Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
File:                     65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json)
Hash identifier:          f1TjT8hzuT1kg85zKXu+JNJVqxz87ICAmhiOjxx9QD0=
Subject key identifier:   43:30:4A:62:28:A3:6D:4D:56:D2:A4:0B:BD:AB:FD:28:49:BB:85:D8
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Certificate issuer:       /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial:       019E2FCD55CFC8A80C5B530015FCE35EFE03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
Manifest number:          0E43
Signing time:             Sat 16 May 2026 08:00:46 +0000
Manifest this update:     Sat 16 May 2026 08:00:46 +0000
Manifest next update:     Sun 17 May 2026 08:00:46 +0000
Files and hashes:         1: 3NE1-ierdloX8nhN3iBkvRLmeck.roa (hash: gQY+8HGUw14ADa6TeHXGdaEBXGR4Hxky1qeV/2hoxfs=)
                          2: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: iOaG6zoTfUejZmICVknS8sllP0FHRiBrEbFd1cXyrrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:55:cf:c8:a8:0c:5b:53:00:15:fc:e3:5e:fe:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
        Validity
            Not Before: May 16 08:00:46 2026 GMT
            Not After : May 17 08:00:46 2026 GMT
        Subject: CN=43304a6228a36d4d56d2a40bbdabfd2849bb85d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b9:a4:84:69:97:66:ce:b3:ea:c1:42:15:3a:
                    f6:83:61:9b:c6:bd:f5:a7:df:5f:4d:ee:c8:02:19:
                    0f:3a:07:08:54:78:ef:81:02:40:57:a4:1b:b0:69:
                    9e:d0:12:e5:a2:b5:a9:45:6e:44:71:78:37:65:d6:
                    93:cb:0c:b4:16:07:f9:06:65:06:22:66:0b:0c:98:
                    38:47:d7:e7:dc:f3:bf:d3:75:c8:88:db:43:ee:9d:
                    63:dd:58:63:a2:cd:57:a9:a6:20:2a:bc:57:93:e5:
                    b1:6e:b8:da:05:c6:0e:3e:99:86:0d:f4:97:66:7f:
                    da:6f:03:ef:b3:e4:00:6e:9a:b5:17:ef:ce:27:fb:
                    0b:7c:ca:20:2a:61:2f:51:11:11:7a:c6:49:4d:4b:
                    9e:63:77:e2:ad:6c:68:39:dd:69:41:bf:69:70:04:
                    8b:8b:ed:db:0b:3f:0a:4b:a1:38:30:d4:4d:b0:c3:
                    3f:1e:eb:a1:f2:2f:53:8b:ae:74:28:9d:62:a3:3a:
                    f2:64:3e:02:ea:23:4b:5a:57:fb:20:09:92:07:05:
                    3e:f7:3d:ee:4c:06:b5:d5:1f:2a:bd:c0:f4:82:ce:
                    da:a4:23:a6:53:96:f1:f0:60:1d:fb:5d:8d:ea:27:
                    82:65:6d:3d:0b:96:4f:5d:85:67:47:af:d5:df:b4:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:30:4A:62:28:A3:6D:4D:56:D2:A4:0B:BD:AB:FD:28:49:BB:85:D8
            X509v3 Authority Key Identifier:
                keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:85:48:a0:13:9c:c4:8c:5b:b6:af:94:43:2f:60:1d:f0:04:
         7e:0b:49:c8:ed:68:8e:97:12:34:70:9e:c0:de:bf:08:2e:31:
         b8:17:7b:9d:80:cc:54:cc:97:60:f6:2a:04:66:b5:5d:23:f1:
         1d:ef:e6:a9:09:b7:57:79:a5:e9:2e:ad:0e:ce:00:41:b9:72:
         29:51:e9:4d:b7:fa:14:ff:a9:19:f7:59:f7:4c:12:8c:dc:08:
         f3:87:0c:2b:43:9b:6a:21:3c:69:01:20:d3:3b:1a:15:f7:ae:
         75:5b:ef:bd:03:10:c7:78:b1:f1:25:cb:b8:0b:87:24:e2:40:
         0b:73:9a:81:11:d2:be:28:0e:bd:d4:75:48:29:71:67:13:c2:
         51:a3:41:56:e0:35:63:9e:8f:3d:9b:28:e2:1f:35:c4:8a:81:
         8a:13:0a:d0:09:03:04:a7:9a:a8:7a:95:22:44:f2:0d:23:f6:
         5b:8f:ab:1c:fd:4b:7f:f3:16:20:5e:f1:41:e0:85:6b:8e:da:
         5b:87:ef:36:ed:13:16:53:42:f7:4d:e0:9f:d5:a3:91:78:df:
         6d:34:17:d1:cc:dd:2d:41:9e:ae:f9:ff:9e:03:9d:62:ff:45:
         26:a7:d8:e0:6b:a1:e2:1e:2e:10:59:6c:bb:3e:09:91:e4:6e:
         df:48:51:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vzVXPyKgMW1MAFfzjXv4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViOTYwOTgyZTgyYmY5ZTk4NzU0NDUwMDkzMDhkZTdlY2Jk
MDVjNTQwHhcNMjYwNTE2MDgwMDQ2WhcNMjYwNTE3MDgwMDQ2WjAzMTEwLwYDVQQD
Eyg0MzMwNGE2MjI4YTM2ZDRkNTZkMmE0MGJiZGFiZmQyODQ5YmI4NWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrmkhGmXZs6z6sFCFTr2g2Gbxr31
p99fTe7IAhkPOgcIVHjvgQJAV6QbsGme0BLlorWpRW5EcXg3ZdaTywy0Fgf5BmUG
ImYLDJg4R9fn3PO/03XIiNtD7p1j3Vhjos1XqaYgKrxXk+WxbrjaBcYOPpmGDfSX
Zn/abwPvs+QAbpq1F+/OJ/sLfMogKmEvUREResZJTUueY3firWxoOd1pQb9pcASL
i+3bCz8KS6E4MNRNsMM/Huuh8i9Ti650KJ1iozryZD4C6iNLWlf7IAmSBwU+9z3u
TAa11R8qvcD0gs7apCOmU5bx8GAd+12N6ieCZW09C5ZPXYVnR6/V37SvqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMwSmIoo21NVtKkC72r/ShJu4XYMB8GA1UdIwQY
MBaAFOuWCYLoK/nph1RFAJMI3n7L0FxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81OWE3MmYtMDlhNC00MWM1LTgwYjct
Y2FkZmNlZjBiNWM0LzEvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81OWE3MmYtMDlhNC00MWM1LTgwYjctY2FkZmNlZjBiNWM0
LzEvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYVIoBOc
xIxbtq+UQy9gHfAEfgtJyO1ojpcSNHCewN6/CC4xuBd7nYDMVMyXYPYqBGa1XSPx
He/mqQm3V3ml6S6tDs4AQblyKVHpTbf6FP+pGfdZ90wSjNwI84cMK0ObaiE8aQEg
0zsaFfeudVvvvQMQx3ix8SXLuAuHJOJAC3OagRHSvigOvdR1SClxZxPCUaNBVuA1
Y56PPZso4h81xIqBihMK0AkDBKeaqHqVIkTyDSP2W4+rHP1Lf/MWIF7xQeCFa47a
W4fvNu0TFlNC903gn9WjkXjfbTQX0czdLUGervn/ngOdYv9FJqfY4Guh4h4uEFls
uz4JkeRu30hREw==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:39 2026 by rpki-client