Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
File:                     ACY1rIzpE_p8zV123YYuJIxxy_M.mft (raw, json)
Hash identifier:          mfIrVjsTysyKJBxY21oZ+P4io8CydZ7UVp1EdWDnrd0=
Subject key identifier:   BD:70:4C:E6:68:C3:71:BC:2F:6E:42:E9:DC:41:57:D3:2B:C1:77:F9
Authority key identifier: 00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
Certificate issuer:       /CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Certificate serial:       019E3004E21A9EDBD976A4DBD52F958BB5CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
Manifest number:          0880
Signing time:             Sat 16 May 2026 09:01:26 +0000
Manifest this update:     Sat 16 May 2026 09:01:26 +0000
Manifest next update:     Sun 17 May 2026 09:01:26 +0000
Files and hashes:         1: ACY1rIzpE_p8zV123YYuJIxxy_M.crl (hash: hL3ZbGVewlo5I2ywv9zoNgiPw4Q5WqVWCgRoYp1PqWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:e2:1a:9e:db:d9:76:a4:db:d5:2f:95:8b:b5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
        Validity
            Not Before: May 16 09:01:26 2026 GMT
            Not After : May 17 09:01:26 2026 GMT
        Subject: CN=bd704ce668c371bc2f6e42e9dc4157d32bc177f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:89:fd:c4:e2:29:8e:d9:70:cf:e7:1e:a8:d6:
                    92:34:8e:ba:2e:ed:78:3f:33:3b:24:2e:6a:29:d4:
                    66:04:fe:4d:5e:a0:f9:9e:94:ca:8e:dd:84:e3:43:
                    63:07:c9:2f:62:67:f8:2e:7a:37:d5:1d:07:c8:09:
                    92:da:26:05:fd:9f:e8:90:8d:ad:82:83:f1:13:2e:
                    8f:95:60:b2:a8:da:c9:fa:21:46:ba:8c:60:02:71:
                    51:9c:7b:d7:2b:ff:28:89:94:a5:00:3c:c7:6c:c8:
                    1e:6e:dc:90:83:bf:58:54:c5:b6:f8:e3:77:47:74:
                    d7:b7:12:07:45:25:e3:2a:74:26:00:19:2e:45:14:
                    e8:00:73:05:da:a3:ce:22:17:ba:71:c4:26:db:50:
                    2d:da:d5:f8:ed:21:86:53:ff:35:a1:6d:d0:9e:3a:
                    57:32:69:50:71:1f:0b:03:f4:cc:21:39:c3:9f:c0:
                    7a:2f:95:74:19:a8:44:ff:95:06:75:57:57:c3:cb:
                    5e:e6:c0:6a:af:00:22:e9:f2:2b:10:af:05:43:59:
                    0b:81:93:b4:a7:14:df:76:5d:d4:69:47:dd:76:a6:
                    72:c9:46:cd:5f:7d:49:35:77:9e:17:d2:0a:9f:65:
                    d3:98:79:e3:81:d8:61:19:05:72:29:be:f2:9d:b5:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:70:4C:E6:68:C3:71:BC:2F:6E:42:E9:DC:41:57:D3:2B:C1:77:F9
            X509v3 Authority Key Identifier:
                keyid:00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:51:13:f8:d1:49:e1:78:bb:89:1b:ec:0f:15:9b:7d:21:68:
