Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File:                     73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier:          CXtn1qEvgGPzsjj3kd5sy4oEZr+ZonH9C4zcfE+tr6s=
Subject key identifier:   A6:A5:E2:75:5F:BC:AC:7E:B4:07:B9:8E:C6:D7:23:AB:80:25:75:29
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer:       /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial:       019E303BBC8CC97EF9F4C960A2906CA8997E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 10:01:21 +0000
Manifest this update:     Sat 16 May 2026 10:01:21 +0000
Manifest next update:     Sun 17 May 2026 10:01:21 +0000
Files and hashes:         1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: KpwsI3HQIba30BvwvWMJ5RIjPgJsrebedZrYmb2Og44=)
                          2: s3XOS3QA_OLCEJgqKQs1DGSZPSE.roa (hash: zm1kL82qrnuSElGfAwXwitkc6LPDrRud9bFF8MtyuyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:bc:8c:c9:7e:f9:f4:c9:60:a2:90:6c:a8:99:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
        Validity
            Not Before: May 16 10:01:21 2026 GMT
            Not After : May 17 10:01:21 2026 GMT
        Subject: CN=a6a5e2755fbcac7eb407b98ec6d723ab80257529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cb:4d:e7:0b:53:0a:a4:3a:ff:46:b5:f3:89:
                    03:d1:df:50:b2:c5:58:33:cd:0e:c4:82:24:ad:db:
                    9a:a7:01:da:8d:2a:6c:dd:7c:44:ad:d2:69:93:e0:
                    97:8f:d6:6d:2c:e1:8b:87:2b:36:0b:b0:01:6e:97:
                    62:c6:64:6f:91:ba:c7:1f:d1:ef:72:1e:83:ed:98:
                    26:17:0c:ff:c0:aa:bf:e0:56:7f:f9:5e:ed:24:48:
                    3e:78:62:bd:6f:cb:53:56:70:d1:8f:ce:86:08:da:
                    e2:ed:8c:23:75:7f:55:f4:d3:3c:75:59:41:ed:3e:
                    c9:07:70:ac:3b:88:be:c3:f8:21:52:a7:b2:3e:be:
                    3f:de:9c:b9:7d:03:59:02:60:4a:b2:4a:0c:f5:50:
                    ec:08:ee:fa:f8:48:3d:8a:42:78:a1:83:42:65:45:
                    fa:94:41:96:51:43:13:25:11:6d:fd:dd:16:36:54:
                    34:6a:5f:5a:e4:53:15:71:65:8b:48:a9:40:ee:99:
                    49:94:55:fb:a3:57:75:d0:dc:70:28:5f:a4:b6:07:
                    b0:43:c9:ce:5d:d0:54:9d:b3:08:59:9c:93:39:ce:
                    d2:d8:02:8b:24:79:2c:f5:1b:57:98:f3:f1:55:6b:
                    94:fb:55:b7:0e:1e:a3:17:2f:41:35:92:a9:dd:46:
                    0b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A5:E2:75:5F:BC:AC:7E:B4:07:B9:8E:C6:D7:23:AB:80:25:75:29
            X509v3 Authority Key Identifier:
                keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c6:b9:89:f0:b3:f5:35:3e:31:19:cc:e9:ff:42:d9:b1:07:
         74:92:5f:cf:90:2f:c6:2c:1c:e0:97:24:b2:7d:1a:10:a7:85:
         53:85:f0:33:9c:bd:29:f8:a1:13:4a:e7:59:85:a7:80:7c:71:
         0f:2b:55:77:34:82:84:03:95:6d:da:cb:64:bd:bc:7d:97:7d:
         b2:33:3d:85:0d:12:19:2a:28:6e:3a:bb:62:b5:43:05:8e:f1:
         81:a3:61:48:b1:7c:55:43:72:87:e1:fa:cf:94:a4:35:a9:b8:
         8c:d9:69:4d:f8:95:f9:5b:c2:71:22:4f:24:8c:3f:26:51:f6:
         f3:7b:c5:81:c3:e5:6b:7e:73:c7:85:d6:d8:e9:0f:d9:e8:78:
         9f:c9:0c:55:89:fe:1d:9f:28:51:7e:26:19:d4:a5:8f:95:77:
         34:03:6d:c2:b3:03:c1:67:65:49:81:fc:27:77:d8:ea:27:f7:
         5c:8f:58:69:42:7d:6a:0e:8d:61:81:cb:52:9c:93:71:db:d5:
         f4:42:cf:4c:b8:57:36:54:0f:99:b2:5a:91:76:e1:e4:f0:37:
         a6:66:d8:ed:ec:59:de:05:63:05:c5:94:ee:b7:4c:97:85:f9:
         9b:2f:ed:97:12:f9:b3:db:3d:25:0f:c2:ed:ac:4e:9e:c4:a5:
         b6:6f:e0:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO7yMyX759MlgopBsqJl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNzhhNmJjYzg1ZWM4YWRlNmVjY2U4ODBlZTA3M2Q2Mzc3
MDc5NjUwHhcNMjYwNTE2MTAwMTIxWhcNMjYwNTE3MTAwMTIxWjAzMTEwLwYDVQQD
EyhhNmE1ZTI3NTVmYmNhYzdlYjQwN2I5OGVjNmQ3MjNhYjgwMjU3NTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3stN5wtTCqQ6/0a184kD0d9QssVY
M80OxIIkrduapwHajSps3XxErdJpk+CXj9ZtLOGLhys2C7ABbpdixmRvkbrHH9Hv
ch6D7ZgmFwz/wKq/4FZ/+V7tJEg+eGK9b8tTVnDRj86GCNri7YwjdX9V9NM8dVlB
7T7JB3CsO4i+w/ghUqeyPr4/3py5fQNZAmBKskoM9VDsCO76+Eg9ikJ4oYNCZUX6
lEGWUUMTJRFt/d0WNlQ0al9a5FMVcWWLSKlA7plJlFX7o1d10NxwKF+ktgewQ8nO
XdBUnbMIWZyTOc7S2AKLJHks9RtXmPPxVWuU+1W3Dh6jFy9BNZKp3UYL8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKal4nVfvKx+tAe5jsbXI6uAJXUpMB8GA1UdIwQY
MBaAFO94przIXsit5uzOiA7gc9Y3cHllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTIt
OTZmMjE2ODkzZGVjLzEvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTItOTZmMjE2ODkzZGVj
LzEvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsa5ifCz
9TU+MRnM6f9C2bEHdJJfz5Avxiwc4Jcksn0aEKeFU4XwM5y9KfihE0rnWYWngHxx
DytVdzSChAOVbdrLZL28fZd9sjM9hQ0SGSoobjq7YrVDBY7xgaNhSLF8VUNyh+H6
z5SkNam4jNlpTfiV+VvCcSJPJIw/JlH283vFgcPla35zx4XW2OkP2eh4n8kMVYn+
HZ8oUX4mGdSlj5V3NANtwrMDwWdlSYH8J3fY6if3XI9YaUJ9ag6NYYHLUpyTcdvV
9ELPTLhXNlQPmbJakXbh5PA3pmbY7exZ3gVjBcWU7rdMl4X5my/tlxL5s9s9JQ/C
7axOnsSltm/gSA==
-----END CERTIFICATE-----
Generated at Sat May 16 16:23:17 2026 by rpki-client