Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
File:                     F5meIRkUpo24Pq8_f9OExT50dFU.mft (raw, json)
Hash identifier:          pTe6I+Xi+t9CWjJe13R2sBcclJzsj4Y5C2sHDdkSoS4=
Subject key identifier:   78:6D:12:AA:3F:A2:0F:39:3C:F3:70:5D:57:71:C9:70:60:C6:85:B4
Authority key identifier: 17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55
Certificate issuer:       /CN=17999e211914a68db83eaf3f7fd384c53e747455
Certificate serial:       019D37F740EB79F694032F894634F54AAE35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
Manifest number:          16D8
Signing time:             Sun 29 Mar 2026 05:00:44 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:44 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:44 +0000
Files and hashes:         1: F5meIRkUpo24Pq8_f9OExT50dFU.crl (hash: JfEACe7jnRU6d+TWMkGxi5mitSPJehKLjPaDQe6sWQ0=)
                          2: ebpfphQpUoNw6-DnGUlcUcncw5M.roa (hash: hBKGgctsDfvdQwo/wD176sECwRPtV6KHzN7DD0h6HOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:40:eb:79:f6:94:03:2f:89:46:34:f5:4a:ae:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17999e211914a68db83eaf3f7fd384c53e747455
        Validity
            Not Before: Mar 29 05:00:44 2026 GMT
            Not After : Mar 30 05:00:44 2026 GMT
        Subject: CN=786d12aa3fa20f393cf3705d5771c97060c685b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:ef:72:de:24:ce:7a:84:69:11:fd:b3:6b:
                    b7:94:47:a0:2d:52:ca:94:7a:71:ed:e9:01:97:5a:
                    9a:97:02:a1:ca:96:cf:df:38:f1:9f:09:f7:71:d8:
                    4d:14:cc:45:c0:1d:a0:82:27:21:a5:17:6d:8b:fc:
                    a5:04:c0:8c:cb:ca:9f:9c:b9:ec:6f:d4:ba:19:3f:
                    fd:3e:87:6b:ad:9a:0d:01:0e:84:c0:94:7b:93:87:
                    65:4d:95:58:09:76:32:d0:86:17:9c:59:26:72:dc:
                    29:43:1e:29:72:86:c5:a6:d9:b2:cf:67:a5:81:6c:
                    d8:ca:4f:18:9e:54:c9:38:07:bf:ae:18:b8:0c:9e:
                    13:66:2f:a5:ab:67:56:95:f2:b0:39:63:df:89:c8:
                    a2:b5:28:cc:3c:f5:7d:35:4d:94:04:1a:74:ab:fc:
                    b4:64:c8:69:1f:93:e1:b1:e4:38:fd:9c:ac:a9:ee:
                    57:c5:02:6c:cc:bb:15:6b:b2:31:1d:3e:46:a4:4f:
                    32:8b:2c:06:1e:54:6b:94:84:92:43:0f:df:1e:e0:
                    99:fa:b6:d5:f0:3f:cc:c3:6c:e9:02:09:b1:72:1c:
                    93:cc:9f:ca:c6:b8:e5:ed:5e:f1:c7:43:5c:eb:28:
                    f2:f3:b6:1d:fb:47:9f:cc:54:42:7e:0d:5e:5e:87:
                    7c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6D:12:AA:3F:A2:0F:39:3C:F3:70:5D:57:71:C9:70:60:C6:85:B4
            X509v3 Authority Key Identifier:
