Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
File:                     1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft (raw, json)
Hash identifier:          0mtqpYKEJ+UY3ByEgWra4Nxguw/TVpa+WuR4Ho2guQE=
Subject key identifier:   BC:C4:A9:7D:54:BC:71:96:D6:4F:EB:1F:A6:88:C8:36:79:AE:07:D5
Authority key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
Certificate issuer:       /CN=f91084f454139347933876d52634b41a1dd099db
Certificate serial:       019E30E108222A53331B2B3E96213306DFD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
Manifest number:          130B
Signing time:             Sat 16 May 2026 13:01:54 +0000
Manifest this update:     Sat 16 May 2026 13:01:54 +0000
Manifest next update:     Sun 17 May 2026 13:01:54 +0000
Files and hashes:         1: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl (hash: qwgckKzi+LlkAH3VzaJteN4variI5n7SSobP+ggyHkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e1:08:22:2a:53:33:1b:2b:3e:96:21:33:06:df:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91084f454139347933876d52634b41a1dd099db
        Validity
            Not Before: May 16 13:01:54 2026 GMT
            Not After : May 17 13:01:54 2026 GMT
        Subject: CN=bcc4a97d54bc7196d64feb1fa688c83679ae07d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:74:23:20:b0:e6:05:81:ef:b7:5b:c4:ba:b4:
                    02:c2:13:b2:ca:2e:28:44:c6:5d:db:4d:a7:62:da:
                    05:6a:76:13:9d:91:cf:95:d6:dd:30:2a:3a:8d:93:
                    7b:11:cf:ad:3b:c7:b9:88:21:0f:a1:05:4e:d0:31:
                    37:b5:5d:1b:46:78:97:ff:cf:7b:b0:7e:d8:41:d0:
                    1f:ae:5d:0a:07:6d:0a:0e:43:06:0a:07:fc:9a:2f:
                    eb:de:a4:72:d1:a6:bf:a1:69:9e:87:72:19:94:49:
                    11:de:91:6f:6e:bf:cf:47:3e:15:cc:57:a9:22:dd:
                    61:6b:d8:cc:8f:b0:29:fb:78:b9:47:62:0b:79:4a:
                    b4:46:c6:15:9c:80:3f:cc:4f:fd:3c:e6:1a:aa:3a:
                    19:41:5d:e2:8e:59:48:cf:c1:f6:56:dc:fe:1f:e4:
                    17:f8:ac:f1:33:5c:3b:c1:95:4f:92:f9:46:76:b4:
                    fb:5c:66:e0:5b:44:29:91:78:b3:a5:56:1f:30:f3:
                    3a:83:80:86:db:51:87:f1:9a:cf:d4:8b:88:6c:cf:
                    c2:84:3f:47:e3:12:e6:f0:dd:06:8d:5d:8d:c2:de:
                    c6:ce:16:37:98:59:18:1e:2a:c4:e3:3d:39:f9:f9:
                    99:05:f7:1b:ef:34:85:f8:00:3a:44:38:95:3d:79:
                    ba:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C4:A9:7D:54:BC:71:96:D6:4F:EB:1F:A6:88:C8:36:79:AE:07:D5
            X509v3 Authority Key Identifier:
                keyid:F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:22:32:ba:85:6f:9e:e6:4b:75:0b:b1:ad:95:b9:5f:12:46:
         cc:e3:8f:07:0b:ff:e2:83:d4:d8:98:2a:3e:6c:4f:11:4b:11:
         83:5d:72:4a:ab:47:7b:64:23:fb:42:e4:41:a9:80:31:55:58:
         80:b7:89:2b:78:3a:76:62:c6:48:dc:a3:5a:0c:a2:8c:85:59:
         76:d8:70:01:05:44:46:c2:e5:69:4f:55:dc:2e:83:78:4a:8d:
         a3:fd:18:10:b5:0d:b7:cd:90:26:ac:dd:fe:a5:39:ad:c0:cf:
         59:65:72:70:e2:ae:30:37:84:fa:91:48:a1:76:24:50:d7:20:
         89:8b:43:c8:cc:62:90:98:ad:b5:12:65:62:27:73:cf:ee:9c:
         bd:f7:58:46:0a:54:af:a0:d5:36:10:37:bd:07:02:26:46:48:
         41:6e:b7:b2:91:b3:ff:ac:3e:bc:28:09:c4:0f:73:27:64:4c:
         30:d5:14:dc:01:7a:d3:ba:a3:33:aa:44:ff:ec:02:55:ab:39:
         fb:a6:37:a7:3d:f8:db:fe:8e:35:6a:33:f1:0c:46:f1:14:48:
         63:6b:ce:3f:fe:fd:f4:33:88:34:5d:69:3c:e3:19:e2:d1:f4:
         68:4a:e2:dc:3c:7a:c8:e3:b6:b1:87:f4:f9:75:6a:f7:7d:af:
         76:5a:b0:9e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4w4QgiKlMzGys+liEzBt/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTA4NGY0NTQxMzkzNDc5MzM4NzZkNTI2MzRiNDFhMWRk
MDk5ZGIwHhcNMjYwNTE2MTMwMTU0WhcNMjYwNTE3MTMwMTU0WjAzMTEwLwYDVQQD
EyhiY2M0YTk3ZDU0YmM3MTk2ZDY0ZmViMWZhNjg4YzgzNjc5YWUwN2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXQjILDmBYHvt1vEurQCwhOyyi4o
RMZd202nYtoFanYTnZHPldbdMCo6jZN7Ec+tO8e5iCEPoQVO0DE3tV0bRniX/897
sH7YQdAfrl0KB20KDkMGCgf8mi/r3qRy0aa/oWmeh3IZlEkR3pFvbr/PRz4VzFep
It1ha9jMj7Ap+3i5R2ILeUq0RsYVnIA/zE/9POYaqjoZQV3ijllIz8H2Vtz+H+QX
+KzxM1w7wZVPkvlGdrT7XGbgW0QpkXizpVYfMPM6g4CG21GH8ZrP1IuIbM/ChD9H
4xLm8N0GjV2Nwt7GzhY3mFkYHirE4z05+fmZBfcb7zSF+AA6RDiVPXm6jwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLzEqX1UvHGW1k/rH6aIyDZ5rgfVMB8GA1UdIwQY
MBaAFPkQhPRUE5NHkzh21SY0tBod0JnbMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SQ0U5RlFUazBlVE9IYlZKalMwR2gzUW1kcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvOTRkOWViLTIyZGEtNDc1Zi1iZjNh
LTFhNmZkMmM0NDgxNi8xLzEtUkNFOUZRVGswZVRPSGJWSmpTMEdoM1FtZHMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk1Lzk0ZDllYi0yMmRhLTQ3NWYtYmYzYS0xYTZmZDJjNDQ4
MTYvMS8xLVJDRTlGUVRrMGVUT0hiVkpqUzBHaDNRbWRzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiIy
uoVvnuZLdQuxrZW5XxJGzOOPBwv/4oPU2JgqPmxPEUsRg11ySqtHe2Qj+0LkQamA
MVVYgLeJK3g6dmLGSNyjWgyijIVZdthwAQVERsLlaU9V3C6DeEqNo/0YELUNt82Q
Jqzd/qU5rcDPWWVycOKuMDeE+pFIoXYkUNcgiYtDyMxikJittRJlYidzz+6cvfdY
RgpUr6DVNhA3vQcCJkZIQW63spGz/6w+vCgJxA9zJ2RMMNUU3AF607qjM6pE/+wC
Vas5+6Y3pz342/6ONWoz8QxG8RRIY2vOP/799DOINF1pPOMZ4tH0aEri3Dx6yOO2
sYf0+XVq932vdlqwng==
-----END CERTIFICATE-----
Generated at Sat May 16 17:07:24 2026 by rpki-client