Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
File:                     1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft (raw, json)
Hash identifier:          lqnCHh+jHmcuZRoHyvcBHFidBXhezJ+dP39WCHgIJAo=
Subject key identifier:   7F:2B:E2:DB:EB:3B:B5:DA:A6:9B:42:C1:ED:8A:72:A1:C6:B9:E7:47
Authority key identifier: FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
Certificate issuer:       /CN=fab83685739986dcd451448335573014db439a23
Certificate serial:       019E292765B11F00BF95971CCBAE78D365A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
Manifest number:          0116
Signing time:             Fri 15 May 2026 01:01:48 +0000
Manifest this update:     Fri 15 May 2026 01:01:48 +0000
Manifest next update:     Sat 16 May 2026 01:01:48 +0000
Files and hashes:         1: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl (hash: E5ogyUFnZFSUVW66bMt+i1qm3UDATxlZNaODnAEUjlE=)
                          2: T5AgIIaFdxy_1Zx7xMWIF5zHoBg.asa (hash: VlDdILGQpNO7PnepZreVOz2IeXfZ/rzSseatg3jF9EM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:27:65:b1:1f:00:bf:95:97:1c:cb:ae:78:d3:65:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab83685739986dcd451448335573014db439a23
        Validity
            Not Before: May 15 01:01:48 2026 GMT
            Not After : May 16 01:01:48 2026 GMT
        Subject: CN=7f2be2dbeb3bb5daa69b42c1ed8a72a1c6b9e747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:72:ff:d5:42:33:80:bf:96:30:cf:1e:cc:9e:
                    e0:bf:d0:c7:99:f3:4e:ca:a5:78:92:52:51:90:44:
                    03:e9:e2:87:bc:5e:3e:3e:25:90:b3:0b:25:60:bb:
                    77:8d:b4:8e:99:e5:fd:ca:f3:c1:3f:c8:7a:25:4b:
                    7d:af:32:96:93:2e:96:e2:f0:83:62:fd:41:6b:04:
                    87:8a:6c:c9:1f:5a:7e:02:a3:21:19:1d:01:ea:2e:
                    0c:52:f8:37:be:9b:dc:1f:ee:7b:b6:4e:d7:99:4e:
                    b3:a8:3a:6f:87:a8:83:2d:28:96:dc:8f:49:b7:92:
                    44:23:95:76:fb:84:11:24:83:ee:eb:69:f4:95:77:
                    98:9b:6b:ab:62:6e:51:3d:52:0f:96:e5:29:b3:b9:
                    66:42:2e:c1:f5:9f:6f:3c:b4:78:ef:5d:dc:53:55:
                    0c:6f:d9:a0:fd:00:5f:34:0d:f1:39:0a:2d:a9:38:
                    99:54:cc:c9:07:d1:61:06:06:45:b8:db:f0:95:88:
                    ba:04:02:67:b4:22:7e:c4:75:e4:cd:d8:3e:19:dd:
                    33:c5:5a:84:be:73:35:ec:95:ed:e9:f4:e2:1b:39:
                    db:de:60:98:12:59:f2:57:87:63:63:8b:86:55:11:
                    e5:57:a0:9b:a0:95:d6:2a:b3:f2:a8:e2:5c:f5:88:
                    f9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2B:E2:DB:EB:3B:B5:DA:A6:9B:42:C1:ED:8A:72:A1:C6:B9:E7:47
