Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
File:                     7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json)
Hash identifier:          fgL1FRqkZco5jRlst1yOKnpBuRn5XWXEzgMfwsTx3EQ=
Subject key identifier:   93:61:74:EA:8E:2C:48:36:C2:1D:18:1E:74:CA:7D:3C:D3:68:35:D5
Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Certificate issuer:       /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Certificate serial:       019E2F971631353068A45EACB9CE39619EAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
Manifest number:          05AE
Signing time:             Sat 16 May 2026 07:01:31 +0000
Manifest this update:     Sat 16 May 2026 07:01:31 +0000
Manifest next update:     Sun 17 May 2026 07:01:31 +0000
Files and hashes:         1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: 7IWPuGzeKBfQSaSrJnNyFYc4hG0VhaJrMmPxGHlWh6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:16:31:35:30:68:a4:5e:ac:b9:ce:39:61:9e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
        Validity
            Not Before: May 16 07:01:31 2026 GMT
            Not After : May 17 07:01:31 2026 GMT
        Subject: CN=936174ea8e2c4836c21d181e74ca7d3cd36835d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:ac:42:dc:15:d2:1d:d6:fa:64:57:5c:a7:
                    4c:29:0b:24:56:61:9d:7b:bf:d6:b6:7a:76:14:65:
                    fa:04:cf:cb:22:ac:b0:0d:ee:26:ac:54:93:e1:fc:
                    6a:c5:27:bd:19:93:1a:23:ff:1e:71:23:40:13:a8:
                    46:2d:ee:bc:fb:e6:71:95:6c:e1:ec:02:d1:a1:9d:
                    7e:6d:6c:01:a4:45:c7:b3:b0:3d:dc:7d:ab:cb:26:
                    eb:25:75:17:ff:7d:ad:ee:4d:65:4c:d5:35:15:d3:
                    74:46:94:c0:a5:b8:3d:f5:15:a2:8a:5f:31:b8:61:
                    d3:17:0e:a5:4d:cf:12:cc:ff:46:2b:20:5f:ef:d7:
                    20:29:79:40:93:11:e7:5e:0e:3d:f5:83:a5:9d:3f:
                    05:d8:2d:8f:e9:c2:7a:b9:08:eb:e6:8d:1a:c8:a6:
                    e2:85:d1:fd:5e:54:e8:9a:3b:91:b0:d6:7f:7c:f2:
                    c3:bc:ea:6d:84:49:b6:44:7a:af:e5:86:f4:d4:d4:
                    b4:da:bc:7d:84:c8:f5:c4:ec:c3:a1:82:4c:7a:19:
                    4c:9a:36:99:f4:e3:d5:3d:e7:96:d4:6d:88:59:3b:
                    66:31:2b:cd:84:02:5b:12:01:89:59:53:31:f3:ab:
                    f5:18:2d:4f:b3:54:64:1b:5b:90:25:11:81:47:93:
                    a7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:61:74:EA:8E:2C:48:36:C2:1D:18:1E:74:CA:7D:3C:D3:68:35:D5
            X509v3 Authority Key Identifier:
                keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:00:da:62:53:7c:91:47:d8:4d:ad:db:06:53:09:bf:e8:39:
         bb:68:7e:81:d2:4e:1a:54:73:05:85:96:0f:21:1a:02:bf:6c:
         e6:3c:5b:fd:71:f3:46:1b:67:7e:7e:4c:d7:31:18:29:17:ae:
         85:b1:2b:96:93:6d:9c:56:4d:98:d2:3a:d3:d7:f5:a6:5e:4c:
         0f:b8:e1:97:cc:b2:66:d1:6e:03:26:3a:f1:7e:99:c5:c2:77:
         1a:c9:4a:32:99:c5:5b:d4:bb:06:79:60:99:7d:57:27:e1:b6:
         42:47:e6:90:07:db:ee:fd:e4:73:bf:72:73:5d:16:24:f0:2f:
         b3:b7:e3:1c:65:39:54:52:d6:b6:0c:a2:82:62:63:6d:2d:81:
         5f:6d:c5:b5:09:99:d4:dc:ac:03:c4:ea:28:01:1b:6b:79:bc:
         cc:02:54:c0:ae:ac:ba:cf:00:8f:53:22:c2:f3:0f:07:b0:9b:
         64:78:5c:44:27:60:41:00:40:d9:55:6f:9b:80:de:70:c3:8c:
         6e:e0:6e:dd:09:2a:6d:26:d8:a9:6f:57:2b:1f:66:0a:8d:aa:
         f1:1e:79:cb:ed:3b:bc:3a:a0:b1:17:73:18:01:f5:98:ad:7d:
         d2:cf:af:82:b7:48:75:a0:d3:3a:56:55:5e:b1:7f:f8:26:ce:
         4e:42:9a:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vlxYxNTBopF6suc45YZ6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMWI2YWRjOTk0OTdmZDFiMzBhMGE0ODJlZGM0MDJiMGM0
ZjBjZjgwHhcNMjYwNTE2MDcwMTMxWhcNMjYwNTE3MDcwMTMxWjAzMTEwLwYDVQQD
Eyg5MzYxNzRlYThlMmM0ODM2YzIxZDE4MWU3NGNhN2QzY2QzNjgzNWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaCsQtwV0h3W+mRXXKdMKQskVmGd
e7/Wtnp2FGX6BM/LIqywDe4mrFST4fxqxSe9GZMaI/8ecSNAE6hGLe68++ZxlWzh
7ALRoZ1+bWwBpEXHs7A93H2ryybrJXUX/32t7k1lTNU1FdN0RpTApbg99RWiil8x
uGHTFw6lTc8SzP9GKyBf79cgKXlAkxHnXg499YOlnT8F2C2P6cJ6uQjr5o0ayKbi
hdH9XlTomjuRsNZ/fPLDvOpthEm2RHqv5Yb01NS02rx9hMj1xOzDoYJMehlMmjaZ
9OPVPeeW1G2IWTtmMSvNhAJbEgGJWVMx86v1GC1Ps1RkG1uQJRGBR5On5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNhdOqOLEg2wh0YHnTKfTzTaDXVMB8GA1UdIwQY
MBaAFO0batyZSX/RswoKSC7cQCsMTwz4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80NjkyYzMtYTkwZC00MWI4LWFhZTgt
MmM5NmZiODU1NTdhLzEvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy80NjkyYzMtYTkwZC00MWI4LWFhZTgtMmM5NmZiODU1NTdh
LzEvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACADaYlN8
kUfYTa3bBlMJv+g5u2h+gdJOGlRzBYWWDyEaAr9s5jxb/XHzRhtnfn5M1zEYKReu
hbErlpNtnFZNmNI609f1pl5MD7jhl8yyZtFuAyY68X6ZxcJ3GslKMpnFW9S7Bnlg
mX1XJ+G2QkfmkAfb7v3kc79yc10WJPAvs7fjHGU5VFLWtgyigmJjbS2BX23FtQmZ
1NysA8TqKAEba3m8zAJUwK6sus8Aj1MiwvMPB7CbZHhcRCdgQQBA2VVvm4DecMOM
buBu3QkqbSbYqW9XKx9mCo2q8R55y+07vDqgsRdzGAH1mK190s+vgrdIdaDTOlZV
XrF/+CbOTkKatg==
-----END CERTIFICATE-----
Generated at Sat May 16 15:40:00 2026 by rpki-client