Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
File:                     4Xa6TSueAPu_jsQzEekblUqqU24.mft (raw, json)
Hash identifier:          WrD3FrY9cr7eR1EPgxqSu0NS3D2u+HAdaRBvC7dZ8Tc=
Subject key identifier:   49:32:B0:22:89:1D:1B:87:D0:D9:AE:65:FB:1F:AA:11:9F:B0:4D:9A
Authority key identifier: E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
Certificate issuer:       /CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Certificate serial:       019E30E0811ACB1B764E85B772388630EC40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
Manifest number:          086F
Signing time:             Sat 16 May 2026 13:01:19 +0000
Manifest this update:     Sat 16 May 2026 13:01:19 +0000
Manifest next update:     Sun 17 May 2026 13:01:19 +0000
Files and hashes:         1: 4Xa6TSueAPu_jsQzEekblUqqU24.crl (hash: Sc1fsAXgbgrnmao/areeThWm+ckaXN37z0Gz4yEwgGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:81:1a:cb:1b:76:4e:85:b7:72:38:86:30:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
        Validity
            Not Before: May 16 13:01:19 2026 GMT
            Not After : May 17 13:01:19 2026 GMT
        Subject: CN=4932b022891d1b87d0d9ae65fb1faa119fb04d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:82:32:b9:0a:bc:43:14:a3:5d:aa:49:07:be:
                    06:6e:19:52:39:55:66:68:5d:06:dd:9b:ed:58:f2:
                    50:73:fe:1f:ff:11:85:aa:34:e7:55:36:d3:af:d3:
                    36:41:5f:b5:e4:e3:54:9b:92:1e:4f:2e:3f:7b:17:
                    4d:0b:cc:5b:54:80:0a:9d:e0:e3:db:e4:2c:b9:5b:
                    e5:b5:7d:27:0b:d1:c3:a5:0f:5b:ef:50:c5:a0:2c:
                    20:1b:0d:47:5e:7f:57:69:5b:10:25:74:3d:55:54:
                    ff:40:7e:69:16:38:38:cd:e2:5d:4e:ae:e2:4e:37:
                    dd:8a:c5:f1:b1:88:5f:9b:b5:6c:31:74:73:a6:4c:
                    0a:f5:e3:31:7b:0d:a4:4b:0c:bf:89:7d:64:a2:61:
                    8c:4c:e6:22:0c:02:67:fa:14:fd:d2:08:54:f7:5f:
                    a6:a2:28:95:47:b1:cd:62:b5:1a:54:3a:ef:14:6f:
                    d8:41:68:1c:c6:89:99:6d:71:d7:93:1e:86:9f:91:
                    ad:5f:3b:f0:fc:98:d0:33:ea:72:75:04:9d:58:2b:
                    57:f2:62:a2:f9:08:1f:94:d7:76:2c:61:4b:61:65:
                    8a:7a:e6:28:32:52:31:16:41:65:44:a3:69:ab:48:
                    50:87:39:98:e7:d9:9d:fd:ec:79:6d:16:24:01:75:
                    d1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:32:B0:22:89:1D:1B:87:D0:D9:AE:65:FB:1F:AA:11:9F:B0:4D:9A
            X509v3 Authority Key Identifier:
