Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File:                     RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier:          7KDgC4xpdAqqmaMRbPLTlaZPdPV4VpWbJora1JB88m0=
Subject key identifier:   22:F1:F2:97:86:E7:85:03:9C:22:7B:00:76:F2:9D:A6:BD:CC:E4:25
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer:       /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial:       019E32612848DAFDE3CF3388DB396CD71C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 20:01:28 +0000
Manifest this update:     Sat 16 May 2026 20:01:28 +0000
Manifest next update:     Sun 17 May 2026 20:01:28 +0000
Files and hashes:         1: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: K+PCgpj44u46rIHy4UCe7TdKg6znjiJh0jtrs1i1joM=)
                          2: cQbewkFEZ4acO97jlQJ5WKuKd7A.roa (hash: nw0VsiavZiymn/xF8CuU14khn+rz47RFDCWUotkUcgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:61:28:48:da:fd:e3:cf:33:88:db:39:6c:d7:1c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
        Validity
            Not Before: May 16 20:01:28 2026 GMT
            Not After : May 17 20:01:28 2026 GMT
        Subject: CN=22f1f29786e785039c227b0076f29da6bdcce425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:5a:b1:e0:c9:5a:b0:22:d5:12:9e:bc:b7:
                    2d:09:f4:1c:28:4c:bc:1f:59:49:5c:95:e6:9d:8c:
                    e8:a8:e7:05:9c:ca:0e:64:17:83:61:e2:fb:cf:c6:
                    89:fd:42:c1:aa:48:e1:07:ae:68:71:ad:d7:15:53:
                    de:2c:c7:7b:a5:e6:03:39:5e:72:c8:77:15:2a:01:
                    04:23:9e:f5:74:ec:d7:38:f6:e5:5b:8f:b4:32:fe:
                    23:f3:42:0c:ee:c5:36:46:b2:91:26:3e:04:f0:77:
                    e6:11:4f:a7:e1:0e:1a:35:1e:54:8a:c0:d4:8c:a1:
                    4f:1e:cb:57:39:dd:8e:ed:b4:b6:72:bf:b7:03:82:
                    3c:96:5c:86:c6:c3:cc:4e:76:fa:49:d3:e5:69:4d:
                    61:fe:f7:ed:d9:3e:7d:20:46:2b:4c:5f:48:88:e6:
                    15:e4:df:a3:e1:1e:14:a3:5a:b2:f2:4e:e4:5d:4b:
                    67:66:94:e3:d2:23:42:b7:6a:b9:e2:e9:b9:3b:28:
                    46:da:63:ca:b0:5d:a3:eb:3c:42:06:9b:63:3b:20:
                    18:33:b1:cf:53:ef:44:cc:9b:bb:3e:cc:52:6f:2a:
                    e4:8d:56:62:c3:fc:35:a4:fe:89:45:af:bc:31:b8:
                    3e:a1:43:4e:29:d9:39:a2:06:ec:41:77:98:20:24:
                    76:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F1:F2:97:86:E7:85:03:9C:22:7B:00:76:F2:9D:A6:BD:CC:E4:25
            X509v3 Authority Key Identifier:
                keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:01:5c:24:34:20:09:3e:d5:e3:d7:68:b7:b3:b7:e6:cd:
         82:69:e7:64:2a:90:4c:f8:5d:27:5a:cd:88:e8:9e:09:08:35:
         50:a5:c9:c0:dd:31:e7:b5:8c:2e:0f:a6:d9:6f:24:ed:53:c3:
         30:41:bc:2b:b1:3e:e3:b4:e0:4a:e5:0b:3d:be:e7:2d:c7:5d:
         4d:c1:c4:2d:a9:8e:34:49:e2:ff:a0:5c:79:59:1d:3e:62:6c:
         3d:c6:47:39:aa:10:76:78:f8:2f:91:1e:b8:6b:65:da:71:ab:
         23:8a:af:09:73:ea:86:69:e2:a0:80:f9:aa:64:b5:ac:99:56:
         9b:94:5c:42:ba:a4:c3:19:a7:5a:c5:db:59:ca:d7:48:fe:95:
         4a:23:56:63:48:c6:95:cc:a5:0f:f8:84:bc:82:ea:b5:7b:44:
         4e:cf:8c:0f:db:f8:8e:99:ed:69:1a:1a:b9:5a:37:85:ac:27:
         85:c9:13:da:c7:0c:15:bd:02:f3:8d:e8:79:83:f8:70:0b:d7:
         ba:a7:d9:c7:cd:18:34:e6:b4:b2:cb:58:77:bc:f5:fc:74:71:
         8d:07:a8:f0:a9:8c:b3:76:e2:68:67:5d:5c:d9:c2:66:19:e4:
         30:50:7e:df:72:32:44:e6:b5:7c:46:c0:06:f2:81:7e:f6:9b:
         cf:ef:02:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yYShI2v3jzzOI2zls1xx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NWRmMTNkMjBmM2I1NzFhNGJhNjEwYjgxZTYzMDNkYjZk
MDk5YzAwHhcNMjYwNTE2MjAwMTI4WhcNMjYwNTE3MjAwMTI4WjAzMTEwLwYDVQQD
EygyMmYxZjI5Nzg2ZTc4NTAzOWMyMjdiMDA3NmYyOWRhNmJkY2NlNDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq35aseDJWrAi1RKevLctCfQcKEy8
H1lJXJXmnYzoqOcFnMoOZBeDYeL7z8aJ/ULBqkjhB65oca3XFVPeLMd7peYDOV5y
yHcVKgEEI571dOzXOPblW4+0Mv4j80IM7sU2RrKRJj4E8HfmEU+n4Q4aNR5UisDU
jKFPHstXOd2O7bS2cr+3A4I8llyGxsPMTnb6SdPlaU1h/vft2T59IEYrTF9IiOYV
5N+j4R4Uo1qy8k7kXUtnZpTj0iNCt2q54um5OyhG2mPKsF2j6zxCBptjOyAYM7HP
U+9EzJu7PsxSbyrkjVZiw/w1pP6JRa+8Mbg+oUNOKdk5ogbsQXeYICR2tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLx8peG54UDnCJ7AHbynaa9zOQlMB8GA1UdIwQY
MBaAFERd8T0g87VxpLphC4HmMD220JnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTkt
NGY1NGFkNzU1YjIwLzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTktNGY1NGFkNzU1YjIw
LzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/IBXCQ0
IAk+1ePXaLezt+bNgmnnZCqQTPhdJ1rNiOieCQg1UKXJwN0x57WMLg+m2W8k7VPD
MEG8K7E+47TgSuULPb7nLcddTcHELamONEni/6BceVkdPmJsPcZHOaoQdnj4L5Ee
uGtl2nGrI4qvCXPqhmnioID5qmS1rJlWm5RcQrqkwxmnWsXbWcrXSP6VSiNWY0jG
lcylD/iEvILqtXtETs+MD9v4jpntaRoauVo3hawnhckT2scMFb0C843oeYP4cAvX
uqfZx80YNOa0sstYd7z1/HRxjQeo8KmMs3biaGddXNnCZhnkMFB+33IyROa1fEbA
BvKBfvabz+8Ckg==
-----END CERTIFICATE-----
Generated at Sat May 16 22:40:48 2026 by rpki-client