Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
File:                     70AaUuP95plIbplnjb9Ih1Mpwz0.mft (raw, json)
Hash identifier:          enw5wxev13OluDDVUkeOE0yh742TOEDW69nUdm51y+A=
Subject key identifier:   07:42:66:7A:22:DC:84:DB:45:D4:B0:1D:3C:CB:69:7C:9B:57:0D:45
Authority key identifier: EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
Certificate issuer:       /CN=ef401a52e3fde699486e99678dbf48875329c33d
Certificate serial:       019E2C276492ED2BF57EB23C34086FE6B118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
Manifest number:          1079
Signing time:             Fri 15 May 2026 15:00:39 +0000
Manifest this update:     Fri 15 May 2026 15:00:39 +0000
Manifest next update:     Sat 16 May 2026 15:00:39 +0000
Files and hashes:         1: 1-SL9hlivQGt-mLTuChMVipJ552A.roa (hash: M4LxMEo5XBi46ojcg/gR85XlQ9Z1KIxYuUCF1vDeIuI=)
                          2: 70AaUuP95plIbplnjb9Ih1Mpwz0.crl (hash: eWbbFPlqH9Ppj3rPCPqbZu8DfmwsWaL812fUOEwpZZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2c:27:64:92:ed:2b:f5:7e:b2:3c:34:08:6f:e6:b1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef401a52e3fde699486e99678dbf48875329c33d
        Validity
            Not Before: May 15 15:00:39 2026 GMT
            Not After : May 16 15:00:39 2026 GMT
        Subject: CN=0742667a22dc84db45d4b01d3ccb697c9b570d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:61:fa:da:c4:9f:0e:f1:73:8d:9b:fa:84:55:
                    c2:91:ef:61:6e:64:65:08:8e:cb:47:65:5c:1f:34:
                    00:8c:dd:49:f8:24:78:6d:1d:93:99:78:db:69:55:
                    47:e7:58:a7:47:88:bc:77:20:28:b1:02:18:e3:09:
                    6a:55:36:c6:21:d0:11:cb:32:95:60:7a:9f:1e:9e:
                    ba:6e:82:38:2b:24:1a:3f:af:33:07:2f:bf:96:c1:
                    35:1f:27:36:bc:7a:cd:69:31:7e:ba:98:b2:cc:b8:
                    77:fd:20:aa:37:4e:ba:06:fb:c9:8b:39:a6:a0:3c:
                    34:d8:4d:cb:3f:7d:87:24:f1:49:0e:a0:8d:ed:8e:
                    f9:d7:e3:6c:60:49:d7:52:be:4e:67:3e:2d:67:80:
                    4c:7d:2c:25:4d:16:70:42:81:d4:13:86:64:67:d1:
                    03:98:e5:c8:64:4f:4e:a3:2d:d0:80:db:03:44:fa:
                    4a:18:44:f2:e0:6b:2e:8d:4a:cf:ca:21:07:4e:2d:
                    81:5f:68:3d:2d:46:4e:e6:56:02:df:fe:ad:a0:59:
                    c2:36:54:6b:5c:4e:c0:8a:df:cd:b1:75:7a:2b:58:
                    5d:a2:8f:f4:89:88:40:78:80:97:b8:32:0d:6f:ef:
                    2f:91:cd:e6:e5:20:f2:56:38:0e:fa:e0:a8:36:3b:
                    46:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:42:66:7A:22:DC:84:DB:45:D4:B0:1D:3C:CB:69:7C:9B:57:0D:45
            X509v3 Authority Key Identifier:
