Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File:                     L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier:          txLJ5DIHx0qqNcExcLd27Uqx60NGadxWErsXnV7D65Y=
Subject key identifier:   80:1A:F2:FC:79:70:2C:A0:86:0E:D2:71:58:BF:26:D9:17:CC:54:E3
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer:       /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial:       019E31F30F5BC12328C96677F0AA9498D504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number:          194F
Signing time:             Sat 16 May 2026 18:01:12 +0000
Manifest this update:     Sat 16 May 2026 18:01:12 +0000
Manifest next update:     Sun 17 May 2026 18:01:12 +0000
Files and hashes:         1: Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa (hash: RzyHKDUe729UgBjp7Kobbrat8Gaw2JQ/Zg4A7HvcVdI=)
                          2: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: SxUptzqkI0LhpXWGKf6A+a2yaVG3pSAHFJTsb/oa30E=)
                          3: MrkTSTOQnAaGRm2DjkE4wDAii6I.roa (hash: IemK3qnTPE/e8MsNSBvQ7f7MgzptN5jWR7/rlu58qzM=)
                          4: RPfAXv-f8uBkkH0WybryVHOTpQU.roa (hash: C6w//enAOUR/TI2OpJYps6HovP/3vBWM2Hbve1rPMiI=)
                          5: gF4iUNMjCX6YP857V9CNjLm-AIg.roa (hash: FhDwHm21Q6QTRo/sfldBISr1alr6N55dx1Ou14/lEJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f3:0f:5b:c1:23:28:c9:66:77:f0:aa:94:98:d5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
        Validity
            Not Before: May 16 18:01:12 2026 GMT
            Not After : May 17 18:01:12 2026 GMT
        Subject: CN=801af2fc79702ca0860ed27158bf26d917cc54e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:17:e8:2d:0d:4f:0b:55:be:8f:5b:9a:90:b6:
                    99:97:f1:89:ae:c2:82:2c:1b:35:2d:0a:de:e8:d8:
                    2e:ee:9a:9f:a6:b2:a7:8e:e7:eb:c2:48:66:09:85:
                    66:0b:1f:af:be:eb:ae:5f:2e:ae:de:88:96:38:68:
                    54:48:b1:7e:37:9e:78:79:5a:0d:4a:b8:dc:65:e1:
                    95:32:60:d2:ce:83:e7:9d:22:95:ad:8b:41:2d:f5:
                    1c:34:68:7a:84:39:55:85:1a:05:f2:96:fd:03:90:
                    92:41:c7:9e:f5:e9:51:5b:23:f4:08:55:96:71:6c:
                    90:63:5d:59:4b:3b:02:f5:06:ce:cf:20:2e:1b:b2:
                    34:a0:40:ce:05:f0:e4:11:0d:ce:31:38:38:d8:dd:
                    c7:7a:3f:45:4c:f5:40:56:9d:b5:99:d7:1f:22:39:
                    37:9f:44:3f:2a:75:b1:66:03:d9:73:ec:ff:1b:fc:
                    52:8d:71:37:96:2e:1d:ec:70:42:ca:67:68:b2:c8:
                    10:26:8e:c2:9c:31:ed:02:d4:61:d8:87:8f:7f:c0:
                    17:2c:de:4d:b1:61:08:94:2e:da:f5:ef:3c:d0:8e:
                    1d:7e:f1:b4:f0:53:ac:54:6d:fb:2c:26:ec:6e:87:
                    db:ba:61:33:75:70:93:2d:3c:bb:d4:99:93:c5:05:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1A:F2:FC:79:70:2C:A0:86:0E:D2:71:58:BF:26:D9:17:CC:54:E3
            X509v3 Authority Key Identifier:
                keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d7:d7:21:c4:cd:17:82:bb:9f:53:82:a3:df:36:13:66:f3:
         11:18:b6:ac:ce:3f:46:53:dd:c2:37:15:95:ff:1a:b8:9a:a3:
         de:32:4e:70:c6:81:fd:20:e1:06:6f:a9:de:3a:d4:d3:54:2f:
         d0:ef:9e:83:b1:7b:ef:1c:6e:5b:b5:a1:70:09:05:c9:d1:2b:
         73:b3:00:c8:a2:d8:03:c8:f7:fb:6d:f6:32:24:ed:65:2a:b9:
         d0:07:fb:7f:28:a8:84:18:f0:28:bd:2a:d8:ac:40:cc:56:96:
         f8:c1:3b:47:7e:7f:62:03:d6:38:76:9d:0e:f2:62:3f:62:8d:
         0b:01:75:85:c5:d3:7a:9a:5d:80:65:15:f4:7d:c5:c5:ea:5e:
         f8:3f:50:5f:99:86:be:fa:73:ee:c9:35:fc:2e:9a:fd:3a:8d:
         a6:6c:bd:98:25:59:75:00:16:b4:20:50:a9:ee:4a:18:31:e6:
         08:4f:ec:b9:5a:a6:d8:6f:a4:c0:f3:4a:a6:55:f3:14:56:a9:
         9f:7e:4a:ad:19:06:5b:d5:d2:e5:7e:d5:27:08:0c:85:61:c2:
         84:03:28:0c:06:68:da:aa:65:e1:65:12:ea:cb:5b:e7:c4:60:
         ed:cf:84:69:ed:83:8c:f5:2e:c8:69:6a:49:c5:73:91:4a:7a:
         3e:44:cc:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4x8w9bwSMoyWZ38KqUmNUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODE0YWRjMWQ1MjA5ZTA5OGYwNzhhZGJjODU2YmFkODNi
NzQ5YzIwHhcNMjYwNTE2MTgwMTEyWhcNMjYwNTE3MTgwMTEyWjAzMTEwLwYDVQQD
Eyg4MDFhZjJmYzc5NzAyY2EwODYwZWQyNzE1OGJmMjZkOTE3Y2M1NGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BfoLQ1PC1W+j1uakLaZl/GJrsKC
LBs1LQre6Ngu7pqfprKnjufrwkhmCYVmCx+vvuuuXy6u3oiWOGhUSLF+N554eVoN
SrjcZeGVMmDSzoPnnSKVrYtBLfUcNGh6hDlVhRoF8pb9A5CSQcee9elRWyP0CFWW
cWyQY11ZSzsC9QbOzyAuG7I0oEDOBfDkEQ3OMTg42N3Hej9FTPVAVp21mdcfIjk3
n0Q/KnWxZgPZc+z/G/xSjXE3li4d7HBCymdossgQJo7CnDHtAtRh2IePf8AXLN5N
sWEIlC7a9e880I4dfvG08FOsVG37LCbsbofbumEzdXCTLTy71JmTxQUCHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAa8vx5cCyghg7ScVi/JtkXzFTjMB8GA1UdIwQY
MBaAFC+BStwdUgngmPB4rbyFa62Dt0nCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2Qt
ZGY4NmI2ZGQ5OTdjLzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2QtZGY4NmI2ZGQ5OTdj
LzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdfXIcTN
F4K7n1OCo982E2bzERi2rM4/RlPdwjcVlf8auJqj3jJOcMaB/SDhBm+p3jrU01Qv
0O+eg7F77xxuW7WhcAkFydErc7MAyKLYA8j3+232MiTtZSq50Af7fyiohBjwKL0q
2KxAzFaW+ME7R35/YgPWOHadDvJiP2KNCwF1hcXTeppdgGUV9H3Fxepe+D9QX5mG
vvpz7sk1/C6a/TqNpmy9mCVZdQAWtCBQqe5KGDHmCE/suVqm2G+kwPNKplXzFFap
n35KrRkGW9XS5X7VJwgMhWHChAMoDAZo2qpl4WUS6stb58Rg7c+Eae2DjPUuyGlq
ScVzkUp6PkTMGA==
-----END CERTIFICATE-----
Generated at Sun May 17 00:27:21 2026 by rpki-client