Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
File:                     2GeflcqbZWt8oiG-brJPleMosBA.mft (raw, json)
Hash identifier:          Ua79sgiF6ZoIXUo8iDpNZCo4n9N0Nks1CBsbYAAM2fE=
Subject key identifier:   8D:4D:F5:4E:25:CC:1C:B0:5F:A5:93:94:F0:B4:98:75:76:B2:37:86
Authority key identifier: D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10
Certificate issuer:       /CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
Certificate serial:       019E303BAED8B85BF34A362AD7D033F273D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
Manifest number:          0137
Signing time:             Sat 16 May 2026 10:01:18 +0000
Manifest this update:     Sat 16 May 2026 10:01:18 +0000
Manifest next update:     Sun 17 May 2026 10:01:18 +0000
Files and hashes:         1: 2GeflcqbZWt8oiG-brJPleMosBA.crl (hash: 2OeNxkKOqdwfheLRA5CSzgNko9G5/kOponDFHF+NTvU=)
                          2: BSZLZZU8WnO1HNWxWSVR-o_RsAQ.roa (hash: eIYiIuRaJOxAqm6Szxm9PX2GnxZ6UxTo1qMiKhfknrA=)
                          3: Ko6ayuDYOxyaZR1lB_4YUKhJxd8.roa (hash: Guqjr9wNF8VXnju8V9KS/FQotrR92a30mYmLze8RF50=)
                          4: RvTgs-Ael9U9l-WfMGAnn6bpYas.roa (hash: 92wDEfW/LHrs63qVLF1djhEHy33LjlsoGqzBeCbZbeo=)
                          5: r48UpQfIFT_00L01sN999jQbTcc.roa (hash: B09mf8eaBwNCmIzM3aQ+pzMc7N9vQ8EVkw29KyQzVHc=)
                          6: z0g0oAAZfo552Sh_lukdYrvy7bE.roa (hash: a249LmxihlnLe91HGuM/HylW2FVr4nPvQ2mfBuPcwm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:ae:d8:b8:5b:f3:4a:36:2a:d7:d0:33:f2:73:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
        Validity
            Not Before: May 16 10:01:18 2026 GMT
            Not After : May 17 10:01:18 2026 GMT
        Subject: CN=8d4df54e25cc1cb05fa59394f0b4987576b23786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:7b:b4:4d:3b:94:6d:52:b6:1f:f5:c2:20:
                    01:cb:82:8f:66:5a:c9:59:88:44:8f:a9:24:28:e0:
                    7d:7c:70:6b:2e:8c:76:4b:3f:78:e7:29:cf:dd:6c:
                    95:8c:72:4f:0e:4e:98:ef:f5:5b:46:b6:d4:1d:e2:
                    ab:e3:74:35:cf:3f:03:59:23:83:88:83:a7:7a:1c:
                    5d:86:c8:32:15:21:97:f9:06:50:48:f1:4d:29:12:
                    26:91:3e:b3:56:75:1f:9b:f9:c6:29:e4:9b:73:b3:
                    d6:dd:f8:a1:bb:30:84:22:6f:7f:e4:1b:b0:37:dd:
                    d9:ac:09:d7:43:ab:9b:c2:53:b6:55:b9:2d:b6:20:
                    75:9b:08:b9:2c:b3:6c:f7:9b:64:b9:44:0f:69:7e:
                    df:6d:b8:a9:81:f8:51:a6:38:da:cf:26:3e:59:04:
                    5e:08:d3:59:46:87:85:1e:59:52:3d:b6:e9:ae:08:
                    da:00:90:51:6b:57:90:81:f7:66:a2:f5:ca:a8:b8:
                    cd:88:78:f5:94:8a:a8:26:b6:0b:1b:cd:86:7a:56:
                    15:42:11:f4:e5:60:21:81:d9:00:d2:83:cb:2a:6b:
                    ec:ca:6d:a0:b2:8c:76:d3:5a:06:22:2b:98:70:58:
                    f7:1f:52:c3:a9:1b:95:26:8e:a6:6e:b8:d1:6e:86:
                    77:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4D:F5:4E:25:CC:1C:B0:5F:A5:93:94:F0:B4:98:75:76:B2:37:86
            X509v3 Authority Key Identifier:
                keyid:D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:51:da:16:d0:0c:e1:55:8c:60:92:26:01:68:c0:4e:53:ee:
         07:10:71:6b:22:8a:eb:b0:91:9a:ba:a9:00:2e:8c:5c:c8:46:
         e4:cc:3b:e1:cd:7d:58:99:b3:01:fb:55:96:54:b6:94:19:f2:
         c3:27:b6:3a:8c:02:b0:e5:62:f2:20:ff:fa:e5:58:f3:bd:6d:
         2f:3e:8e:89:61:5a:56:13:75:3f:59:cb:2d:2d:ac:0c:1e:87:
         49:f4:17:33:b8:35:3b:54:6c:c6:85:47:f7:d9:4e:a5:e6:86:
         cf:1d:43:fe:e5:b2:c1:ab:b7:a3:42:91:54:de:7b:22:df:a3:
         f0:46:88:73:64:d3:a6:fd:36:ad:7a:54:50:52:e9:c9:57:6b:
         ce:cd:07:71:5f:c6:40:ef:d9:ef:ed:c2:0b:23:97:41:f4:1c:
         c8:90:74:32:69:7e:8d:d3:c6:8d:ae:6c:38:f6:b8:2a:38:f0:
         b7:0c:73:07:0e:ba:2c:c9:67:a8:70:36:e4:af:a1:31:cf:32:
         50:10:d8:09:08:17:83:33:cc:66:bd:ff:69:13:5c:cb:57:14:
         39:d5:c0:be:50:b1:23:46:16:4d:59:ed:e1:33:be:73:78:96:
         1d:ee:55:f7:d8:1c:3d:b5:e8:be:76:97:4e:1f:88:0c:df:6d:
         36:c5:9f:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO67YuFvzSjYq19Az8nPRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4Njc5Zjk1Y2E5YjY1NmI3Y2EyMjFiZTZlYjI0Zjk1ZTMy
OGIwMTAwHhcNMjYwNTE2MTAwMTE4WhcNMjYwNTE3MTAwMTE4WjAzMTEwLwYDVQQD
Eyg4ZDRkZjU0ZTI1Y2MxY2IwNWZhNTkzOTRmMGI0OTg3NTc2YjIzNzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbR7tE07lG1Sth/1wiABy4KPZlrJ
WYhEj6kkKOB9fHBrLox2Sz945ynP3WyVjHJPDk6Y7/VbRrbUHeKr43Q1zz8DWSOD
iIOnehxdhsgyFSGX+QZQSPFNKRImkT6zVnUfm/nGKeSbc7PW3fihuzCEIm9/5Buw
N93ZrAnXQ6ubwlO2VbkttiB1mwi5LLNs95tkuUQPaX7fbbipgfhRpjjazyY+WQRe
CNNZRoeFHllSPbbprgjaAJBRa1eQgfdmovXKqLjNiHj1lIqoJrYLG82GelYVQhH0
5WAhgdkA0oPLKmvsym2gsox201oGIiuYcFj3H1LDqRuVJo6mbrjRboZ3ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1N9U4lzBywX6WTlPC0mHV2sjeGMB8GA1UdIwQY
MBaAFNhnn5XKm2VrfKIhvm6yT5XjKLAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkdlZmxjcWJaV3Q4b2lHLWJySlBsZU1vc0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzct
ZTUyMjlhZDUyMTRlLzEvMkdlZmxjcWJaV3Q4b2lHLWJySlBsZU1vc0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzctZTUyMjlhZDUyMTRl
LzEvMkdlZmxjcWJaV3Q4b2lHLWJySlBsZU1vc0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlHaFtAM
4VWMYJImAWjATlPuBxBxayKK67CRmrqpAC6MXMhG5Mw74c19WJmzAftVllS2lBny
wye2OowCsOVi8iD/+uVY871tLz6OiWFaVhN1P1nLLS2sDB6HSfQXM7g1O1RsxoVH
99lOpeaGzx1D/uWywau3o0KRVN57It+j8EaIc2TTpv02rXpUUFLpyVdrzs0HcV/G
QO/Z7+3CCyOXQfQcyJB0Mml+jdPGja5sOPa4KjjwtwxzBw66LMlnqHA25K+hMc8y
UBDYCQgXgzPMZr3/aRNcy1cUOdXAvlCxI0YWTVnt4TO+c3iWHe5V99gcPbXovnaX
Th+IDN9tNsWf1Q==
-----END CERTIFICATE-----
Generated at Sat May 16 20:19:17 2026 by rpki-client