Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File:                     1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier:          GOBY5n5mOv8H9EqZ388qMgd4yiK8Z7gF71P4FgxJHc0=
Subject key identifier:   5D:F2:12:D7:EF:39:B6:B6:5D:DE:AB:9B:21:E3:39:0A:56:B6:56:F6
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer:       /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial:       019E3184D7C39876FFF541C3B3BE78AD2D54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number:          171E
Signing time:             Sat 16 May 2026 16:00:50 +0000
Manifest this update:     Sat 16 May 2026 16:00:50 +0000
Manifest next update:     Sun 17 May 2026 16:00:50 +0000
Files and hashes:         1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: EgihBJ4BcB7gLGY2OXmo4q2Q6kI1Io+esnDOJR9J3zs=)
                          2: 5VBqrJ3l2bBgVNFXgKoPrPjtOoo.roa (hash: pw/y5AALVmMkOsomb76pGvibV4sU9NfaodslXc53Ans=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:84:d7:c3:98:76:ff:f5:41:c3:b3:be:78:ad:2d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
        Validity
            Not Before: May 16 16:00:50 2026 GMT
            Not After : May 17 16:00:50 2026 GMT
        Subject: CN=5df212d7ef39b6b65ddeab9b21e3390a56b656f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:06:d1:31:b2:9d:b1:a4:a1:0f:eb:90:c3:
                    5d:51:a5:d2:30:f5:8d:7f:3b:9f:00:95:dd:71:9b:
                    95:19:70:89:17:28:69:fc:70:8b:de:a2:9e:b2:76:
                    26:61:c6:bf:0c:5d:2a:68:79:8b:df:43:c7:57:a6:
                    22:70:e1:c3:84:0a:68:3d:53:c5:fb:69:1d:84:e6:
                    98:5c:db:e3:39:f1:49:3b:2d:20:a0:02:f6:8d:e6:
                    ae:e0:e6:8e:3d:2b:d4:8c:f7:5c:da:76:d6:0b:e6:
                    e9:29:62:05:ee:00:7a:8d:57:13:e2:05:94:12:a1:
                    e0:d7:8d:2e:cf:7f:a1:81:7f:88:97:3b:a0:b5:e3:
                    79:6d:5c:2f:7e:da:c2:c1:e7:f2:f4:8d:b0:4b:e5:
                    11:dd:79:71:97:c1:be:ec:0a:8d:43:cc:9e:51:80:
                    4a:b7:30:c9:45:c7:c3:57:c8:c9:f6:3c:c7:6b:bc:
                    30:a9:6a:ce:a1:3f:85:e6:6d:44:34:2d:ab:e6:a1:
                    d7:88:4e:2d:2f:6a:73:97:5d:af:0f:6d:fa:60:d1:
                    e7:3b:a5:be:19:15:7d:9a:e1:f6:97:97:85:45:b2:
                    ea:3f:99:76:1b:d6:d8:db:45:02:13:6d:a5:05:53:
                    dc:39:88:4f:bb:24:b7:72:48:ae:51:a6:2b:3d:aa:
                    0a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F2:12:D7:EF:39:B6:B6:5D:DE:AB:9B:21:E3:39:0A:56:B6:56:F6
            X509v3 Authority Key Identifier:
                keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:7c:e8:84:6e:da:b3:5e:2c:a1:06:b1:df:29:d8:11:62:f8:
         1f:2e:d2:e8:90:8e:aa:08:75:3c:7f:20:5d:1b:32:17:26:99:
         b8:6e:73:a9:a3:58:8e:5b:d7:09:86:b0:23:c3:83:cb:d3:41:
         06:17:f4:af:65:1c:33:c0:26:ab:69:b2:10:9c:36:b3:8c:08:
         ba:d0:bc:62:3e:95:fd:f8:15:94:95:78:35:38:21:ff:46:ea:
         f7:f9:87:af:9f:90:5f:0f:54:26:59:03:22:ae:c8:4d:26:87:
         3f:5a:67:5b:07:c6:42:c7:f7:18:01:6c:1d:d3:56:29:d5:ea:
         73:53:cf:5b:79:aa:11:8e:51:ef:c2:52:89:9a:97:b5:f9:09:
         0d:63:27:2c:8e:27:9a:e1:ed:a2:69:20:85:34:6a:43:99:74:
         69:94:f4:dc:40:83:c5:a4:d2:ff:53:95:8c:36:aa:11:a3:02:
         df:6c:55:43:01:e9:60:a7:90:ad:3b:ff:71:de:a1:27:dc:8b:
         c5:77:a4:6b:c1:ba:2f:e6:7f:d3:60:a2:8a:b6:9f:98:19:b9:
         06:eb:be:34:e9:97:09:eb:d3:42:af:17:55:ac:41:d6:26:33:
         06:f9:58:48:78:84:04:23:08:34:27:2a:a3:ae:a6:91:fd:c2:
         d3:5d:c0:90
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4xhNfDmHb/9UHDs754rS1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOWI4OWYzNjdkNGZiOTUwMjg3NzAxZjYyZDRhMDM5Yjdm
NmNiMjAwHhcNMjYwNTE2MTYwMDUwWhcNMjYwNTE3MTYwMDUwWjAzMTEwLwYDVQQD
Eyg1ZGYyMTJkN2VmMzliNmI2NWRkZWFiOWIyMWUzMzkwYTU2YjY1NmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI0G0TGynbGkoQ/rkMNdUaXSMPWN
fzufAJXdcZuVGXCJFyhp/HCL3qKesnYmYca/DF0qaHmL30PHV6YicOHDhApoPVPF
+2kdhOaYXNvjOfFJOy0goAL2jeau4OaOPSvUjPdc2nbWC+bpKWIF7gB6jVcT4gWU
EqHg140uz3+hgX+IlzugteN5bVwvftrCwefy9I2wS+UR3Xlxl8G+7AqNQ8yeUYBK
tzDJRcfDV8jJ9jzHa7wwqWrOoT+F5m1ENC2r5qHXiE4tL2pzl12vD236YNHnO6W+
GRV9muH2l5eFRbLqP5l2G9bY20UCE22lBVPcOYhPuyS3ckiuUaYrPaoKuwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFF3yEtfvOba2Xd6rmyHjOQpWtlb2MB8GA1UdIwQY
MBaAFPqbifNn1PuVAodwH2LUoDm39ssgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1wdUo4MmZVLTVVQ2gzQWZZdFNnT2JmMnl5QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvOTg5MzNhLTc1ODEtNDk3OS05MTIx
LTBlMWE2OGM3NTYzYi8xLzEtcHVKODJmVS01VUNoM0FmWXRTZ09iZjJ5eUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY1Lzk4OTMzYS03NTgxLTQ5NzktOTEyMS0wZTFhNjhjNzU2
M2IvMS8xLXB1SjgyZlUtNVVDaDNBZll0U2dPYmYyeXlBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHzo
hG7as14soQax3ynYEWL4Hy7S6JCOqgh1PH8gXRsyFyaZuG5zqaNYjlvXCYawI8OD
y9NBBhf0r2UcM8Amq2myEJw2s4wIutC8Yj6V/fgVlJV4NTgh/0bq9/mHr5+QXw9U
JlkDIq7ITSaHP1pnWwfGQsf3GAFsHdNWKdXqc1PPW3mqEY5R78JSiZqXtfkJDWMn
LI4nmuHtomkghTRqQ5l0aZT03ECDxaTS/1OVjDaqEaMC32xVQwHpYKeQrTv/cd6h
J9yLxXeka8G6L+Z/02CiirafmBm5Buu+NOmXCevTQq8XVaxB1iYzBvlYSHiEBCMI
NCcqo66mkf3C013AkA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:56:41 2026 by rpki-client