Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
File:                     Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft (raw, json)
Hash identifier:          oJ8gM3MlkqQEVYGq1UK1bJASOHSE/plXQE4lNDHjK2o=
Subject key identifier:   45:CB:AE:D6:34:03:C1:F6:47:71:38:3F:DB:2F:93:87:DF:04:46:C6
Authority key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
Certificate issuer:       /CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Certificate serial:       019E1C471BB27BB8D12768F545A684F48564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 13:01:22 +0000
Manifest this update:     Tue 12 May 2026 13:01:22 +0000
Manifest next update:     Wed 13 May 2026 13:01:22 +0000
Files and hashes:         1: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl (hash: 0KsBIehB3NyD3YGLasR7Ej37xQZvuVGZHJn+lc8xh4E=)
                          2: eCyziES9pqG-mQfeLtr0n6C5-NA.roa (hash: l6vsyJV9WvrG97VV98IwTWvWh3E/Ue4n2AyaMsNRcxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:1b:b2:7b:b8:d1:27:68:f5:45:a6:84:f4:85:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032d39ce91be867cf5ce1b6009d5262c28b65209
        Validity
            Not Before: May 12 13:01:22 2026 GMT
            Not After : May 13 13:01:22 2026 GMT
        Subject: CN=45cbaed63403c1f64771383fdb2f9387df0446c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:00:26:dc:b7:de:55:a5:ce:c2:6f:9b:bc:
                    0c:88:19:56:fb:c5:8a:6e:ec:af:82:2b:1e:3b:a1:
                    e8:b7:04:a4:54:15:48:86:ee:39:19:ef:2a:d3:e6:
                    68:71:9d:36:41:4c:9a:dc:7c:5f:ec:f3:72:16:68:
                    6f:8e:a3:8f:4a:ef:23:90:ea:4d:11:fc:07:9a:72:
                    48:42:4d:ad:bb:39:25:58:48:de:e4:d6:60:34:b3:
                    28:29:db:87:d0:d6:67:db:10:08:2d:09:95:c3:57:
                    b2:22:ba:a5:50:8b:ed:aa:3a:26:71:96:b0:1d:f9:
                    e3:7e:fd:22:0a:cd:11:7c:0b:88:f2:de:59:4a:90:
                    89:62:8d:5b:48:e1:44:35:8e:55:de:27:0a:ab:42:
                    63:97:bd:16:7c:29:16:d6:71:30:87:16:1b:f6:20:
                    3e:24:00:6d:00:e2:34:00:f5:39:4c:78:38:75:97:
                    16:f7:42:e6:0c:97:ca:69:01:08:14:a6:5c:fa:a7:
                    b0:95:12:6a:ce:eb:78:8b:18:1b:22:3f:4c:7b:47:
                    9e:92:5b:a7:d2:cc:65:f3:2e:6a:41:98:b0:9c:14:
                    13:74:51:fb:2b:d5:06:a2:e4:d6:0e:d5:c0:ed:68:
                    06:92:62:98:86:cf:fe:54:f3:e3:b2:d7:1c:2b:67:
                    08:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CB:AE:D6:34:03:C1:F6:47:71:38:3F:DB:2F:93:87:DF:04:46:C6
            X509v3 Authority Key Identifier:
                keyid:03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d1:01:16:9b:83:8b:d5:f6:7f:55:cb:4d:8f:ca:04:9d:23:
         34:24:59:95:57:ce:d1:6f:6c:b8:24:13:88:f3:c0:28:54:39:
         4d:ff:f9:82:dd:96:bf:cf:b3:70:cc:55:f5:59:00:d6:aa:9a:
         4f:99:42:fd:bb:71:47:68:1d:85:40:4e:5b:ce:ab:75:47:f4:
         ec:0d:c1:b7:2b:3e:fc:7f:59:5d:a2:65:87:9e:1e:13:3e:89:
         b8:e1:74:58:aa:e9:54:9f:69:f6:b8:73:b3:ba:35:8d:80:d0:
         49:ba:f5:2c:d7:b2:c3:dd:43:58:21:05:35:4f:82:c9:8d:af:
         f4:19:24:a2:f3:54:49:36:e4:80:95:4f:64:aa:96:b2:b3:5f:
         af:73:c3:2d:79:cf:ba:77:b3:a7:53:f9:d8:c4:47:64:a5:f7:
         e6:6e:2c:ac:a8:29:b6:3e:54:75:38:84:a7:9f:a9:0e:10:69:
         e0:e3:18:74:c1:5d:a9:3e:a2:35:06:63:ca:86:7b:1a:81:f2:
         06:47:9e:ed:d9:9e:50:eb:f3:c4:6f:95:9a:7d:7e:a6:f1:8a:
         f1:8f:6c:da:39:e8:85:fd:e3:05:6b:d3:b5:6c:85:b6:76:62:
         cd:23:ac:cd:7d:fe:ff:8c:5e:a5:cd:78:ef:96:a7:9b:eb:e2:
         31:27:00:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRxuye7jRJ2j1RaaE9IVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMmQzOWNlOTFiZTg2N2NmNWNlMWI2MDA5ZDUyNjJjMjhi
NjUyMDkwHhcNMjYwNTEyMTMwMTIyWhcNMjYwNTEzMTMwMTIyWjAzMTEwLwYDVQQD
Eyg0NWNiYWVkNjM0MDNjMWY2NDc3MTM4M2ZkYjJmOTM4N2RmMDQ0NmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9YAJty33lWlzsJvm7wMiBlW+8WK
buyvgiseO6HotwSkVBVIhu45Ge8q0+ZocZ02QUya3Hxf7PNyFmhvjqOPSu8jkOpN
EfwHmnJIQk2tuzklWEje5NZgNLMoKduH0NZn2xAILQmVw1eyIrqlUIvtqjomcZaw
Hfnjfv0iCs0RfAuI8t5ZSpCJYo1bSOFENY5V3icKq0Jjl70WfCkW1nEwhxYb9iA+
JABtAOI0APU5THg4dZcW90LmDJfKaQEIFKZc+qewlRJqzut4ixgbIj9Me0eeklun
0sxl8y5qQZiwnBQTdFH7K9UGouTWDtXA7WgGkmKYhs/+VPPjstccK2cIuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXLrtY0A8H2R3E4P9svk4ffBEbGMB8GA1UdIwQY
MBaAFAMtOc6RvoZ89c4bYAnVJiwotlIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXkwNXpwRy1obnoxemh0Z0NkVW1MQ2kyVWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jYmU4ZTctNWE3OC00NTU4LTk5NTEt
ODRhY2NlY2M1MWYwLzEvQXkwNXpwRy1obnoxemh0Z0NkVW1MQ2kyVWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9jYmU4ZTctNWE3OC00NTU4LTk5NTEtODRhY2NlY2M1MWYw
LzEvQXkwNXpwRy1obnoxemh0Z0NkVW1MQ2kyVWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNEBFpuD
i9X2f1XLTY/KBJ0jNCRZlVfO0W9suCQTiPPAKFQ5Tf/5gt2Wv8+zcMxV9VkA1qqa
T5lC/btxR2gdhUBOW86rdUf07A3Btys+/H9ZXaJlh54eEz6JuOF0WKrpVJ9p9rhz
s7o1jYDQSbr1LNeyw91DWCEFNU+CyY2v9BkkovNUSTbkgJVPZKqWsrNfr3PDLXnP
unezp1P52MRHZKX35m4srKgptj5UdTiEp5+pDhBp4OMYdMFdqT6iNQZjyoZ7GoHy
Bkee7dmeUOvzxG+Vmn1+pvGK8Y9s2jnohf3jBWvTtWyFtnZizSOszX3+/4xepc14
75anm+viMScAJw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:15:20 2026 by rpki-client