Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File:                     4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier:          fCRcOsD0BGwP/96xLhyD62tbWJmluQmVO8IaQI7f2UA=
Subject key identifier:   A8:D3:CD:64:9B:10:CD:9D:9C:B8:66:DC:37:73:71:EC:89:2C:E6:B1
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer:       /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial:       019E30A97D9155E784B327A96A0F96CF6E00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 12:01:14 +0000
Manifest this update:     Sat 16 May 2026 12:01:14 +0000
Manifest next update:     Sun 17 May 2026 12:01:14 +0000
Files and hashes:         1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: ZScvXNVH5uvBXg64jKyIlex12PYlh17KMlAd3pbuGec=)
                          2: KrzOKl1qlDpYWxV-juWfSYeX7Gg.roa (hash: sm+bvfJZr3b8QZ7AAJ4wrF+UsO9vk0OydT19C79k6CE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:7d:91:55:e7:84:b3:27:a9:6a:0f:96:cf:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
        Validity
            Not Before: May 16 12:01:14 2026 GMT
            Not After : May 17 12:01:14 2026 GMT
        Subject: CN=a8d3cd649b10cd9d9cb866dc377371ec892ce6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:7b:9e:0b:a0:57:f5:76:51:cb:3b:f5:f8:
                    47:be:ca:46:0d:e8:a7:d8:f3:39:db:74:44:36:68:
                    c9:98:b6:b7:42:f8:25:9c:2f:96:cd:0e:e1:bd:4f:
                    69:48:fc:be:2f:f2:2e:77:1a:3f:a9:37:da:46:20:
                    31:48:01:a0:13:c6:8d:4b:69:6d:6d:29:9e:9f:b7:
                    c6:23:b1:76:41:21:c2:12:b4:cf:f1:52:74:a2:f5:
                    e6:ca:56:a4:fc:80:a2:82:25:5d:fb:ad:8e:f2:9d:
                    ee:be:38:bc:b3:f9:e9:f4:84:a7:35:0b:71:99:26:
                    52:99:67:a2:32:16:f4:22:33:47:ee:17:23:aa:45:
                    5d:e5:5c:7e:6f:a6:51:4c:9c:ed:eb:30:5d:49:62:
                    3d:12:d1:75:4b:ca:c5:92:3c:7f:cd:3b:50:be:72:
                    ff:3c:39:b6:50:e0:d5:45:83:29:2a:55:e0:af:06:
                    15:d1:c5:56:35:00:e2:02:7c:df:d4:be:ea:f9:e7:
                    a4:14:65:0d:4d:3a:94:c8:40:3b:cb:3e:1e:3e:e4:
                    50:16:8c:b4:cb:d9:56:d0:48:d8:dd:b4:41:7a:32:
                    38:d5:bc:1e:48:ca:3b:37:51:6a:ec:66:71:66:a8:
                    46:86:97:83:81:61:e9:f7:9c:15:16:84:c6:32:cc:
                    f7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D3:CD:64:9B:10:CD:9D:9C:B8:66:DC:37:73:71:EC:89:2C:E6:B1
            X509v3 Authority Key Identifier:
                keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b4:4d:04:f8:a1:21:04:4f:2f:1a:7b:1c:4e:bf:1b:bc:bf:
         12:4e:1c:59:fc:ab:1a:ea:71:ba:f7:4a:a7:6a:ef:e6:aa:c1:
         eb:8c:05:0e:d5:f1:4e:80:21:34:b7:c9:a3:ad:c9:07:8b:53:
         86:64:97:e8:13:4d:38:69:b2:4e:08:a2:f5:93:70:b1:a5:dd:
         40:7e:98:90:6a:c5:2e:1b:cb:66:35:26:d6:0d:f9:b6:ce:7a:
         d1:7e:e3:74:51:04:ed:a0:39:04:46:2f:bb:cf:f7:ff:0b:41:
         16:7a:2f:e7:d7:56:fa:0f:8e:31:8d:98:95:92:b0:f4:75:17:
         48:8f:fa:a2:64:4a:5e:f0:57:a2:d7:b6:5f:f6:eb:5c:26:5b:
         0e:53:ae:49:20:2d:ef:91:44:38:9d:b1:84:12:83:fd:a6:b1:
         fa:6a:da:2e:3c:1c:6e:54:94:b8:9e:63:6f:ef:64:87:50:db:
         bf:0c:4f:3b:c8:e3:55:b5:1d:35:76:42:bc:ce:73:81:a7:1e:
         41:d7:96:b6:50:1c:06:1a:58:b0:39:85:78:fc:2a:04:4b:40:
         69:7b:1b:a4:ac:cf:51:f7:31:8b:f8:9d:28:6f:9c:dd:f0:af:
         00:7f:58:8a:cd:c9:ac:86:8f:e4:ca:d1:36:07:4a:55:07:44:
         60:ab:d0:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqX2RVeeEsyepag+Wz24AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZmExYTBhODhiYmI1NGIzZjgyZmMyNTk3ZDI1MmFmZjc2
MTNiYzUwHhcNMjYwNTE2MTIwMTE0WhcNMjYwNTE3MTIwMTE0WjAzMTEwLwYDVQQD
EyhhOGQzY2Q2NDliMTBjZDlkOWNiODY2ZGMzNzczNzFlYzg5MmNlNmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU57ngugV/V2Ucs79fhHvspGDein
2PM523RENmjJmLa3QvglnC+WzQ7hvU9pSPy+L/Iudxo/qTfaRiAxSAGgE8aNS2lt
bSmen7fGI7F2QSHCErTP8VJ0ovXmylak/ICigiVd+62O8p3uvji8s/np9ISnNQtx
mSZSmWeiMhb0IjNH7hcjqkVd5Vx+b6ZRTJzt6zBdSWI9EtF1S8rFkjx/zTtQvnL/
PDm2UODVRYMpKlXgrwYV0cVWNQDiAnzf1L7q+eekFGUNTTqUyEA7yz4ePuRQFoy0
y9lW0EjY3bRBejI41bweSMo7N1Fq7GZxZqhGhpeDgWHp95wVFoTGMsz3ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjTzWSbEM2dnLhm3DdzceyJLOaxMB8GA1UdIwQY
MBaAFOP6GgqIu7VLP4L8JZfSUq/3YTvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUt
NDY4M2JmZWQwMDM4LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUtNDY4M2JmZWQwMDM4
LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLRNBPih
IQRPLxp7HE6/G7y/Ek4cWfyrGupxuvdKp2rv5qrB64wFDtXxToAhNLfJo63JB4tT
hmSX6BNNOGmyTgii9ZNwsaXdQH6YkGrFLhvLZjUm1g35ts560X7jdFEE7aA5BEYv
u8/3/wtBFnov59dW+g+OMY2YlZKw9HUXSI/6omRKXvBXote2X/brXCZbDlOuSSAt
75FEOJ2xhBKD/aax+mraLjwcblSUuJ5jb+9kh1DbvwxPO8jjVbUdNXZCvM5zgace
QdeWtlAcBhpYsDmFePwqBEtAaXsbpKzPUfcxi/idKG+c3fCvAH9Yis3JrIaP5MrR
NgdKVQdEYKvQjg==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:40 2026 by rpki-client