Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File:                     8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier:          wiiIsf4iPoSUJyDVbXAZbJjbNGIDwyf7zSilLazl/n8=
Subject key identifier:   53:42:41:75:32:3C:1F:B6:12:B3:53:E6:15:39:BA:59:60:47:1A:82
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer:       /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial:       019E30A9A5EA3E3D43367ECAAE00220109C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 12:01:24 +0000
Manifest this update:     Sat 16 May 2026 12:01:24 +0000
Manifest next update:     Sun 17 May 2026 12:01:24 +0000
Files and hashes:         1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: 2uheOZFqX/qsbD7rFDE6Lb3CaHfNAg+/w5ezZAmdbmQ=)
                          2: RlwzmymQw4BKJ8E0igozFpwiNNo.roa (hash: UVpzzvY69LGOYgMZuAZgP3abVssHII4njzML7dW06y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:a5:ea:3e:3d:43:36:7e:ca:ae:00:22:01:09:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
        Validity
            Not Before: May 16 12:01:24 2026 GMT
            Not After : May 17 12:01:24 2026 GMT
        Subject: CN=53424175323c1fb612b353e61539ba5960471a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:74:c7:6f:f9:27:86:00:40:f2:5c:bf:80:e8:
                    f2:18:ac:55:8f:fe:03:90:4b:3b:db:a6:65:64:89:
                    19:6a:ba:a4:5e:b0:5a:80:c5:6f:c7:ec:d1:8f:c5:
                    7a:e8:67:3b:3a:0d:e4:37:3b:40:b6:90:c1:d5:5d:
                    08:26:ed:49:a7:71:26:74:72:da:3b:b0:29:3a:51:
                    83:e5:e1:89:4b:c3:62:3c:43:a2:97:51:fd:e6:c1:
                    41:a6:47:d9:47:66:82:ad:34:c9:f0:a6:ba:e5:a6:
                    7a:c6:27:f9:b5:8f:dd:23:f8:d4:b6:de:41:28:2d:
                    8c:0f:cd:b1:04:02:11:29:4b:30:ed:b2:d4:0f:4c:
                    d3:2e:17:57:b1:a8:22:67:48:b8:1c:72:72:2c:44:
                    6c:61:a9:8d:6f:2d:0c:d5:4a:3a:7c:f2:e8:da:51:
                    d2:b6:5c:5a:98:e2:40:92:87:9e:c6:87:53:64:b9:
                    de:77:36:78:15:fa:63:55:c2:aa:ce:54:6b:9b:79:
                    0f:49:b6:a8:f7:7f:60:37:68:04:3e:f6:a5:d7:ec:
                    ad:e6:c6:5e:0c:f1:60:e8:25:5d:67:6b:43:58:d7:
                    db:10:77:3a:48:fd:0f:c3:2b:60:34:78:2d:f2:0a:
                    39:02:fb:7e:93:33:3f:d9:3b:32:88:8e:86:39:57:
                    98:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:42:41:75:32:3C:1F:B6:12:B3:53:E6:15:39:BA:59:60:47:1A:82
            X509v3 Authority Key Identifier:
                keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:4d:fc:ba:24:13:3e:db:41:ef:21:25:63:a2:6e:7a:b8:53:
         7e:c6:96:31:fc:e5:64:94:01:47:c7:fb:9a:5e:95:97:71:f3:
         64:7a:09:8c:98:5f:d8:ab:f7:1d:b3:e3:4a:1e:81:9c:34:6d:
         f0:c5:36:bc:56:b3:c1:a7:aa:b4:30:19:ca:e7:a1:d5:4b:3e:
         c6:8e:da:54:ff:ac:16:2a:74:01:f7:91:73:45:53:9e:aa:04:
         f9:13:21:f8:00:90:0e:1d:70:eb:c6:04:40:06:bf:96:42:8d:
         92:80:93:21:c9:45:9f:ae:74:ab:27:0e:a5:39:04:8f:fa:d0:
         66:dd:5f:f9:0a:c6:6a:c5:17:00:be:20:6c:5a:4c:b7:35:bd:
         c4:4f:b3:cf:16:4f:be:35:87:9b:be:37:41:3c:3b:b5:44:54:
         21:9d:cc:b4:09:c3:d0:95:f0:e5:af:fd:a3:b0:69:5b:6e:1b:
         03:65:e2:9b:77:c8:5b:bc:ae:a3:87:14:2c:d9:a4:f2:60:fb:
         74:76:a6:c1:f2:a2:49:e4:55:28:7e:7f:6d:32:e7:6d:6c:67:
         d7:ac:1a:62:21:bc:56:5e:1f:93:c2:71:b8:87:87:4b:a4:ae:
         aa:a0:18:28:83:ba:be:41:d7:bc:a0:ee:73:33:ca:cf:4e:ff:
         41:bf:f2:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqaXqPj1DNn7KrgAiAQnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWVlYmU0MWQwNTE4Mjg0YWJhM2E0ZjVlNWRhMDVjZmFi
ZDZmNzYwHhcNMjYwNTE2MTIwMTI0WhcNMjYwNTE3MTIwMTI0WjAzMTEwLwYDVQQD
Eyg1MzQyNDE3NTMyM2MxZmI2MTJiMzUzZTYxNTM5YmE1OTYwNDcxYTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3THb/knhgBA8ly/gOjyGKxVj/4D
kEs726ZlZIkZarqkXrBagMVvx+zRj8V66Gc7Og3kNztAtpDB1V0IJu1Jp3EmdHLa
O7ApOlGD5eGJS8NiPEOil1H95sFBpkfZR2aCrTTJ8Ka65aZ6xif5tY/dI/jUtt5B
KC2MD82xBAIRKUsw7bLUD0zTLhdXsagiZ0i4HHJyLERsYamNby0M1Uo6fPLo2lHS
tlxamOJAkoeexodTZLnedzZ4FfpjVcKqzlRrm3kPSbao939gN2gEPval1+yt5sZe
DPFg6CVdZ2tDWNfbEHc6SP0PwytgNHgt8go5Avt+kzM/2TsyiI6GOVeYPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNCQXUyPB+2ErNT5hU5ullgRxqCMB8GA1UdIwQY
MBaAFPKu6+QdBRgoSro6T15doFz6vW92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMt
YzBhZDc0Y2E1ZDliLzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMtYzBhZDc0Y2E1ZDli
LzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlk38uiQT
PttB7yElY6JuerhTfsaWMfzlZJQBR8f7ml6Vl3HzZHoJjJhf2Kv3HbPjSh6BnDRt
8MU2vFazwaeqtDAZyueh1Us+xo7aVP+sFip0AfeRc0VTnqoE+RMh+ACQDh1w68YE
QAa/lkKNkoCTIclFn650qycOpTkEj/rQZt1f+QrGasUXAL4gbFpMtzW9xE+zzxZP
vjWHm743QTw7tURUIZ3MtAnD0JXw5a/9o7BpW24bA2Xim3fIW7yuo4cULNmk8mD7
dHamwfKiSeRVKH5/bTLnbWxn16waYiG8Vl4fk8JxuIeHS6SuqqAYKIO6vkHXvKDu
czPKz07/Qb/yHA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:11:41 2026 by rpki-client