                keyid:17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:32:0e:a0:aa:6a:8a:5b:8c:81:72:ef:20:a4:5c:0f:e0:9f:
         93:09:f4:66:f5:0e:c0:fa:99:fa:fa:62:48:f8:a4:e8:f6:09:
         af:07:8c:41:ff:bb:87:a4:6d:fe:0d:c5:7e:95:54:54:87:1b:
         0c:f3:d5:00:e4:b9:a7:9e:fa:81:00:08:99:2e:b7:d6:6a:4a:
         0f:9b:92:4e:35:d7:09:3d:88:b5:04:86:cf:8b:6b:68:a4:f7:
         5b:f7:01:84:81:e6:b2:11:68:86:b0:14:d6:55:ef:25:b0:a0:
         f4:16:90:00:a3:80:21:da:d3:cc:94:e6:09:cc:f9:16:84:87:
         d1:65:33:54:8e:f3:cb:b9:21:5b:f1:1f:ac:a4:13:cb:24:e1:
         60:21:fa:d8:39:45:02:fd:16:85:08:49:57:76:70:f2:d9:55:
         79:f5:47:e4:1f:9c:ac:e9:e5:04:c7:0e:33:2c:35:63:76:3b:
         6c:d9:9e:c0:4c:68:e6:92:63:88:b1:dd:18:42:e0:e0:49:87:
         63:83:7b:4b:c9:d7:63:0e:05:2c:35:47:97:cf:7b:e7:77:61:
         1b:aa:a2:9c:83:19:b3:ea:4e:ac:4b:66:b9:47:87:08:6b:73:
         09:75:69:6c:16:81:81:e0:f0:45:af:6a:7f:71:f0:78:33:a3:
         06:c1:30:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0390DrefaUAy+JRjT1Sq41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTk5ZTIxMTkxNGE2OGRiODNlYWYzZjdmZDM4NGM1M2U3
NDc0NTUwHhcNMjYwMzI5MDUwMDQ0WhcNMjYwMzMwMDUwMDQ0WjAzMTEwLwYDVQQD
Eyg3ODZkMTJhYTNmYTIwZjM5M2NmMzcwNWQ1NzcxYzk3MDYwYzY4NWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+Tvct4kznqEaRH9s2u3lEegLVLK
lHpx7ekBl1qalwKhypbP3zjxnwn3cdhNFMxFwB2ggichpRdti/ylBMCMy8qfnLns
b9S6GT/9PodrrZoNAQ6EwJR7k4dlTZVYCXYy0IYXnFkmctwpQx4pcobFptmyz2el
gWzYyk8YnlTJOAe/rhi4DJ4TZi+lq2dWlfKwOWPficiitSjMPPV9NU2UBBp0q/y0
ZMhpH5PhseQ4/Zysqe5XxQJszLsVa7IxHT5GpE8yiywGHlRrlISSQw/fHuCZ+rbV
8D/Mw2zpAgmxchyTzJ/Kxrjl7V7xx0Nc6yjy87Yd+0efzFRCfg1eXod8TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhtEqo/og85PPNwXVdxyXBgxoW0MB8GA1UdIwQY
MBaAFBeZniEZFKaNuD6vP3/ThMU+dHRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVtZUlSa1VwbzI0UHE4X2Y5T0V4VDUwZEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lYTExN2EtNDEyYS00OWUyLTg5MGYt
NGJiNDNiYTNjZGUzLzEvRjVtZUlSa1VwbzI0UHE4X2Y5T0V4VDUwZEZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lYTExN2EtNDEyYS00OWUyLTg5MGYtNGJiNDNiYTNjZGUz
LzEvRjVtZUlSa1VwbzI0UHE4X2Y5T0V4VDUwZEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzIOoKpq
iluMgXLvIKRcD+Cfkwn0ZvUOwPqZ+vpiSPik6PYJrweMQf+7h6Rt/g3FfpVUVIcb
DPPVAOS5p576gQAImS631mpKD5uSTjXXCT2ItQSGz4traKT3W/cBhIHmshFohrAU
1lXvJbCg9BaQAKOAIdrTzJTmCcz5FoSH0WUzVI7zy7khW/EfrKQTyyThYCH62DlF
Av0WhQhJV3Zw8tlVefVH5B+crOnlBMcOMyw1Y3Y7bNmewExo5pJjiLHdGELg4EmH
Y4N7S8nXYw4FLDVHl89753dhG6qinIMZs+pOrEtmuUeHCGtzCXVpbBaBgeDwRa9q
f3HweDOjBsEw4A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:58 2026 by rpki-client