Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File:                     AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier:          r2td35iZ4LiZRY+SuurIYArWybWVzwmCb+99WBdIJHI=
Subject key identifier:   7F:8B:9D:9C:89:AC:24:EA:97:45:4C:05:6C:58:B1:5D:36:0D:6F:0A
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer:       /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial:       019E31179887012D35A536D862020538A4AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number:          1914
Signing time:             Sat 16 May 2026 14:01:30 +0000
Manifest this update:     Sat 16 May 2026 14:01:30 +0000
Manifest next update:     Sun 17 May 2026 14:01:30 +0000
Files and hashes:         1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: 8S8A8uK3nlL3ufmkY+nXMhSNCI974zpmC3Jl1fH1gHQ=)
                          2: TM56q_Km90IofYyolcjUGG4s9_E.roa (hash: +vMdN883JqiJ4BCwwMasiDlvt3eGgHHdJPYkXZCMObo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:98:87:01:2d:35:a5:36:d8:62:02:05:38:a4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
        Validity
            Not Before: May 16 14:01:30 2026 GMT
            Not After : May 17 14:01:30 2026 GMT
        Subject: CN=7f8b9d9c89ac24ea97454c056c58b15d360d6f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7d:fe:e0:ff:b3:b8:8e:a8:93:58:0e:b2:bf:
                    92:42:87:6c:b4:55:ae:1e:91:79:92:3c:18:a2:52:
                    97:b4:9c:82:b8:55:22:52:4a:f0:4e:68:1f:8b:bb:
                    31:b8:b6:e5:ac:bf:4b:3f:2e:45:3f:94:4a:72:59:
                    9e:5a:10:3f:a4:78:a7:10:ef:77:f7:7c:3c:e1:61:
                    4a:33:36:1c:c9:ad:4f:ab:51:99:78:51:4a:53:07:
                    a4:36:5d:d4:08:a6:7f:0d:6f:c1:94:c2:29:d7:fa:
                    e0:c1:bf:cb:13:f5:9d:28:31:1e:9d:bd:2b:8f:24:
                    db:2d:e4:d6:d3:01:31:3c:df:cc:d0:58:1e:b4:25:
                    1d:ff:f9:b7:78:cd:91:93:fe:56:e8:ce:a1:42:13:
                    2a:5f:22:67:b3:6d:e8:58:c7:ca:5a:8e:a7:fa:2e:
                    d8:62:8a:d6:ad:2a:d9:18:82:0a:5c:0d:a6:01:78:
                    c8:20:42:ba:64:bf:04:f4:19:f4:69:1b:74:57:0d:
                    f9:70:e4:1b:1a:e8:8d:3e:9d:2e:ab:70:e4:cb:ac:
                    93:6a:14:88:2f:4a:5e:7f:8a:fa:2d:d0:ff:ed:2f:
                    f5:67:10:e1:07:dd:46:60:ec:ce:55:cb:ab:27:97:
                    2b:48:5a:ba:cb:f7:2c:3c:36:e1:ac:9f:f7:1b:b4:
                    bd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8B:9D:9C:89:AC:24:EA:97:45:4C:05:6C:58:B1:5D:36:0D:6F:0A
            X509v3 Authority Key Identifier:
                keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4a:de:a9:f7:51:e7:a6:f8:99:11:64:e4:1d:4c:4a:45:93:
         d8:a6:d0:d5:4d:4d:52:ef:b9:19:4a:6a:a6:7f:f7:90:6c:cc:
         f1:fd:1a:85:85:16:fe:6a:98:07:25:e5:32:08:8a:f0:7f:0c:
         57:b4:eb:b7:fb:7d:09:78:dc:8a:3c:1e:81:a9:07:de:94:6a:
         f0:3b:7d:98:75:0d:fc:fa:c8:3b:43:c9:1d:4d:ed:10:3e:4c:
         38:fb:1d:13:e5:22:89:c3:15:7a:e7:d9:bf:3c:57:fa:11:3c:
         f3:71:19:58:3c:a4:a5:bf:24:4e:f5:be:c5:bb:c4:f4:82:29:
         14:a2:64:52:72:1f:37:a3:c8:c0:3a:6b:4b:40:7e:45:e9:c3:
         92:b3:73:f5:af:e3:7f:b7:c2:bf:b5:e2:66:89:66:c5:08:5f:
         fd:64:04:5d:4f:15:0a:17:ae:28:40:c2:93:50:8e:f7:87:8c:
         2a:3e:c6:49:6d:a6:4a:67:3b:a1:4b:5f:f6:73:13:12:18:f5:
         12:f0:59:40:8f:f8:1a:f4:3b:a3:39:e9:f4:a2:c6:fa:10:a5:
         0b:a5:5f:ae:1e:a1:b0:2d:6e:2c:2e:87:34:b7:96:28:44:9c:
         41:02:e7:5f:74:2a:21:69:5f:b5:36:e4:08:84:4f:69:38:34:
         ba:99:39:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF5iHAS01pTbYYgIFOKSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOGNjNmY0NjZhMjQxNjU3YmY1ZWM1MmE2MzBkYWViMDEy
MjJmODUwHhcNMjYwNTE2MTQwMTMwWhcNMjYwNTE3MTQwMTMwWjAzMTEwLwYDVQQD
Eyg3ZjhiOWQ5Yzg5YWMyNGVhOTc0NTRjMDU2YzU4YjE1ZDM2MGQ2ZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n3+4P+zuI6ok1gOsr+SQodstFWu
HpF5kjwYolKXtJyCuFUiUkrwTmgfi7sxuLblrL9LPy5FP5RKclmeWhA/pHinEO93
93w84WFKMzYcya1Pq1GZeFFKUwekNl3UCKZ/DW/BlMIp1/rgwb/LE/WdKDEenb0r
jyTbLeTW0wExPN/M0FgetCUd//m3eM2Rk/5W6M6hQhMqXyJns23oWMfKWo6n+i7Y
YorWrSrZGIIKXA2mAXjIIEK6ZL8E9Bn0aRt0Vw35cOQbGuiNPp0uq3Dky6yTahSI
L0pef4r6LdD/7S/1ZxDhB91GYOzOVcurJ5crSFq6y/csPDbhrJ/3G7S9TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+LnZyJrCTql0VMBWxYsV02DW8KMB8GA1UdIwQY
MBaAFAGMxvRmokFle/XsUqYw2usBIi+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zY2YyZmItY2Y0My00YzUyLWEyYTEt
YmU4ZDhjNjdkZjk1LzEvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zY2YyZmItY2Y0My00YzUyLWEyYTEtYmU4ZDhjNjdkZjk1
LzEvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEreqfdR
56b4mRFk5B1MSkWT2KbQ1U1NUu+5GUpqpn/3kGzM8f0ahYUW/mqYByXlMgiK8H8M
V7Trt/t9CXjcijwegakH3pRq8Dt9mHUN/PrIO0PJHU3tED5MOPsdE+UiicMVeufZ
vzxX+hE883EZWDykpb8kTvW+xbvE9IIpFKJkUnIfN6PIwDprS0B+RenDkrNz9a/j
f7fCv7XiZolmxQhf/WQEXU8VCheuKEDCk1CO94eMKj7GSW2mSmc7oUtf9nMTEhj1
EvBZQI/4GvQ7oznp9KLG+hClC6Vfrh6hsC1uLC6HNLeWKEScQQLnX3QqIWlftTbk
CIRPaTg0upk5dA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:12:12 2026 by rpki-client