Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
File:                     EVVnl9qc5x7sKV81sAhZuQzoxfA.mft (raw, json)
Hash identifier:          /xowdTjgQ1vHB+/vOqWctoyfyS63XjjukxC44b6vI6A=
Subject key identifier:   42:25:C3:3A:FA:E5:9D:58:C7:92:0B:14:02:AA:49:0A:8C:9F:C5:24
Authority key identifier: 11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0
Certificate issuer:       /CN=11556797da9ce71eec295f35b00859b90ce8c5f0
Certificate serial:       019E205ACB4786591EC7C67CD9E3C50AB0DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
Manifest number:          011F
Signing time:             Wed 13 May 2026 08:01:21 +0000
Manifest this update:     Wed 13 May 2026 08:01:21 +0000
Manifest next update:     Thu 14 May 2026 08:01:21 +0000
Files and hashes:         1: EVVnl9qc5x7sKV81sAhZuQzoxfA.crl (hash: A006FzL3VvB9/1i3TZ+R0OeqZk1L19236LuuViN3TnU=)
                          2: tUtGKToVFVEdLnvzwP_qbyoWrD4.roa (hash: oDawWr/gCtZY5IlLhtFkFwJPnj3rhzKF04OEEY7CZlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:cb:47:86:59:1e:c7:c6:7c:d9:e3:c5:0a:b0:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11556797da9ce71eec295f35b00859b90ce8c5f0
        Validity
            Not Before: May 13 08:01:21 2026 GMT
            Not After : May 14 08:01:21 2026 GMT
        Subject: CN=4225c33afae59d58c7920b1402aa490a8c9fc524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:4d:90:80:0e:99:40:40:22:e1:c5:fa:a5:
                    a3:f2:49:d0:fc:36:57:46:89:b4:1c:01:7f:a3:8d:
                    6e:b5:e1:0e:71:ee:86:6f:46:f1:dc:e0:62:4d:b6:
                    30:d6:cd:6b:58:0b:bd:cd:a3:57:3f:5d:5a:10:fa:
                    6e:ac:37:40:8c:48:f5:10:9d:ff:21:71:27:f1:48:
                    35:23:f0:86:9a:23:ce:ea:e8:2c:fd:c7:52:e9:d7:
                    d4:aa:b5:51:c9:c7:38:38:ee:b8:ec:8e:20:aa:7c:
                    ec:04:04:10:39:e5:01:ce:8b:12:6a:72:28:06:0e:
                    d7:42:3b:ee:6e:a0:22:9a:39:92:a6:0d:ff:33:ff:
                    01:f2:64:28:f4:ab:bc:7f:52:fa:71:c5:f1:f4:1b:
                    53:a4:0b:9c:04:51:77:13:a2:08:be:66:46:31:50:
                    fd:e8:01:e4:3c:63:50:dc:bc:fd:e8:18:4e:5d:45:
                    e6:51:48:de:a0:4d:ea:52:6e:41:36:3f:2b:9a:fa:
                    54:cc:4e:c5:7b:2e:51:68:79:7b:92:84:db:97:09:
                    a7:59:fa:64:b2:c5:61:72:57:1b:54:e7:a9:ae:b6:
                    7c:d4:e8:1c:b4:6e:be:4f:e8:48:95:eb:98:d4:e0:
                    2c:aa:18:33:24:98:57:fd:d7:53:71:ac:05:3b:81:
                    d5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:25:C3:3A:FA:E5:9D:58:C7:92:0B:14:02:AA:49:0A:8C:9F:C5:24
            X509v3 Authority Key Identifier:
                keyid:11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0e:7f:62:7f:33:9e:c3:42:9c:70:a2:81:04:22:1d:8e:06:
         2d:f5:68:31:61:ea:99:2d:6e:27:d9:2e:d4:22:b9:fb:4c:d7:
         71:ca:b0:82:d8:ce:01:43:58:35:52:cd:f7:11:56:c9:6f:c1:
         91:d6:eb:c6:81:ae:71:26:77:5c:95:29:c6:f7:8d:30:7d:0d:
         2d:43:d9:57:95:d6:08:28:c9:63:a4:1b:b4:b2:ae:8f:b6:00:
         ad:9f:44:78:80:60:86:77:e4:a1:ad:b2:aa:a2:48:ff:f5:7a:
         b0:ca:6d:03:f2:88:cd:b3:f5:50:d4:c1:9d:dd:db:76:2d:77:
         66:b5:0e:43:f6:24:b3:ef:b2:11:24:11:de:c3:e7:77:51:a0:
         e6:02:6b:93:03:cd:53:78:ac:b4:54:f6:42:5f:69:4d:7e:97:
         95:ec:ce:b5:88:30:b8:2b:84:97:28:8d:26:ec:a5:32:5f:3f:
         a4:d1:08:3c:35:40:d0:ca:55:49:92:1b:43:af:c5:44:86:f5:
         4b:1c:08:80:5d:53:da:90:8e:9d:4b:60:f6:df:66:de:6f:8c:
         aa:29:8f:03:b6:fa:83:c4:21:a4:1c:d4:8f:87:7f:51:dd:77:
         04:9f:d2:6c:3b:ad:f9:71:1a:21:df:a4:08:ab:d0:2d:ff:ca:
         b4:e3:9f:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWstHhlkex8Z82ePFCrDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNTU2Nzk3ZGE5Y2U3MWVlYzI5NWYzNWIwMDg1OWI5MGNl
OGM1ZjAwHhcNMjYwNTEzMDgwMTIxWhcNMjYwNTE0MDgwMTIxWjAzMTEwLwYDVQQD
Eyg0MjI1YzMzYWZhZTU5ZDU4Yzc5MjBiMTQwMmFhNDkwYThjOWZjNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz45NkIAOmUBAIuHF+qWj8knQ/DZX
Rom0HAF/o41uteEOce6Gb0bx3OBiTbYw1s1rWAu9zaNXP11aEPpurDdAjEj1EJ3/
IXEn8Ug1I/CGmiPO6ugs/cdS6dfUqrVRycc4OO647I4gqnzsBAQQOeUBzosSanIo
Bg7XQjvubqAimjmSpg3/M/8B8mQo9Ku8f1L6ccXx9BtTpAucBFF3E6IIvmZGMVD9
6AHkPGNQ3Lz96BhOXUXmUUjeoE3qUm5BNj8rmvpUzE7Fey5RaHl7koTblwmnWfpk
ssVhclcbVOeprrZ81OgctG6+T+hIleuY1OAsqhgzJJhX/ddTcawFO4HVowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIlwzr65Z1Yx5ILFAKqSQqMn8UkMB8GA1UdIwQY
MBaAFBFVZ5fanOce7ClfNbAIWbkM6MXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVZWbmw5cWM1eDdzS1Y4MXNBaFp1UXpveGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80Njk2ZTUtZmNlYy00NGEwLThmMDMt
MWVlZGE5YTlmZjhmLzEvRVZWbmw5cWM1eDdzS1Y4MXNBaFp1UXpveGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80Njk2ZTUtZmNlYy00NGEwLThmMDMtMWVlZGE5YTlmZjhm
LzEvRVZWbmw5cWM1eDdzS1Y4MXNBaFp1UXpveGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZw5/Yn8z
nsNCnHCigQQiHY4GLfVoMWHqmS1uJ9ku1CK5+0zXccqwgtjOAUNYNVLN9xFWyW/B
kdbrxoGucSZ3XJUpxveNMH0NLUPZV5XWCCjJY6QbtLKuj7YArZ9EeIBghnfkoa2y
qqJI//V6sMptA/KIzbP1UNTBnd3bdi13ZrUOQ/Yks++yESQR3sPnd1Gg5gJrkwPN
U3istFT2Ql9pTX6XlezOtYgwuCuElyiNJuylMl8/pNEIPDVA0MpVSZIbQ6/FRIb1
SxwIgF1T2pCOnUtg9t9m3m+MqimPA7b6g8QhpBzUj4d/Ud13BJ/SbDut+XEaId+k
CKvQLf/KtOOffQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:39:05 2026 by rpki-client