Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
File:                     DNszEee1KoxC8GUP9DwPyE0yDxY.mft (raw, json)
Hash identifier:          alnhMD+Ffg+58XpMnoQY7qg7Wo51PCuRdtg5noBeD18=
Subject key identifier:   89:33:DF:03:43:8E:72:78:40:F5:08:DD:6C:15:8C:F2:09:A1:A4:61
Authority key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
Certificate issuer:       /CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Certificate serial:       019E295E5654F99CC95B5A8148141926DCDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
Manifest number:          015E
Signing time:             Fri 15 May 2026 02:01:48 +0000
Manifest this update:     Fri 15 May 2026 02:01:48 +0000
Manifest next update:     Sat 16 May 2026 02:01:48 +0000
Files and hashes:         1: DNszEee1KoxC8GUP9DwPyE0yDxY.crl (hash: bFuEqXJF48DQfFyyx3yBa7Sqdn5sCyh8qlDpeZOkmZ0=)
                          2: KkZ9T-InsQon19zi2pp0iLPe7uw.asa (hash: PxN+SD6/SnkXuWBprhfsz0XFK1K5PUh2KfS43HH5dtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5e:56:54:f9:9c:c9:5b:5a:81:48:14:19:26:dc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
        Validity
            Not Before: May 15 02:01:48 2026 GMT
            Not After : May 16 02:01:48 2026 GMT
        Subject: CN=8933df03438e727840f508dd6c158cf209a1a461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:df:ef:1c:46:cd:d9:fe:73:4f:75:38:dd:32:
                    0b:ef:4b:16:0d:a8:31:8a:b3:b3:c9:01:fd:7f:82:
                    10:33:35:78:d2:96:81:c8:69:a4:c9:7d:f9:cd:03:
                    8e:fd:27:4a:c1:00:f7:47:b5:f6:33:56:ab:04:4e:
                    00:fe:e2:16:2e:82:f9:47:c4:98:47:26:bc:43:4c:
                    0c:db:5e:0e:c9:6c:94:32:20:b1:2e:9e:0c:04:e5:
                    da:3f:28:9c:62:d8:f7:0a:14:b3:e0:0e:52:7a:cc:
                    ef:fa:fd:dd:48:7a:61:82:69:cb:22:10:08:f4:38:
                    69:1b:8e:80:88:1a:24:69:82:82:9d:c3:a7:f1:6b:
                    48:6b:b6:6c:5e:01:8b:cb:f9:23:46:91:b8:b7:dd:
                    7b:98:98:68:22:09:9f:b9:7a:2c:9f:2c:d9:74:db:
                    55:19:01:c2:82:da:c7:df:0f:8c:df:6b:23:48:df:
                    ec:11:f6:1c:0a:c8:97:de:52:4b:0d:11:57:ad:b3:
                    0b:62:6d:12:bc:d5:b0:86:8f:6d:39:67:a3:d8:5d:
                    6b:d0:40:50:bf:ee:45:16:47:49:c5:9d:63:97:77:
                    c4:85:6c:87:88:28:6e:1d:cc:bd:cd:57:65:4f:32:
                    6a:ca:f4:0b:21:a7:9c:a4:68:6c:b7:bf:4d:7a:31:
                    71:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:33:DF:03:43:8E:72:78:40:F5:08:DD:6C:15:8C:F2:09:A1:A4:61
