Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File:                     krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier:          Rj2af8fr+hdjV57nUNVWYWoQ32Crm9QUjzsOfuX50nk=
Subject key identifier:   87:FB:CB:38:45:3E:4B:A0:C5:D9:3E:4C:84:08:CA:10:00:46:E5:84
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer:       /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial:       019E314E1AFD0B82D779DBF4B6C02F5C38CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number:          1836
Signing time:             Sat 16 May 2026 15:01:02 +0000
Manifest this update:     Sat 16 May 2026 15:01:02 +0000
Manifest next update:     Sun 17 May 2026 15:01:02 +0000
Files and hashes:         1: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: ClCPunpZZFdH1KoxNJUijGEFHU6+RnZe8eM5Hscrefg=)
                          2: zOvOdvEFDu9Mo4Hd8BTTn_Gseog.roa (hash: i7r8dEO0PV70SWBxos0ykVviEGzZou2X66tLzrHIOKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:1a:fd:0b:82:d7:79:db:f4:b6:c0:2f:5c:38:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
        Validity
            Not Before: May 16 15:01:02 2026 GMT
            Not After : May 17 15:01:02 2026 GMT
        Subject: CN=87fbcb38453e4ba0c5d93e4c8408ca100046e584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:4b:ec:42:2d:49:7c:bd:4e:c7:21:98:40:
                    d3:7d:cd:6b:c7:f5:56:72:eb:c1:38:84:af:cc:84:
                    94:58:fb:3d:6b:ad:e6:b7:af:ed:63:a0:53:55:08:
                    2b:1e:7e:7e:c9:05:69:ff:20:ac:e7:ef:08:43:fa:
                    ff:1a:c9:9d:be:7b:87:39:64:b9:10:21:93:07:54:
                    b8:d8:df:45:22:ee:30:33:83:c7:69:53:5a:16:7a:
                    ce:78:da:ca:24:c6:f7:c3:24:97:54:af:b8:08:07:
                    ce:1b:8e:10:92:74:85:4c:4a:de:85:b9:a6:86:d4:
                    e3:aa:99:d2:82:a1:b0:db:c1:26:c0:59:d1:4b:11:
                    e5:e3:91:0e:3b:64:9a:4c:2f:6d:a3:e6:e8:ae:bc:
                    db:21:ad:0f:93:e9:8d:0c:8a:eb:c1:e3:c4:65:f0:
                    07:1e:17:7a:b9:ce:77:0d:bd:ac:85:dd:be:b5:d8:
                    30:fd:cf:37:65:38:79:f3:81:81:98:ba:2d:87:b8:
                    d8:e6:3b:77:da:aa:51:f6:d7:51:7e:b3:1c:7b:ee:
                    9b:b8:a4:8c:b5:a9:7d:a8:c5:c0:ee:e9:c8:46:66:
                    c2:d2:a6:ed:8b:ae:4d:5f:31:49:bf:8e:d5:ed:ba:
                    91:2b:33:10:21:3e:c7:03:3d:d2:81:95:d6:c3:99:
                    6e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FB:CB:38:45:3E:4B:A0:C5:D9:3E:4C:84:08:CA:10:00:46:E5:84
            X509v3 Authority Key Identifier:
                keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4d:f1:43:4e:41:c9:33:ca:6d:83:4b:91:1b:ea:f0:f2:7e:
         df:94:4e:4d:cf:ee:84:68:ca:f8:91:02:f5:7e:f6:c7:2f:65:
         f5:70:7d:ce:8d:dc:5f:e7:67:63:8a:40:67:2a:16:32:86:9f:
         d6:9f:36:77:25:ba:53:08:49:0d:e7:1b:6b:47:32:68:d2:33:
         63:a8:a4:67:8a:cc:12:15:de:2b:88:e0:ce:56:77:f3:09:e6:
         e3:4d:09:64:ca:d0:66:02:75:b9:8d:a3:cd:fb:8f:34:a3:a5:
         a8:52:af:d1:78:79:d9:49:23:c7:8f:bc:d4:44:1f:80:97:81:
         69:72:09:29:5b:12:e9:ea:82:fb:71:c0:2b:0a:a8:1b:4b:f3:
         ae:d5:47:2d:0e:7c:6d:0e:1e:89:ab:e4:38:52:c7:0f:e5:d2:
         64:bf:9a:ef:8a:de:82:07:07:9b:77:77:25:f9:02:0d:fb:da:
         70:68:33:c3:f4:de:49:4a:a3:98:66:e4:9a:14:27:0f:18:5a:
         e9:53:32:be:90:41:c0:63:26:0e:fe:77:96:f8:ff:60:be:3c:
         fd:ed:6a:e6:8e:4b:fa:8c:79:e5:5b:f4:85:64:18:bc:96:22:
         20:f7:4c:a6:3d:a1:12:19:48:64:27:e5:c6:73:33:6d:6a:0b:
         5e:cf:41:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xThr9C4LXedv0tsAvXDjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYjVhYzg4ZjJjZGIxNDkzNDgzMGMxYWMwOTZhNWVmNzMw
OThmMTIwHhcNMjYwNTE2MTUwMTAyWhcNMjYwNTE3MTUwMTAyWjAzMTEwLwYDVQQD
Eyg4N2ZiY2IzODQ1M2U0YmEwYzVkOTNlNGM4NDA4Y2ExMDAwNDZlNTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm9L7EItSXy9TschmEDTfc1rx/VW
cuvBOISvzISUWPs9a63mt6/tY6BTVQgrHn5+yQVp/yCs5+8IQ/r/GsmdvnuHOWS5
ECGTB1S42N9FIu4wM4PHaVNaFnrOeNrKJMb3wySXVK+4CAfOG44QknSFTErehbmm
htTjqpnSgqGw28EmwFnRSxHl45EOO2SaTC9to+borrzbIa0Pk+mNDIrrwePEZfAH
Hhd6uc53Db2shd2+tdgw/c83ZTh584GBmLoth7jY5jt32qpR9tdRfrMce+6buKSM
tal9qMXA7unIRmbC0qbti65NXzFJv47V7bqRKzMQIT7HAz3SgZXWw5luKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIf7yzhFPkugxdk+TIQIyhAARuWEMB8GA1UdIwQY
MBaAFJK1rIjyzbFJNIMMGsCWpe9zCY8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjct
MzZjNDZmOTBkOWE1LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjctMzZjNDZmOTBkOWE1
LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANk3xQ05B
yTPKbYNLkRvq8PJ+35ROTc/uhGjK+JEC9X72xy9l9XB9zo3cX+dnY4pAZyoWMoaf
1p82dyW6UwhJDecba0cyaNIzY6ikZ4rMEhXeK4jgzlZ38wnm400JZMrQZgJ1uY2j
zfuPNKOlqFKv0Xh52Ukjx4+81EQfgJeBaXIJKVsS6eqC+3HAKwqoG0vzrtVHLQ58
bQ4eiavkOFLHD+XSZL+a74reggcHm3d3JfkCDfvacGgzw/TeSUqjmGbkmhQnDxha
6VMyvpBBwGMmDv53lvj/YL48/e1q5o5L+ox55Vv0hWQYvJYiIPdMpj2hEhlIZCfl
xnMzbWoLXs9BGw==
-----END CERTIFICATE-----
Generated at Sat May 16 23:30:26 2026 by rpki-client