Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
File:                     7wKUR5RZGCRZwV2MoBCop_R_gMg.mft (raw, json)
Hash identifier:          lWPyq4SlEB7eZyL4tAmIwph2s2IgBSfUzZJbPGvptPw=
Subject key identifier:   FA:CF:A2:C4:BA:9A:A0:0B:76:0F:71:C6:E2:AA:4E:81:6A:D3:32:C8
Authority key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Certificate issuer:       /CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Certificate serial:       019E30E0DF8230EB19C974615CA8C5D7841C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
Manifest number:          086E
Signing time:             Sat 16 May 2026 13:01:44 +0000
Manifest this update:     Sat 16 May 2026 13:01:44 +0000
Manifest next update:     Sun 17 May 2026 13:01:44 +0000
Files and hashes:         1: 7wKUR5RZGCRZwV2MoBCop_R_gMg.crl (hash: NfIaljJ6FICrK5LnrpVJ/5HCxkrDs/K0WWzUtDEOzOE=)
                          2: ZKITQWeRmOOpWe3j9phAgbWo098.roa (hash: uQME1knZ+/RpjbN1SdA7vXHO6Nrx1GYvYRwaBz+mqFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:df:82:30:eb:19:c9:74:61:5c:a8:c5:d7:84:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
        Validity
            Not Before: May 16 13:01:44 2026 GMT
            Not After : May 17 13:01:44 2026 GMT
        Subject: CN=facfa2c4ba9aa00b760f71c6e2aa4e816ad332c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:66:ea:1d:b6:7e:29:82:12:07:5d:10:3b:a0:
                    e2:d2:ac:93:54:3f:e2:d4:34:42:2f:1b:5d:f4:de:
                    be:6b:f5:58:24:92:77:35:45:14:5b:81:e6:9b:be:
                    8b:34:0a:58:22:ec:1f:f8:e1:8b:1d:fa:47:10:2c:
                    e7:5c:c0:bc:f2:3b:5e:ef:14:23:2e:25:b3:8b:fe:
                    61:8e:0c:82:4c:27:a1:09:9e:2f:7e:01:cd:fb:c5:
                    02:01:f1:1a:12:ee:ed:25:2b:c7:c4:60:8c:69:da:
                    24:6c:2d:f7:cc:b5:19:57:00:ca:e1:69:d8:1e:cd:
                    73:4d:8c:73:68:7c:47:49:62:fc:69:4a:2a:64:d7:
                    e5:f8:b7:78:10:da:78:11:84:8b:06:b7:05:91:71:
                    95:96:8c:65:48:2f:40:8c:32:6c:88:af:55:0c:61:
                    c5:74:6f:d7:31:13:1d:02:53:9d:71:76:b5:58:d6:
                    67:a7:34:1f:6e:04:ef:61:aa:0a:89:b7:a0:1a:93:
                    c2:97:72:ed:0e:f0:e6:df:7a:ec:b4:f5:88:b8:4a:
                    bc:dc:1f:e9:fd:3e:59:d1:2c:28:22:7d:39:31:8c:
                    7a:46:bb:fe:34:dc:20:c2:c2:e9:0c:b6:b5:46:a0:
                    c2:03:56:5e:b4:85:b6:af:24:25:c7:d2:e4:10:05:
                    3f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CF:A2:C4:BA:9A:A0:0B:76:0F:71:C6:E2:AA:4E:81:6A:D3:32:C8
            X509v3 Authority Key Identifier:
