Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
File:                     A83mT0Foo_OZt3SU2Urqdyksm88.mft (raw, json)
Hash identifier:          Kjmifm9JjPTdHMnBkvQM2q3Mt4P/7pLg9j5y23K0uDc=
Subject key identifier:   BC:21:57:1A:62:14:3B:02:7F:74:8C:89:FF:D8:54:19:C3:F3:BB:A0
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Certificate issuer:       /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial:       019E30A9080CE0082AC66BAB41FD1D29212A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
Manifest number:          1476
Signing time:             Sat 16 May 2026 12:00:44 +0000
Manifest this update:     Sat 16 May 2026 12:00:44 +0000
Manifest next update:     Sun 17 May 2026 12:00:44 +0000
Files and hashes:         1: A83mT0Foo_OZt3SU2Urqdyksm88.crl (hash: TE51xH8S3qucpNLs3hW+4IZfgiAo/D/B5mix3Rq45Hc=)
                          2: VqbW8hWa6U_90YgDAsOUDVLHuCw.roa (hash: quQX28Hjb85Vem897JezSZ+lGMfYDszka76M0Xq2SLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:08:0c:e0:08:2a:c6:6b:ab:41:fd:1d:29:21:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
        Validity
            Not Before: May 16 12:00:44 2026 GMT
            Not After : May 17 12:00:44 2026 GMT
        Subject: CN=bc21571a62143b027f748c89ffd85419c3f3bba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:5d:a9:66:81:cb:e7:46:0a:b8:74:70:d0:
                    54:0c:99:2b:82:77:39:a2:f5:2b:57:05:73:84:7e:
                    4a:3e:e9:74:1b:56:e7:b7:de:06:59:02:ed:14:b7:
                    2d:bb:78:13:e5:19:c3:94:d6:e1:c4:19:6b:05:2b:
                    be:77:0d:14:53:41:36:51:7e:c0:26:b6:b9:7f:99:
                    f9:7f:f3:bf:e0:e9:97:66:13:4f:a5:f5:98:f4:e0:
                    38:2a:26:e6:8c:b2:ca:5b:6a:8e:8b:8e:ba:73:35:
                    73:fe:49:91:6a:45:be:30:15:50:9a:fb:96:46:33:
                    46:da:23:ef:6e:00:98:d3:14:98:b3:62:55:3e:3a:
                    77:b3:b3:14:80:a0:8e:28:68:10:ac:5e:51:96:97:
                    a1:59:cb:f4:57:ce:a6:7c:3e:af:84:36:65:cf:43:
                    ce:f6:08:a9:af:99:8e:bc:85:b0:28:72:2b:cf:d1:
                    7f:cb:a8:c0:9b:6c:86:07:b7:3a:1f:26:74:9c:5e:
                    e9:b0:df:33:89:72:9c:13:43:8f:ee:2d:74:00:e4:
                    ef:cc:44:aa:b4:fd:8f:d1:fc:c4:27:31:79:0b:8f:
                    f8:a4:0f:2b:dc:48:cb:f3:49:f5:9b:48:c7:5d:a2:
                    2b:e9:f0:cd:14:e9:8d:82:25:a2:91:32:8e:f9:d7:
                    3a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:21:57:1A:62:14:3B:02:7F:74:8C:89:FF:D8:54:19:C3:F3:BB:A0
            X509v3 Authority Key Identifier:
                keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:bf:8e:fe:90:0b:ab:8b:6a:33:37:52:47:d0:70:ac:48:41:
         73:ba:84:eb:ed:78:a9:27:7b:d2:85:47:ca:56:5d:06:f7:23:
         b1:23:bd:bd:3a:04:f5:71:db:da:11:0a:88:f5:a5:9f:2c:f5:
         27:97:8c:c1:2a:e2:04:96:d8:ef:d1:a4:4b:91:99:0f:89:a7:
         d4:95:bc:c7:fb:86:ef:76:f3:cf:0e:bb:06:33:97:93:b7:be:
         05:0c:ab:34:d8:db:fd:83:4f:1d:c2:a0:2a:32:c8:de:d8:0a:
         11:7c:03:d9:bf:73:d1:05:e7:3d:3f:42:5f:cd:b5:16:0e:f5:
         02:80:a1:0c:db:ff:8c:53:85:d8:ef:fa:1d:55:b2:c7:b8:66:
         d7:9d:63:93:5a:b6:2a:2d:91:6b:74:dc:21:ff:3d:66:87:20:
         77:f7:4e:3d:60:e4:98:e9:51:26:d8:41:04:7c:6f:e0:8f:17:
         a6:5d:11:11:5f:54:3e:3d:bc:7c:1c:bf:97:0a:16:02:da:f6:
         1a:35:65:23:e5:93:d4:28:9b:b0:df:90:ae:95:21:1f:cb:7d:
         e2:f1:e2:ad:19:e2:f8:8e:f9:5a:59:d4:8d:86:d5:d9:ce:1f:
         c7:07:89:5d:d0:12:73:1b:05:b1:4f:5c:6a:2a:51:d6:06:5c:
         95:c5:f4:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqQgM4AgqxmurQf0dKSEqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzY2RlNjRmNDE2OGEzZjM5OWI3NzQ5NGQ5NGFlYTc3Mjky
YzliY2YwHhcNMjYwNTE2MTIwMDQ0WhcNMjYwNTE3MTIwMDQ0WjAzMTEwLwYDVQQD
EyhiYzIxNTcxYTYyMTQzYjAyN2Y3NDhjODlmZmQ4NTQxOWMzZjNiYmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBddqWaBy+dGCrh0cNBUDJkrgnc5
ovUrVwVzhH5KPul0G1bnt94GWQLtFLctu3gT5RnDlNbhxBlrBSu+dw0UU0E2UX7A
Jra5f5n5f/O/4OmXZhNPpfWY9OA4KibmjLLKW2qOi466czVz/kmRakW+MBVQmvuW
RjNG2iPvbgCY0xSYs2JVPjp3s7MUgKCOKGgQrF5RlpehWcv0V86mfD6vhDZlz0PO
9gipr5mOvIWwKHIrz9F/y6jAm2yGB7c6HyZ0nF7psN8ziXKcE0OP7i10AOTvzESq
tP2P0fzEJzF5C4/4pA8r3EjL80n1m0jHXaIr6fDNFOmNgiWikTKO+dc6CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwhVxpiFDsCf3SMif/YVBnD87ugMB8GA1UdIwQY
MBaAFAPN5k9BaKPzmbd0lNlK6ncpLJvPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTgzbVQwRm9vX09adDNTVTJVcnFkeWtzbTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kYzEzMTgtYzMzMC00YjRkLTk0YWUt
ZjFiMDBjODQyOGVkLzEvQTgzbVQwRm9vX09adDNTVTJVcnFkeWtzbTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kYzEzMTgtYzMzMC00YjRkLTk0YWUtZjFiMDBjODQyOGVk
LzEvQTgzbVQwRm9vX09adDNTVTJVcnFkeWtzbTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7+O/pAL
q4tqMzdSR9BwrEhBc7qE6+14qSd70oVHylZdBvcjsSO9vToE9XHb2hEKiPWlnyz1
J5eMwSriBJbY79GkS5GZD4mn1JW8x/uG73bzzw67BjOXk7e+BQyrNNjb/YNPHcKg
KjLI3tgKEXwD2b9z0QXnPT9CX821Fg71AoChDNv/jFOF2O/6HVWyx7hm151jk1q2
Ki2Ra3TcIf89Zocgd/dOPWDkmOlRJthBBHxv4I8Xpl0REV9UPj28fBy/lwoWAtr2
GjVlI+WT1CibsN+QrpUhH8t94vHirRni+I75WlnUjYbV2c4fxweJXdAScxsFsU9c
aipR1gZclcX0yQ==
-----END CERTIFICATE-----
Generated at Sat May 16 17:14:09 2026 by rpki-client