Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File:                     4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier:          TVu4pPCIYbclMdMjaqD3RwlOOYyWV9vthaxsqEzMIJw=
Subject key identifier:   A2:DC:71:B8:71:61:D0:28:BF:4A:44:A5:1C:E6:CF:E5:D7:11:26:91
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer:       /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial:       019E30059AB0E4A4AAD3481009FFD5F85028
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 09:02:14 +0000
Manifest this update:     Sat 16 May 2026 09:02:14 +0000
Manifest next update:     Sun 17 May 2026 09:02:14 +0000
Files and hashes:         1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: 2FXrltfHleuFrcoBb2Z1uTajdDTX01ACu8WXi4E9LF0=)
                          2: GD22NDKlkAh5bp67GRvvW84yHsU.roa (hash: LtP9pMPZerVqZeqzrIl5QfQhM+bLwsaU/FGis7xu4Rs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:9a:b0:e4:a4:aa:d3:48:10:09:ff:d5:f8:50:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
        Validity
            Not Before: May 16 09:02:14 2026 GMT
            Not After : May 17 09:02:14 2026 GMT
        Subject: CN=a2dc71b87161d028bf4a44a51ce6cfe5d7112691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:6a:58:6f:6f:e3:ce:da:95:b2:37:95:98:
                    36:88:cd:1d:f4:aa:c1:2f:9e:12:b9:57:35:6d:5c:
                    96:3b:50:5c:7e:97:d6:a0:22:25:1d:0a:e5:ce:a8:
                    7f:5e:95:9f:8b:6a:7f:65:8e:8a:82:93:f1:13:1d:
                    c8:fe:de:49:ee:e5:63:61:4a:23:f8:da:ae:16:61:
                    85:8d:45:40:6f:9f:eb:7b:40:a9:9d:91:33:e1:70:
                    fb:f8:53:3b:a6:4a:43:d1:65:09:44:85:9c:52:cb:
                    c9:41:80:f7:7a:cb:af:54:7f:de:9f:8a:58:c6:92:
                    c7:6f:10:bc:b9:db:a3:6a:84:25:fc:68:b9:6d:c8:
                    b4:72:05:7c:0e:cd:03:15:ba:2f:f0:c9:12:0d:5f:
                    79:00:37:8c:e7:db:95:e7:7d:56:63:36:5f:1e:68:
                    35:5f:ab:f4:44:9c:1a:42:8e:0b:25:14:f4:d2:2b:
                    9c:20:ad:99:7a:5c:54:74:ae:42:25:52:52:e5:00:
                    e6:02:4a:ea:61:42:96:9e:09:8a:21:b0:a0:24:87:
                    55:4f:c5:bc:91:3b:a3:28:93:42:4a:1d:0b:90:a2:
                    01:0d:12:04:0a:c6:b0:47:97:bc:b4:47:51:8e:f7:
                    69:95:aa:56:49:a5:f8:c4:87:3c:8e:9c:9f:41:9c:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DC:71:B8:71:61:D0:28:BF:4A:44:A5:1C:E6:CF:E5:D7:11:26:91
            X509v3 Authority Key Identifier:
                keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:25:8a:8f:42:31:1c:9e:26:df:17:92:94:6d:02:e6:2b:a0:
         7e:1e:e6:ad:19:2c:cf:84:81:85:81:18:8e:d3:37:0b:06:03:
         74:40:55:c2:10:0d:88:8a:15:10:3d:8b:80:79:c0:85:e9:6f:
         51:5a:b4:9e:32:20:c9:bb:da:04:5a:e8:ca:5d:29:39:06:5e:
         a7:18:30:78:0f:6e:78:8d:4f:53:1e:bf:71:0f:07:b8:d8:13:
         12:0c:b6:f6:f8:b5:6e:29:19:22:be:02:06:1a:32:a4:0b:f4:
         30:d0:3c:65:1a:ff:96:2f:44:cc:8e:67:79:4c:14:a8:a3:8b:
         35:14:3a:0a:92:6f:71:1f:ea:44:de:97:36:ff:e5:45:94:28:
         e5:31:5a:52:96:3d:12:15:5b:95:e6:53:be:ae:d4:bb:20:78:
         8a:4e:eb:fc:6e:a3:b9:29:eb:34:05:9b:c5:c7:92:ac:4a:5d:
         ce:0d:a9:b1:60:c1:34:e3:32:1f:ee:bd:3d:ab:c9:fc:97:89:
         8f:7e:1c:6b:02:a2:b7:c8:f9:38:2a:3a:cf:8f:fd:99:ae:10:
         b5:42:60:bf:fc:67:78:85:e1:16:70:57:61:a6:8c:e2:5a:f1:
         82:28:f0:d2:dc:37:90:93:db:09:85:81:7a:7d:d0:ab:a5:1c:
         2f:00:8e:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBZqw5KSq00gQCf/V+FAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwN2UwMDhkNmVkMjM4OGFkMzFiNzQyMjQyMzE1MmE5MmE1
NGRlNzEwHhcNMjYwNTE2MDkwMjE0WhcNMjYwNTE3MDkwMjE0WjAzMTEwLwYDVQQD
EyhhMmRjNzFiODcxNjFkMDI4YmY0YTQ0YTUxY2U2Y2ZlNWQ3MTEyNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwdqWG9v487albI3lZg2iM0d9KrB
L54SuVc1bVyWO1BcfpfWoCIlHQrlzqh/XpWfi2p/ZY6KgpPxEx3I/t5J7uVjYUoj
+NquFmGFjUVAb5/re0CpnZEz4XD7+FM7pkpD0WUJRIWcUsvJQYD3esuvVH/en4pY
xpLHbxC8udujaoQl/Gi5bci0cgV8Ds0DFbov8MkSDV95ADeM59uV531WYzZfHmg1
X6v0RJwaQo4LJRT00iucIK2ZelxUdK5CJVJS5QDmAkrqYUKWngmKIbCgJIdVT8W8
kTujKJNCSh0LkKIBDRIECsawR5e8tEdRjvdplapWSaX4xIc8jpyfQZyuRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLccbhxYdAov0pEpRzmz+XXESaRMB8GA1UdIwQY
MBaAFOB+AI1u0jiK0xt0IkIxUqkqVN5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQt
MjcyNzI0N2FmMjEwLzEvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQtMjcyNzI0N2FmMjEw
LzEvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiWKj0Ix
HJ4m3xeSlG0C5iugfh7mrRksz4SBhYEYjtM3CwYDdEBVwhANiIoVED2LgHnAhelv
UVq0njIgybvaBFroyl0pOQZepxgweA9ueI1PUx6/cQ8HuNgTEgy29vi1bikZIr4C
BhoypAv0MNA8ZRr/li9EzI5neUwUqKOLNRQ6CpJvcR/qRN6XNv/lRZQo5TFaUpY9
EhVbleZTvq7UuyB4ik7r/G6juSnrNAWbxceSrEpdzg2psWDBNOMyH+69PavJ/JeJ
j34cawKit8j5OCo6z4/9ma4QtUJgv/xneIXhFnBXYaaM4lrxgijw0tw3kJPbCYWB
en3Qq6UcLwCOVQ==
-----END CERTIFICATE-----
Generated at Sat May 16 17:12:20 2026 by rpki-client