                keyid:EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:48:1b:62:b7:de:0a:7b:5f:d3:d1:ac:69:bc:3f:93:12:60:
         bd:38:40:ea:73:71:6b:c9:c6:27:71:17:8a:b1:e3:2d:45:75:
         41:2e:c3:67:bd:16:a2:cc:03:fc:d0:04:61:18:57:a5:8c:fb:
         56:c9:38:92:72:7c:83:69:6c:61:96:13:b5:b2:2d:ab:0f:50:
         04:3b:50:70:f5:34:c2:d1:f3:ae:0d:c3:bc:de:ab:4b:83:5f:
         66:c0:48:a0:d5:af:7a:86:38:44:67:5e:fb:85:35:20:e8:f4:
         4d:03:d1:65:84:33:94:c6:31:c3:6c:f5:a1:b4:73:82:33:73:
         76:24:11:6a:98:5d:aa:25:ee:5c:5d:0f:fc:e9:8b:20:21:a1:
         79:4a:40:dd:34:00:d2:19:d5:45:8b:f4:b0:17:59:c1:c5:77:
         84:83:86:9f:4d:2c:c5:10:49:91:c4:57:fe:9d:cb:c0:e2:95:
         e7:7b:40:3c:63:25:85:be:cc:fe:93:f4:50:a1:f5:1f:a3:65:
         1f:73:f2:ba:c4:74:4f:77:98:83:1b:2c:84:71:e8:a0:52:eb:
         56:de:a1:80:7d:9d:ef:71:51:66:7d:6e:26:c7:c0:cc:5c:b4:
         10:b4:60:a3:f3:f2:23:f8:97:28:e6:70:78:f8:7e:e3:1a:c5:
         42:85:41:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4N+CMOsZyXRhXKjF14QcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMDI5NDQ3OTQ1OTE4MjQ1OWMxNWQ4Y2EwMTBhOGE3ZjQ3
ZjgwYzgwHhcNMjYwNTE2MTMwMTQ0WhcNMjYwNTE3MTMwMTQ0WjAzMTEwLwYDVQQD
EyhmYWNmYTJjNGJhOWFhMDBiNzYwZjcxYzZlMmFhNGU4MTZhZDMzMmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGbqHbZ+KYISB10QO6Di0qyTVD/i
1DRCLxtd9N6+a/VYJJJ3NUUUW4Hmm76LNApYIuwf+OGLHfpHECznXMC88jte7xQj
LiWzi/5hjgyCTCehCZ4vfgHN+8UCAfEaEu7tJSvHxGCMadokbC33zLUZVwDK4WnY
Hs1zTYxzaHxHSWL8aUoqZNfl+Ld4ENp4EYSLBrcFkXGVloxlSC9AjDJsiK9VDGHF
dG/XMRMdAlOdcXa1WNZnpzQfbgTvYaoKibegGpPCl3LtDvDm33rstPWIuEq83B/p
/T5Z0SwoIn05MYx6Rrv+NNwgwsLpDLa1RqDCA1ZetIW2ryQlx9LkEAU/oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrPosS6mqALdg9xxuKqToFq0zLIMB8GA1UdIwQY
MBaAFO8ClEeUWRgkWcFdjKAQqKf0f4DIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3dLVVI1UlpHQ1Jad1YyTW9CQ29wX1JfZ01nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81YmNlNDYtY2M5Yi00ODNmLWI5NDAt
MDQ3YmEwZTYyZGU0LzEvN3dLVVI1UlpHQ1Jad1YyTW9CQ29wX1JfZ01nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81YmNlNDYtY2M5Yi00ODNmLWI5NDAtMDQ3YmEwZTYyZGU0
LzEvN3dLVVI1UlpHQ1Jad1YyTW9CQ29wX1JfZ01nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUgbYrfe
Cntf09Gsabw/kxJgvThA6nNxa8nGJ3EXirHjLUV1QS7DZ70WoswD/NAEYRhXpYz7
Vsk4knJ8g2lsYZYTtbItqw9QBDtQcPU0wtHzrg3DvN6rS4NfZsBIoNWveoY4RGde
+4U1IOj0TQPRZYQzlMYxw2z1obRzgjNzdiQRaphdqiXuXF0P/OmLICGheUpA3TQA
0hnVRYv0sBdZwcV3hIOGn00sxRBJkcRX/p3LwOKV53tAPGMlhb7M/pP0UKH1H6Nl
H3PyusR0T3eYgxsshHHooFLrVt6hgH2d73FRZn1uJsfAzFy0ELRgo/PyI/iXKOZw
ePh+4xrFQoVB6g==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:28 2026 by rpki-client