            X509v3 Authority Key Identifier:
                keyid:0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:20:c8:17:66:9e:6d:5c:f1:d0:91:52:77:b4:ff:13:41:62:
         5e:53:6d:ed:c0:46:6a:ca:d0:96:7f:96:51:18:e8:5e:54:68:
         83:8d:30:9a:ee:e0:86:f7:17:69:c4:f2:d9:9e:d6:65:64:cb:
         0d:d7:eb:cc:8a:95:58:f3:94:52:e8:7c:34:1e:a2:7a:2a:e6:
         a2:0b:0a:66:36:bb:cc:24:59:e3:26:d9:a7:21:42:4a:bf:98:
         d6:1c:5a:10:b9:2e:2a:a0:8f:9d:61:2f:9c:34:24:c0:00:ab:
         94:5c:bb:9c:59:06:9f:2a:5e:0c:4e:ef:26:89:77:8f:67:f2:
         7a:79:b1:df:bd:13:9b:ec:2a:dc:d2:ae:57:cc:04:af:63:2a:
         b7:6d:df:74:d5:03:29:34:c1:0e:db:1d:4c:e9:15:f9:ff:b1:
         14:45:25:1e:45:e1:c1:de:9b:ee:cf:ee:07:f3:c7:96:f2:15:
         6b:7a:cf:62:1e:a7:95:92:9a:85:f8:d2:c8:d3:7b:be:83:f2:
         d3:b4:ce:5b:e8:0b:c2:bb:9f:58:b7:a4:02:9b:61:88:7a:83:
         1d:0b:26:d4:c6:d5:52:92:9c:38:5e:f8:4d:18:cd:2d:fa:b4:
         42:38:ca:05:a5:99:e3:e4:ed:1a:ef:9b:7b:f3:a4:b2:1a:76:
         fd:85:7e:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pXlZU+ZzJW1qBSBQZJtzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZGIzMzExZTdiNTJhOGM0MmYwNjUwZmY0M2MwZmM4NGQz
MjBmMTYwHhcNMjYwNTE1MDIwMTQ4WhcNMjYwNTE2MDIwMTQ4WjAzMTEwLwYDVQQD
Eyg4OTMzZGYwMzQzOGU3Mjc4NDBmNTA4ZGQ2YzE1OGNmMjA5YTFhNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt/vHEbN2f5zT3U43TIL70sWDagx
irOzyQH9f4IQMzV40paByGmkyX35zQOO/SdKwQD3R7X2M1arBE4A/uIWLoL5R8SY
Rya8Q0wM214OyWyUMiCxLp4MBOXaPyicYtj3ChSz4A5Seszv+v3dSHphgmnLIhAI
9DhpG46AiBokaYKCncOn8WtIa7ZsXgGLy/kjRpG4t917mJhoIgmfuXosnyzZdNtV
GQHCgtrH3w+M32sjSN/sEfYcCsiX3lJLDRFXrbMLYm0SvNWwho9tOWej2F1r0EBQ
v+5FFkdJxZ1jl3fEhWyHiChuHcy9zVdlTzJqyvQLIaecpGhst79NejFxswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkz3wNDjnJ4QPUI3WwVjPIJoaRhMB8GA1UdIwQY
MBaAFAzbMxHntSqMQvBlD/Q8D8hNMg8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xYTc5OGYtOTQ4OS00ZTFmLWI4Yjct
MWM5Y2VmOWQ4ODJmLzEvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8xYTc5OGYtOTQ4OS00ZTFmLWI4YjctMWM5Y2VmOWQ4ODJm
LzEvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXiDIF2ae
bVzx0JFSd7T/E0FiXlNt7cBGasrQln+WURjoXlRog40wmu7ghvcXacTy2Z7WZWTL
DdfrzIqVWPOUUuh8NB6ieirmogsKZja7zCRZ4ybZpyFCSr+Y1hxaELkuKqCPnWEv
nDQkwACrlFy7nFkGnypeDE7vJol3j2fyenmx370Tm+wq3NKuV8wEr2Mqt23fdNUD
KTTBDtsdTOkV+f+xFEUlHkXhwd6b7s/uB/PHlvIVa3rPYh6nlZKahfjSyNN7voPy
07TOW+gLwrufWLekApthiHqDHQsm1MbVUpKcOF74TRjNLfq0QjjKBaWZ4+TtGu+b
e/Okshp2/YV+Qg==
-----END CERTIFICATE-----
Generated at Fri May 15 06:19:45 2026 by rpki-client