Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
File:                     SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json)
Hash identifier:          0wbzGfJbHE4vTDprPurWyothzD1tRJ8UswoaoeD/v9A=
Subject key identifier:   9E:23:3A:C9:6C:5A:A5:57:3F:72:02:DC:05:78:DB:E7:F2:18:61:F5
Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
Certificate issuer:       /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Certificate serial:       019E29267FB4EF4846A25B52926E76EB5F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
Manifest number:          1623
Signing time:             Fri 15 May 2026 01:00:49 +0000
Manifest this update:     Fri 15 May 2026 01:00:49 +0000
Manifest next update:     Sat 16 May 2026 01:00:49 +0000
Files and hashes:         1: 5f7j3zGx8jvsXJiygSNasWYx_Zs.asa (hash: TjoqTdv343Ue7LWqKvDsc7lZXvzPyAhZYFhPUJ6/iB0=)
                          2: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: ls+RwYAn9GUaQpq/psPjqHjgKsMC5jDvJoXhKwRK1y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:26:7f:b4:ef:48:46:a2:5b:52:92:6e:76:eb:5f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
        Validity
            Not Before: May 15 01:00:49 2026 GMT
            Not After : May 16 01:00:49 2026 GMT
        Subject: CN=9e233ac96c5aa5573f7202dc0578dbe7f21861f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:15:51:93:a0:f8:31:78:76:38:aa:61:9e:97:
                    46:f0:2d:43:6d:c4:f7:ee:c9:c5:9c:56:59:7f:e3:
                    c3:cc:09:91:e7:b5:07:27:fc:f8:3a:75:d3:04:86:
                    ad:81:a0:70:37:54:c8:ed:80:4c:8e:c6:83:63:fd:
                    96:eb:61:de:3f:8f:ce:e6:a6:f8:aa:9e:f8:5f:66:
                    5e:38:75:9a:f0:6e:b4:51:4e:77:74:75:6d:ba:82:
                    33:3d:2c:4e:ff:60:e1:74:69:09:57:2d:3b:92:4e:
                    48:fc:76:26:05:c9:ff:59:12:4b:de:8e:2b:ba:2a:
                    06:57:41:b1:28:60:60:4a:53:53:49:32:df:42:02:
                    ac:c8:a2:7c:47:4e:b4:44:64:18:97:d3:6e:20:ae:
                    84:46:e3:e4:c2:55:6a:c8:c1:c9:f4:d1:62:7e:03:
                    87:66:ff:31:fe:ff:4e:3c:71:91:13:93:14:2d:de:
                    20:ec:16:e3:4d:d5:e2:c1:a9:9a:0e:27:dc:ac:73:
                    74:0a:3b:52:c4:6f:4a:28:e9:b4:c7:f6:13:db:af:
                    1c:cc:15:5d:b8:7f:5d:87:44:45:b2:9d:07:e2:9c:
                    75:cc:56:82:76:90:21:47:b7:69:ca:68:98:d8:f3:
                    95:b5:1c:5a:ff:19:61:cd:c1:07:4d:be:34:f6:02:
                    3b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:23:3A:C9:6C:5A:A5:57:3F:72:02:DC:05:78:DB:E7:F2:18:61:F5
            X509v3 Authority Key Identifier:
                keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:7f:22:12:ca:23:72:38:01:11:a3:72:ca:4c:a1:2a:f4:4b:
         bc:62:fb:aa:52:34:49:41:ee:2e:22:29:ce:cd:c1:eb:15:8a:
         c2:ce:fe:ac:1a:54:09:69:be:12:01:ea:32:43:2b:ac:58:e8:
         20:77:7d:f8:d7:17:21:55:3b:b8:69:d6:2d:5c:c1:2f:3b:bd:
         20:4b:b7:3f:78:6f:58:74:3b:95:cc:4f:c2:4c:f6:b5:04:3b:
         c3:ea:aa:2f:59:4f:68:0a:c0:dd:15:d7:6c:ca:58:96:de:21:
         13:d9:bc:46:6d:47:a2:ba:16:eb:65:ab:d0:2c:b0:84:6b:67:
         d3:9c:76:ac:9b:89:8e:c2:8a:5c:81:31:3d:2a:9b:51:f7:a8:
         15:c2:05:61:32:25:99:12:9e:a1:53:1e:95:c6:78:46:9a:40:
         3d:03:91:3f:ea:5b:37:1f:58:aa:9d:2e:03:20:88:18:07:20:
         76:9c:e9:0b:09:b0:6b:e1:5e:e7:6c:fd:6b:40:d3:78:a8:43:
         c8:bf:4f:cc:e7:41:30:b9:57:25:c0:a4:a5:9f:49:d2:8c:31:
         23:ba:b0:a8:1f:86:19:f7:12:e4:01:58:62:85:b4:0c:42:38:
         51:ca:25:b5:fa:fc:1e:ae:56:02:36:7f:16:bf:be:8d:11:e0:
         42:0d:b5:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pJn+070hGoltSkm5261+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MGQwNDJjZmE3NjZlN2UyYmI2ZjBiMDRjMzdkNjAzZmZh
MzM4M2UwHhcNMjYwNTE1MDEwMDQ5WhcNMjYwNTE2MDEwMDQ5WjAzMTEwLwYDVQQD
Eyg5ZTIzM2FjOTZjNWFhNTU3M2Y3MjAyZGMwNTc4ZGJlN2YyMTg2MWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRVRk6D4MXh2OKphnpdG8C1DbcT3
7snFnFZZf+PDzAmR57UHJ/z4OnXTBIatgaBwN1TI7YBMjsaDY/2W62HeP4/O5qb4
qp74X2ZeOHWa8G60UU53dHVtuoIzPSxO/2DhdGkJVy07kk5I/HYmBcn/WRJL3o4r
uioGV0GxKGBgSlNTSTLfQgKsyKJ8R060RGQYl9NuIK6ERuPkwlVqyMHJ9NFifgOH
Zv8x/v9OPHGRE5MULd4g7BbjTdXiwamaDifcrHN0CjtSxG9KKOm0x/YT268czBVd
uH9dh0RFsp0H4px1zFaCdpAhR7dpymiY2POVtRxa/xlhzcEHTb409gI7nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4jOslsWqVXP3IC3AV42+fyGGH1MB8GA1UdIwQY
MBaAFEkNBCz6dm5+K7bwsEw31gP/ozg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kYzg3NzgtYTU3MC00ZTQ4LWFjMzMt
OTYyNjJjODE5MzMzLzEvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kYzg3NzgtYTU3MC00ZTQ4LWFjMzMtOTYyNjJjODE5MzMz
LzEvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzH8iEsoj
cjgBEaNyykyhKvRLvGL7qlI0SUHuLiIpzs3B6xWKws7+rBpUCWm+EgHqMkMrrFjo
IHd9+NcXIVU7uGnWLVzBLzu9IEu3P3hvWHQ7lcxPwkz2tQQ7w+qqL1lPaArA3RXX
bMpYlt4hE9m8Rm1HoroW62Wr0CywhGtn05x2rJuJjsKKXIExPSqbUfeoFcIFYTIl
mRKeoVMelcZ4RppAPQORP+pbNx9Yqp0uAyCIGAcgdpzpCwmwa+Fe52z9a0DTeKhD
yL9PzOdBMLlXJcCkpZ9J0owxI7qwqB+GGfcS5AFYYoW0DEI4Ucoltfr8Hq5WAjZ/
Fr++jRHgQg21vg==
-----END CERTIFICATE-----
Generated at Fri May 15 06:20:54 2026 by rpki-client