Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File:                     felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier:          H/G00J0FARAX2TaQRS8y7DPDNJzvchx70KUmqE04alg=
Subject key identifier:   B2:D8:94:58:CA:2F:90:F4:0D:6A:B8:72:BD:03:7C:09:92:EA:D5:EE
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer:       /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial:       019E2A3930397E7CB2E22CB0F36B490635AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number:          11BF
Signing time:             Fri 15 May 2026 06:00:51 +0000
Manifest this update:     Fri 15 May 2026 06:00:51 +0000
Manifest next update:     Sat 16 May 2026 06:00:51 +0000
Files and hashes:         1: NZpb2E9m2foAvsfyivT97O1jcng.roa (hash: 0RJf0q9CZo1wWgsu4Kz3lRf78w4e5oNe9BmVigDLVTE=)
                          2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: 5Yn7psFM42B4MojMwQntl1lQRffGi/Q4MxDXN0sHv80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:39:30:39:7e:7c:b2:e2:2c:b0:f3:6b:49:06:35:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
        Validity
            Not Before: May 15 06:00:51 2026 GMT
            Not After : May 16 06:00:51 2026 GMT
        Subject: CN=b2d89458ca2f90f40d6ab872bd037c0992ead5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f6:aa:a8:27:7c:a8:12:41:c9:84:05:f3:20:
                    1a:54:1f:5e:07:40:3c:92:c3:f8:4e:9d:c1:9d:2d:
                    1a:a6:8e:23:49:a4:24:f2:73:0a:1b:0c:b4:38:fc:
                    66:00:ee:f5:7a:2e:6d:b8:24:47:e4:99:8e:60:1b:
                    ee:1a:5f:19:aa:0d:e1:c9:28:c6:cd:19:f5:c4:ff:
                    13:26:ae:6c:0d:ce:61:a5:76:4d:b9:72:e3:d4:cc:
                    e7:13:ca:66:93:34:08:db:98:1e:86:45:7e:ca:1b:
                    0e:92:64:cb:0a:81:c6:ef:4d:67:aa:fa:b3:4d:4f:
                    ab:3a:d6:36:a5:1c:13:b8:15:ed:10:61:c6:15:35:
                    5a:b8:9a:87:df:43:87:fa:9f:e2:cd:4e:ee:45:db:
                    7d:af:6b:73:06:15:24:8d:c4:2b:36:94:49:06:14:
                    41:ca:24:50:3e:45:14:2e:bf:13:b4:68:41:83:8d:
                    8f:21:84:ff:7a:3e:6c:02:99:4d:48:77:74:d2:fa:
                    a2:fa:f3:1a:c4:f2:fd:90:b2:cb:dc:06:5c:57:8c:
                    93:59:7e:09:44:7d:0f:2b:98:cb:8c:0d:4d:9f:54:
                    a5:8f:b8:27:d2:00:32:43:3e:40:8c:14:67:3e:23:
                    4d:51:58:bc:24:b6:6c:db:9c:a7:b1:b3:ce:3b:26:
                    cd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D8:94:58:CA:2F:90:F4:0D:6A:B8:72:BD:03:7C:09:92:EA:D5:EE
            X509v3 Authority Key Identifier:
                keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:7a:7a:47:66:2d:3e:e1:ee:af:69:4d:e0:93:da:de:67:a4:
         73:7f:70:ad:de:12:54:4c:14:2f:2b:03:44:a2:41:f7:73:41:
         b3:34:4d:25:f3:59:96:51:c8:26:b9:5b:dc:26:bc:88:ba:de:
         38:55:86:9e:ed:d6:82:9d:7e:09:9a:ed:90:cb:43:ad:e2:9a:
         47:a0:ef:08:af:2e:36:5b:25:86:dd:07:57:de:f8:cf:5b:5d:
         09:4a:14:b6:35:8c:51:c8:0a:62:df:80:90:99:42:b7:2f:15:
         64:07:8b:49:46:dd:ba:23:85:02:1c:c8:b1:3b:6b:a0:92:2e:
         48:e3:c8:3f:5b:9e:f7:c4:68:2c:4b:e9:2b:b2:14:03:49:f9:
         e8:01:1f:91:af:d3:c4:90:58:29:a1:44:ae:f2:06:1f:1a:d2:
         3e:1b:c7:93:96:86:fa:e0:32:d6:0f:46:d6:18:0e:e1:12:29:
         d5:12:5d:5b:9a:00:eb:cd:b2:1f:9e:a6:5a:d9:f7:1b:d9:8f:
         40:2f:62:e7:71:3d:86:cc:3a:bf:55:04:e5:17:b6:1a:c8:48:
         85:79:bc:ed:12:6a:e9:ea:a0:f8:14:6f:5b:13:85:4b:ef:03:
         de:c8:de:ba:0b:a6:79:b7:1b:a4:4e:0d:3f:07:de:4f:8d:56:
         8f:9a:6b:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qOTA5fnyy4iyw82tJBjWsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTk2M2VjZTJmMGJhOWY3NzQ5YWNhMzg1NDIwZjlkNzAy
ZWFhOGIwHhcNMjYwNTE1MDYwMDUxWhcNMjYwNTE2MDYwMDUxWjAzMTEwLwYDVQQD
EyhiMmQ4OTQ1OGNhMmY5MGY0MGQ2YWI4NzJiZDAzN2MwOTkyZWFkNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvaqqCd8qBJByYQF8yAaVB9eB0A8
ksP4Tp3BnS0apo4jSaQk8nMKGwy0OPxmAO71ei5tuCRH5JmOYBvuGl8Zqg3hySjG
zRn1xP8TJq5sDc5hpXZNuXLj1MznE8pmkzQI25gehkV+yhsOkmTLCoHG701nqvqz
TU+rOtY2pRwTuBXtEGHGFTVauJqH30OH+p/izU7uRdt9r2tzBhUkjcQrNpRJBhRB
yiRQPkUULr8TtGhBg42PIYT/ej5sAplNSHd00vqi+vMaxPL9kLLL3AZcV4yTWX4J
RH0PK5jLjA1Nn1Slj7gn0gAyQz5AjBRnPiNNUVi8JLZs25ynsbPOOybNfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLYlFjKL5D0DWq4cr0DfAmS6tXuMB8GA1UdIwQY
MBaAFH3pY+zi8Lqfd0mso4VCD51wLqqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mZjYwNTItZmE4MC00NGI4LWFmY2Et
NmUyZGVhMDNkNTk2LzEvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mZjYwNTItZmE4MC00NGI4LWFmY2EtNmUyZGVhMDNkNTk2
LzEvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAznp6R2Yt
PuHur2lN4JPa3mekc39wrd4SVEwULysDRKJB93NBszRNJfNZllHIJrlb3Ca8iLre
OFWGnu3Wgp1+CZrtkMtDreKaR6DvCK8uNlslht0HV974z1tdCUoUtjWMUcgKYt+A
kJlCty8VZAeLSUbduiOFAhzIsTtroJIuSOPIP1ue98RoLEvpK7IUA0n56AEfka/T
xJBYKaFErvIGHxrSPhvHk5aG+uAy1g9G1hgO4RIp1RJdW5oA682yH56mWtn3G9mP
QC9i53E9hsw6v1UE5Re2GshIhXm87RJq6eqg+BRvWxOFS+8D3sjeugumebcbpE4N
PwfeT41Wj5prPQ==
-----END CERTIFICATE-----
Generated at Fri May 15 07:37:47 2026 by rpki-client