Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
File:                     i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json)
Hash identifier:          0JXY5KVY7RFVrubGB6Yu117YHL8l5ETRB6CshpvLx7Q=
Subject key identifier:   A7:4E:B3:A3:F6:BB:EA:76:FF:D2:98:3D:6C:03:7D:8C:33:9A:86:5B
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Certificate issuer:       /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial:       019E314E96A29AF8AD31DA3BA8557A65EFCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
Manifest number:          0975
Signing time:             Sat 16 May 2026 15:01:34 +0000
Manifest this update:     Sat 16 May 2026 15:01:34 +0000
Manifest next update:     Sun 17 May 2026 15:01:34 +0000
Files and hashes:         1: 1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa (hash: Y9R2l24kBbqyGrhSPstaoeJ69KKtfxGMiYaBVipK5z8=)
                          2: 6PHN4EINg95zsWmwMqR_LCCbpc0.roa (hash: Qlikbs7ZBI8ctlfaw3/jTu/l9GkQAhjSgxybaaSAR64=)
                          3: Mo9G1JhWigyZx8b4Z1ztpl3HoaU.roa (hash: 6/JX2hr5dQ72yy0qDOA4ItSaDR3CmA+Vunj3Be7K7Ww=)
                          4: SBvRByMqYGQLc42MhIv39wSrM14.roa (hash: +yuXK4U1plTB6Fi9dEb2HppH8vLHLdbotjVkOSomh4c=)
                          5: SYrllEJSlKvgkdw578ZRNVSFNWE.roa (hash: k4gJZrWaGXAakwoprVZK+70H4xXKeMYoqoBwpy13NQI=)
                          6: UUqnfAVDQa6lg6vG893HM0lVJYc.roa (hash: 36To8a4pjZ0Y2Qs8m/H0gopLfHuBJ5FyCcUXnUo0w+Q=)
                          7: aQNb-FqJ24XdWhT_swKdwi6zjfo.roa (hash: OZW1x0BW+Z3FS3TLXrrEiad6eP2zWg5FoTORYNZrouA=)
                          8: fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa (hash: ETRCfd6hwLM8wB2Vmt5McaUCtMtxHeKB1rybYkoCFk0=)
                          9: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: OZBqe4pcYc3wWUWA4O6C+l+4hiwQ4vbL3w8oAxhebtY=)
                          10: jB4bYdWFXZMhIAjQMhMfN8vZ55w.roa (hash: EkZSSIno7HUUjqBtEwf8U/N90NHBkP5MsOxUQJnJNBo=)
                          11: qI5GOetXdKYh8lrEqXZOEzNWNgs.roa (hash: gOg5TzYEps9BVyLryEBMecl6jyfHJAcCMKO+ZNmQ0RI=)
                          12: tASmvZQ1KYaQWQIw4lmKhvWcByY.roa (hash: ri7thGK0s4tAbDIwaqArMt7wR29/4q7zyG3uwLTYanM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:96:a2:9a:f8:ad:31:da:3b:a8:55:7a:65:ef:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
        Validity
            Not Before: May 16 15:01:34 2026 GMT
            Not After : May 17 15:01:34 2026 GMT
        Subject: CN=a74eb3a3f6bbea76ffd2983d6c037d8c339a865b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:00:84:56:8d:5c:37:91:bb:09:08:4d:c6:
                    b0:cc:33:85:e5:5c:23:65:11:db:86:f0:fb:c9:78:
                    b1:c3:c7:23:68:df:ec:21:3c:88:65:a1:18:14:09:
                    f6:32:0d:8a:f4:ac:e9:d6:0a:72:b1:28:88:2d:c5:
                    5a:78:81:49:50:3e:43:5c:9f:67:b4:56:92:e7:20:
                    bc:7c:4a:35:0e:bd:c3:86:fd:06:ee:a2:70:9f:0f:
                    ed:69:1a:1f:e3:6a:12:aa:10:e8:e1:86:26:d4:5c:
                    51:df:cf:9b:84:c4:0c:b4:2a:a3:5c:3c:c2:f7:fe:
                    7f:fd:0c:65:ab:ba:8a:3e:a6:6f:88:63:22:44:43:
                    49:7d:37:40:32:4c:07:c5:6a:af:de:b3:a2:c8:5e:
                    d1:f0:6f:e7:c9:8b:d8:6e:3f:d1:29:d0:d8:f6:8f:
                    cc:d4:88:89:97:4e:8d:67:2d:ee:ef:a6:af:24:40:
                    f1:6c:15:3f:77:fc:a5:19:5a:30:a7:f3:8b:0a:86:
                    22:4a:e0:a9:fc:24:17:1b:18:e9:2a:fc:ad:b8:9f:
                    c8:57:78:a3:ec:fd:46:94:4e:a7:35:8d:e3:82:b3:
                    70:cc:98:d9:e0:e8:1c:e9:81:79:e8:01:58:7c:59:
                    a6:eb:0d:4f:9d:42:5b:c3:3b:c1:ff:76:69:a3:32:
                    46:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4E:B3:A3:F6:BB:EA:76:FF:D2:98:3D:6C:03:7D:8C:33:9A:86:5B
            X509v3 Authority Key Identifier:
                keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6b:21:34:92:95:43:f3:df:6e:69:4f:f5:eb:54:2e:f5:b5:
         d0:d5:15:20:3d:fa:17:09:7c:38:bd:76:16:c2:cc:39:1e:82:
         cd:b3:44:fc:5b:43:d4:17:26:4b:62:f3:48:0a:3f:21:d6:13:
         31:ab:cb:fc:13:44:75:eb:8a:cb:c6:60:a7:7f:d0:83:f2:12:
         a3:8d:ee:09:ff:c1:67:67:7c:3e:0f:4c:ad:5a:c7:82:55:14:
         58:cc:4c:46:39:d4:cd:78:3f:95:70:5f:43:b7:75:e7:51:be:
         7e:b8:86:88:f4:35:bf:70:a0:f7:00:f7:48:2d:58:6d:92:fb:
         57:8e:93:04:30:86:cd:97:9b:91:05:b2:e9:5d:0f:8f:a6:4d:
         6b:3b:ba:a8:c4:e0:a7:6e:1a:65:65:8e:bd:4e:fa:e1:69:01:
         66:40:1a:56:0b:26:a7:57:6f:59:0f:ef:27:06:07:9b:a9:18:
         1a:c3:1c:75:68:9c:f9:ee:b2:f9:e2:65:6c:c3:00:45:cf:f7:
         e2:6b:1b:71:27:58:4a:95:e8:c6:4e:70:44:e9:42:7e:7c:2f:
         b1:cb:e8:00:67:e3:a8:86:0b:da:8c:7b:1b:34:ae:cd:8b:9f:
         b2:eb:ea:0e:dd:a0:cf:93:4f:4c:ff:b4:18:69:8e:bf:6a:36:
         4a:08:c6:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTpaimvitMdo7qFV6Ze/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4
NGU1NWQwHhcNMjYwNTE2MTUwMTM0WhcNMjYwNTE3MTUwMTM0WjAzMTEwLwYDVQQD
EyhhNzRlYjNhM2Y2YmJlYTc2ZmZkMjk4M2Q2YzAzN2Q4YzMzOWE4NjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb4AhFaNXDeRuwkITcawzDOF5Vwj
ZRHbhvD7yXixw8cjaN/sITyIZaEYFAn2Mg2K9Kzp1gpysSiILcVaeIFJUD5DXJ9n
tFaS5yC8fEo1Dr3Dhv0G7qJwnw/taRof42oSqhDo4YYm1FxR38+bhMQMtCqjXDzC
9/5//Qxlq7qKPqZviGMiRENJfTdAMkwHxWqv3rOiyF7R8G/nyYvYbj/RKdDY9o/M
1IiJl06NZy3u76avJEDxbBU/d/ylGVowp/OLCoYiSuCp/CQXGxjpKvytuJ/IV3ij
7P1GlE6nNY3jgrNwzJjZ4Ogc6YF56AFYfFmm6w1PnUJbwzvB/3ZpozJGvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdOs6P2u+p2/9KYPWwDfYwzmoZbMB8GA1UdIwQY
MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt
NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1
LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2shNJKV
Q/PfbmlP9etULvW10NUVID36Fwl8OL12FsLMOR6CzbNE/FtD1BcmS2LzSAo/IdYT
MavL/BNEdeuKy8Zgp3/Qg/ISo43uCf/BZ2d8Pg9MrVrHglUUWMxMRjnUzXg/lXBf
Q7d151G+friGiPQ1v3Cg9wD3SC1YbZL7V46TBDCGzZebkQWy6V0Pj6ZNazu6qMTg
p24aZWWOvU764WkBZkAaVgsmp1dvWQ/vJwYHm6kYGsMcdWic+e6y+eJlbMMARc/3
4msbcSdYSpXoxk5wROlCfnwvscvoAGfjqIYL2ox7GzSuzYufsuvqDt2gz5NPTP+0
GGmOv2o2SgjGjQ==
-----END CERTIFICATE-----
Generated at Sat May 16 22:02:24 2026 by rpki-client