                keyid:E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:26:27:fb:45:bc:8a:b8:df:35:8d:ca:98:dc:3b:75:c4:f9:
         0c:db:8d:eb:fc:22:51:01:bd:b1:3f:5f:de:ca:51:97:e0:a7:
         f5:7c:03:bf:c6:68:cf:21:8e:98:f2:10:9c:73:ba:23:cf:45:
         5b:df:e7:1c:23:08:7c:37:a6:b3:db:23:a6:c3:c7:03:d8:a7:
         e5:f1:33:4d:21:6b:48:65:e1:33:47:e1:83:8b:2b:0e:06:b5:
         b4:4d:7e:d5:e5:78:32:ac:4d:62:4c:36:71:c8:6d:a4:42:97:
         aa:0d:fd:3a:57:ca:b3:ea:ec:3f:fb:72:ef:94:73:43:76:76:
         72:40:90:8e:b2:d2:0a:c1:f7:f7:eb:2c:fb:18:4c:f7:e3:b3:
         91:51:e0:b6:5a:9f:02:93:77:99:e6:8a:28:6d:d2:ab:89:c1:
         f4:0b:2f:6b:b1:89:24:0b:97:34:3d:a8:0d:46:b5:92:25:8c:
         e1:12:ea:89:02:2e:ec:3c:03:47:20:47:89:5b:4e:cf:14:83:
         10:64:99:f5:06:7b:9f:fc:e3:56:bd:e9:9e:67:ff:4e:52:f7:
         6a:e7:dc:ad:ea:2e:55:8d:0e:59:9b:5a:0a:ab:b9:d5:57:db:
         af:1e:06:ed:c8:c8:17:c9:04:35:e3:a3:f8:8c:39:1c:b3:8a:
         d4:3f:98:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4IEayxt2ToW3cjiGMOxAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNzZiYTRkMmI5ZTAwZmJiZjhlYzQzMzExZTkxYjk1NGFh
YTUzNmUwHhcNMjYwNTE2MTMwMTE5WhcNMjYwNTE3MTMwMTE5WjAzMTEwLwYDVQQD
Eyg0OTMyYjAyMjg5MWQxYjg3ZDBkOWFlNjVmYjFmYWExMTlmYjA0ZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34IyuQq8QxSjXapJB74GbhlSOVVm
aF0G3ZvtWPJQc/4f/xGFqjTnVTbTr9M2QV+15ONUm5IeTy4/exdNC8xbVIAKneDj
2+QsuVvltX0nC9HDpQ9b71DFoCwgGw1HXn9XaVsQJXQ9VVT/QH5pFjg4zeJdTq7i
TjfdisXxsYhfm7VsMXRzpkwK9eMxew2kSwy/iX1komGMTOYiDAJn+hT90ghU91+m
oiiVR7HNYrUaVDrvFG/YQWgcxomZbXHXkx6Gn5GtXzvw/JjQM+pydQSdWCtX8mKi
+QgflNd2LGFLYWWKeuYoMlIxFkFlRKNpq0hQhzmY59md/ex5bRYkAXXRMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkysCKJHRuH0NmuZfsfqhGfsE2aMB8GA1UdIwQY
MBaAFOF2uk0rngD7v47EMxHpG5VKqlNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFhhNlRTdWVBUHVfanNRekVla2JsVXFxVTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mY2JmZGQtMGI3OC00MDQwLTlhOTEt
ZDc4ZDhhYjZlNjY4LzEvNFhhNlRTdWVBUHVfanNRekVla2JsVXFxVTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9mY2JmZGQtMGI3OC00MDQwLTlhOTEtZDc4ZDhhYjZlNjY4
LzEvNFhhNlRTdWVBUHVfanNRekVla2JsVXFxVTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICYn+0W8
irjfNY3KmNw7dcT5DNuN6/wiUQG9sT9f3spRl+Cn9XwDv8ZozyGOmPIQnHO6I89F
W9/nHCMIfDems9sjpsPHA9in5fEzTSFrSGXhM0fhg4srDga1tE1+1eV4MqxNYkw2
cchtpEKXqg39OlfKs+rsP/ty75RzQ3Z2ckCQjrLSCsH39+ss+xhM9+OzkVHgtlqf
ApN3meaKKG3Sq4nB9Asva7GJJAuXND2oDUa1kiWM4RLqiQIu7DwDRyBHiVtOzxSD
EGSZ9QZ7n/zjVr3pnmf/TlL3aufcreouVY0OWZtaCqu51Vfbrx4G7cjIF8kENeOj
+Iw5HLOK1D+YTg==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:39 2026 by rpki-client