            X509v3 Authority Key Identifier:
                keyid:FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ce:f3:ba:7e:5d:eb:db:0d:f2:b0:f1:46:c6:38:81:12:fa:
         61:b5:7f:72:3c:6f:83:61:3e:9f:35:ab:09:3b:f0:3e:fb:1f:
         a9:d5:53:34:76:8b:db:bc:a9:50:d9:cf:4e:41:76:6f:3b:56:
         52:df:8e:34:f6:58:a7:68:ce:5e:84:15:64:54:8f:1c:83:b1:
         32:29:4a:55:6e:3b:11:ec:0e:91:48:ea:3f:0d:bf:de:d9:1f:
         11:e5:31:4b:2e:74:51:c7:c6:f5:48:55:3b:69:bd:30:34:83:
         7c:08:90:f7:51:a7:4f:02:86:d5:82:dd:57:80:6b:7c:8d:be:
         e8:37:b3:19:24:78:18:12:ec:eb:42:99:63:22:7b:25:14:b3:
         20:f1:b4:00:43:fb:22:8a:06:1c:17:44:00:5f:77:0f:d7:45:
         a7:54:c9:b3:5f:eb:fc:36:cd:a1:ad:74:7f:e2:04:61:92:94:
         98:c0:12:19:d1:3b:7e:20:8f:38:77:8f:09:86:60:c0:8c:c1:
         fd:6a:13:62:8f:9c:aa:70:d9:17:95:f1:4e:34:62:81:fb:d9:
         35:b9:14:42:b0:ad:be:9a:6d:25:77:bd:3c:4f:cc:cb:8a:80:
         71:f9:58:ad:8a:41:dd:e5:99:3a:52:4b:be:ec:5c:1d:14:8a:
         cd:e3:b6:cf
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4pJ2WxHwC/lZccy65402WjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYjgzNjg1NzM5OTg2ZGNkNDUxNDQ4MzM1NTczMDE0ZGI0
MzlhMjMwHhcNMjYwNTE1MDEwMTQ4WhcNMjYwNTE2MDEwMTQ4WjAzMTEwLwYDVQQD
Eyg3ZjJiZTJkYmViM2JiNWRhYTY5YjQyYzFlZDhhNzJhMWM2YjllNzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3L/1UIzgL+WMM8ezJ7gv9DHmfNO
yqV4klJRkEQD6eKHvF4+PiWQswslYLt3jbSOmeX9yvPBP8h6JUt9rzKWky6W4vCD
Yv1BawSHimzJH1p+AqMhGR0B6i4MUvg3vpvcH+57tk7XmU6zqDpvh6iDLSiW3I9J
t5JEI5V2+4QRJIPu62n0lXeYm2urYm5RPVIPluUps7lmQi7B9Z9vPLR4713cU1UM
b9mg/QBfNA3xOQotqTiZVMzJB9FhBgZFuNvwlYi6BAJntCJ+xHXkzdg+Gd0zxVqE
vnM17JXt6fTiGznb3mCYElnyV4djY4uGVRHlV6CboJXWKrPyqOJc9Yj5GwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFH8r4tvrO7XapptCwe2KcqHGuedHMB8GA1UdIwQY
MBaAFPq4NoVzmYbc1FFEgzVXMBTbQ5ojMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1yZzJoWE9aaHR6VVVVU0ROVmN3Rk50RG1pTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvNjZjMDI5LTY4ZGUtNDMzNC1iOTJj
LTVlMTdhNjIyMzFiNS8xLzEtcmcyaFhPWmh0elVVVVNETlZjd0ZOdERtaU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMwLzY2YzAyOS02OGRlLTQzMzQtYjkyYy01ZTE3YTYyMjMx
YjUvMS8xLXJnMmhYT1podHpVVVVTRE5WY3dGTnREbWlNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAas7z
un5d69sN8rDxRsY4gRL6YbV/cjxvg2E+nzWrCTvwPvsfqdVTNHaL27ypUNnPTkF2
bztWUt+ONPZYp2jOXoQVZFSPHIOxMilKVW47EewOkUjqPw2/3tkfEeUxSy50UcfG
9UhVO2m9MDSDfAiQ91GnTwKG1YLdV4BrfI2+6DezGSR4GBLs60KZYyJ7JRSzIPG0
AEP7IooGHBdEAF93D9dFp1TJs1/r/DbNoa10f+IEYZKUmMASGdE7fiCPOHePCYZg
wIzB/WoTYo+cqnDZF5XxTjRigfvZNbkUQrCtvpptJXe9PE/My4qAcflYrYpB3eWZ
OlJLvuxcHRSKzeO2zw==
-----END CERTIFICATE-----
Generated at Fri May 15 06:57:29 2026 by rpki-client