Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File:                     1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier:          wi2PPV+IAmNv+HJekd6OkpwBZeuwbs8gMQB1QZAr4tw=
Subject key identifier:   CE:93:37:DF:BC:1C:A8:46:BA:98:55:57:C0:EA:FC:B5:6B:E7:CF:D3
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer:       /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial:       019E3185C0156EBDFEE20622726A969D6141
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 16:01:49 +0000
Manifest this update:     Sat 16 May 2026 16:01:49 +0000
Manifest next update:     Sun 17 May 2026 16:01:49 +0000
Files and hashes:         1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: 8gqscIyUmfH6Lj51/chBlabBQ+ua9G+ilH+0gkdmtvw=)
                          2: _WoEsqjGda06FNvYzNcE2_IEZYM.roa (hash: goW3pvaXPQUMEleV0Ier3m35JeMofiuKmtRcD80IT5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:c0:15:6e:bd:fe:e2:06:22:72:6a:96:9d:61:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
        Validity
            Not Before: May 16 16:01:49 2026 GMT
            Not After : May 17 16:01:49 2026 GMT
        Subject: CN=ce9337dfbc1ca846ba985557c0eafcb56be7cfd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b8:61:86:fd:fa:da:4d:18:c1:a9:d5:d7:c5:
                    b9:ee:49:4a:24:ae:d4:7d:68:41:57:ca:88:5d:03:
                    cb:05:6a:45:e2:aa:92:91:2b:85:3c:71:9a:12:bf:
                    6f:25:a6:42:d0:d3:9d:48:a8:9b:a4:0b:ee:2c:9d:
                    28:56:8f:12:69:1a:11:31:15:a4:f4:7f:31:fe:f8:
                    03:cd:63:2a:32:bb:69:78:d0:81:83:c8:8c:76:11:
                    4a:5e:5b:ab:8b:72:15:f5:d6:09:cf:a7:e6:16:9f:
                    7f:53:e6:a8:0f:ed:fb:7d:c8:8a:b4:cc:1b:a7:2c:
                    95:fe:cc:21:6b:1f:5e:ee:6a:96:63:54:2f:ed:59:
                    4b:cc:7b:47:9a:c0:58:b1:6a:68:08:97:21:2f:e1:
                    31:2e:27:4e:33:25:e8:e6:dc:e9:7d:80:21:0b:d6:
                    b1:38:4f:2e:3f:e1:14:ee:f5:04:28:6f:77:d0:35:
                    2b:14:85:93:99:0f:d8:d9:06:fa:37:88:3a:04:07:
                    71:31:51:04:7f:b5:ad:4f:cd:a0:c4:dc:ca:6c:e7:
                    d1:ad:ee:2a:5b:2e:2c:3f:bb:dd:52:80:a3:c3:6a:
                    09:24:d3:ba:7c:d9:a6:71:bc:59:41:db:61:76:4f:
                    d3:fb:99:9f:5b:9c:fc:3b:51:9b:b2:ed:94:60:2d:
                    b1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:93:37:DF:BC:1C:A8:46:BA:98:55:57:C0:EA:FC:B5:6B:E7:CF:D3
            X509v3 Authority Key Identifier:
                keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7c:e3:e4:93:be:58:4c:59:71:ae:e3:16:60:c9:3c:f6:8d:
         24:2f:0f:e6:78:f6:bd:c0:ee:26:f9:41:e7:9c:b7:0e:76:5f:
         8d:f9:74:f1:f4:9b:e6:b8:31:cc:24:4b:44:69:02:c0:0b:24:
         c0:97:63:5c:36:ef:80:cd:38:8a:7e:53:9e:75:fb:78:56:f0:
         ce:92:56:84:fd:49:56:54:6a:1f:d4:e9:0a:58:10:e2:92:f9:
         db:04:e1:20:51:ca:b0:7f:ec:39:73:d2:60:d8:cd:d4:22:e7:
         d7:f0:83:79:61:b8:c2:0e:45:54:b9:3f:20:94:73:b4:e4:2f:
         3d:2a:62:8f:44:9e:cf:7c:c3:10:20:78:74:87:68:9c:47:fc:
         fa:6e:f8:93:2e:fe:88:4d:d9:b3:ea:21:e0:fd:ed:92:6b:f4:
         16:3c:87:0c:b1:50:6e:7f:c1:64:6b:54:78:81:c6:28:a2:26:
         f9:1b:c9:16:8b:6b:f0:c0:33:f2:4f:41:fe:4e:fd:67:d8:70:
         77:f1:1d:ca:66:a6:32:32:a0:00:99:21:ab:7c:f7:0e:6a:24:
         20:81:18:ae:cc:d3:c9:65:cb:63:b3:c5:f0:dd:cc:e7:75:7f:
         cc:d6:e7:ca:ac:12:0f:d7:e5:14:72:1a:d9:95:e2:75:3a:63:
         4e:6b:a4:f8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4xhcAVbr3+4gYicmqWnWFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MWY2YWQwZGYzODM3MjBkM2E1ZDAzYmE4OGMxOTMwOTVj
NTc0ZWYwHhcNMjYwNTE2MTYwMTQ5WhcNMjYwNTE3MTYwMTQ5WjAzMTEwLwYDVQQD
EyhjZTkzMzdkZmJjMWNhODQ2YmE5ODU1NTdjMGVhZmNiNTZiZTdjZmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbhhhv362k0YwanV18W57klKJK7U
fWhBV8qIXQPLBWpF4qqSkSuFPHGaEr9vJaZC0NOdSKibpAvuLJ0oVo8SaRoRMRWk
9H8x/vgDzWMqMrtpeNCBg8iMdhFKXluri3IV9dYJz6fmFp9/U+aoD+37fciKtMwb
pyyV/swhax9e7mqWY1Qv7VlLzHtHmsBYsWpoCJchL+ExLidOMyXo5tzpfYAhC9ax
OE8uP+EU7vUEKG930DUrFIWTmQ/Y2Qb6N4g6BAdxMVEEf7WtT82gxNzKbOfRre4q
Wy4sP7vdUoCjw2oJJNO6fNmmcbxZQdthdk/T+5mfW5z8O1Gbsu2UYC2xawIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFM6TN9+8HKhGuphVV8Dq/LVr58/TMB8GA1UdIwQY
MBaAFPgfatDfODcg06XQO6iMGTCVxXTvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1COXEwTjg0TnlEVHBkQTdxSXdaTUpYRmRPOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvZTkzZTlmLThjYWYtNDlhMC04Njhl
LWE4YzRhZGY5ODcyMS8xLzEtQjlxME44NE55RFRwZEE3cUl3Wk1KWEZkTzgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA0L2U5M2U5Zi04Y2FmLTQ5YTAtODY4ZS1hOGM0YWRmOTg3
MjEvMS8xLUI5cTBOODROeURUcGRBN3FJd1pNSlhGZE84LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXzj
5JO+WExZca7jFmDJPPaNJC8P5nj2vcDuJvlB55y3DnZfjfl08fSb5rgxzCRLRGkC
wAskwJdjXDbvgM04in5TnnX7eFbwzpJWhP1JVlRqH9TpClgQ4pL52wThIFHKsH/s
OXPSYNjN1CLn1/CDeWG4wg5FVLk/IJRztOQvPSpij0Sez3zDECB4dIdonEf8+m74
ky7+iE3Zs+oh4P3tkmv0FjyHDLFQbn/BZGtUeIHGKKIm+RvJFotr8MAz8k9B/k79
Z9hwd/EdymamMjKgAJkhq3z3DmokIIEYrszTyWXLY7PF8N3M53V/zNbnyqwSD9fl
FHIa2ZXidTpjTmuk+A==
-----END CERTIFICATE-----
Generated at Sat May 16 19:32:23 2026 by rpki-client