKxzg=)
                          2: HCkHGxOIl0AvSluH6FDwE5YOqmY.roa (hash: ZodFEdt/PdT+m5KjweAMGEU2ve/bYXAovApfHVhI2mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:88:75:37:75:ec:31:bb:4b:a5:56:2e:3b:93:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537
        Validity
            Not Before: May 13 02:01:43 2026 GMT
            Not After : May 14 02:01:43 2026 GMT
        Subject: CN=014b9172bd942c8119250d86a2e70b002905efb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:a4:c3:eb:98:01:0a:e2:4a:96:40:1d:de:
                    8b:bc:c2:b5:c2:dd:d4:aa:ce:1f:7d:77:92:7d:b7:
                    82:13:5d:2f:c9:98:2c:89:37:60:6b:91:fe:12:2e:
                    6e:1b:6d:47:b0:53:ac:32:ba:3e:52:57:c9:4b:fc:
                    98:fc:44:ef:f4:ca:b4:04:c9:99:c6:cf:68:52:00:
                    be:9e:10:10:52:ad:86:c8:4e:8d:1d:73:20:91:92:
                    bb:48:89:55:70:20:8f:df:f0:77:7e:0b:5a:6b:3d:
                    bc:0d:d9:36:8a:cb:1d:d8:1a:6b:ea:7d:51:c9:3f:
                    38:47:f6:b2:04:27:cf:1b:35:d7:eb:b0:75:68:a4:
                    ed:d8:fe:8a:e7:0f:72:e0:b6:2d:1b:08:a9:e4:c2:
                    d5:71:45:23:d4:3b:47:5a:cd:67:2f:ed:94:8e:ba:
                    b7:72:07:2c:f8:8c:bb:e4:0d:5c:b9:66:e8:09:83:
                    4c:5a:d7:12:eb:82:fd:28:5f:27:f3:51:ed:b8:96:
                    67:7c:77:8c:83:35:95:45:1a:06:59:6f:12:c8:58:
                    56:d9:2e:f4:ac:34:79:40:78:f0:f1:d3:b8:50:9e:
                    98:eb:83:51:7c:33:d9:0a:e8:b4:f5:a0:bc:0c:e8:
                    ae:8f:f9:65:77:3c:d8:bf:db:b0:47:ac:f3:1c:56:
                    cf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4B:91:72:BD:94:2C:81:19:25:0D:86:A2:E7:0B:00:29:05:EF:B0
            X509v3 Authority Key Identifier:
                keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8f:2c:6f:f7:9e:e7:fd:8c:75:7e:5d:7f:31:b7:9a:66:06:
         1c:d8:cf:85:35:f6:c7:39:46:47:64:01:55:92:f4:f7:b6:f6:
         c5:02:c1:fb:68:d6:b7:34:f1:40:ae:cb:27:73:99:5c:4f:94:
         4d:89:3e:4c:a2:55:af:04:dd:c6:f5:68:3c:80:02:a7:01:b8:
         a5:05:0b:0a:84:5b:a8:dc:19:14:14:d2:10:f3:58:7a:0a:53:
         9f:2e:e6:a9:45:5f:4d:71:29:50:b0:d5:4b:22:a5:9e:7a:89:
         bc:8a:64:e6:04:a6:97:2d:99:49:32:e4:b6:76:a2:53:40:9c:
         b0:23:45:2b:44:41:5d:84:21:07:62:79:14:cd:9e:b9:b9:6f:
         79:c2:6f:25:f8:6c:19:84:df:fc:a5:f5:07:9f:28:25:2c:bb:
         7b:6b:ae:cf:78:0f:c6:dd:5b:b6:6f:81:d1:f5:20:e4:9c:dd:
         5b:f9:12:e7:06:4f:ce:4b:47:b8:2f:64:99:ce:96:96:26:41:
         e8:df:f8:eb:00:9a:a2:44:53:5a:f0:49:38:a2:53:0e:65:ad:
         69:5b:91:58:ec:2d:3d:35:11:4d:5b:90:51:23:36:08:a4:ad:
         bf:4f:19:63:1f:2d:a9:96:7f:b9:1f:d6:f3:4a:0a:c1:7a:26:
         4e:92:b1:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEYh1N3XsMbtLpVYuO5PwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MjY5MjZiNmU4OTcwY2Y4NGQ2YjQ3NTZmYTljNTYyMTEy
MDA1MzcwHhcNMjYwNTEzMDIwMTQzWhcNMjYwNTE0MDIwMTQzWjAzMTEwLwYDVQQD
EygwMTRiOTE3MmJkOTQyYzgxMTkyNTBkODZhMmU3MGIwMDI5MDVlZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1qkw+uYAQriSpZAHd6LvMK1wt3U
qs4ffXeSfbeCE10vyZgsiTdga5H+Ei5uG21HsFOsMro+UlfJS/yY/ETv9Mq0BMmZ
xs9oUgC+nhAQUq2GyE6NHXMgkZK7SIlVcCCP3/B3fgtaaz28Ddk2issd2Bpr6n1R
yT84R/ayBCfPGzXX67B1aKTt2P6K5w9y4LYtGwip5MLVcUUj1DtHWs1nL+2Ujrq3
cgcs+Iy75A1cuWboCYNMWtcS64L9KF8n81HtuJZnfHeMgzWVRRoGWW8SyFhW2S70
rDR5QHjw8dO4UJ6Y64NRfDPZCui09aC8DOiuj/lldzzYv9uwR6zzHFbP2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFLkXK9lCyBGSUNhqLnCwApBe+wMB8GA1UdIwQY
MBaAFOcmkmtuiXDPhNa0dW+pxWIRIAU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kNzE4ZTQtOGFiYy00YjIzLWFjMTAt
YzEwMmVlOTY4NThlLzEvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9kNzE4ZTQtOGFiYy00YjIzLWFjMTAtYzEwMmVlOTY4NThl
LzEvNXlhU2EyNkpjTS1FMXJSMWI2bkZZaEVnQlRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAio8sb/ee
5/2MdX5dfzG3mmYGHNjPhTX2xzlGR2QBVZL097b2xQLB+2jWtzTxQK7LJ3OZXE+U
TYk+TKJVrwTdxvVoPIACpwG4pQULCoRbqNwZFBTSEPNYegpTny7mqUVfTXEpULDV
SyKlnnqJvIpk5gSmly2ZSTLktnaiU0CcsCNFK0RBXYQhB2J5FM2eublvecJvJfhs
GYTf/KX1B58oJSy7e2uuz3gPxt1btm+B0fUg5JzdW/kS5wZPzktHuC9kmc6WliZB
6N/46wCaokRTWvBJOKJTDmWtaVuRWOwtPTURTVuQUSM2CKStv08ZYx8tqZZ/uR/W
80oKwXomTpKxKw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:28:22 2026 by rpki-client