Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File:                     1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier:          TOPGT89s61nAx+/ouFMGFMAMekFioFuqzndv2OxRFj0=
Subject key identifier:   28:74:B7:5A:CB:0A:84:2A:CD:DD:38:86:84:7D:3B:88:B3:20:C7:C8
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer:       /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial:       019E3005933F10E6158EE1C5F877EEFC0371
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number:          11EA
Signing time:             Sat 16 May 2026 09:02:12 +0000
Manifest this update:     Sat 16 May 2026 09:02:12 +0000
Manifest next update:     Sun 17 May 2026 09:02:12 +0000
Files and hashes:         1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: 0t+Lhc9u/vC+wiLSHucvLunS4jowmP2BUmLb8Tn2ajo=)
                          2: TbbaXC5Vr5TmaMd_xbm8WF6u2S0.roa (hash: +nAGfw2iTYghUOUt6Pu3fvtqpyelpRx/U3nYc4p6P9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:93:3f:10:e6:15:8e:e1:c5:f8:77:ee:fc:03:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
        Validity
            Not Before: May 16 09:02:12 2026 GMT
            Not After : May 17 09:02:12 2026 GMT
        Subject: CN=2874b75acb0a842acddd3886847d3b88b320c7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fc:38:eb:01:b5:3e:10:40:04:49:27:14:bb:
                    9a:56:c1:74:74:0c:e4:c6:44:f5:48:78:70:f8:66:
                    fb:6e:e6:ed:b2:69:f3:73:63:8f:8b:d5:62:84:42:
                    39:bb:96:fa:ba:74:f1:68:e3:78:fc:95:07:48:b2:
                    74:00:71:17:2e:7a:66:4d:43:e3:d3:9b:1b:1d:bd:
                    0b:e7:67:99:44:91:8f:96:78:14:25:e3:9d:bd:79:
                    0a:b4:42:f9:20:fa:2d:39:a2:43:f5:09:14:c8:73:
                    01:6e:71:d3:f7:88:87:da:ea:32:1d:0b:3b:11:78:
                    db:0b:fa:97:3e:b1:34:03:31:69:5c:f2:60:74:e3:
                    b6:a7:4f:d5:4a:1c:1c:fa:51:be:3d:79:df:2b:3c:
                    0d:e8:6b:77:8e:da:25:97:11:bd:ca:92:50:ef:f7:
                    b8:f6:27:aa:ad:fa:f4:12:65:82:a1:f9:13:22:ef:
                    4d:42:9f:ff:8c:a7:3a:ce:05:fd:52:e7:65:92:a6:
                    ba:58:05:ac:ce:36:e5:d8:ac:16:fd:5d:40:34:19:
                    10:aa:49:a8:18:61:87:de:17:69:ce:35:8f:6d:48:
                    1f:8b:7d:7e:1a:3a:92:6e:11:67:d6:f5:05:23:7e:
                    91:7a:1c:29:06:f1:35:ed:2c:53:fa:d3:76:25:75:
                    6b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:74:B7:5A:CB:0A:84:2A:CD:DD:38:86:84:7D:3B:88:B3:20:C7:C8
            X509v3 Authority Key Identifier:
                keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:dd:60:66:7c:cf:7b:ca:44:e5:55:cd:39:b9:3a:5c:f0:19:
         a9:dc:f1:65:7f:4b:41:0d:70:8f:4a:b8:66:e1:b8:d9:af:ca:
         3d:d7:d7:a1:a1:dd:85:0e:cc:b7:4a:17:04:7c:1a:47:2f:4e:
         0c:10:86:e9:77:2d:9a:9a:2c:eb:b4:bb:fd:ff:78:a1:5c:f7:
         e8:9b:64:82:31:62:19:55:cc:be:fa:2d:62:22:bc:ac:a0:36:
         67:2e:4e:d1:56:87:e9:ec:f1:f6:df:e0:4c:45:d6:22:31:4c:
         25:86:14:d6:23:8d:88:23:c9:35:8f:4b:38:58:8e:61:44:99:
         42:c9:f0:15:d5:90:ca:25:6a:f4:de:f4:e9:a6:85:77:30:f6:
         96:58:8e:a5:97:99:5e:5d:2a:d3:5b:d8:7b:fc:83:f1:b3:6d:
         87:d2:9f:88:71:14:fd:2e:a4:55:ad:f1:9d:fa:e2:ba:34:15:
         e0:e1:cd:d6:b9:95:cd:94:da:fd:70:01:ce:5f:e6:fc:fe:b5:
         3e:88:ff:af:d9:cc:8e:d5:f1:a3:a6:51:75:99:b6:f0:ca:ca:
         3e:bf:f7:ac:cf:47:97:5d:29:0d:74:dd:bb:ce:d6:74:83:36:
         76:2f:e4:7b:e1:e0:ec:ef:e7:00:ea:a0:79:0d:9a:f6:0e:9c:
         2c:fe:ae:0b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4wBZM/EOYVjuHF+Hfu/ANxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTBiMGYxZmRkNjQwMTRlNTA1N2I4NDhhMTlhMjM5ZTg0
OWRiZGQwHhcNMjYwNTE2MDkwMjEyWhcNMjYwNTE3MDkwMjEyWjAzMTEwLwYDVQQD
EygyODc0Yjc1YWNiMGE4NDJhY2RkZDM4ODY4NDdkM2I4OGIzMjBjN2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/w46wG1PhBABEknFLuaVsF0dAzk
xkT1SHhw+Gb7bubtsmnzc2OPi9VihEI5u5b6unTxaON4/JUHSLJ0AHEXLnpmTUPj
05sbHb0L52eZRJGPlngUJeOdvXkKtEL5IPotOaJD9QkUyHMBbnHT94iH2uoyHQs7
EXjbC/qXPrE0AzFpXPJgdOO2p0/VShwc+lG+PXnfKzwN6Gt3jtollxG9ypJQ7/e4
9ieqrfr0EmWCofkTIu9NQp//jKc6zgX9Uudlkqa6WAWszjbl2KwW/V1ANBkQqkmo
GGGH3hdpzjWPbUgfi31+GjqSbhFn1vUFI36RehwpBvE17SxT+tN2JXVrIwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCh0t1rLCoQqzd04hoR9O4izIMfIMB8GA1UdIwQY
MBaAFPugsPH91kAU5QV7hIoZojnoSdvdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02Q3c4ZjNXUUJUbEJYdUVpaG1pT2VoSjI5MC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZmQ2OTc3LThhYWUtNDg4OS1iZTZm
LWM3MTE2OTdmZDNjMy8xLzEtNkN3OGYzV1FCVGxCWHVFaWhtaU9laEoyOTAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U1L2ZkNjk3Ny04YWFlLTQ4ODktYmU2Zi1jNzExNjk3ZmQz
YzMvMS8xLTZDdzhmM1dRQlRsQlh1RWlobWlPZWhKMjkwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAft1g
ZnzPe8pE5VXNObk6XPAZqdzxZX9LQQ1wj0q4ZuG42a/KPdfXoaHdhQ7Mt0oXBHwa
Ry9ODBCG6Xctmpos67S7/f94oVz36JtkgjFiGVXMvvotYiK8rKA2Zy5O0VaH6ezx
9t/gTEXWIjFMJYYU1iONiCPJNY9LOFiOYUSZQsnwFdWQyiVq9N706aaFdzD2lliO
pZeZXl0q01vYe/yD8bNth9KfiHEU/S6kVa3xnfriujQV4OHN1rmVzZTa/XABzl/m
/P61Poj/r9nMjtXxo6ZRdZm28MrKPr/3rM9Hl10pDXTdu87WdIM2di/ke+Hg7O/n
AOqgeQ2a9g6cLP6uCw==
-----END CERTIFICATE-----
Generated at Sat May 16 18:40:26 2026 by rpki-client