Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File:                     DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier:          rALyBNWxRO7zeDo4DqHkMVU9nEypG4lvUtiwhM0A6bM=
Subject key identifier:   81:A4:79:8F:22:C8:B1:F8:4A:A0:64:12:52:48:27:DB:12:8B:3F:C0
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer:       /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial:       019E2F5FAA5DC274A3A8455B2B988C56999F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number:          0B5D
Signing time:             Sat 16 May 2026 06:00:58 +0000
Manifest this update:     Sat 16 May 2026 06:00:58 +0000
Manifest next update:     Sun 17 May 2026 06:00:58 +0000
Files and hashes:         1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: 8KHZ6EGNH+AL46aKlkMcTv3uKkt1ohGzWAlMixNpBF8=)
                          2: E5N49IFOZzcUudGH8Hfr0F0ywvk.roa (hash: qu/cDpuHW9hVmNW832+M9NPLYicyAqIzhTV6hHRmh3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:aa:5d:c2:74:a3:a8:45:5b:2b:98:8c:56:99:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
        Validity
            Not Before: May 16 06:00:58 2026 GMT
            Not After : May 17 06:00:58 2026 GMT
        Subject: CN=81a4798f22c8b1f84aa06412524827db128b3fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e6:06:35:2c:fe:35:bd:61:a0:b9:73:7c:4a:
                    5d:24:ba:05:ce:05:d0:44:53:da:18:5f:f4:50:f0:
                    ee:60:5c:c4:b3:ce:56:5d:9f:f2:ba:a9:b4:48:2a:
                    bb:16:84:47:d6:fa:b6:fa:70:8a:4f:d5:10:31:2b:
                    66:fd:6c:07:af:04:0e:61:b7:6a:8a:d7:9d:9d:86:
                    4f:fd:93:6a:70:c6:bb:d6:fb:c2:89:c7:bd:52:0d:
                    da:67:35:19:45:cb:e7:e4:5d:4c:2f:c4:68:11:f6:
                    25:6b:f4:a9:2d:0f:0a:4c:2c:f9:42:33:09:14:70:
                    95:d1:94:66:e8:f7:66:dc:1f:84:9b:2c:b6:c9:57:
                    96:f3:ff:b7:2e:3f:7e:a4:17:33:e3:20:b9:fc:e7:
                    97:fa:cb:b9:61:3e:e1:6a:23:cb:f0:21:38:4e:b9:
                    cf:6e:a2:37:49:00:e6:2b:14:f8:71:23:d3:2a:77:
                    fb:9c:de:ce:28:a1:2f:ce:24:14:3d:a8:f8:14:69:
                    1c:00:a2:e5:37:1b:1f:52:81:80:01:fb:87:12:fc:
                    c5:d9:f0:2b:dc:21:ed:01:17:09:70:71:21:8c:9c:
                    26:8e:fe:fa:3a:bd:d9:14:17:6a:2f:27:3e:31:43:
                    70:42:93:88:bc:8d:68:3a:4e:d0:a9:cd:e5:22:25:
                    f8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A4:79:8F:22:C8:B1:F8:4A:A0:64:12:52:48:27:DB:12:8B:3F:C0
            X509v3 Authority Key Identifier:
                keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:93:88:28:a1:4d:1f:32:a2:89:6c:4f:26:d4:40:68:1e:cb:
         39:fc:72:29:cf:04:4e:4e:dc:f1:32:e7:fa:d5:e0:ed:21:d4:
         ca:11:e1:1c:c1:7f:22:45:6a:eb:be:9d:43:44:9b:f3:04:61:
         97:f4:db:ef:d5:52:43:e2:4d:1d:5b:c2:08:1d:44:30:d9:ec:
         24:a7:09:2e:b4:03:26:e0:b0:e4:f0:ca:fc:fb:94:90:75:79:
         58:3a:09:13:8f:71:42:f5:37:fe:e2:27:ec:14:cc:fb:a5:d1:
         4f:f0:97:a3:0d:50:6a:22:09:20:a3:1d:74:7f:0f:c0:ac:7a:
         d7:07:c1:9f:8f:a2:1a:85:02:8b:95:78:a7:f6:e0:db:dd:f6:
         7a:db:29:28:48:41:52:42:91:77:1f:0a:52:76:1d:8a:33:c6:
         02:e0:dd:a9:76:e1:c1:80:c9:4f:fb:26:19:b6:b9:56:c5:2e:
         77:da:f8:2d:e8:ad:10:be:2a:f0:cb:94:83:0b:e1:6a:f7:98:
         9e:ed:23:ca:91:11:77:ce:ad:96:34:e0:b8:c0:db:91:7f:73:
         e4:50:aa:0f:7f:f7:f1:91:1f:65:8f:0e:a3:72:ba:17:1a:20:
         b5:b4:6e:4a:2d:f7:e9:1f:30:cc:fd:6a:42:14:4a:94:6b:97:
         6a:ce:c8:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vX6pdwnSjqEVbK5iMVpmfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMjZkNDVmZDU2OTIxZDM0NjlkMTljNDc1NzJmMjc1Zjlk
NTUyNDIwHhcNMjYwNTE2MDYwMDU4WhcNMjYwNTE3MDYwMDU4WjAzMTEwLwYDVQQD
Eyg4MWE0Nzk4ZjIyYzhiMWY4NGFhMDY0MTI1MjQ4MjdkYjEyOGIzZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeYGNSz+Nb1hoLlzfEpdJLoFzgXQ
RFPaGF/0UPDuYFzEs85WXZ/yuqm0SCq7FoRH1vq2+nCKT9UQMStm/WwHrwQOYbdq
itednYZP/ZNqcMa71vvCice9Ug3aZzUZRcvn5F1ML8RoEfYla/SpLQ8KTCz5QjMJ
FHCV0ZRm6Pdm3B+Emyy2yVeW8/+3Lj9+pBcz4yC5/OeX+su5YT7haiPL8CE4TrnP
bqI3SQDmKxT4cSPTKnf7nN7OKKEvziQUPaj4FGkcAKLlNxsfUoGAAfuHEvzF2fAr
3CHtARcJcHEhjJwmjv76Or3ZFBdqLyc+MUNwQpOIvI1oOk7Qqc3lIiX4FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGkeY8iyLH4SqBkElJIJ9sSiz/AMB8GA1UdIwQY
MBaAFA4m1F/VaSHTRp0ZxHVy8nX51VJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YTFiYWEtNWY4Zi00MjBhLTkwYzQt
NjY1YTY5Y2I4OTAwLzEvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82YTFiYWEtNWY4Zi00MjBhLTkwYzQtNjY1YTY5Y2I4OTAw
LzEvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpOIKKFN
HzKiiWxPJtRAaB7LOfxyKc8ETk7c8TLn+tXg7SHUyhHhHMF/IkVq676dQ0Sb8wRh
l/Tb79VSQ+JNHVvCCB1EMNnsJKcJLrQDJuCw5PDK/PuUkHV5WDoJE49xQvU3/uIn
7BTM+6XRT/CXow1QaiIJIKMddH8PwKx61wfBn4+iGoUCi5V4p/bg2932etspKEhB
UkKRdx8KUnYdijPGAuDdqXbhwYDJT/smGba5VsUud9r4LeitEL4q8MuUgwvhaveY
nu0jypERd86tljTguMDbkX9z5FCqD3/38ZEfZY8Oo3K6FxogtbRuSi336R8wzP1q
QhRKlGuXas7IBA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:31 2026 by rpki-client