Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File:                     h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier:          v5Mz/2EPk5QCxWJ9O/gFQJN9c4656rf3FvbbL7jehtc=
Subject key identifier:   C6:02:B2:0D:EF:91:E8:EE:3C:61:8F:E2:09:1A:7E:28:DB:B9:7E:3D
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer:       /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial:       019E32CF4C9809838C083531A326E0964656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number:          1913
Signing time:             Sat 16 May 2026 22:01:46 +0000
Manifest this update:     Sat 16 May 2026 22:01:46 +0000
Manifest next update:     Sun 17 May 2026 22:01:46 +0000
Files and hashes:         1: 5_doYFv7yc7pk0TQwTiDRsnYDyk.roa (hash: roZ57WpPuuxZ3dcx0tH7+LdHwoSOY302cY6k9E5x4os=)
                          2: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: 7oED//4LdsTKOworI9N4DDBIE6hSj/IkEeJ6VtfHyX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:cf:4c:98:09:83:8c:08:35:31:a3:26:e0:96:46:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
        Validity
            Not Before: May 16 22:01:46 2026 GMT
            Not After : May 17 22:01:46 2026 GMT
        Subject: CN=c602b20def91e8ee3c618fe2091a7e28dbb97e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:7a:70:2e:5a:b4:c8:e4:a5:d1:f2:89:37:
                    ad:52:dc:52:5b:cb:4e:37:3e:cc:f5:b5:02:a4:cf:
                    82:09:20:0f:a6:b4:62:2b:fe:28:9e:34:c4:8d:61:
                    f8:11:c0:b3:56:e8:59:97:59:71:39:03:e8:f6:be:
                    2c:48:fd:31:9c:41:75:33:cf:4c:c4:22:07:de:3e:
                    d5:4d:ad:36:30:20:af:55:a5:97:eb:7d:fa:f7:47:
                    e1:d2:46:32:f9:20:4e:0f:ae:87:98:93:75:e3:e6:
                    b8:fb:9c:4d:e6:0e:fa:d7:d0:3b:0b:ff:e8:dc:39:
                    8f:55:e2:f5:8b:9d:a9:c1:59:2e:14:36:c2:76:70:
                    34:c9:bd:c0:11:b7:0e:2d:1a:7c:bf:90:cc:ed:d8:
                    16:bd:7f:a8:fd:c3:e5:e8:c1:c6:73:98:05:b8:ff:
                    8d:2f:7d:c2:17:f1:08:20:e6:e4:ef:36:c5:2c:50:
                    9f:7b:7f:e2:fd:ce:99:87:90:ca:f4:02:5b:5c:97:
                    11:ae:4c:b5:51:c9:ca:1e:76:71:b5:dd:21:ea:d1:
                    80:00:65:d0:f5:b6:b2:2b:e0:7d:8f:ab:88:fa:ef:
                    20:f8:27:12:7f:cb:52:dc:c3:cb:cc:98:ac:58:39:
                    0f:0f:ce:f3:05:05:e6:93:e4:aa:d2:64:45:a7:66:
                    66:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:02:B2:0D:EF:91:E8:EE:3C:61:8F:E2:09:1A:7E:28:DB:B9:7E:3D
            X509v3 Authority Key Identifier:
                keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:55:e6:8b:3e:c8:54:61:51:ce:df:57:2c:06:8c:bc:9f:70:
         16:82:15:8a:6a:5c:f4:44:21:7c:28:b3:7f:18:cb:91:1e:d7:
         3f:1a:4c:80:68:59:e0:2c:d7:92:da:11:f1:8a:fc:db:74:76:
         c3:46:71:b3:4c:2a:89:0b:6c:ca:8b:92:87:9d:17:e9:f8:ce:
         46:59:8d:4d:89:72:54:82:8f:6b:b9:95:f3:9f:08:4f:22:c9:
         2b:18:a4:88:5b:15:d0:83:b5:cb:00:30:aa:30:db:aa:30:f0:
         72:9d:5b:9d:b4:f3:85:3b:bd:51:2d:89:d0:30:16:54:a6:de:
         eb:2c:0e:99:43:a4:3b:89:85:4d:9e:72:df:e7:8f:6a:4b:d3:
         7f:17:fa:c4:73:62:b2:e1:26:bc:86:8c:dd:61:f2:98:3a:d7:
         cb:1e:b6:35:1e:2f:fa:5e:34:3f:9b:a4:7c:ab:5c:ec:3b:40:
         29:50:b2:45:27:da:e2:f0:ae:e6:08:72:f4:ea:0d:8c:be:e2:
         80:ef:18:cf:bf:8a:0e:8c:87:4f:d0:07:d1:7f:ee:45:83:9a:
         c9:cc:0c:13:49:19:7d:11:bf:ca:c4:60:e6:0f:eb:00:0e:dc:
         4d:f7:45:65:6b:aa:30:fb:00:df:62:2f:ff:2c:55:ed:53:68:
         2c:f5:ed:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yz0yYCYOMCDUxoybglkZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OGVjYTNiY2NkNGU1YzJlZmIzNjA4ZWU4M2E1N2Y5YWU4
MjFiZTYwHhcNMjYwNTE2MjIwMTQ2WhcNMjYwNTE3MjIwMTQ2WjAzMTEwLwYDVQQD
EyhjNjAyYjIwZGVmOTFlOGVlM2M2MThmZTIwOTFhN2UyOGRiYjk3ZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03Z6cC5atMjkpdHyiTetUtxSW8tO
Nz7M9bUCpM+CCSAPprRiK/4onjTEjWH4EcCzVuhZl1lxOQPo9r4sSP0xnEF1M89M
xCIH3j7VTa02MCCvVaWX633690fh0kYy+SBOD66HmJN14+a4+5xN5g7619A7C//o
3DmPVeL1i52pwVkuFDbCdnA0yb3AEbcOLRp8v5DM7dgWvX+o/cPl6MHGc5gFuP+N
L33CF/EIIObk7zbFLFCfe3/i/c6Zh5DK9AJbXJcRrky1UcnKHnZxtd0h6tGAAGXQ
9bayK+B9j6uI+u8g+CcSf8tS3MPLzJisWDkPD87zBQXmk+Sq0mRFp2Zm4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYCsg3vkejuPGGP4gkafijbuX49MB8GA1UdIwQY
MBaAFIeOyjvM1OXC77Ngjug6V/mughvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hYjJiMTAtNWU4Ny00NjI0LTk3NzYt
NTlhMGM1ZmY2NTA1LzEvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9hYjJiMTAtNWU4Ny00NjI0LTk3NzYtNTlhMGM1ZmY2NTA1
LzEvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1Xmiz7I
VGFRzt9XLAaMvJ9wFoIVimpc9EQhfCizfxjLkR7XPxpMgGhZ4CzXktoR8Yr823R2
w0Zxs0wqiQtsyouSh50X6fjORlmNTYlyVIKPa7mV858ITyLJKxikiFsV0IO1ywAw
qjDbqjDwcp1bnbTzhTu9US2J0DAWVKbe6ywOmUOkO4mFTZ5y3+ePakvTfxf6xHNi
suEmvIaM3WHymDrXyx62NR4v+l40P5ukfKtc7DtAKVCyRSfa4vCu5ghy9OoNjL7i
gO8Yz7+KDoyHT9AH0X/uRYOaycwME0kZfRG/ysRg5g/rAA7cTfdFZWuqMPsA32Iv
/yxV7VNoLPXtmQ==
-----END CERTIFICATE-----
Generated at Sat May 16 23:30:15 2026 by rpki-client