Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File:                     1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier:          ZqEaM9cwE9PoUmuO/YyMe0g5L37lngyLSYpZoGhVomA=
Subject key identifier:   67:3B:0B:C0:F6:6F:22:7E:1A:64:55:A2:AA:97:FA:BB:83:F2:6F:7F
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer:       /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial:       019E1D59773E8A4977B1A2B8FD24F3077D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 18:01:02 +0000
Manifest this update:     Tue 12 May 2026 18:01:02 +0000
Manifest next update:     Wed 13 May 2026 18:01:02 +0000
Files and hashes:         1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: +VsnNzBTXgKHBWF8exYLqTu4PT8n2mY352DDF1c9i6w=)
                          2: jcfKGbQz1qnhTGap3aNlvjbY_PE.roa (hash: U5EqxnRh9X9yMHUKWkXGl9r7bwjPH+bTHFfUvq5SIl4=)
                          3: t8JuvA_vhb4W5m-qqwK3zHuGsyA.roa (hash: FDUw+pc8vLRfzGQdAP47yUYCrzZ18DAW4vtpi+PI2Qo=)
                          4: uUrqBhh3OXly7eOQWNASPejUHp8.asa (hash: RetXR2CIKbeJVmkMUmUQ4OnKEpmaGDtgHyAAr0pvXgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:77:3e:8a:49:77:b1:a2:b8:fd:24:f3:07:7d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
        Validity
            Not Before: May 12 18:01:02 2026 GMT
            Not After : May 13 18:01:02 2026 GMT
        Subject: CN=673b0bc0f66f227e1a6455a2aa97fabb83f26f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:85:f7:5c:5a:2d:ab:5e:d0:50:23:34:4c:47:
                    fa:73:aa:3e:e4:3d:c5:2d:87:89:a4:74:54:27:ff:
                    00:23:3f:90:5e:04:dc:09:8e:d8:70:06:5c:88:3f:
                    8b:16:8f:7b:8e:d3:73:69:5f:19:7f:da:b8:04:ec:
                    79:1b:24:61:95:83:ef:f9:8a:e6:a1:17:db:51:88:
                    a9:a4:37:fc:b7:18:31:7c:ec:22:ba:81:61:c0:f8:
                    23:0f:b6:f6:2b:4c:3c:82:04:f2:19:c4:85:e8:3b:
                    09:5c:67:12:2f:8e:e7:35:10:90:aa:b1:f8:4d:66:
                    bd:0d:13:75:d7:aa:28:49:a7:12:68:14:3e:ac:4e:
                    0f:ad:53:ed:88:53:5e:25:b6:78:ba:3b:7c:30:1b:
                    02:bc:a3:cf:4e:c8:dc:23:36:17:04:07:08:fd:74:
                    b4:fc:cf:c0:16:4d:8c:78:6f:85:54:42:4a:30:18:
                    7f:c3:6d:d4:9e:15:4b:d7:ed:af:41:2d:8b:71:b9:
                    9e:bd:8d:63:2b:02:fe:03:0f:dc:7f:a0:cb:b5:90:
                    5e:b0:9a:e8:0b:85:5c:c0:b1:13:3e:a0:38:f9:f7:
                    1e:95:4b:6f:de:0f:10:d6:d9:76:17:79:fc:6c:68:
                    e8:1a:dc:5d:be:42:93:d7:59:39:40:f3:b6:e5:3b:
                    0d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3B:0B:C0:F6:6F:22:7E:1A:64:55:A2:AA:97:FA:BB:83:F2:6F:7F