                keyid:EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:47:c1:c3:6d:e3:9f:40:64:64:98:81:4c:7d:00:ad:58:ce:
         e6:9c:30:54:1f:11:e4:32:40:96:6d:1a:c3:bf:9d:1e:43:60:
         84:7c:77:6d:25:6b:3b:9b:19:f6:fd:71:75:80:24:52:28:6f:
         24:11:56:4a:06:e3:cd:ce:8f:87:87:a7:1f:eb:2a:0f:8a:ee:
         2e:b9:88:74:71:88:48:ad:bf:f5:f3:fa:36:39:1e:a6:25:ca:
         da:38:5c:1b:ca:fb:c7:3f:1a:69:1b:50:62:97:68:73:00:b8:
         35:e4:70:cd:a2:ac:d3:94:30:10:a2:d1:fe:28:96:d4:2d:92:
         60:76:5d:51:18:67:a5:7f:5e:fc:77:25:dc:eb:29:6d:a6:2b:
         a8:cf:80:9e:03:8f:f4:4d:22:86:1b:ae:aa:7b:fc:fc:da:b3:
         b3:91:f3:27:93:86:10:13:ba:1b:4a:f9:47:25:d6:7b:80:c0:
         33:ad:1c:0e:f5:82:17:5c:2f:7c:af:ba:67:2b:0a:2b:95:eb:
         b6:be:de:e0:ca:50:85:7c:c2:93:79:4f:0f:9d:3a:c4:b0:84:
         24:ef:de:07:10:27:9a:78:10:ef:3e:7e:4c:90:bb:0c:e3:ce:
         4a:6c:0f:f9:8a:4b:ca:b6:69:43:a6:d2:cc:4e:90:91:22:86:
         f6:6b:9a:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4sJ2SS7Sv1frI8NAhv5rEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDAxYTUyZTNmZGU2OTk0ODZlOTk2NzhkYmY0ODg3NTMy
OWMzM2QwHhcNMjYwNTE1MTUwMDM5WhcNMjYwNTE2MTUwMDM5WjAzMTEwLwYDVQQD
EygwNzQyNjY3YTIyZGM4NGRiNDVkNGIwMWQzY2NiNjk3YzliNTcwZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2H62sSfDvFzjZv6hFXCke9hbmRl
CI7LR2VcHzQAjN1J+CR4bR2TmXjbaVVH51inR4i8dyAosQIY4wlqVTbGIdARyzKV
YHqfHp66boI4KyQaP68zBy+/lsE1Hyc2vHrNaTF+upiyzLh3/SCqN066BvvJizmm
oDw02E3LP32HJPFJDqCN7Y751+NsYEnXUr5OZz4tZ4BMfSwlTRZwQoHUE4ZkZ9ED
mOXIZE9Ooy3QgNsDRPpKGETy4GsujUrPyiEHTi2BX2g9LUZO5lYC3/6toFnCNlRr
XE7Ait/NsXV6K1hdoo/0iYhAeICXuDINb+8vkc3m5SDyVjgO+uCoNjtGUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdCZnoi3ITbRdSwHTzLaXybVw1FMB8GA1UdIwQY
MBaAFO9AGlLj/eaZSG6ZZ42/SIdTKcM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBBYVV1UDk1cGxJYnBsbmpiOUloMU1wd3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yNTIzOGMtOGVlZS00NDAzLTkxMDQt
OWNhOTQ3YWE2NjVhLzEvNzBBYVV1UDk1cGxJYnBsbmpiOUloMU1wd3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yNTIzOGMtOGVlZS00NDAzLTkxMDQtOWNhOTQ3YWE2NjVh
LzEvNzBBYVV1UDk1cGxJYnBsbmpiOUloMU1wd3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUfBw23j
n0BkZJiBTH0ArVjO5pwwVB8R5DJAlm0aw7+dHkNghHx3bSVrO5sZ9v1xdYAkUihv
JBFWSgbjzc6Ph4enH+sqD4ruLrmIdHGISK2/9fP6NjkepiXK2jhcG8r7xz8aaRtQ
YpdocwC4NeRwzaKs05QwEKLR/iiW1C2SYHZdURhnpX9e/Hcl3OspbaYrqM+AngOP
9E0ihhuuqnv8/Nqzs5HzJ5OGEBO6G0r5RyXWe4DAM60cDvWCF1wvfK+6ZysKK5Xr
tr7e4MpQhXzCk3lPD506xLCEJO/eBxAnmngQ7z5+TJC7DOPOSmwP+YpLyrZpQ6bS
zE6QkSKG9muaCw==
-----END CERTIFICATE-----
Generated at Fri May 15 17:54:56 2026 by rpki-client