Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
File:                     4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json)
Hash identifier:          Zy+zj0rlH6a9HzAO7sC0tGEkBbzWjGRaV6px3Tbq5cw=
Subject key identifier:   B1:17:17:C3:67:F9:4A:D2:96:85:70:F3:97:1C:69:A3:34:47:5F:A9
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Certificate issuer:       /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial:       019DFFBD22580EFD9B769E1AE6DCEB476F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
Manifest number:          0551
Signing time:             Thu 07 May 2026 00:01:18 +0000
Manifest this update:     Thu 07 May 2026 00:01:18 +0000
Manifest next update:     Fri 08 May 2026 00:01:18 +0000
Files and hashes:         1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: H2q0OrvG1fy5sfwwUBoLAzpE+hSl3m/cT4QYf6jSBjI=)
                          2: O4YiRIWBlabnpHM7xKFcaOrOaKI.roa (hash: ayodsdmBoAdUSEjYUyXeYrwcQDz8Nad0uAG3lrZysIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 21:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ff:bd:22:58:0e:fd:9b:76:9e:1a:e6:dc:eb:47:6f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
        Validity
            Not Before: May  7 00:01:18 2026 GMT
            Not After : May  8 00:01:18 2026 GMT
        Subject: CN=b11717c367f94ad2968570f3971c69a334475fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:9a:66:a9:1d:34:74:93:44:4f:45:16:a3:
                    77:36:80:fe:f8:af:6c:fb:ad:89:ab:58:67:41:d3:
                    69:e7:11:0f:83:8f:0d:f3:ca:08:15:ba:57:0e:3a:
                    4a:14:fa:aa:a8:18:f1:7a:71:e7:1a:3c:5a:0c:8e:
                    f3:3c:76:7b:15:7b:0e:81:2c:bf:3f:8b:84:07:31:
                    ef:ae:40:76:59:d8:6a:1c:b4:75:01:3e:05:98:44:
                    aa:fa:36:8f:d2:f1:83:f8:26:0e:6f:f7:78:df:8b:
                    ed:9e:96:80:21:80:a3:1a:f7:43:2a:06:2f:87:d7:
                    f7:d7:84:e5:6c:b2:50:45:55:b3:14:6a:f5:9f:ba:
                    a8:01:61:e0:64:8b:35:f1:3a:30:77:b6:91:46:1c:
                    28:d4:a3:5c:c6:89:f0:e7:e3:db:cd:a3:4d:52:ce:
                    53:ec:69:15:0b:71:c1:22:ac:6b:d3:9c:2a:81:5b:
                    e6:ab:16:9d:8d:ba:1a:23:b5:3f:38:d7:7d:1a:6b:
                    cd:07:18:2e:b0:f9:c1:a4:33:7e:9e:dc:bd:e5:9b:
                    69:2a:ea:b0:06:b6:f4:98:5d:6b:ad:e5:07:f3:6c:
                    4f:ef:2d:81:bb:ec:b1:b8:3d:f4:11:c0:b9:d2:81:
                    47:a5:97:a0:6b:66:21:80:37:b3:e3:e9:3a:02:d8:
                    de:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:17:17:C3:67:F9:4A:D2:96:85:70:F3:97:1C:69:A3:34:47:5F:A9
            X509v3 Authority Key Identifier:
                keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b1:79:36:e5:78:07:20:1c:d9:83:e9:a7:99:d1:24:33:18:
         8e:da:a5:88:ea:25:ac:a2:61:d9:5f:93:00:93:f9:67:e6:95:
         54:10:a0:da:c6:e6:e5:4e:cb:4e:af:09:18:93:bf:e6:4b:25:
         55:9d:4e:20:e9:e1:92:dc:79:96:6a:a1:26:2a:9b:48:27:fe:
         26:f3:4f:58:dc:16:8a:f2:31:02:f0:fe:81:17:af:d4:b0:41:
         f1:7b:b6:59:93:34:96:aa:63:73:51:53:0c:40:b2:fc:59:f9:
         cd:57:8b:fa:19:bf:d6:27:e0:ab:1f:4f:ec:ba:44:e9:2b:c7:
         83:6e:5e:fc:3f:b8:5f:06:58:bf:0b:d5:7e:4c:c3:62:cb:aa:
         98:fc:aa:b1:b5:b9:9b:17:d3:d1:8a:7c:72:d4:3f:15:ec:d8:
         f4:3b:72:74:a9:e1:1a:7b:cb:af:58:65:63:c0:b0:c5:ed:e1:
         ee:dc:fe:5e:90:be:91:09:0c:70:fb:a3:9d:b0:10:cd:71:5c:
         36:c2:c7:e0:fc:67:21:b5:35:e7:a6:3c:df:e0:ac:bb:2b:5a:
         e0:5a:91:34:0d:2f:6f:3c:da:ea:a0:e2:85:cf:da:a2:90:f3:
         0c:f3:4e:9e:45:7a:5b:be:33:53:94:0f:68:e6:e4:5a:ff:e7:
         98:1f:da:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3/vSJYDv2bdp4a5tzrR28pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTdhZjczYzA3YTU3ODJhZjI0ODM0ZWJkZGI3NGE5Yzg5
N2M0ZmYwHhcNMjYwNTA3MDAwMTE4WhcNMjYwNTA4MDAwMTE4WjAzMTEwLwYDVQQD
EyhiMTE3MTdjMzY3Zjk0YWQyOTY4NTcwZjM5NzFjNjlhMzM0NDc1ZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3iaZqkdNHSTRE9FFqN3NoD++K9s
+62Jq1hnQdNp5xEPg48N88oIFbpXDjpKFPqqqBjxenHnGjxaDI7zPHZ7FXsOgSy/
P4uEBzHvrkB2WdhqHLR1AT4FmESq+jaP0vGD+CYOb/d434vtnpaAIYCjGvdDKgYv
h9f314TlbLJQRVWzFGr1n7qoAWHgZIs18Towd7aRRhwo1KNcxonw5+PbzaNNUs5T
7GkVC3HBIqxr05wqgVvmqxadjboaI7U/ONd9GmvNBxgusPnBpDN+nty95ZtpKuqw
Brb0mF1rreUH82xP7y2Bu+yxuD30EcC50oFHpZega2YhgDez4+k6AtjelQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEXF8Nn+UrSloVw85ccaaM0R1+pMB8GA1UdIwQY
MBaAFOLnr3PAeleCrySDTr3bdKnIl8T/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82NTM5OGEtMGZhYS00YjY0LWJkMDkt
MDk4ODZjMGM0NmEwLzEvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS82NTM5OGEtMGZhYS00YjY0LWJkMDktMDk4ODZjMGM0NmEw
LzEvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrF5NuV4
ByAc2YPpp5nRJDMYjtqliOolrKJh2V+TAJP5Z+aVVBCg2sbm5U7LTq8JGJO/5ksl
VZ1OIOnhktx5lmqhJiqbSCf+JvNPWNwWivIxAvD+gRev1LBB8Xu2WZM0lqpjc1FT
DECy/Fn5zVeL+hm/1ifgqx9P7LpE6SvHg25e/D+4XwZYvwvVfkzDYsuqmPyqsbW5
mxfT0Yp8ctQ/FezY9DtydKnhGnvLr1hlY8Cwxe3h7tz+XpC+kQkMcPujnbAQzXFc
NsLH4PxnIbU156Y83+Csuyta4FqRNA0vbzza6qDihc/aopDzDPNOnkV6W74zU5QP
aObkWv/nmB/a9A==
-----END CERTIFICATE-----
Generated at Thu May 7 06:32:19 2026 by rpki-client