Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File:                     C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier:          dGTs+rBMKH5w1sTotb0Va/0L9n3tHPXv60Df16ZiR8w=
Subject key identifier:   8A:11:66:E6:EC:8B:31:00:E7:6F:93:F1:1F:D8:54:80:40:1F:9A:49
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer:       /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial:       019E314E4B17200B581C9D81E2BF3FB117C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 15:01:14 +0000
Manifest this update:     Sat 16 May 2026 15:01:14 +0000
Manifest next update:     Sun 17 May 2026 15:01:14 +0000
Files and hashes:         1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: U4yHpMmV8RTKOVrkKIa/fIZ50g7nOZTGi1AE89L+UBA=)
                          2: Sa-P59ilAaBoROu7JXxgieqHHuI.roa (hash: klYsPIaTsQM9yUBEbb86aHfmxgUEhKSfXO+ZQhF9TNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:4b:17:20:0b:58:1c:9d:81:e2:bf:3f:b1:17:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
        Validity
            Not Before: May 16 15:01:14 2026 GMT
            Not After : May 17 15:01:14 2026 GMT
        Subject: CN=8a1166e6ec8b3100e76f93f11fd85480401f9a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:3a:d8:48:e7:b9:f1:98:e9:74:0f:79:8c:
                    6c:d9:09:4e:39:2e:a4:01:9d:d6:2c:ba:ae:c0:ce:
                    a7:9b:55:87:c9:f1:43:81:c2:04:54:08:9b:dc:23:
                    46:fb:6f:d5:16:ac:fc:88:40:07:ce:11:cd:c4:28:
                    9b:ad:2d:8d:e8:b3:58:e9:47:33:bd:0e:f5:f8:08:
                    4d:e0:05:6f:50:97:45:40:c2:ff:c6:5a:f8:31:07:
                    f6:52:74:3d:a4:ef:06:a0:f9:8e:d9:a2:e8:2b:d3:
                    a2:9d:df:65:58:e1:40:a8:c8:16:5d:c7:b0:b4:41:
                    24:21:29:ec:c7:01:17:2a:de:f2:58:e4:8a:e5:6e:
                    2a:7b:e9:3a:f4:e2:75:ce:d1:84:4d:89:af:7d:3d:
                    7f:d7:c7:c6:6d:04:14:a4:60:aa:73:70:55:89:2c:
                    a4:fd:f7:a1:32:94:91:e6:27:db:b2:c2:10:c0:08:
                    7b:5d:fa:ae:97:2b:96:ab:a9:39:64:45:2b:18:d1:
                    ff:e7:6c:ec:ee:42:b7:3d:df:ac:cb:aa:97:12:68:
                    2e:28:60:ae:ad:35:75:26:0f:8c:06:f6:9a:4e:e2:
                    24:b2:5a:4b:56:c3:32:58:16:d9:83:0b:66:e7:2b:
                    b5:00:7f:2b:8d:c8:09:9f:e6:bf:94:39:8e:d4:32:
                    bf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:11:66:E6:EC:8B:31:00:E7:6F:93:F1:1F:D8:54:80:40:1F:9A:49
            X509v3 Authority Key Identifier:
                keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:33:f7:96:49:3b:f5:09:e2:28:ed:db:3f:60:d1:f7:d3:a3:
         b8:1c:40:c9:fa:42:04:4e:17:ae:e0:0e:39:b2:31:0f:26:46:
         ee:9c:3d:96:dc:e0:6e:05:a9:5c:9d:3f:b2:e7:f3:5c:51:8a:
         3e:a0:05:64:db:52:00:8f:94:77:7d:89:9f:f6:6c:8d:7f:03:
         1a:c9:58:2c:4b:fc:a6:fc:4e:e3:ee:ab:04:af:7d:f3:20:ec:
         32:61:16:5f:51:c2:73:9e:94:6c:9b:98:d0:5f:c2:e1:99:bb:
         61:a7:ae:91:04:8d:d4:72:a4:20:e3:f0:47:92:35:b8:0b:7a:
         d1:4f:cc:87:a2:8c:51:49:ac:91:47:a4:ba:8d:10:7f:d2:c9:
         1c:55:8e:a0:c0:8f:46:b6:91:04:7d:fb:86:90:45:23:d3:87:
         9c:19:dd:14:56:75:45:d8:3f:e5:79:2b:4c:38:1d:1d:34:d3:
         62:5e:e2:b5:c4:23:4b:e8:4f:84:0a:5a:36:1d:da:e4:d4:22:
         f4:b2:25:ae:1a:23:cf:99:f7:c4:50:9d:7a:f7:db:e1:04:e9:
         b7:6d:4f:a7:a1:9b:b5:ec:67:50:01:e8:01:8d:60:76:9c:f7:
         a7:8a:68:12:d2:0e:85:16:00:08:41:b2:b4:03:94:80:d8:5b:
         a3:91:b1:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTksXIAtYHJ2B4r8/sRfBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWE1MzkwYjhkNjgwMjE4MDNlN2JlOWZjZjVlOGUxMzkz
YWMwNDMwHhcNMjYwNTE2MTUwMTE0WhcNMjYwNTE3MTUwMTE0WjAzMTEwLwYDVQQD
Eyg4YTExNjZlNmVjOGIzMTAwZTc2ZjkzZjExZmQ4NTQ4MDQwMWY5YTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiM62EjnufGY6XQPeYxs2QlOOS6k
AZ3WLLquwM6nm1WHyfFDgcIEVAib3CNG+2/VFqz8iEAHzhHNxCibrS2N6LNY6Ucz
vQ71+AhN4AVvUJdFQML/xlr4MQf2UnQ9pO8GoPmO2aLoK9Oind9lWOFAqMgWXcew
tEEkISnsxwEXKt7yWOSK5W4qe+k69OJ1ztGETYmvfT1/18fGbQQUpGCqc3BViSyk
/fehMpSR5ifbssIQwAh7XfqulyuWq6k5ZEUrGNH/52zs7kK3Pd+sy6qXEmguKGCu
rTV1Jg+MBvaaTuIkslpLVsMyWBbZgwtm5yu1AH8rjcgJn+a/lDmO1DK/SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoRZubsizEA52+T8R/YVIBAH5pJMB8GA1UdIwQY
MBaAFAtaU5C41oAhgD576fz16OE5OsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEt
ZTdjZDE4ODU1ZTJjLzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEtZTdjZDE4ODU1ZTJj
LzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzP3lkk7
9QniKO3bP2DR99OjuBxAyfpCBE4XruAOObIxDyZG7pw9ltzgbgWpXJ0/sufzXFGK
PqAFZNtSAI+Ud32Jn/ZsjX8DGslYLEv8pvxO4+6rBK998yDsMmEWX1HCc56UbJuY
0F/C4Zm7YaeukQSN1HKkIOPwR5I1uAt60U/Mh6KMUUmskUekuo0Qf9LJHFWOoMCP
RraRBH37hpBFI9OHnBndFFZ1Rdg/5XkrTDgdHTTTYl7itcQjS+hPhApaNh3a5NQi
9LIlrhojz5n3xFCdevfb4QTpt21Pp6GbtexnUAHoAY1gdpz3p4poEtIOhRYACEGy
tAOUgNhbo5Gxcg==
-----END CERTIFICATE-----
Generated at Sat May 16 17:54:06 2026 by rpki-client