Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File:                     1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier:          95GygwR2+XNFLamv+KQce/dWLAjAiGqbmGD7CmE9BbI=
Subject key identifier:   2E:FD:BB:F2:D2:F5:DA:A1:07:B1:ED:26:12:73:3C:B6:9B:0B:9E:FA
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer:       /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial:       019E2F974736F347CA2DEA7757B60A3B0695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number:          1517
Signing time:             Sat 16 May 2026 07:01:43 +0000
Manifest this update:     Sat 16 May 2026 07:01:43 +0000
Manifest next update:     Sun 17 May 2026 07:01:43 +0000
Files and hashes:         1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: iAwUQqzoXx01o3nvvP7XaXFJzotVaMW7yLjC1Et3n/c=)
                          2: oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa (hash: J7JRkb0A+kfNdSsR+CoYK/2IStJi66/isOQA2F1ezCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:47:36:f3:47:ca:2d:ea:77:57:b6:0a:3b:06:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
        Validity
            Not Before: May 16 07:01:43 2026 GMT
            Not After : May 17 07:01:43 2026 GMT
        Subject: CN=2efdbbf2d2f5daa107b1ed2612733cb69b0b9efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:b8:ba:f0:25:de:44:2a:aa:1b:ce:f6:e6:
                    7d:42:d3:31:df:82:85:6b:b3:63:67:32:6e:91:d0:
                    5a:2c:74:21:2f:0f:63:29:86:f7:40:17:5d:43:f2:
                    48:8e:d3:87:8c:bc:0b:4f:57:98:f9:26:6e:1e:c1:
                    51:e8:a6:31:de:a0:8a:6b:e0:f0:16:e3:a1:e4:c8:
                    8c:6b:f3:2e:a2:df:60:74:3f:10:3b:d7:37:a7:06:
                    a9:e7:8e:32:ea:6b:1a:64:8c:21:0e:3d:07:6c:dd:
                    be:0c:96:a8:31:ca:01:65:d9:56:23:64:20:b9:39:
                    a9:20:42:ab:47:15:69:77:16:d3:40:a5:0c:cb:00:
                    2e:87:d0:0c:81:fd:de:ef:86:82:d7:77:9c:f6:91:
                    85:a0:be:4e:f3:bb:b7:29:56:89:86:e3:85:03:0d:
                    28:4e:c6:27:30:43:5c:22:80:51:35:da:69:ff:73:
                    54:e5:c8:f4:8c:41:77:75:53:f9:4b:ab:47:0f:a8:
                    a2:33:d5:89:7c:84:ea:0d:50:3f:20:42:23:b4:da:
                    7d:bb:f0:f1:f3:2e:fb:08:bd:24:b9:d1:e2:c8:22:
                    35:11:d1:e8:ff:5f:83:92:41:e4:f3:21:78:1f:4e:
                    26:77:25:7f:4b:74:b6:55:58:88:c5:ac:6d:b8:c7:
                    fa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FD:BB:F2:D2:F5:DA:A1:07:B1:ED:26:12:73:3C:B6:9B:0B:9E:FA
            X509v3 Authority Key Identifier:
                keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:ed:de:db:83:ab:a0:66:a0:45:3a:03:0b:b5:2a:8d:7d:
         bd:1d:c5:ab:3d:57:95:60:45:18:99:95:3d:26:04:af:eb:31:
         d1:4d:b1:5f:4a:cb:0f:be:22:a1:99:e1:13:19:70:a9:d3:6e:
         df:84:f7:cf:d0:23:73:b2:95:2c:be:9f:89:d2:30:17:d9:9e:
         49:75:d6:fd:24:fd:3a:b6:a6:3e:fd:7c:74:ce:7b:5d:43:90:
         87:de:2f:46:6c:ee:d7:a5:90:43:75:9e:53:f8:e6:4d:d4:78:
         2e:8a:a7:a4:1f:5f:07:9d:49:97:7b:85:dd:35:59:a1:5b:f7:
         10:42:25:ad:c7:d8:4f:50:e3:4a:d4:6f:ce:e1:d9:e8:50:de:
         43:6d:33:97:59:d4:f4:28:ae:f8:84:c9:5c:fe:fd:35:13:82:
         5c:c9:ea:9f:fa:1e:74:0c:60:5f:80:a9:31:68:a4:42:60:8d:
         cd:86:3e:c5:15:7e:8f:24:24:57:0f:c4:67:c1:cd:3e:3c:ee:
         94:1f:d5:89:69:77:39:eb:61:b5:e1:75:3e:69:2d:bd:cb:42:
         ca:15:4d:04:ae:62:7d:8a:e1:c0:55:c5:3d:af:d9:25:8e:dd:
         da:f6:81:35:1b:d3:c6:b4:67:69:6d:d7:16:0b:07:50:7a:8a:
         66:84:b5:58
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4vl0c280fKLep3V7YKOwaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjkyZmRhMDE5Njg3ZDU4ZDcxYmYzMmMwOTA4ZDEyZTQ2
YjRjYTUwHhcNMjYwNTE2MDcwMTQzWhcNMjYwNTE3MDcwMTQzWjAzMTEwLwYDVQQD
EygyZWZkYmJmMmQyZjVkYWExMDdiMWVkMjYxMjczM2NiNjliMGI5ZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgK4uvAl3kQqqhvO9uZ9QtMx34KF
a7NjZzJukdBaLHQhLw9jKYb3QBddQ/JIjtOHjLwLT1eY+SZuHsFR6KYx3qCKa+Dw
FuOh5MiMa/Muot9gdD8QO9c3pwap544y6msaZIwhDj0HbN2+DJaoMcoBZdlWI2Qg
uTmpIEKrRxVpdxbTQKUMywAuh9AMgf3e74aC13ec9pGFoL5O87u3KVaJhuOFAw0o
TsYnMENcIoBRNdpp/3NU5cj0jEF3dVP5S6tHD6iiM9WJfITqDVA/IEIjtNp9u/Dx
8y77CL0kudHiyCI1EdHo/1+DkkHk8yF4H04mdyV/S3S2VViIxaxtuMf64QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFC79u/LS9dqhB7HtJhJzPLabC576MB8GA1UdIwQY
MBaAFPppL9oBlofVjXG/MsCQjRLka0ylMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ta3YyZ0dXaDlXTmNiOHl3SkNORXVSclRLVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvOGJmZWM0LWJkNmYtNDY1MC1hNGQ4
LWFkMWMzMGMxMWU1YS8xLzEtbWt2MmdHV2g5V05jYjh5d0pDTkV1UnJUS1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzExLzhiZmVjNC1iZDZmLTQ2NTAtYTRkOC1hZDFjMzBjMTFl
NWEvMS8xLW1rdjJnR1doOVdOY2I4eXdKQ05FdVJyVEtVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfp7t
3tuDq6BmoEU6Awu1Ko19vR3Fqz1XlWBFGJmVPSYEr+sx0U2xX0rLD74ioZnhExlw
qdNu34T3z9Ajc7KVLL6fidIwF9meSXXW/ST9OramPv18dM57XUOQh94vRmzu16WQ
Q3WeU/jmTdR4LoqnpB9fB51Jl3uF3TVZoVv3EEIlrcfYT1DjStRvzuHZ6FDeQ20z
l1nU9Ciu+ITJXP79NROCXMnqn/oedAxgX4CpMWikQmCNzYY+xRV+jyQkVw/EZ8HN
PjzulB/ViWl3OethteF1PmktvctCyhVNBK5ifYrhwFXFPa/ZJY7d2vaBNRvTxrRn
aW3XFgsHUHqKZoS1WA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:13:30 2026 by rpki-client