Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File:                     ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier:          EtFXfu56gSIUVyMYYL05+Ox907MdTX8akFfrS1atPVs=
Subject key identifier:   42:3B:AD:DC:84:CC:7D:0F:43:83:82:4D:2A:F0:BE:FE:42:17:38:3A
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer:       /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial:       019E2F5F7BA7C5E5929FB9D993CDB5EDEEEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number:          07E7
Signing time:             Sat 16 May 2026 06:00:47 +0000
Manifest this update:     Sat 16 May 2026 06:00:47 +0000
Manifest next update:     Sun 17 May 2026 06:00:47 +0000
Files and hashes:         1: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: 9Lmw97A8QZEUDuurbkmF69JmNe1yOtw6Gi8bdwaoH88=)
                          2: stYBdowOVPO4I6l2lk6N70Rzn-E.roa (hash: YY8VJy7fjrv/nyUerV6XVPDCUnj9z+ve+4ysfFvneOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:7b:a7:c5:e5:92:9f:b9:d9:93:cd:b5:ed:ee:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
        Validity
            Not Before: May 16 06:00:47 2026 GMT
            Not After : May 17 06:00:47 2026 GMT
        Subject: CN=423baddc84cc7d0f4383824d2af0befe4217383a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:3d:1f:1d:92:c9:51:29:fa:23:d0:7c:3c:
                    ea:f5:f1:cf:d8:12:f6:8e:1b:03:2c:da:c4:98:b2:
                    ba:77:fd:a1:53:73:aa:ad:aa:b0:f0:e4:5c:bc:a7:
                    0a:f4:11:2a:fe:f0:23:e6:b7:4c:f3:86:b6:24:dc:
                    a1:ba:80:6f:c1:02:1f:e9:42:8c:a5:8f:8e:41:8c:
                    01:72:62:a2:d7:1d:18:3b:91:fb:61:f7:26:e5:7d:
                    23:f4:09:12:6b:24:33:04:f0:be:27:a4:62:31:4c:
                    b4:63:70:a6:00:42:4c:9d:80:e6:c2:91:f0:e8:31:
                    fa:34:61:ff:21:82:6d:bc:1f:38:cd:95:59:0d:e3:
                    e5:e6:18:99:a9:76:40:59:54:57:28:41:73:8e:00:
                    25:50:6b:a2:83:23:3d:54:19:a6:65:78:c7:a6:14:
                    bd:7d:b6:d4:01:2f:53:fe:f9:35:b5:ec:a0:c8:04:
                    e5:a2:fe:da:d7:8a:4c:dd:04:cc:1b:b8:87:a5:d2:
                    b6:9c:33:65:33:f6:70:f2:53:3e:c5:56:2b:cb:69:
                    7b:9a:db:04:8d:88:26:85:a8:91:68:62:29:8a:2b:
                    96:9f:fc:ac:eb:e8:c0:24:21:ed:87:6e:1d:cf:94:
                    26:2e:52:6c:c1:ac:4c:e4:16:2c:38:e7:55:21:92:
                    93:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3B:AD:DC:84:CC:7D:0F:43:83:82:4D:2A:F0:BE:FE:42:17:38:3A
            X509v3 Authority Key Identifier:
                keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b2:27:ed:66:06:22:6c:ed:29:6f:ff:1f:5b:8f:fa:d7:cd:
         d2:42:2e:f6:f8:75:57:c3:68:20:de:9c:9b:8e:6b:b7:e6:16:
         ab:6b:e3:5c:cf:54:a5:61:7e:9c:43:5d:10:e0:11:e8:e7:f9:
         a4:c2:92:d6:f8:07:aa:e8:fe:b2:71:93:96:fb:ab:20:ae:13:
         fb:7d:9b:06:f7:ae:8f:0f:54:6d:1b:46:34:d2:30:9e:80:11:
         4a:99:c5:2b:52:62:07:e0:a8:f5:16:92:a7:4a:0c:36:c1:76:
         ac:ff:04:b6:d7:da:2b:2f:2c:e1:3e:08:21:3b:28:f2:0a:7a:
         25:be:8f:ce:3c:d5:8b:6f:92:c5:75:49:0d:75:6f:83:56:eb:
         03:e5:7f:3c:ff:d6:3b:e9:f9:10:8c:dd:48:eb:28:31:92:c7:
         2d:d6:47:95:b7:22:d3:a7:55:9b:20:64:3b:6b:dc:7f:d9:de:
         e5:a0:c2:da:1a:63:e5:ff:66:a4:e6:fa:38:e5:12:5c:b0:64:
         c7:f0:c0:8f:c4:fc:2b:c0:41:6c:5e:ea:fb:24:74:a2:19:fd:
         8c:0b:5c:5a:38:de:19:42:aa:00:1c:f0:96:94:4c:76:be:41:
         5d:bf:22:a0:ac:c1:e3:ae:b5:ad:75:a7:16:f8:76:98:ad:bc:
         67:c7:b3:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vX3unxeWSn7nZk8217e7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMmE2YTI2MGQxZTY3ZTBhN2I0ZTZkY2Y0MDNmZDM5ZjZk
ZTk3NTQwHhcNMjYwNTE2MDYwMDQ3WhcNMjYwNTE3MDYwMDQ3WjAzMTEwLwYDVQQD
Eyg0MjNiYWRkYzg0Y2M3ZDBmNDM4MzgyNGQyYWYwYmVmZTQyMTczODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqME9Hx2SyVEp+iPQfDzq9fHP2BL2
jhsDLNrEmLK6d/2hU3Oqraqw8ORcvKcK9BEq/vAj5rdM84a2JNyhuoBvwQIf6UKM
pY+OQYwBcmKi1x0YO5H7Yfcm5X0j9AkSayQzBPC+J6RiMUy0Y3CmAEJMnYDmwpHw
6DH6NGH/IYJtvB84zZVZDePl5hiZqXZAWVRXKEFzjgAlUGuigyM9VBmmZXjHphS9
fbbUAS9T/vk1teygyATlov7a14pM3QTMG7iHpdK2nDNlM/Zw8lM+xVYry2l7mtsE
jYgmhaiRaGIpiiuWn/ys6+jAJCHth24dz5QmLlJswaxM5BYsOOdVIZKTJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEI7rdyEzH0PQ4OCTSrwvv5CFzg6MB8GA1UdIwQY
MBaAFBEqaiYNHmfgp7Tm3PQD/Tn23pdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVNwcUpnMGVaLUNudE9iYzlBUDlPZmJlbDFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84NGZhZWQtMGNiNS00Nzk5LTk0NDct
YTM5ODhmYzkwZDYwLzEvRVNwcUpnMGVaLUNudE9iYzlBUDlPZmJlbDFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84NGZhZWQtMGNiNS00Nzk5LTk0NDctYTM5ODhmYzkwZDYw
LzEvRVNwcUpnMGVaLUNudE9iYzlBUDlPZmJlbDFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLIn7WYG
ImztKW//H1uP+tfN0kIu9vh1V8NoIN6cm45rt+YWq2vjXM9UpWF+nENdEOAR6Of5
pMKS1vgHquj+snGTlvurIK4T+32bBveujw9UbRtGNNIwnoARSpnFK1JiB+Co9RaS
p0oMNsF2rP8EttfaKy8s4T4IITso8gp6Jb6PzjzVi2+SxXVJDXVvg1brA+V/PP/W
O+n5EIzdSOsoMZLHLdZHlbci06dVmyBkO2vcf9ne5aDC2hpj5f9mpOb6OOUSXLBk
x/DAj8T8K8BBbF7q+yR0ohn9jAtcWjjeGUKqABzwlpRMdr5BXb8ioKzB4661rXWn
Fvh2mK28Z8ezzA==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:26 2026 by rpki-client