Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File:                     2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier:          IetwqmNypBtVhUMaJ2JE58yLt/DupbsjH7gw5BPZrY0=
Subject key identifier:   C7:97:A0:A7:1A:59:C5:D1:C4:E1:B5:97:93:BA:F0:AE:96:AE:58:00
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer:       /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial:       019E2F96AD0B60B072CAD43B5E42D7A27644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number:          04F8
Signing time:             Sat 16 May 2026 07:01:04 +0000
Manifest this update:     Sat 16 May 2026 07:01:04 +0000
Manifest next update:     Sun 17 May 2026 07:01:04 +0000
Files and hashes:         1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: TqOqBhbmxdHyp8YA2yIlKd+wG61KFjQTGTTQPHulj9s=)
                          2: w9Drqjy5pv-xgsWm0Hj9JX1HYxE.roa (hash: X6/QclUhRxI/QNNJjqFf+pxHUaHW1PpD7IKrBpkxN4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:ad:0b:60:b0:72:ca:d4:3b:5e:42:d7:a2:76:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
        Validity
            Not Before: May 16 07:01:04 2026 GMT
            Not After : May 17 07:01:04 2026 GMT
        Subject: CN=c797a0a71a59c5d1c4e1b59793baf0ae96ae5800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0d:30:c1:5e:77:c5:6c:67:b2:93:3c:d3:e3:
                    ce:a8:1d:c4:f0:e2:66:77:a9:6d:d8:2b:03:c1:b9:
                    33:69:d5:48:f7:57:d6:b5:0e:fb:9e:57:07:33:d1:
                    a5:7f:06:3c:c1:db:af:73:34:50:2b:83:07:e1:7e:
                    23:76:45:14:bc:50:de:e6:d1:e8:c8:f0:86:69:74:
                    f7:59:6b:48:62:d1:3e:9f:4d:5c:f1:93:49:57:aa:
                    32:0f:52:13:f8:36:d1:f0:e4:5d:25:e4:8d:3e:c0:
                    05:29:c5:2b:23:fa:ff:ee:58:59:f1:41:a7:33:d9:
                    f1:9d:bf:aa:cf:69:d1:d3:4d:03:96:45:aa:d3:7a:
                    2f:75:2d:92:c1:a7:f3:a7:8d:b7:f4:b7:1e:c6:d5:
                    af:84:2a:f6:74:d9:9a:b6:da:70:3d:f1:06:29:6c:
                    65:c9:a6:9b:61:af:91:26:a3:b5:53:86:e5:db:d5:
                    ee:de:9e:41:a6:f6:1f:54:a2:87:8a:3a:e7:69:48:
                    87:b2:42:47:8a:81:9a:12:ca:10:f0:91:89:be:e7:
                    95:72:16:2a:c8:7b:0a:4e:eb:b3:8b:e0:b2:1c:98:
                    d3:a0:2d:3f:b9:f1:a2:8c:d7:f5:47:bc:66:e0:40:
                    29:60:7a:ec:41:9e:6a:5f:cc:c9:f2:5a:60:3f:17:
                    03:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:97:A0:A7:1A:59:C5:D1:C4:E1:B5:97:93:BA:F0:AE:96:AE:58:00
            X509v3 Authority Key Identifier:
                keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:80:ca:88:cc:52:ac:db:b3:46:24:00:f3:b3:12:44:5e:86:
         50:34:f0:c2:61:1a:d2:92:da:21:9f:bd:b1:b5:56:68:dc:31:
         e0:96:bc:5b:70:3e:27:4a:dd:ce:d2:38:40:8f:88:02:64:ae:
         19:d1:17:57:7e:14:e3:2a:37:e2:ac:a6:5d:39:df:35:bc:76:
         b6:36:01:9d:3b:4b:a8:05:88:1e:2c:05:4d:fa:1e:dc:74:45:
         c0:3a:16:d7:ba:fd:99:8b:80:46:4f:60:12:9c:6d:41:f5:d8:
         20:22:b5:e8:98:38:6e:26:0c:12:21:42:89:21:88:8c:44:fa:
         ea:ec:da:ae:83:9b:1a:61:75:46:c8:7f:ed:69:cd:ef:6b:06:
         b5:6f:ec:0d:f6:00:5e:97:f9:e3:a6:51:40:ad:de:d1:57:6c:
         28:5f:6a:94:c1:38:92:8b:96:56:fd:df:bf:b8:18:b0:44:08:
         ad:d6:e1:70:c6:43:00:6c:e1:e3:38:de:c2:22:b0:12:6c:21:
         32:e4:52:0a:9b:f6:e5:d8:51:63:1d:b2:9d:e5:12:a3:d5:2e:
         61:06:cc:d0:94:96:2a:5e:82:fe:20:71:cc:e9:fe:77:5e:27:
         11:9e:de:a3:1b:10:9a:e2:bb:b0:30:2e:82:d1:3a:bb:f0:73:
         d8:f2:9a:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vlq0LYLByytQ7XkLXonZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI3OTE3MzZjZGRkZDEzMjhkMGRkMGRlY2FlOTJjMDU4
ZDZmMjUwHhcNMjYwNTE2MDcwMTA0WhcNMjYwNTE3MDcwMTA0WjAzMTEwLwYDVQQD
EyhjNzk3YTBhNzFhNTljNWQxYzRlMWI1OTc5M2JhZjBhZTk2YWU1ODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww0wwV53xWxnspM80+POqB3E8OJm
d6lt2CsDwbkzadVI91fWtQ77nlcHM9GlfwY8wduvczRQK4MH4X4jdkUUvFDe5tHo
yPCGaXT3WWtIYtE+n01c8ZNJV6oyD1IT+DbR8ORdJeSNPsAFKcUrI/r/7lhZ8UGn
M9nxnb+qz2nR000DlkWq03ovdS2Swafzp4239LcextWvhCr2dNmattpwPfEGKWxl
yaabYa+RJqO1U4bl29Xu3p5BpvYfVKKHijrnaUiHskJHioGaEsoQ8JGJvueVchYq
yHsKTuuzi+CyHJjToC0/ufGijNf1R7xm4EApYHrsQZ5qX8zJ8lpgPxcDLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeXoKcaWcXRxOG1l5O68K6WrlgAMB8GA1UdIwQY
MBaAFNmCeRc2zd3RMo0N0N7K6SwFjW8lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYt
Y2E2YTFjYzgxYTIyLzEvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYtY2E2YTFjYzgxYTIy
LzEvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIDKiMxS
rNuzRiQA87MSRF6GUDTwwmEa0pLaIZ+9sbVWaNwx4Ja8W3A+J0rdztI4QI+IAmSu
GdEXV34U4yo34qymXTnfNbx2tjYBnTtLqAWIHiwFTfoe3HRFwDoW17r9mYuARk9g
EpxtQfXYICK16Jg4biYMEiFCiSGIjET66uzaroObGmF1Rsh/7WnN72sGtW/sDfYA
Xpf546ZRQK3e0VdsKF9qlME4kouWVv3fv7gYsEQIrdbhcMZDAGzh4zjewiKwEmwh
MuRSCpv25dhRYx2yneUSo9UuYQbM0JSWKl6C/iBxzOn+d14nEZ7eoxsQmuK7sDAu
gtE6u/Bz2PKayw==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:02 2026 by rpki-client