Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File:                     CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier:          gOlSAtFO98+CDEAX8plnG0PmHXrQaDVb/UvcPGXA4X8=
Subject key identifier:   9F:B9:F8:E3:93:3E:C9:3A:B2:49:2E:1F:00:AC:C6:CA:81:14:82:6F
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer:       /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial:       019E3072F819ABCBA684FC388F25BED422A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number:          11FA
Signing time:             Sat 16 May 2026 11:01:41 +0000
Manifest this update:     Sat 16 May 2026 11:01:41 +0000
Manifest next update:     Sun 17 May 2026 11:01:41 +0000
Files and hashes:         1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: +cR2hwkwKRtrFsnZjV6t79caUcOVxOB00WYcw3GYk+U=)
                          2: hckzBAd7c5OdJzko7QFybqCZwYk.roa (hash: sGh3rXUv0CgU2j2PKVvWAydBIfq8Jsvx7anLkpH+JJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:f8:19:ab:cb:a6:84:fc:38:8f:25:be:d4:22:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
        Validity
            Not Before: May 16 11:01:41 2026 GMT
            Not After : May 17 11:01:41 2026 GMT
        Subject: CN=9fb9f8e3933ec93ab2492e1f00acc6ca8114826f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:8e:63:ac:6b:d3:f1:f0:12:b0:25:c1:34:
                    90:d2:52:24:52:7d:84:93:c6:21:fa:ef:c1:85:2e:
                    0b:28:1b:7c:d2:73:38:d5:5b:eb:34:94:bd:d9:d8:
                    ba:2f:c2:9b:24:67:09:ce:56:39:31:db:f5:64:49:
                    ce:73:ac:7b:2a:c4:ca:c5:20:83:13:bd:b1:ac:eb:
                    2e:08:45:7f:3b:c9:19:07:d6:79:5b:9c:e4:2d:1f:
                    c3:27:a3:f8:7d:39:27:ee:93:f9:ba:8c:30:f0:ec:
                    96:af:8f:bf:72:f1:d3:c7:85:a7:61:aa:db:74:31:
                    7a:9c:ea:f1:2a:e7:37:7f:e9:c4:d3:e2:f2:41:79:
                    ec:20:8c:27:88:78:01:ec:5d:2c:3a:35:40:18:fc:
                    c0:61:8a:58:65:90:1d:d8:43:3e:a0:c4:64:7e:0a:
                    d3:ef:94:36:89:f6:0e:32:69:07:0e:b4:de:2f:d3:
                    dc:51:2a:c1:e7:73:82:df:f4:76:4c:03:d1:42:ac:
                    ed:02:9a:b0:e1:c4:50:40:8d:cc:26:fa:91:75:93:
                    c4:dd:e6:30:6e:15:9c:f2:f1:ca:8c:27:cd:5d:77:
                    3d:d2:20:03:9e:6b:88:03:18:09:e3:79:47:95:34:
                    b2:88:3f:19:29:be:4f:80:b9:52:3f:2e:01:da:22:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B9:F8:E3:93:3E:C9:3A:B2:49:2E:1F:00:AC:C6:CA:81:14:82:6F
            X509v3 Authority Key Identifier:
                keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:68:7f:e3:d6:cc:12:4a:0b:dc:37:26:27:aa:e9:aa:f6:d5:
         1c:2c:3e:a2:fa:6b:13:cd:6b:ae:5e:d5:65:e1:83:4b:a3:a8:
         06:b7:df:45:15:f2:90:2c:db:3e:c1:54:d8:92:98:cb:7c:e0:
         e2:d1:5b:bd:1c:9c:25:ab:91:b4:e0:c9:d3:a1:8c:58:52:7d:
         95:58:57:5a:b9:e8:58:cd:47:c1:5e:9c:64:69:1f:f6:06:ba:
         87:67:07:ab:5c:ac:56:53:9f:af:48:78:60:9d:83:e9:2d:3c:
         32:ab:09:9d:7d:ee:2c:93:96:6c:06:fb:51:11:10:51:c4:8e:
         dd:b1:01:36:ec:09:fd:7e:99:72:f1:0f:6a:38:44:f8:61:13:
         2c:e6:2c:a2:a3:17:4a:09:78:4c:be:eb:69:66:12:79:a4:cc:
         ec:e3:be:50:3c:07:80:e5:1a:7d:50:f9:2a:57:ca:a7:fc:0e:
         b6:0d:a2:1c:1f:24:05:1c:23:0b:9d:60:52:fc:1f:96:d7:04:
         83:0a:1a:57:4c:eb:8f:3e:10:2e:c8:a0:2c:3a:0e:f5:be:a3:
         2b:4f:c3:72:65:b8:12:10:75:4a:67:0d:43:a1:d3:7c:d8:e1:
         94:4c:32:08:df:b3:6e:0b:5f:8b:e5:57:3f:81:9f:da:ed:13:
         d0:66:ca:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcvgZq8umhPw4jyW+1CKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MTBhZjEwMDY3ZjUzMDFmYzhmNjA4NDhmNTViM2MzM2Mx
ODBmNTMwHhcNMjYwNTE2MTEwMTQxWhcNMjYwNTE3MTEwMTQxWjAzMTEwLwYDVQQD
Eyg5ZmI5ZjhlMzkzM2VjOTNhYjI0OTJlMWYwMGFjYzZjYTgxMTQ4MjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXOOY6xr0/HwErAlwTSQ0lIkUn2E
k8Yh+u/BhS4LKBt80nM41VvrNJS92di6L8KbJGcJzlY5Mdv1ZEnOc6x7KsTKxSCD
E72xrOsuCEV/O8kZB9Z5W5zkLR/DJ6P4fTkn7pP5uoww8OyWr4+/cvHTx4WnYarb
dDF6nOrxKuc3f+nE0+LyQXnsIIwniHgB7F0sOjVAGPzAYYpYZZAd2EM+oMRkfgrT
75Q2ifYOMmkHDrTeL9PcUSrB53OC3/R2TAPRQqztApqw4cRQQI3MJvqRdZPE3eYw
bhWc8vHKjCfNXXc90iADnmuIAxgJ43lHlTSyiD8ZKb5PgLlSPy4B2iJOhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+5+OOTPsk6skkuHwCsxsqBFIJvMB8GA1UdIwQY
MBaAFAkQrxAGf1MB/I9ghI9Vs8M8GA9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2Mt
MmU3YThhMzk0YzQ1LzEvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2MtMmU3YThhMzk0YzQ1
LzEvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWh/49bM
EkoL3DcmJ6rpqvbVHCw+ovprE81rrl7VZeGDS6OoBrffRRXykCzbPsFU2JKYy3zg
4tFbvRycJauRtODJ06GMWFJ9lVhXWrnoWM1HwV6cZGkf9ga6h2cHq1ysVlOfr0h4
YJ2D6S08MqsJnX3uLJOWbAb7UREQUcSO3bEBNuwJ/X6ZcvEPajhE+GETLOYsoqMX
Sgl4TL7raWYSeaTM7OO+UDwHgOUafVD5KlfKp/wOtg2iHB8kBRwjC51gUvwfltcE
gwoaV0zrjz4QLsigLDoO9b6jK0/DcmW4EhB1SmcNQ6HTfNjhlEwyCN+zbgtfi+VX
P4Gf2u0T0GbKKA==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:12 2026 by rpki-client