Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
File:                     169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json)
Hash identifier:          2SwrpdTRWtjhmlhbNc5aEzCC6FypnOvOgIj2SvGOpbo=
Subject key identifier:   32:1F:BC:D3:E8:86:06:B8:C6:61:8B:9D:8C:3C:AD:5C:86:6E:B0:00
Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Certificate issuer:       /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Certificate serial:       019E303BC7E8AB10B2242677B5E362974CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
Manifest number:          0EB8
Signing time:             Sat 16 May 2026 10:01:24 +0000
Manifest this update:     Sat 16 May 2026 10:01:24 +0000
Manifest next update:     Sun 17 May 2026 10:01:24 +0000
Files and hashes:         1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: DR5db0rrOJ7fG5cp+lsholVOBVjLBGKilXrUdT+vZzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:c7:e8:ab:10:b2:24:26:77:b5:e3:62:97:4c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
        Validity
            Not Before: May 16 10:01:24 2026 GMT
            Not After : May 17 10:01:24 2026 GMT
        Subject: CN=321fbcd3e88606b8c6618b9d8c3cad5c866eb000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1a:4e:51:10:39:7b:6a:a0:9b:d9:83:85:ad:
                    91:de:5f:23:a4:95:75:1a:28:7b:4c:56:f8:d6:f2:
                    d7:3d:73:16:c9:36:57:dd:55:5c:32:ec:0b:7a:43:
                    29:a9:5e:01:c0:23:92:8b:ac:f6:b4:67:3e:e8:df:
                    ae:4d:10:da:3e:5b:82:87:06:7f:c1:80:ef:2a:e8:
                    e5:5e:fc:2c:51:73:0d:c7:6f:25:5c:c2:2b:fc:fd:
                    e4:84:f5:33:7e:7e:77:2e:c2:28:96:14:95:15:a2:
                    70:ca:00:f6:bd:9e:0e:fe:e1:a8:88:27:13:f3:99:
                    dc:83:d8:24:48:6d:45:8a:a6:4d:36:3d:ab:99:77:
                    e4:bf:e1:7b:c6:eb:f6:10:9e:55:a2:03:09:fa:9b:
                    b2:0a:ff:a9:f1:ca:26:6d:01:9c:2e:e3:33:ac:c2:
                    cc:21:92:71:94:dc:95:b0:e0:2b:be:5c:72:2c:b5:
                    03:41:22:80:0e:0b:fd:18:61:c7:8a:e2:08:9d:b4:
                    8d:a1:65:ac:f9:27:af:ca:16:d8:c7:bf:1d:b8:ec:
                    8f:39:a1:5a:b7:dc:dd:6e:78:31:62:08:60:2d:ff:
                    c3:bf:7c:14:c5:9d:a4:16:0b:fe:ef:f1:63:eb:a0:
                    04:79:27:a4:f1:73:6d:e8:45:06:7c:1b:78:bd:88:
                    ad:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1F:BC:D3:E8:86:06:B8:C6:61:8B:9D:8C:3C:AD:5C:86:6E:B0:00
            X509v3 Authority Key Identifier:
                keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b4:8f:f7:8c:cf:ea:b1:e0:9f:f1:47:4c:77:fc:21:8f:e1:
         59:d3:b1:a6:fc:a7:dc:ef:89:ce:e6:31:8b:cc:4f:cf:d9:09:
         1b:1c:67:97:c6:c1:7f:3e:23:6b:e9:a7:d0:99:53:6d:a2:e5:
         9e:f0:ac:7a:b9:69:15:ee:d2:7c:18:af:56:24:16:b2:39:78:
         c1:92:8a:2a:fe:41:9a:45:10:d5:be:fa:52:ac:c9:e7:8c:cb:
         3c:b5:95:82:6c:52:06:85:3d:ec:38:f0:a2:95:84:b7:aa:f6:
         24:f1:fe:87:e2:a5:8a:f0:c1:b2:1a:99:16:c5:3e:77:15:0e:
         e2:ab:bd:ac:26:15:25:6b:7b:f2:f5:a5:e9:65:ec:8e:77:26:
         88:ac:1b:49:95:ed:4d:06:46:79:ee:33:dd:6f:f4:16:96:1b:
         2a:d2:93:e9:a4:82:c4:e0:1e:81:44:ff:95:88:5d:56:99:ba:
         47:11:b5:96:29:0e:e6:ef:a6:df:0e:d1:e0:e9:fc:fb:4c:b8:
         b4:9e:7d:2a:4f:fa:aa:c9:59:de:ae:d7:c1:fa:b1:3a:af:ad:
         80:17:50:a5:b8:81:14:88:ed:19:67:dc:1d:70:54:22:ff:9e:
         40:19:4a:d5:e5:b3:8e:0f:37:8b:88:33:13:14:a3:d0:24:99:
         a0:f8:60:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO8foqxCyJCZ3teNil0yxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YWY0NGI0N2YwOGJkMGJlOGZjMDVmOWIwYzE1YTVhYmM2
MjAzYWEwHhcNMjYwNTE2MTAwMTI0WhcNMjYwNTE3MTAwMTI0WjAzMTEwLwYDVQQD
EygzMjFmYmNkM2U4ODYwNmI4YzY2MThiOWQ4YzNjYWQ1Yzg2NmViMDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohpOURA5e2qgm9mDha2R3l8jpJV1
Gih7TFb41vLXPXMWyTZX3VVcMuwLekMpqV4BwCOSi6z2tGc+6N+uTRDaPluChwZ/
wYDvKujlXvwsUXMNx28lXMIr/P3khPUzfn53LsIolhSVFaJwygD2vZ4O/uGoiCcT
85ncg9gkSG1FiqZNNj2rmXfkv+F7xuv2EJ5VogMJ+puyCv+p8combQGcLuMzrMLM
IZJxlNyVsOArvlxyLLUDQSKADgv9GGHHiuIInbSNoWWs+SevyhbYx78duOyPOaFa
t9zdbngxYghgLf/Dv3wUxZ2kFgv+7/Fj66AEeSek8XNt6EUGfBt4vYitAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIfvNPohga4xmGLnYw8rVyGbrAAMB8GA1UdIwQY
MBaAFNevRLR/CL0L6PwF+bDBWlq8YgOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTY5RXRIOEl2UXZvX0FYNXNNRmFXcnhpQTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mYmJiNTMtNWRhMi00NGY2LThjOWYt
MTliMDI2OWQxMDNjLzEvMTY5RXRIOEl2UXZvX0FYNXNNRmFXcnhpQTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9mYmJiNTMtNWRhMi00NGY2LThjOWYtMTliMDI2OWQxMDNj
LzEvMTY5RXRIOEl2UXZvX0FYNXNNRmFXcnhpQTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrSP94zP
6rHgn/FHTHf8IY/hWdOxpvyn3O+JzuYxi8xPz9kJGxxnl8bBfz4ja+mn0JlTbaLl
nvCserlpFe7SfBivViQWsjl4wZKKKv5BmkUQ1b76UqzJ54zLPLWVgmxSBoU97Djw
opWEt6r2JPH+h+KlivDBshqZFsU+dxUO4qu9rCYVJWt78vWl6WXsjncmiKwbSZXt
TQZGee4z3W/0FpYbKtKT6aSCxOAegUT/lYhdVpm6RxG1likO5u+m3w7R4On8+0y4
tJ59Kk/6qslZ3q7XwfqxOq+tgBdQpbiBFIjtGWfcHXBUIv+eQBlK1eWzjg83i4gz
ExSj0CSZoPhgVA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:50 2026 by rpki-client