Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File:                     4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier:          cz7PTsmhK2+DBDU/T0fh2GdSic1Wh3iQsDxtMXNkgeY=
Subject key identifier:   1C:3C:01:F2:BE:C9:C6:27:49:12:1C:31:EA:F0:0E:07:B5:81:DF:C7
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer:       /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial:       019E30E07DCAFD5B327699E46C2117DC04EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number:          17A4
Signing time:             Sat 16 May 2026 13:01:18 +0000
Manifest this update:     Sat 16 May 2026 13:01:18 +0000
Manifest next update:     Sun 17 May 2026 13:01:18 +0000
Files and hashes:         1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: h+Zq0c0x6zG7UyLgPm+STaoxCMqfHzUYPv3Vof5LsQ8=)
                          2: r2j9KB_d9qlo6DM4VIzlnk-FGnA.roa (hash: EzpW7vs8EG39ibzlPvK/9rhPpBxeklGzxbYhWxFufes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:7d:ca:fd:5b:32:76:99:e4:6c:21:17:dc:04:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
        Validity
            Not Before: May 16 13:01:18 2026 GMT
            Not After : May 17 13:01:18 2026 GMT
        Subject: CN=1c3c01f2bec9c62749121c31eaf00e07b581dfc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0f:be:35:eb:93:d9:26:0f:e9:60:1a:bf:2e:
                    1b:6e:98:de:90:ed:79:10:c4:0d:ac:2d:05:51:0c:
                    6a:04:3c:12:b1:56:32:c8:f0:bd:86:04:27:b3:70:
                    01:ee:cb:20:37:5a:9f:d3:c1:95:62:b3:4a:4f:a0:
                    2e:47:38:9e:56:d2:9a:c8:30:7a:48:e4:ec:82:03:
                    95:00:29:14:a5:77:8d:48:ab:c2:fb:66:6d:6f:71:
                    4d:cc:30:b5:51:08:85:f4:66:13:3a:5a:14:04:4f:
                    d3:fb:aa:68:2c:f6:ef:49:f8:63:e2:a6:9a:e3:7e:
                    93:21:22:21:53:15:25:18:96:bc:ed:0e:05:14:e4:
                    b9:e2:bd:f2:f9:f1:25:02:6f:32:fa:b6:10:f1:56:
                    53:49:ef:67:32:2e:f8:54:34:30:b9:1e:bc:1a:b8:
                    14:ce:a1:77:b9:e1:1b:5c:e6:74:b8:c2:21:a6:08:
                    97:c3:a4:4c:19:15:12:bf:63:bb:67:cb:20:c5:6b:
                    6b:18:fa:00:f7:c1:c9:2b:ba:41:9a:5d:50:24:87:
                    75:d8:95:07:32:e2:40:19:33:5e:93:a8:77:e3:45:
                    3f:ca:e8:fe:34:46:0b:56:df:97:6d:ed:86:57:62:
                    50:08:c8:67:08:e3:bc:61:22:82:50:ba:b8:80:b6:
                    7b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3C:01:F2:BE:C9:C6:27:49:12:1C:31:EA:F0:0E:07:B5:81:DF:C7
            X509v3 Authority Key Identifier:
                keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:3f:7b:f2:9b:8f:ba:fc:a5:05:8a:fd:31:01:4a:03:a4:46:
         08:5f:c6:56:75:bb:96:38:a1:72:28:8b:b8:e6:ec:21:14:3d:
         22:53:05:84:9a:9b:3a:bb:04:73:60:5f:ac:2a:54:f3:4a:4a:
         00:6f:61:9f:29:4d:c5:64:12:b0:3a:fc:bd:c0:0e:0a:2c:b3:
         87:9b:b2:28:fc:00:49:8f:5d:e4:b4:85:32:68:77:df:f6:9b:
         16:e7:e0:a5:94:27:0e:2f:65:c5:cb:22:b2:1d:76:62:07:96:
         46:4f:12:22:cc:ff:01:00:56:46:1c:d2:0b:93:53:ff:c5:3e:
         f5:0f:6f:6b:dd:f3:b1:7e:76:83:19:3c:f5:41:83:42:54:97:
         d3:6b:e4:d8:2d:b0:19:a1:a5:58:d8:89:5a:bd:a0:c5:7b:3c:
         3f:aa:87:71:46:21:cc:1e:7d:6f:b7:95:c4:d3:5d:4e:40:76:
         5f:a0:12:79:4e:7c:d6:a7:07:4f:bb:6b:37:2c:a5:c6:eb:83:
         7c:7a:e0:96:4f:66:fe:99:07:60:f1:75:3f:96:e6:dc:5a:67:
         94:97:28:3f:5d:8c:83:8a:83:db:7e:50:3e:d2:ee:53:eb:50:
         49:fd:85:b3:68:96:ef:ed:8c:6b:f3:b0:fa:61:39:cd:02:e2:
         8f:e2:25:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4H3K/VsydpnkbCEX3ATvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTU0YWRiNWEyZWQ5OTljZjFkYjljMTI3MWIyMjA5ZGFk
MzQ0OWUwHhcNMjYwNTE2MTMwMTE4WhcNMjYwNTE3MTMwMTE4WjAzMTEwLwYDVQQD
EygxYzNjMDFmMmJlYzljNjI3NDkxMjFjMzFlYWYwMGUwN2I1ODFkZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g++NeuT2SYP6WAavy4bbpjekO15
EMQNrC0FUQxqBDwSsVYyyPC9hgQns3AB7ssgN1qf08GVYrNKT6AuRzieVtKayDB6
SOTsggOVACkUpXeNSKvC+2Ztb3FNzDC1UQiF9GYTOloUBE/T+6poLPbvSfhj4qaa
436TISIhUxUlGJa87Q4FFOS54r3y+fElAm8y+rYQ8VZTSe9nMi74VDQwuR68GrgU
zqF3ueEbXOZ0uMIhpgiXw6RMGRUSv2O7Z8sgxWtrGPoA98HJK7pBml1QJId12JUH
MuJAGTNek6h340U/yuj+NEYLVt+Xbe2GV2JQCMhnCOO8YSKCULq4gLZ7VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBw8AfK+ycYnSRIcMerwDge1gd/HMB8GA1UdIwQY
MBaAFOMVSttaLtmZzx25wScbIgna00SeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDct
MTQyZmNhY2Q3YTQ5LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDctMTQyZmNhY2Q3YTQ5
LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWT978puP
uvylBYr9MQFKA6RGCF/GVnW7ljihciiLuObsIRQ9IlMFhJqbOrsEc2BfrCpU80pK
AG9hnylNxWQSsDr8vcAOCiyzh5uyKPwASY9d5LSFMmh33/abFufgpZQnDi9lxcsi
sh12YgeWRk8SIsz/AQBWRhzSC5NT/8U+9Q9va93zsX52gxk89UGDQlSX02vk2C2w
GaGlWNiJWr2gxXs8P6qHcUYhzB59b7eVxNNdTkB2X6ASeU581qcHT7trNyylxuuD
fHrglk9m/pkHYPF1P5bm3FpnlJcoP12Mg4qD235QPtLuU+tQSf2Fs2iW7+2Ma/Ow
+mE5zQLij+IlZg==
-----END CERTIFICATE-----
Generated at Sat May 16 18:39:08 2026 by rpki-client