Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
File:                     4WgoY-mYep64ZougfJbJmhst_mk.mft (raw, json)
Hash identifier:          HjUpLejujomyBs7m9cUsB8ULnSfyi9k+PtX5LpwsDbQ=
Subject key identifier:   38:17:3F:66:CF:BC:15:A8:6F:99:AF:56:92:B3:1A:25:5B:06:47:D9
Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
Certificate issuer:       /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Certificate serial:       019E4F8F174C3999E833C2A41AF0F4D2986F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
Manifest number:          0292
Signing time:             Fri 22 May 2026 12:00:38 +0000
Manifest this update:     Fri 22 May 2026 12:00:38 +0000
Manifest next update:     Sat 23 May 2026 12:00:38 +0000
Files and hashes:         1: 4WgoY-mYep64ZougfJbJmhst_mk.crl (hash: M4HaVq4SCVP7s/c9q3gRsYhlvazXINzU02x/TAS+IJQ=)
                          2: Ac2bylIr7B437ec52nmYNkxcBLU.roa (hash: NVzCCl4oqQBqLlnzk4NHLtjdOZIYGTwFiCs0i6US8YQ=)
                          3: VurYQADeNAyQZfVqHtE93Y07CDc.roa (hash: zo7Q7XfiMqpPBNsTQ58E9qm/cSZ4esMUjH52zOEyenA=)
                          4: ey-McRgW79AZU_fzpE-27yI2jAk.roa (hash: pO+sInd8rxx8H+MS6Ps1T/UlLYjOIIjg8OASDn/RsGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4f:8f:17:4c:39:99:e8:33:c2:a4:1a:f0:f4:d2:98:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
        Validity
            Not Before: May 22 12:00:38 2026 GMT
            Not After : May 23 12:00:38 2026 GMT
        Subject: CN=38173f66cfbc15a86f99af5692b31a255b0647d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:47:3f:f8:e9:43:79:34:a9:bb:c2:c7:3f:
                    38:01:dc:cf:89:6e:59:70:9c:be:47:26:1e:9d:80:
                    a8:c4:b4:37:c2:23:2f:2d:52:58:80:5e:e6:8b:64:
                    9b:d3:82:9b:80:67:20:64:a7:93:67:b3:01:9b:58:
                    00:1b:cc:13:ed:ee:2c:f3:e9:7e:eb:c5:c1:71:7b:
                    0b:31:9e:92:6d:9c:5c:8f:35:91:eb:6d:92:36:ac:
                    95:51:28:5c:4b:c9:8b:01:18:6e:81:c4:54:c2:c3:
                    99:81:d1:f8:35:9b:81:ad:27:26:c2:f6:10:d2:c9:
                    24:b4:34:41:27:be:f0:99:5f:c8:d7:b8:70:5c:3a:
                    74:75:61:67:fe:e6:d0:13:12:89:10:f7:ec:b8:79:
                    f5:b1:94:9b:28:53:d7:fb:50:81:fc:97:48:d2:e9:
                    48:ae:4c:ac:65:a3:73:e4:54:27:fe:d3:f7:b4:55:
                    4d:e4:ff:c9:2b:0e:6b:f3:d9:8e:1b:36:a2:d4:d6:
                    07:e3:20:52:81:cb:be:82:c8:71:0d:76:56:e3:e0:
                    53:c9:cc:ea:24:91:f2:de:e2:06:40:cc:d1:a3:ff:
                    c0:56:3d:0d:b7:93:0d:83:f3:a5:b7:e6:db:cf:fc:
                    28:5b:d0:4e:41:58:6a:78:83:9e:68:da:e3:b0:18:
                    1d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:17:3F:66:CF:BC:15:A8:6F:99:AF:56:92:B3:1A:25:5B:06:47:D9
            X509v3 Authority Key Identifier:
                keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4d:57:cb:8d:68:51:4a:bc:0c:fa:da:7c:17:30:fc:33:19:
         3e:f1:c8:2e:ca:70:92:ef:bc:56:8d:19:80:8f:cc:d6:98:28:
         f0:2a:a5:5a:0a:54:5c:b4:de:f4:26:18:82:16:54:de:b2:19:
         ae:b0:0d:5b:1d:4d:6a:ea:b3:40:82:07:aa:9b:fc:b0:98:87:
         77:99:cf:f5:01:c3:77:e2:76:bf:51:4b:47:0d:a3:fe:76:6b:
         9a:2e:16:a7:8a:58:eb:8b:c9:25:cc:0e:cc:53:f3:63:d9:d8:
         a5:a5:32:a1:9e:97:52:8b:e0:55:89:79:59:ca:fa:6f:d3:9e:
         b6:ee:0e:58:93:e7:d9:19:b2:5f:30:f5:90:1d:1d:11:82:7c:
         a9:e9:25:90:d4:45:8e:3f:1a:d8:5b:23:39:5d:c1:3d:40:b5:
         63:23:e1:41:a9:af:ad:e8:ef:b1:0e:cb:fe:e0:b2:66:14:14:
         c6:a6:29:cb:2b:fa:9c:33:5d:c4:98:a4:b0:15:a6:fb:93:ca:
         98:66:e2:03:3f:f9:cc:51:7b:a1:81:76:f3:b9:a3:9a:1d:2a:
         95:70:c6:e1:d9:8e:20:78:0e:7c:d3:93:27:32:9d:8e:b2:1d:
         5a:9e:fb:6c:1f:74:60:5c:43:d6:5a:f0:07:18:65:ec:f8:72:
         75:6b:9f:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5PjxdMOZnoM8KkGvD00phvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNjgyODYzZTk5ODdhOWViODY2OGJhMDdjOTZjOTlhMWIy
ZGZlNjkwHhcNMjYwNTIyMTIwMDM4WhcNMjYwNTIzMTIwMDM4WjAzMTEwLwYDVQQD
EygzODE3M2Y2NmNmYmMxNWE4NmY5OWFmNTY5MmIzMWEyNTViMDY0N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwxHP/jpQ3k0qbvCxz84AdzPiW5Z
cJy+RyYenYCoxLQ3wiMvLVJYgF7mi2Sb04KbgGcgZKeTZ7MBm1gAG8wT7e4s8+l+
68XBcXsLMZ6SbZxcjzWR622SNqyVUShcS8mLARhugcRUwsOZgdH4NZuBrScmwvYQ
0skktDRBJ77wmV/I17hwXDp0dWFn/ubQExKJEPfsuHn1sZSbKFPX+1CB/JdI0ulI
rkysZaNz5FQn/tP3tFVN5P/JKw5r89mOGzai1NYH4yBSgcu+gshxDXZW4+BTyczq
JJHy3uIGQMzRo//AVj0Nt5MNg/Olt+bbz/woW9BOQVhqeIOeaNrjsBgd2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgXP2bPvBWob5mvVpKzGiVbBkfZMB8GA1UdIwQY
MBaAFOFoKGPpmHqeuGaLoHyWyZobLf5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2It
M2JkYTM1MzljNmJjLzEvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2ItM2JkYTM1MzljNmJj
LzEvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATU1Xy41o
UUq8DPrafBcw/DMZPvHILspwku+8Vo0ZgI/M1pgo8CqlWgpUXLTe9CYYghZU3rIZ
rrANWx1NauqzQIIHqpv8sJiHd5nP9QHDd+J2v1FLRw2j/nZrmi4Wp4pY64vJJcwO
zFPzY9nYpaUyoZ6XUovgVYl5Wcr6b9Oetu4OWJPn2RmyXzD1kB0dEYJ8qeklkNRF
jj8a2FsjOV3BPUC1YyPhQamvrejvsQ7L/uCyZhQUxqYpyyv6nDNdxJiksBWm+5PK
mGbiAz/5zFF7oYF287mjmh0qlXDG4dmOIHgOfNOTJzKdjrIdWp77bB90YFxD1lrw
Bxhl7PhydWufRw==
-----END CERTIFICATE-----
Generated at Fri May 22 15:09:47 2026 by rpki-client