Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File:                     1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier:          TIrzS3U79J2aXYDvoAEbA7H4GWqJceSQaTEETYbNETU=
Subject key identifier:   81:41:E6:58:FA:83:4F:B8:78:C5:58:B2:F6:4B:1D:0D:F1:C1:1C:BC
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer:       /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial:       019E2FCDED3A45F6A26171D06E259F23D77C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number:          12C4
Signing time:             Sat 16 May 2026 08:01:25 +0000
Manifest this update:     Sat 16 May 2026 08:01:25 +0000
Manifest next update:     Sun 17 May 2026 08:01:25 +0000
Files and hashes:         1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: rZ1URd8D1OPezjGshyxyuuLx9OiFRD6v2FwPipH7lDs=)
                          2: Fmacp4NY6nEGonmiT-U_xfP1PNA.roa (hash: nMGKz5J/UdppiFPUA3K/6569wtZvBmanoCiwnJ4msoE=)
                          3: G8ok4WnRssMF_kSU0fMKahJetsU.roa (hash: l43UBskPXl3nXaaaJdzsHUtTJRUjiog9FX+gAeGDp4g=)
                          4: HXx-9xf840ychc1XFQvrQhYAMc8.roa (hash: wEQlpP9y0gAps6ZTYiJzXEzVVAyiwRr/90bpIEEpgsY=)
                          5: KdqxPru-n3hoW07_Ia_EY5qo-gs.roa (hash: nHBt8Iolo72XzLdo8e8Ep2RH7UXsZGR1GpAo5yUz4DM=)
                          6: _G6g6_QnVtIFB_-iAP4mTCvteXs.roa (hash: uAtUHoDLiIbUy1NlipnwKBXuGU0z4c5OSzrv5oTG0UI=)
                          7: lbA6fkEyToINYPSmlJ-B17hV6T8.roa (hash: RPJR9tlk6PGxFVrIXjpYwQZILEQbLWxfjexbsXGiL+U=)
                          8: nU05wjCCjQdvD0N5GwShQguLcMg.roa (hash: j/VwIGsTlBAaDg3IJsHet13mXvJWrVOZiHUgffdX7c4=)
                          9: smJvEGMAn4xu8Scd8dffeO2ae_U.roa (hash: hTRU88LHGp5KUHTSb+P61y5pXqOZZZN6CAlWM8NKLFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:ed:3a:45:f6:a2:61:71:d0:6e:25:9f:23:d7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
        Validity
            Not Before: May 16 08:01:25 2026 GMT
            Not After : May 17 08:01:25 2026 GMT
        Subject: CN=8141e658fa834fb878c558b2f64b1d0df1c11cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e8:70:fe:c9:bf:dd:19:c4:82:04:6f:48:6e:
                    5e:44:ab:4c:96:a6:b0:b7:df:36:f0:6f:d0:f0:f3:
                    e6:ed:a8:81:a7:20:3f:2a:66:4a:5d:fb:9a:c4:9e:
                    8c:dd:ad:b5:d7:07:14:1e:7c:b7:77:a5:30:d3:68:
                    ab:97:f2:86:c7:19:45:ca:72:72:4a:44:bc:57:33:
                    05:9c:43:b7:96:3c:8a:b8:f4:bc:3b:66:e4:11:84:
                    45:c5:28:e9:10:30:9e:69:ff:c6:98:74:7c:ff:59:
                    ce:88:e8:01:74:ac:c9:4e:49:df:f4:77:10:a3:8f:
                    a8:fd:a7:f2:53:86:b3:93:80:d2:80:ba:02:36:74:
                    1c:6c:f7:f8:ab:98:98:13:27:cc:02:05:e9:62:78:
                    af:4e:5f:8f:9a:0a:37:a3:ab:45:2a:83:8c:6d:ef:
                    07:22:0b:cd:e4:9b:40:d0:09:76:a7:f9:9b:8a:85:
                    54:6d:95:20:26:01:6f:1e:89:09:21:89:24:07:da:
                    ae:60:d5:68:ea:fe:eb:e3:4d:35:12:e1:03:65:e4:
                    bb:f6:26:19:0b:ce:e6:bb:1a:ad:c8:66:db:e5:c1:
                    96:4e:f9:a9:51:96:91:55:c6:a4:60:dd:8f:4c:d7:
                    a2:c9:fe:8f:94:d9:47:9f:e2:37:e1:f4:f7:e6:a1:
                    a6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:41:E6:58:FA:83:4F:B8:78:C5:58:B2:F6:4B:1D:0D:F1:C1:1C:BC
            X509v3 Authority Key Identifier:
                keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:3a:05:ae:27:a3:ce:e1:08:83:85:da:84:00:76:3a:80:3b:
         fd:0c:c2:e6:31:9b:6d:b1:ea:a8:fb:6d:ca:7b:62:57:6e:4a:
         1c:4b:c3:34:d9:25:a0:b5:df:7d:c0:bb:fc:1d:48:da:9d:47:
         14:fe:f0:8c:08:39:07:7a:cf:83:9d:1c:1f:ef:61:e7:ab:0a:
         f3:c9:e9:cd:e8:97:e4:78:0d:59:83:a3:c1:32:2c:cc:d3:73:
         77:ad:99:37:29:a5:35:6c:0d:74:b5:5e:78:14:ec:a0:10:0f:
         f3:b8:04:ae:2b:28:36:03:f0:b4:fc:a7:ba:d8:7f:5b:51:43:
         7e:90:d2:bf:e1:cd:d7:3c:a1:4c:8d:2d:99:6b:fe:57:b9:fa:
         8f:9f:ae:59:a3:48:83:99:ca:2c:4b:f8:06:b1:0b:af:0b:78:
         4a:0b:5f:5b:c8:6f:82:60:91:b7:70:67:ca:03:86:47:1b:a8:
         e5:22:0a:bb:47:90:37:26:de:ee:25:dd:ca:20:0e:ae:13:bf:
         94:e9:30:34:1a:b1:6f:c7:d2:af:90:a6:f7:94:55:ed:56:f9:
         af:1e:39:0f:d7:5e:a7:03:d9:c3:e3:d3:59:92:fe:6a:87:70:
         c1:6f:61:d3:7d:16:fe:b5:c4:24:6d:62:b6:a8:3e:16:d1:dc:
         6a:28:c4:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vze06RfaiYXHQbiWfI9d8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDRlNjQxZTU1YTQ4YWVlMDE0MWUyYzBkMjYyMjcxMDJj
YWE2ZDQwHhcNMjYwNTE2MDgwMTI1WhcNMjYwNTE3MDgwMTI1WjAzMTEwLwYDVQQD
Eyg4MTQxZTY1OGZhODM0ZmI4NzhjNTU4YjJmNjRiMWQwZGYxYzExY2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+hw/sm/3RnEggRvSG5eRKtMlqaw
t9828G/Q8PPm7aiBpyA/KmZKXfuaxJ6M3a211wcUHny3d6Uw02irl/KGxxlFynJy
SkS8VzMFnEO3ljyKuPS8O2bkEYRFxSjpEDCeaf/GmHR8/1nOiOgBdKzJTknf9HcQ
o4+o/afyU4azk4DSgLoCNnQcbPf4q5iYEyfMAgXpYnivTl+Pmgo3o6tFKoOMbe8H
IgvN5JtA0Al2p/mbioVUbZUgJgFvHokJIYkkB9quYNVo6v7r4001EuEDZeS79iYZ
C87muxqtyGbb5cGWTvmpUZaRVcakYN2PTNeiyf6PlNlHn+I34fT35qGmQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFB5lj6g0+4eMVYsvZLHQ3xwRy8MB8GA1UdIwQY
MBaAFNUE5kHlWkiu4BQeLA0mInECyqbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEt
NmJmZmNiN2MwZjBhLzEvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEtNmJmZmNiN2MwZjBh
LzEvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0joFriej
zuEIg4XahAB2OoA7/QzC5jGbbbHqqPttyntiV25KHEvDNNkloLXffcC7/B1I2p1H
FP7wjAg5B3rPg50cH+9h56sK88npzeiX5HgNWYOjwTIszNNzd62ZNymlNWwNdLVe
eBTsoBAP87gErisoNgPwtPynuth/W1FDfpDSv+HN1zyhTI0tmWv+V7n6j5+uWaNI
g5nKLEv4BrELrwt4SgtfW8hvgmCRt3BnygOGRxuo5SIKu0eQNybe7iXdyiAOrhO/
lOkwNBqxb8fSr5Cm95RV7Vb5rx45D9depwPZw+PTWZL+aodwwW9h030W/rXEJG1i
tqg+FtHcaijEXA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:54:27 2026 by rpki-client