         62:c8:02:d1:18:f9:7a:14:29:f1:c6:06:ea:5a:c2:77:52:5c:
         fb:7b:12:24:19:27:2a:c1:05:80:e5:16:c1:46:02:96:57:69:
         25:97:f4:ed:3d:8b:2e:06:1f:40:21:ac:53:88:0a:97:a6:6e:
         79:96:6f:c7:ea:e4:bb:fe:2b:1d:de:f9:ee:ee:16:ea:02:d0:
         b5:cd:05:fd:01:65:5b:8d:54:86:4b:94:79:07:5f:3b:6f:88:
         27:09:16:04:d0:63:a3:8f:d6:2b:3f:8a:58:09:2f:25:ee:de:
         43:a9:cc:2f:ac:e8:a0:6a:4c:27:4f:d5:9a:f5:cb:8d:ab:11:
         b9:9a:9c:a6:8f:f8:e6:22:7f:ee:3e:c2:c4:29:4c:0b:f4:05:
         b7:1f:07:a4:4f:5f:f7:22:7f:e2:c3:d1:f6:41:f3:d5:3b:d6:
         1a:20:79:cf:79:95:19:cf:ec:ea:c8:50:29:75:5d:33:22:36:
         e9:3c:a1:e5:b2:e7:7b:fc:ab:fe:70:50:b3:41:ea:8a:91:3a:
         ab:bc:dc:58:4b:3e:c4:b6:89:a9:8a:a5:16:e7:74:6d:74:ab:
         a6:c7:6b:ae:63:a3:e0:86:11:b2:8d:fa:3d:4f:87:e1:bd:46:
         79:54:70:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBOIantvZdqTb1S+Vi7XPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjYzNWFjOGNlOTEzZmE3Y2NkNWQ3NmRkODYyZTI0OGM3
MWNiZjMwHhcNMjYwNTE2MDkwMTI2WhcNMjYwNTE3MDkwMTI2WjAzMTEwLwYDVQQD
EyhiZDcwNGNlNjY4YzM3MWJjMmY2ZTQyZTlkYzQxNTdkMzJiYzE3N2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4n9xOIpjtlwz+ceqNaSNI66Lu14
PzM7JC5qKdRmBP5NXqD5npTKjt2E40NjB8kvYmf4Lno31R0HyAmS2iYF/Z/okI2t
goPxEy6PlWCyqNrJ+iFGuoxgAnFRnHvXK/8oiZSlADzHbMgebtyQg79YVMW2+ON3
R3TXtxIHRSXjKnQmABkuRRToAHMF2qPOIhe6ccQm21At2tX47SGGU/81oW3QnjpX
MmlQcR8LA/TMITnDn8B6L5V0GahE/5UGdVdXw8te5sBqrwAi6fIrEK8FQ1kLgZO0
pxTfdl3UaUfddqZyyUbNX31JNXeeF9IKn2XTmHnjgdhhGQVyKb7ynbUiXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1wTOZow3G8L25C6dxBV9MrwXf5MB8GA1UdIwQY
MBaAFAAmNayM6RP6fM1ddt2GLiSMccvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNZMXJJenBFX3A4elYxMjNZWXVKSXh4eV9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYzBhZWUtOWUzYi00ZDIxLThiOGYt
YjRlOTE5ZjA4MjVjLzEvQUNZMXJJenBFX3A4elYxMjNZWXVKSXh4eV9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hYzBhZWUtOWUzYi00ZDIxLThiOGYtYjRlOTE5ZjA4MjVj
LzEvQUNZMXJJenBFX3A4elYxMjNZWXVKSXh4eV9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArlET+NFJ
4Xi7iRvsDxWbfSFoYsgC0Rj5ehQp8cYG6lrCd1Jc+3sSJBknKsEFgOUWwUYClldp
JZf07T2LLgYfQCGsU4gKl6ZueZZvx+rku/4rHd757u4W6gLQtc0F/QFlW41UhkuU
eQdfO2+IJwkWBNBjo4/WKz+KWAkvJe7eQ6nML6zooGpMJ0/VmvXLjasRuZqcpo/4
5iJ/7j7CxClMC/QFtx8HpE9f9yJ/4sPR9kHz1TvWGiB5z3mVGc/s6shQKXVdMyI2
6Tyh5bLne/yr/nBQs0HqipE6q7zcWEs+xLaJqYqlFud0bXSrpsdrrmOj4IYRso36
PU+H4b1GeVRwGw==
-----END CERTIFICATE-----
Generated at Sat May 16 18:40:30 2026 by rpki-client