Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
File:                     2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json)
Hash identifier:          0VTVPieBMsrpmIWmK9UfW2Nslbtnh7jcu1sT0CO9JCA=
Subject key identifier:   E1:18:13:ED:9E:20:EC:3B:8F:FD:F1:68:E6:BE:F0:5F:CB:E7:3B:70
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Certificate issuer:       /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial:       019E1EA3AA3562705DE04B76D2892E384B31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
Manifest number:          15B4
Signing time:             Wed 13 May 2026 00:01:42 +0000
Manifest this update:     Wed 13 May 2026 00:01:42 +0000
Manifest next update:     Thu 14 May 2026 00:01:42 +0000
Files and hashes:         1: 1-m8TtBh-5CRV-zGtC72aq_VZD8U.roa (hash: z0Ade59v7j9Bn5XRo19AOIrxw4fqJzZ0yP8+a2vdYNM=)
                          2: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: pENvJJBrDx9uqo4L5LqXQd9krjKrWVkqV1g1yLMZrhE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:aa:35:62:70:5d:e0:4b:76:d2:89:2e:38:4b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
        Validity
            Not Before: May 13 00:01:42 2026 GMT
            Not After : May 14 00:01:42 2026 GMT
        Subject: CN=e11813ed9e20ec3b8ffdf168e6bef05fcbe73b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d1:6d:19:3b:5d:21:8f:a2:10:a6:25:72:10:
                    29:34:f6:69:2d:ba:bf:74:8d:35:b6:8a:36:63:0a:
                    0e:95:9d:ec:fd:4e:49:69:33:a4:9e:4a:1f:7a:4b:
                    db:b2:05:88:0d:99:f4:ff:e5:69:79:89:1a:89:49:
                    ca:7e:15:2d:ab:48:bf:e7:39:61:6b:a8:a6:4a:39:
                    9d:18:9d:8a:24:0b:93:40:15:78:79:75:6a:26:bd:
                    58:cb:5d:f3:78:5d:b6:66:fd:da:f7:b7:35:c9:83:
                    08:90:39:ec:05:1b:d1:0d:74:11:f4:d4:97:10:15:
                    38:f4:c7:39:c4:73:c5:e4:a9:40:fb:78:e5:fb:ac:
                    d9:bd:f5:1b:b7:9e:60:d1:94:d9:ec:47:92:38:52:
                    08:e7:11:e7:79:f3:72:77:dc:c7:95:bd:5c:a1:80:
                    25:67:d3:15:eb:8a:0d:ee:24:b5:3a:f0:c9:3e:be:
                    77:24:78:91:86:e5:93:d4:d7:5e:98:fd:d6:ac:17:
                    7b:ee:86:9e:59:a0:fc:e7:06:77:fb:d1:aa:89:24:
                    07:d3:0f:f2:8d:5e:27:4c:ab:a5:04:7c:52:7a:20:
                    eb:96:47:b2:be:32:8e:1b:80:a2:7b:70:88:80:87:
                    29:15:17:5a:80:43:e0:e3:cd:83:cf:ca:cb:9b:e5:
                    5a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:18:13:ED:9E:20:EC:3B:8F:FD:F1:68:E6:BE:F0:5F:CB:E7:3B:70
            X509v3 Authority Key Identifier:
                keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:38:61:51:79:a1:34:da:e9:ca:c3:84:5c:cc:81:db:dd:12:
         b5:7c:ac:30:04:51:bd:48:87:95:39:8f:8b:48:dc:0d:1c:0d:
         4b:46:9c:44:f3:42:69:20:f5:88:75:e6:3d:9a:95:bd:00:27:
         e6:35:70:31:84:63:b6:fc:fc:94:3f:f4:66:cb:cd:37:57:66:
         09:70:44:34:a7:19:97:0a:19:b2:31:c7:8d:76:66:9d:5f:f8:
         ec:41:c5:09:86:52:d2:16:99:87:14:31:ff:95:29:ec:aa:af:
         f2:22:a5:44:3e:f4:f9:ed:80:da:46:d5:f4:da:67:5a:2a:8b:
         11:80:9a:a5:cd:df:fd:7c:c4:9c:bb:ee:c6:bc:35:be:c4:3a:
         17:51:4e:39:41:8a:68:51:98:70:20:43:a8:80:a9:3a:64:4f:
         9d:ff:e2:ed:31:a2:1e:4e:55:bb:06:33:06:af:a5:3e:f3:a7:
         b0:a6:9c:60:ba:a7:3e:c9:c0:73:ce:a3:86:2f:4f:d8:22:6c:
         ee:1f:7c:73:2a:34:4b:19:7b:db:55:40:4d:ad:50:58:5c:fc:
         f7:46:51:3c:50:32:4e:ff:48:16:75:07:8d:2a:8f:1d:d7:d3:
         74:2f:b4:69:83:5a:d5:cb:c0:ff:a9:87:72:23:5b:58:c5:f7:
         ef:05:f1:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo6o1YnBd4Et20okuOEsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTEyZTg5OTNiMDBiZGEyYjRlOWMwMmFjNTc4Mzc0MDBh
YWM0MDQwHhcNMjYwNTEzMDAwMTQyWhcNMjYwNTE0MDAwMTQyWjAzMTEwLwYDVQQD
EyhlMTE4MTNlZDllMjBlYzNiOGZmZGYxNjhlNmJlZjA1ZmNiZTczYjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tFtGTtdIY+iEKYlchApNPZpLbq/
dI01too2YwoOlZ3s/U5JaTOknkofekvbsgWIDZn0/+VpeYkaiUnKfhUtq0i/5zlh
a6imSjmdGJ2KJAuTQBV4eXVqJr1Yy13zeF22Zv3a97c1yYMIkDnsBRvRDXQR9NSX
EBU49Mc5xHPF5KlA+3jl+6zZvfUbt55g0ZTZ7EeSOFII5xHnefNyd9zHlb1coYAl
Z9MV64oN7iS1OvDJPr53JHiRhuWT1NdemP3WrBd77oaeWaD85wZ3+9GqiSQH0w/y
jV4nTKulBHxSeiDrlkeyvjKOG4Cie3CIgIcpFRdagEPg482Dz8rLm+VaIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEYE+2eIOw7j/3xaOa+8F/L5ztwMB8GA1UdIwQY
MBaAFNkRLomTsAvaK06cAqxXg3QAqsQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYt
NTE3YTY2MWFlNmJkLzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYtNTE3YTY2MWFlNmJk
LzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDhhUXmh
NNrpysOEXMyB290StXysMARRvUiHlTmPi0jcDRwNS0acRPNCaSD1iHXmPZqVvQAn
5jVwMYRjtvz8lD/0ZsvNN1dmCXBENKcZlwoZsjHHjXZmnV/47EHFCYZS0haZhxQx
/5Up7Kqv8iKlRD70+e2A2kbV9NpnWiqLEYCapc3f/XzEnLvuxrw1vsQ6F1FOOUGK
aFGYcCBDqICpOmRPnf/i7TGiHk5VuwYzBq+lPvOnsKacYLqnPsnAc86jhi9P2CJs
7h98cyo0Sxl721VATa1QWFz890ZRPFAyTv9IFnUHjSqPHdfTdC+0aYNa1cvA/6mH
ciNbWMX37wXxpA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:26:36 2026 by rpki-client