Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File:                     0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier:          aCnyVuURanwtSZO4LHSGlLFw2c975THuCFFiCAx3Kxo=
Subject key identifier:   F2:0E:6F:DA:9C:6E:53:E9:2B:19:6C:78:BD:CB:89:D7:1A:E8:49:4F
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer:       /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial:       019E1CB56EF7C08F62FA252ACBD9C5F62C00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number:          0E7B
Signing time:             Tue 12 May 2026 15:01:52 +0000
Manifest this update:     Tue 12 May 2026 15:01:52 +0000
Manifest next update:     Wed 13 May 2026 15:01:52 +0000
Files and hashes:         1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: gd2e3rabn7dfe9MdD2HXoo4C2y6mlP6qyAwys1SdKSs=)
                          2: SDFl7Ghrn8OImQYaEQhfjIMPxV4.roa (hash: zEIszlh7/IsglvkUKq1YDgPEJ8YJJSEFUJH4U3GhCJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:6e:f7:c0:8f:62:fa:25:2a:cb:d9:c5:f6:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
        Validity
            Not Before: May 12 15:01:52 2026 GMT
            Not After : May 13 15:01:52 2026 GMT
        Subject: CN=f20e6fda9c6e53e92b196c78bdcb89d71ae8494f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:20:6d:19:a4:79:56:10:88:b3:3e:43:29:54:
                    42:c0:f2:cb:41:e9:ce:03:e1:06:93:70:c7:7a:da:
                    8b:e9:e6:5c:0d:ee:85:ba:14:18:ae:54:bc:8e:87:
                    6c:f8:6c:d0:e2:a2:58:62:fb:c4:08:b4:b1:c6:c4:
                    1b:c0:89:91:28:24:0e:3c:15:a2:99:a4:ec:2c:af:
                    49:03:79:5f:5a:22:5a:50:42:10:16:f6:9a:8b:a6:
                    4e:b4:84:c1:f2:69:e0:f9:e0:82:c9:a3:3b:05:94:
                    c6:27:6a:2d:e0:00:c0:6e:05:37:91:2d:a5:a4:a2:
                    61:2f:74:12:0d:3a:a5:ca:36:2c:00:a0:84:8b:b5:
                    ef:e6:8c:2f:4e:f8:a7:1b:96:87:ee:2a:32:2b:6c:
                    f0:e3:cd:2d:28:41:2d:fc:be:4c:f2:62:e4:03:0f:
                    d3:a2:82:47:95:c8:ad:a2:b8:af:c6:a6:fb:0e:67:
                    0b:bc:93:1d:9f:e1:65:ad:52:e4:fe:1c:1b:fa:1f:
                    69:f2:40:eb:0e:32:d1:37:de:2c:4c:5f:aa:e3:b9:
                    2e:de:c0:ce:c6:eb:ae:dd:3f:b5:c8:45:7c:97:af:
                    4b:42:29:f6:26:b8:db:eb:e1:8b:b5:35:4a:f9:26:
                    61:6a:16:79:48:48:92:29:32:11:34:58:e0:a9:bb:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0E:6F:DA:9C:6E:53:E9:2B:19:6C:78:BD:CB:89:D7:1A:E8:49:4F
            X509v3 Authority Key Identifier:
                keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:05:a1:0b:ee:54:5f:c2:8e:d4:d7:0e:85:4b:67:7c:94:a8:
         65:a4:9e:d7:6b:e2:c5:f5:54:ec:e9:ae:08:cb:bc:2c:15:d6:
         ef:4c:89:b5:52:0e:8e:70:a7:26:b9:63:2a:c6:4c:8e:fd:7f:
         b2:6d:28:1f:fd:16:bb:84:9e:af:86:f6:11:d6:a2:96:47:58:
         78:0b:56:04:d4:8a:94:d4:17:b4:f2:17:99:83:17:a5:06:f9:
         04:8f:87:68:9d:18:88:23:cd:d5:3f:d8:c2:6c:cb:5c:b9:dc:
         5d:13:4b:7e:82:ee:fd:99:de:fe:79:50:8c:cd:93:48:c1:fe:
         41:74:92:7c:ab:e5:48:8b:e1:a9:eb:fa:4d:84:6b:37:c2:f5:
         db:87:01:27:f7:d3:80:d2:17:32:47:ed:12:e0:e5:65:5d:ee:
         d8:fa:22:53:7e:37:ae:4d:df:7b:e0:5e:85:00:2e:4e:13:a7:
         c5:0f:53:75:21:7c:ea:93:f4:c4:77:f2:ac:39:df:0c:3d:af:
         45:67:01:fe:14:c9:4c:dc:f7:0c:2f:db:ec:96:70:29:52:d4:
         70:3c:13:dd:bd:6a:e2:bd:00:5c:7d:61:a6:24:a9:10:2d:bb:
         10:1e:64:76:8e:ae:d3:9f:3a:d7:b6:00:a3:9b:6d:b2:28:64:
         1b:30:2b:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctW73wI9i+iUqy9nF9iwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzM2Q2YjU1OWQzNmM0MTMwNzY5MmE3YjBmYjNlZjc3YWE2
MDE3Y2UwHhcNMjYwNTEyMTUwMTUyWhcNMjYwNTEzMTUwMTUyWjAzMTEwLwYDVQQD
EyhmMjBlNmZkYTljNmU1M2U5MmIxOTZjNzhiZGNiODlkNzFhZTg0OTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CBtGaR5VhCIsz5DKVRCwPLLQenO
A+EGk3DHetqL6eZcDe6FuhQYrlS8jods+GzQ4qJYYvvECLSxxsQbwImRKCQOPBWi
maTsLK9JA3lfWiJaUEIQFvaai6ZOtITB8mng+eCCyaM7BZTGJ2ot4ADAbgU3kS2l
pKJhL3QSDTqlyjYsAKCEi7Xv5owvTvinG5aH7ioyK2zw480tKEEt/L5M8mLkAw/T
ooJHlcitorivxqb7DmcLvJMdn+FlrVLk/hwb+h9p8kDrDjLRN94sTF+q47ku3sDO
xuuu3T+1yEV8l69LQin2Jrjb6+GLtTVK+SZhahZ5SEiSKTIRNFjgqbvTZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIOb9qcblPpKxlseL3Lidca6ElPMB8GA1UdIwQY
MBaAFNM9a1WdNsQTB2kqew+z73eqYBfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYt
NWUzYjZlYTVhN2VlLzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYtNWUzYjZlYTVhN2Vl
LzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQWhC+5U
X8KO1NcOhUtnfJSoZaSe12vixfVU7OmuCMu8LBXW70yJtVIOjnCnJrljKsZMjv1/
sm0oH/0Wu4Ser4b2EdailkdYeAtWBNSKlNQXtPIXmYMXpQb5BI+HaJ0YiCPN1T/Y
wmzLXLncXRNLfoLu/Zne/nlQjM2TSMH+QXSSfKvlSIvhqev6TYRrN8L124cBJ/fT
gNIXMkftEuDlZV3u2PoiU343rk3fe+BehQAuThOnxQ9TdSF86pP0xHfyrDnfDD2v
RWcB/hTJTNz3DC/b7JZwKVLUcDwT3b1q4r0AXH1hpiSpEC27EB5kdo6u058617YA
o5ttsihkGzAr7g==
-----END CERTIFICATE-----
Generated at Wed May 13 00:26:00 2026 by rpki-client