            X509v3 Authority Key Identifier:
                keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7f:a6:14:9e:9d:71:9f:7a:51:8a:f4:2a:37:42:26:71:2f:
         c0:90:fd:66:6c:8f:e6:87:24:16:d5:e7:a2:44:3b:61:d4:7a:
         92:8a:5b:77:0c:28:b9:26:e3:f2:1b:1f:ff:c2:c6:71:40:a2:
         ab:b4:ad:1a:a3:65:5e:d9:1f:44:8f:aa:7f:7b:96:ee:6a:6c:
         80:c8:16:ca:51:b4:e5:5b:fa:ed:5f:bf:4d:ff:aa:f4:88:b1:
         93:95:2b:d9:f8:bc:e8:72:37:8a:e3:26:23:da:09:4c:4c:27:
         f6:1a:0c:39:f5:44:13:01:d7:f8:c7:aa:4d:43:4c:57:c3:5c:
         16:93:54:39:9f:a3:49:22:be:32:d9:d3:66:76:d7:a2:63:1e:
         63:24:02:3e:d7:ee:b4:22:39:09:51:5a:31:b4:d8:05:e2:95:
         2f:55:be:7a:6f:fa:1e:cf:d2:82:86:e2:83:ea:a0:e7:17:22:
         75:56:dd:b9:22:e3:7d:3c:e0:7e:9b:b5:7f:be:be:96:4e:91:
         8b:a1:78:14:3c:0c:70:53:a1:8d:f0:44:ed:86:77:2e:66:bd:
         84:1e:8f:d7:95:28:2c:53:87:1c:7f:6f:d2:6c:c3:3b:22:fb:
         49:35:3b:81:ee:f5:8a:73:2e:64:a6:54:c6:9d:13:7b:56:f1:
         41:d5:c5:c8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4dWXc+ikl3saK4/STzB32aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OWFiZTQ1ZjIxZjEyZTRiODAyZjMwOTQ0NGMyNDc1OTAw
MGViY2YwHhcNMjYwNTEyMTgwMTAyWhcNMjYwNTEzMTgwMTAyWjAzMTEwLwYDVQQD
Eyg2NzNiMGJjMGY2NmYyMjdlMWE2NDU1YTJhYTk3ZmFiYjgzZjI2ZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIX3XFotq17QUCM0TEf6c6o+5D3F
LYeJpHRUJ/8AIz+QXgTcCY7YcAZciD+LFo97jtNzaV8Zf9q4BOx5GyRhlYPv+Yrm
oRfbUYippDf8txgxfOwiuoFhwPgjD7b2K0w8ggTyGcSF6DsJXGcSL47nNRCQqrH4
TWa9DRN116ooSacSaBQ+rE4PrVPtiFNeJbZ4ujt8MBsCvKPPTsjcIzYXBAcI/XS0
/M/AFk2MeG+FVEJKMBh/w23UnhVL1+2vQS2LcbmevY1jKwL+Aw/cf6DLtZBesJro
C4VcwLETPqA4+fcelUtv3g8Q1tl2F3n8bGjoGtxdvkKT11k5QPO25TsNvwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGc7C8D2byJ+GmRVoqqX+ruD8m9/MB8GA1UdIwQY
MBaAFPmavkXyHxLkuALzCURMJHWQAOvPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1acS1SZklmRXVTNEF2TUpSRXdrZFpBQTY4OC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvZDNlM2Q3LTAzNTctNDg3ZS05ZmVk
LWE4ZThiODkzMTU1Mi8xLzEtWnEtUmZJZkV1UzRBdk1KUkV3a2RaQUE2ODgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y3L2QzZTNkNy0wMzU3LTQ4N2UtOWZlZC1hOGU4Yjg5MzE1
NTIvMS8xLVpxLVJmSWZFdVM0QXZNSlJFd2tkWkFBNjg4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARn+m
FJ6dcZ96UYr0KjdCJnEvwJD9ZmyP5ockFtXnokQ7YdR6kopbdwwouSbj8hsf/8LG
cUCiq7StGqNlXtkfRI+qf3uW7mpsgMgWylG05Vv67V+/Tf+q9Iixk5Ur2fi86HI3
iuMmI9oJTEwn9hoMOfVEEwHX+MeqTUNMV8NcFpNUOZ+jSSK+MtnTZnbXomMeYyQC
PtfutCI5CVFaMbTYBeKVL1W+em/6Hs/Sgobig+qg5xcidVbduSLjfTzgfpu1f76+
lk6Ri6F4FDwMcFOhjfBE7YZ3Lma9hB6P15UoLFOHHH9v0mzDOyL7STU7ge71inMu
ZKZUxp0Te1bxQdXFyA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:21 2026 by rpki-client