Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File:                     1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier:          wAPmdNCp0utvZnpn4ZajVjkfwGA1qnljoMz3zPXpMOg=
Subject key identifier:   C9:AC:31:E9:C8:95:AC:6C:8E:0D:EF:A7:6E:A7:D9:D3:AC:08:ED:51
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer:       /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial:       019E300466E05C9183C5972A04B9AA802B49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number:          0705
Signing time:             Sat 16 May 2026 09:00:55 +0000
Manifest this update:     Sat 16 May 2026 09:00:55 +0000
Manifest next update:     Sun 17 May 2026 09:00:55 +0000
Files and hashes:         1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: yd4VDzLMc5HPt0i/l7XpwvfVSawMb+KZsD5z8AvE/84=)
                          2: uR2uktqhw4VUD7MA87wx15LSDMQ.roa (hash: dBrAWGqUgoQMO2aAWFKVKmrXl4B58KcbKhMomtwhN/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:66:e0:5c:91:83:c5:97:2a:04:b9:aa:80:2b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
        Validity
            Not Before: May 16 09:00:55 2026 GMT
            Not After : May 17 09:00:55 2026 GMT
        Subject: CN=c9ac31e9c895ac6c8e0defa76ea7d9d3ac08ed51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:44:e3:77:c7:1e:ba:10:65:34:80:e9:a0:cc:
                    6a:5d:72:0f:07:ed:ef:b9:a0:5c:79:7b:d7:c4:96:
                    81:46:39:00:db:66:7a:f2:29:11:d9:fd:0a:40:15:
                    e2:01:b1:f7:60:89:d0:15:38:20:03:d3:33:c2:55:
                    7a:22:ea:b4:c6:f8:d5:9e:09:c1:6c:b6:79:fb:e3:
                    6c:48:67:99:45:2b:e6:f5:c7:cf:7d:a9:2c:88:5b:
                    59:02:77:a1:54:c9:89:d2:e7:dc:a8:4a:ef:a9:4e:
                    1f:38:24:f8:a1:54:3c:27:04:5e:2f:ff:af:6e:87:
                    41:88:a1:d3:3b:b9:ab:e9:9a:3d:c8:d8:e7:6f:bf:
                    55:fd:e5:de:16:81:7e:eb:6d:4f:7a:ce:51:ee:4f:
                    84:06:c8:e8:f9:91:44:2c:20:64:a7:d8:9c:43:b8:
                    2b:ad:b7:46:d0:79:fa:9e:a9:fd:86:ea:6f:da:ea:
                    68:aa:61:88:91:a9:2e:64:ea:13:d4:17:26:6e:55:
                    ef:1a:2f:c2:52:ba:48:89:20:93:65:14:db:08:2a:
                    2d:a8:53:06:98:95:19:78:e3:8a:73:12:91:81:b2:
                    de:cf:e6:0c:f7:cb:fb:88:aa:e7:77:15:56:23:54:
                    be:df:63:43:59:88:f8:6b:0c:ca:95:e5:da:f2:29:
                    50:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AC:31:E9:C8:95:AC:6C:8E:0D:EF:A7:6E:A7:D9:D3:AC:08:ED:51
            X509v3 Authority Key Identifier:
                keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:20:02:d7:f4:7c:65:9d:d5:12:d3:a5:24:1b:5e:be:fd:1b:
         0f:df:15:e0:f9:b0:2b:bf:7d:5f:d8:02:86:8f:ad:15:c1:7a:
         8a:cd:64:20:1c:1d:48:f0:33:f4:42:b6:7e:14:4e:46:02:cf:
         0b:2b:59:ca:64:86:60:05:70:fe:a4:78:ba:e2:b6:66:67:a2:
         32:49:37:8a:96:8b:fc:74:24:c6:26:c1:a9:c7:8a:e9:10:9d:
         63:f6:59:c9:36:5f:13:b4:15:93:ac:6e:8f:91:ea:f7:4a:5c:
         f2:a8:9f:75:32:9d:3e:45:01:b7:3b:cc:b3:45:5f:ba:35:6b:
         a2:53:e1:c8:23:c2:e8:9c:21:85:30:fa:13:2a:d2:d0:a6:b2:
         30:0f:34:d3:7a:74:72:66:67:a1:50:50:2e:b9:10:21:d3:93:
         2d:31:ad:5d:66:d4:46:4c:46:b9:83:95:1f:9f:9f:8d:4d:89:
         53:09:0a:a8:fd:b5:f0:83:79:df:7a:f4:68:50:3e:14:ea:ac:
         a5:03:26:fd:c0:72:56:66:ab:05:75:f0:23:98:29:62:4f:32:
         de:48:a1:52:63:53:a4:2b:01:3d:45:bf:7b:49:26:94:4a:7c:
         05:65:af:65:82:bf:aa:be:61:2a:48:98:1c:05:e5:cd:88:11:
         7d:df:04:21
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4wBGbgXJGDxZcqBLmqgCtJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTJmMDVmY2Q1OWZkMTY4NmY5MjljNjdiZWRjZWY1OWU1
NTBkZjIwHhcNMjYwNTE2MDkwMDU1WhcNMjYwNTE3MDkwMDU1WjAzMTEwLwYDVQQD
EyhjOWFjMzFlOWM4OTVhYzZjOGUwZGVmYTc2ZWE3ZDlkM2FjMDhlZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlETjd8ceuhBlNIDpoMxqXXIPB+3v
uaBceXvXxJaBRjkA22Z68ikR2f0KQBXiAbH3YInQFTggA9MzwlV6Iuq0xvjVngnB
bLZ5++NsSGeZRSvm9cfPfaksiFtZAnehVMmJ0ufcqErvqU4fOCT4oVQ8JwReL/+v
bodBiKHTO7mr6Zo9yNjnb79V/eXeFoF+621Pes5R7k+EBsjo+ZFELCBkp9icQ7gr
rbdG0Hn6nqn9hupv2upoqmGIkakuZOoT1BcmblXvGi/CUrpIiSCTZRTbCCotqFMG
mJUZeOOKcxKRgbLez+YM98v7iKrndxVWI1S+32NDWYj4awzKleXa8ilQRwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMmsMenIlaxsjg3vp26n2dOsCO1RMB8GA1UdIwQY
MBaAFPsS8F/NWf0WhvkpxnvtzvWeVQ3yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14THdYODFaX1JhRy1TbkdlLTNPOVo1VkRmSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvYTAzN2QxLWVhN2MtNGM4NS04MTI4
LWQ0ZDBhYWI3MDFiZi8xLzEteEx3WDgxWl9SYUctU25HZS0zTzlaNVZEZkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M5L2EwMzdkMS1lYTdjLTRjODUtODEyOC1kNGQwYWFiNzAx
YmYvMS8xLXhMd1g4MVpfUmFHLVNuR2UtM085WjVWRGZJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSAC
1/R8ZZ3VEtOlJBtevv0bD98V4PmwK799X9gCho+tFcF6is1kIBwdSPAz9EK2fhRO
RgLPCytZymSGYAVw/qR4uuK2ZmeiMkk3ipaL/HQkxibBqceK6RCdY/ZZyTZfE7QV
k6xuj5Hq90pc8qifdTKdPkUBtzvMs0VfujVrolPhyCPC6JwhhTD6EyrS0KayMA80
03p0cmZnoVBQLrkQIdOTLTGtXWbURkxGuYOVH5+fjU2JUwkKqP218IN533r0aFA+
FOqspQMm/cByVmarBXXwI5gpYk8y3kihUmNTpCsBPUW/e0kmlEp8BWWvZYK/qr5h
KkiYHAXlzYgRfd8EIQ==
-----END CERTIFICATE-----
Generated at Sat May 16 17:12:04 2026 by rpki-client