Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File:                     3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier:          9n+YJaA6lgW1lcocNfAramP1Z9L0r8fbhKa/NSmpiXk=
Subject key identifier:   A4:42:C8:2A:3C:1C:A4:3D:11:A7:AD:78:9A:3D:0F:4E:AD:C7:3B:0D
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer:       /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial:       019E30E0F8B36D349F8595B9204622B4192E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 13:01:50 +0000
Manifest this update:     Sat 16 May 2026 13:01:50 +0000
Manifest next update:     Sun 17 May 2026 13:01:50 +0000
Files and hashes:         1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: FaZs9/umX8EutfB3SLteCnyAifABoxfJLgwVQ75zGDU=)
                          2: 6jm1c5ao4TIq41DDCm24Gn-cCvM.roa (hash: DHj5HqftZAg5kJDUChpZMa9puMwdu/NpQqmWhiH73fE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:f8:b3:6d:34:9f:85:95:b9:20:46:22:b4:19:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
        Validity
            Not Before: May 16 13:01:50 2026 GMT
            Not After : May 17 13:01:50 2026 GMT
        Subject: CN=a442c82a3c1ca43d11a7ad789a3d0f4eadc73b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d7:63:f3:7a:f5:5b:3f:24:42:4a:99:42:5f:
                    76:35:39:c0:57:21:75:99:4e:2b:09:fe:88:b7:eb:
                    f0:d2:05:fe:4f:db:33:d4:16:3b:13:9e:da:9a:0e:
                    86:85:be:3b:ee:be:32:f8:18:01:e1:c2:35:ea:26:
                    ae:e8:69:b5:54:3b:1e:59:81:bb:bc:92:7a:80:9e:
                    66:f6:39:71:81:3d:1b:f4:10:60:88:8f:df:27:ec:
                    44:f7:ab:e1:de:d2:fd:b9:a0:89:be:97:d3:bb:92:
                    3d:7a:8d:17:6b:02:ee:72:be:80:40:4e:9f:ef:08:
                    dc:cb:83:16:b5:f8:bf:21:ea:2d:a3:af:63:a3:d3:
                    3a:92:42:9f:cf:26:eb:23:82:cb:92:d9:6e:75:08:
                    b5:4b:b1:48:4d:8a:cd:37:6c:5e:3e:49:d7:14:c2:
                    8a:4e:f5:3d:62:b0:61:de:8f:07:d2:c0:2f:54:47:
                    e4:75:a9:09:02:81:9b:d3:24:ce:e2:e5:dc:03:3e:
                    38:4b:ed:c0:e7:84:74:39:c2:80:60:8e:21:86:60:
                    e8:4f:4c:83:b0:3b:07:01:d4:73:e1:2d:dc:68:6a:
                    04:1d:d8:a3:91:d1:16:74:e9:d5:d2:b5:aa:8c:ac:
                    43:18:de:39:51:0f:5e:e5:ae:3c:8c:9d:1f:87:80:
                    f9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:42:C8:2A:3C:1C:A4:3D:11:A7:AD:78:9A:3D:0F:4E:AD:C7:3B:0D
            X509v3 Authority Key Identifier:
                keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:00:8f:82:61:74:12:0d:05:a6:8f:3d:75:20:f8:dc:21:ee:
         71:7a:a5:88:31:c8:2a:d6:c6:ab:f2:37:79:17:a6:13:7c:86:
         e5:2a:3c:87:85:ec:7a:09:fd:2e:a1:ba:a9:d2:b7:d0:1c:aa:
         f6:6a:b5:bb:97:72:2d:32:ac:9e:57:02:30:26:e3:f8:4f:76:
         dd:8e:5b:6b:26:86:90:22:12:ee:d9:ab:af:36:3a:bd:41:fd:
         6e:fa:02:de:dc:31:ec:d9:82:bb:06:b1:5e:bf:22:fb:a6:10:
         75:66:01:7c:4f:29:62:1e:b1:ef:bc:16:d6:26:48:19:da:0d:
         40:87:fc:eb:07:82:90:f9:af:4a:87:84:d7:9b:a9:94:4d:d6:
         1c:43:f1:da:36:8f:a7:92:92:33:7a:9b:f3:3b:ce:87:38:e0:
         eb:01:44:0a:7c:84:9f:9e:a6:20:47:11:51:70:17:80:bb:2f:
         62:d1:6f:22:41:a1:bc:79:65:5f:93:23:7d:79:1d:bf:9e:c0:
         c2:3d:c9:85:bf:13:ac:69:f6:bb:ff:81:ac:51:91:79:8c:7d:
         28:18:82:2c:96:fb:b6:b3:3b:bf:cb:99:5d:3f:9c:9d:54:43:
         ca:4d:46:25:3d:d7:1f:5d:81:6e:0e:3c:21:4a:46:ea:06:ed:
         3d:25:e3:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4PizbTSfhZW5IEYitBkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYzBmMTRmYWM4ZGRiMzQ4MDM3MjgwMDc2Y2MzNjYxNGRh
MzA1ZWMwHhcNMjYwNTE2MTMwMTUwWhcNMjYwNTE3MTMwMTUwWjAzMTEwLwYDVQQD
EyhhNDQyYzgyYTNjMWNhNDNkMTFhN2FkNzg5YTNkMGY0ZWFkYzczYjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ddj83r1Wz8kQkqZQl92NTnAVyF1
mU4rCf6It+vw0gX+T9sz1BY7E57amg6Ghb477r4y+BgB4cI16iau6Gm1VDseWYG7
vJJ6gJ5m9jlxgT0b9BBgiI/fJ+xE96vh3tL9uaCJvpfTu5I9eo0XawLucr6AQE6f
7wjcy4MWtfi/Ieoto69jo9M6kkKfzybrI4LLktludQi1S7FITYrNN2xePknXFMKK
TvU9YrBh3o8H0sAvVEfkdakJAoGb0yTO4uXcAz44S+3A54R0OcKAYI4hhmDoT0yD
sDsHAdRz4S3caGoEHdijkdEWdOnV0rWqjKxDGN45UQ9e5a48jJ0fh4D5wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRCyCo8HKQ9EaeteJo9D06txzsNMB8GA1UdIwQY
MBaAFN7A8U+sjds0gDcoAHbMNmFNowXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMGE5ZjktMTRhMS00Yzk2LTgyMjMt
ZWViNmZkMzJlOTJmLzEvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wMGE5ZjktMTRhMS00Yzk2LTgyMjMtZWViNmZkMzJlOTJm
LzEvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgCPgmF0
Eg0Fpo89dSD43CHucXqliDHIKtbGq/I3eRemE3yG5So8h4Xsegn9LqG6qdK30Byq
9mq1u5dyLTKsnlcCMCbj+E923Y5bayaGkCIS7tmrrzY6vUH9bvoC3twx7NmCuwax
Xr8i+6YQdWYBfE8pYh6x77wW1iZIGdoNQIf86weCkPmvSoeE15uplE3WHEPx2jaP
p5KSM3qb8zvOhzjg6wFECnyEn56mIEcRUXAXgLsvYtFvIkGhvHllX5MjfXkdv57A
wj3Jhb8TrGn2u/+BrFGReYx9KBiCLJb7trM7v8uZXT+cnVRDyk1GJT3XH12Bbg48
IUpG6gbtPSXjKg==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:11 2026 by rpki-client