Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
File:                     DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json)
Hash identifier:          BD2CtiBdwdn4Url3W6dRNANtNUDuNAqFr1SFTWKS3gc=
Subject key identifier:   F7:FA:4C:6F:C5:5B:8C:1C:3C:A8:D9:A9:E0:49:CD:73:47:1B:16:F9
Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
Certificate issuer:       /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Certificate serial:       019E30A92D0E510A6F351C48D166FA50AEE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 12:00:53 +0000
Manifest this update:     Sat 16 May 2026 12:00:53 +0000
Manifest next update:     Sun 17 May 2026 12:00:53 +0000
Files and hashes:         1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: XVnQMXzP+hxyAKPaZLLtVm4/+ui23zMVcmTGrmPds04=)
                          2: sJbabSr0DQsUKcF8whYiP0keQLk.roa (hash: VLMKLJgJtAQMDHLOL+HZaV58yPgmwNt2u2OyVf266h4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:2d:0e:51:0a:6f:35:1c:48:d1:66:fa:50:ae:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
        Validity
            Not Before: May 16 12:00:53 2026 GMT
            Not After : May 17 12:00:53 2026 GMT
        Subject: CN=f7fa4c6fc55b8c1c3ca8d9a9e049cd73471b16f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:1f:f9:1b:1c:2f:f0:85:bd:3a:bd:fc:35:
                    5d:15:30:58:8a:99:11:59:7e:44:79:37:e2:c2:bb:
                    52:25:e5:ba:1d:07:b1:df:63:4a:a5:be:16:e5:86:
                    2e:df:0e:f6:ad:3b:8f:49:67:38:a8:ff:53:d0:95:
                    0d:47:66:e1:22:bb:d0:df:e0:dd:08:ea:fd:b9:c1:
                    51:9f:f6:e4:ca:4f:c1:64:1f:e2:36:a7:7f:03:54:
                    c1:c3:66:e0:db:38:70:94:2f:cc:ef:70:29:81:5a:
                    b7:10:92:b5:75:2c:f8:1a:40:81:14:f6:d9:c3:a2:
                    32:c2:d5:aa:d8:bc:3c:90:9a:1a:80:7f:fc:4c:a7:
                    fa:63:32:8a:04:98:88:56:83:40:09:7e:e0:c5:97:
                    30:96:18:c1:7b:d8:26:04:68:02:2c:76:72:e4:ed:
                    9d:d7:5c:92:04:6a:88:64:18:93:12:8b:0d:5c:23:
                    2d:b1:17:62:15:7e:fc:30:a8:c2:90:05:45:0a:49:
                    e6:a8:05:bf:eb:5e:2b:0b:5d:34:f7:78:9b:98:9d:
                    0b:27:54:99:c9:59:36:dd:63:89:13:45:a1:4f:3c:
                    69:36:5f:1a:eb:80:80:42:fe:4e:79:ed:2c:4a:a9:
                    50:ca:61:50:7c:dd:7a:c9:23:94:cc:47:84:14:41:
                    44:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FA:4C:6F:C5:5B:8C:1C:3C:A8:D9:A9:E0:49:CD:73:47:1B:16:F9
            X509v3 Authority Key Identifier:
                keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f9:55:4a:83:8f:69:79:40:b5:c3:d8:af:41:23:9e:e9:78:
         42:b5:a5:a1:cb:30:fe:9b:a0:41:c4:7b:fb:0f:8a:9f:57:b3:
         71:02:be:1f:b5:c4:17:7b:00:f8:92:15:2d:a3:5d:18:76:a6:
         9e:36:84:3e:eb:f2:e3:3d:84:41:07:43:4c:df:97:56:dd:2a:
         9d:4b:3a:01:b7:86:43:62:21:42:f7:6b:ba:11:58:60:cd:81:
         f6:3b:e0:71:d6:a3:fd:ef:82:82:e8:76:c3:40:57:3b:31:1b:
         a6:a9:0f:fd:91:2d:1e:89:2d:4c:e6:a4:62:64:54:12:a8:c8:
         60:9e:12:0c:fe:66:58:82:89:4d:d5:84:37:c3:02:b3:70:1e:
         8d:ae:3d:cb:1d:03:6f:4d:54:00:0f:09:4c:6d:14:6b:ad:db:
         0c:3f:fc:98:d1:aa:4a:2f:1e:82:a9:a0:53:43:92:d9:73:00:
         d2:da:33:a9:ae:16:65:c6:56:dd:2a:b0:41:15:38:88:0f:13:
         45:39:d1:7d:6b:81:05:57:c3:b2:24:35:f2:2d:f1:0e:9b:8a:
         8a:33:9e:5d:64:3c:c2:3a:d1:0d:be:c7:9c:b4:fe:04:8d:e8:
         13:45:eb:13:38:ea:d8:55:e3:4e:c3:c4:12:ba:2c:d5:83:36:
         89:6a:16:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqS0OUQpvNRxI0Wb6UK7iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMzQ0NzdhYTBmMDEyMzEzOGMwNDcyZjViMzUyOGU0ZDIx
OTNlNjgwHhcNMjYwNTE2MTIwMDUzWhcNMjYwNTE3MTIwMDUzWjAzMTEwLwYDVQQD
EyhmN2ZhNGM2ZmM1NWI4YzFjM2NhOGQ5YTllMDQ5Y2Q3MzQ3MWIxNmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd4f+RscL/CFvTq9/DVdFTBYipkR
WX5EeTfiwrtSJeW6HQex32NKpb4W5YYu3w72rTuPSWc4qP9T0JUNR2bhIrvQ3+Dd
COr9ucFRn/bkyk/BZB/iNqd/A1TBw2bg2zhwlC/M73ApgVq3EJK1dSz4GkCBFPbZ
w6IywtWq2Lw8kJoagH/8TKf6YzKKBJiIVoNACX7gxZcwlhjBe9gmBGgCLHZy5O2d
11ySBGqIZBiTEosNXCMtsRdiFX78MKjCkAVFCknmqAW/614rC10093ibmJ0LJ1SZ
yVk23WOJE0WhTzxpNl8a64CAQv5Oee0sSqlQymFQfN16ySOUzEeEFEFE+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPf6TG/FW4wcPKjZqeBJzXNHGxb5MB8GA1UdIwQY
MBaAFA80R3qg8BIxOMBHL1s1KOTSGT5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAt
ZTA5YmM0ZWFlMTg5LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAtZTA5YmM0ZWFlMTg5
LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvlVSoOP
aXlAtcPYr0Ejnul4QrWlocsw/pugQcR7+w+Kn1ezcQK+H7XEF3sA+JIVLaNdGHam
njaEPuvy4z2EQQdDTN+XVt0qnUs6AbeGQ2IhQvdruhFYYM2B9jvgcdaj/e+Cguh2
w0BXOzEbpqkP/ZEtHoktTOakYmRUEqjIYJ4SDP5mWIKJTdWEN8MCs3Aeja49yx0D
b01UAA8JTG0Ua63bDD/8mNGqSi8egqmgU0OS2XMA0tozqa4WZcZW3SqwQRU4iA8T
RTnRfWuBBVfDsiQ18i3xDpuKijOeXWQ8wjrRDb7HnLT+BI3oE0XrEzjq2FXjTsPE
Eros1YM2iWoWHQ==
-----END CERTIFICATE-----
Generated at Sat May 16 15:37:06 2026 by rpki-client