Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File:                     CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier:          T3VqMx6ASVCIb7/Dlmxjj5TzlqKszU26lsnGXLmAeXg=
Subject key identifier:   09:85:D8:0B:B2:8C:61:C8:B0:D2:2C:8E:1C:65:27:DA:C6:91:DA:DF
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer:       /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial:       019E30A9973378E64881A57EB03A3B850D7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number:          0880
Signing time:             Sat 16 May 2026 12:01:21 +0000
Manifest this update:     Sat 16 May 2026 12:01:21 +0000
Manifest next update:     Sun 17 May 2026 12:01:21 +0000
Files and hashes:         1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: NSXLr0IYh8uCg/MPaaMPg44BjvDPRJ/BkdOUbPDxNyY=)
                          2: u8VLd__LhC89PUm-bBou8g1XjCk.roa (hash: FAOfHdJRje+Re0ts4CPoL2wF4WdKlrbROQeiewEd2a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:97:33:78:e6:48:81:a5:7e:b0:3a:3b:85:0d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
        Validity
            Not Before: May 16 12:01:21 2026 GMT
            Not After : May 17 12:01:21 2026 GMT
        Subject: CN=0985d80bb28c61c8b0d22c8e1c6527dac691dadf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:75:84:b6:8b:ef:9d:c4:5d:41:fa:ca:90:7c:
                    2c:0a:49:7c:a7:ef:33:e8:ce:f0:06:34:ff:5c:e1:
                    32:45:a1:a9:64:cb:5d:00:07:4e:63:8a:b9:b3:4e:
                    f9:b5:99:4b:41:b7:37:bf:63:54:d2:3e:8a:14:46:
                    96:3f:b9:6e:b1:db:2c:83:7c:d2:53:ad:a4:0b:5b:
                    e5:0c:a4:33:2c:58:a3:80:58:a5:44:97:f6:16:ed:
                    df:41:7d:9f:c1:b2:87:d9:f4:63:12:c8:67:fa:92:
                    c8:a6:e0:51:be:3e:ed:6a:c6:fc:51:e4:b7:6f:10:
                    7c:64:17:48:d4:87:e8:c3:3a:f0:1d:9b:bd:27:7d:
                    fc:33:ca:cf:64:9c:29:cf:1b:56:d5:d0:92:7e:7f:
                    64:6e:aa:9b:c4:f1:50:86:12:29:20:57:42:e9:3f:
                    9e:1f:b7:73:50:a0:e0:95:4f:47:d1:be:07:37:6b:
                    03:4e:18:95:61:25:75:f9:c8:a1:af:aa:3e:f0:f6:
                    a4:5d:ce:2b:a7:6a:97:3b:be:ad:bd:f4:66:48:25:
                    43:0d:a1:8a:fb:c3:78:e4:fc:ea:85:8f:21:ba:b6:
                    7a:1e:98:3b:a4:59:e4:8b:23:7e:d8:f7:dc:22:b6:
                    86:85:fa:16:f8:ca:94:d6:bc:6e:3d:30:de:2b:ad:
                    28:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:85:D8:0B:B2:8C:61:C8:B0:D2:2C:8E:1C:65:27:DA:C6:91:DA:DF
            X509v3 Authority Key Identifier:
                keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2d:fd:1b:57:73:82:35:cb:3a:e3:6a:bd:41:2a:e6:8c:53:
         ff:ce:e1:8f:2a:c9:2c:b8:83:1c:af:a2:2a:13:07:19:9d:e1:
         e0:ad:7e:30:11:05:7f:84:e3:53:88:b8:31:a1:0c:14:47:28:
         59:15:97:d9:83:8f:f8:27:bb:be:9c:d5:8c:d5:26:48:df:62:
         ea:83:f7:0b:87:89:f5:24:2f:c4:08:36:87:00:ac:53:03:09:
         8d:31:2e:53:83:73:76:fb:37:82:50:60:41:ff:a1:db:a5:80:
         9b:9d:ba:87:dd:71:cc:0a:e7:a2:d9:2f:f4:5d:b3:59:02:c4:
         41:56:d7:73:e5:92:67:8e:c1:2d:30:ed:e2:5c:59:8a:85:e4:
         94:18:26:91:69:db:e7:05:e0:69:eb:72:ba:09:e4:59:d5:51:
         4c:5c:d5:a6:61:b7:80:89:7e:60:7a:49:41:cf:dd:81:f4:04:
         64:87:2a:c4:71:ea:47:24:96:7f:a9:58:f6:cc:7b:95:22:2d:
         2e:59:00:e3:47:c0:a8:9f:2c:25:95:e3:c2:cf:d0:68:62:35:
         72:39:31:96:f4:d5:ba:fa:6d:9e:88:63:97:d1:d9:0d:43:fd:
         74:a1:c3:10:1b:80:52:03:99:b2:b4:bd:81:7f:c4:7c:a4:99:
         f5:1a:e8:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqZczeOZIgaV+sDo7hQ1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NTc4N2U2NWViNGZjZDY2ZTMzNDBiNjJhZGU0N2NhMDA5
MTlkY2UwHhcNMjYwNTE2MTIwMTIxWhcNMjYwNTE3MTIwMTIxWjAzMTEwLwYDVQQD
EygwOTg1ZDgwYmIyOGM2MWM4YjBkMjJjOGUxYzY1MjdkYWM2OTFkYWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HWEtovvncRdQfrKkHwsCkl8p+8z
6M7wBjT/XOEyRaGpZMtdAAdOY4q5s075tZlLQbc3v2NU0j6KFEaWP7lusdssg3zS
U62kC1vlDKQzLFijgFilRJf2Fu3fQX2fwbKH2fRjEshn+pLIpuBRvj7tasb8UeS3
bxB8ZBdI1IfowzrwHZu9J338M8rPZJwpzxtW1dCSfn9kbqqbxPFQhhIpIFdC6T+e
H7dzUKDglU9H0b4HN2sDThiVYSV1+cihr6o+8PakXc4rp2qXO76tvfRmSCVDDaGK
+8N45PzqhY8hurZ6Hpg7pFnkiyN+2PfcIraGhfoW+MqU1rxuPTDeK60o9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmF2AuyjGHIsNIsjhxlJ9rGkdrfMB8GA1UdIwQY
MBaAFAhXh+ZetPzWbjNAtireR8oAkZ3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAt
N2U1NGMzMmFiZWQ4LzEvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAtN2U1NGMzMmFiZWQ4
LzEvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADC39G1dz
gjXLOuNqvUEq5oxT/87hjyrJLLiDHK+iKhMHGZ3h4K1+MBEFf4TjU4i4MaEMFEco
WRWX2YOP+Ce7vpzVjNUmSN9i6oP3C4eJ9SQvxAg2hwCsUwMJjTEuU4Nzdvs3glBg
Qf+h26WAm526h91xzArnotkv9F2zWQLEQVbXc+WSZ47BLTDt4lxZioXklBgmkWnb
5wXgaetyugnkWdVRTFzVpmG3gIl+YHpJQc/dgfQEZIcqxHHqRySWf6lY9sx7lSIt
LlkA40fAqJ8sJZXjws/QaGI1cjkxlvTVuvptnohjl9HZDUP9dKHDEBuAUgOZsrS9
gX/EfKSZ9Rro2w==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:29 2026 by rpki-client