Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
File:                     2gszzdt5m3vPXT3OAE_bqMPoZP8.mft (raw, json)
Hash identifier:          UiletNoqu36yufaQ5CGoVX6WNuoZaaRkNK6ZztEHPiM=
Subject key identifier:   FC:CB:4E:64:49:5D:09:61:C2:2D:19:DE:98:0A:2E:F4:14:FE:D9:40
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Certificate issuer:       /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial:       019E314DE0D568A48ACB18FC2F0F326A6680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
Manifest number:          0F7B
Signing time:             Sat 16 May 2026 15:00:47 +0000
Manifest this update:     Sat 16 May 2026 15:00:47 +0000
Manifest next update:     Sun 17 May 2026 15:00:47 +0000
Files and hashes:         1: 2gszzdt5m3vPXT3OAE_bqMPoZP8.crl (hash: rJUYQgYRhI6aNbQJYmqGIFQW5UMwPV8J21kJWOo+E0I=)
                          2: 5xg54AVWW6Xi4BJUknnWOr4xprs.roa (hash: dLKpdsBaGDiqHhkCmoQj4IsxNnhuKkpCJzE6NQ8QV10=)
                          3: 7NjBGXkoqrpJtik6hyWam_91fPM.roa (hash: Cd/yxor3wZg6xcWw81ojOZAbyI0L65eF/W7E8e19B7M=)
                          4: bb-V_rGf3B0QiaioeNxnU56I040.roa (hash: 4nxBn8kzAZLq0QSt7O7jxqlGii0yEkqJb0VFpRa6+jU=)
                          5: tpwdEfzMyWWx6VArR0hVjMo-3q8.roa (hash: UHSQrSMMwMC/F3MwzFHNY7G8M39N7oYGsjXC+3amyxw=)
                          6: xC0dGwS2hqJMFjJkASOl38eG4CQ.roa (hash: o1etJOQuElRRT8k2/A1UeIK9/USuVlD2nFRLc2q3+y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4d:e0:d5:68:a4:8a:cb:18:fc:2f:0f:32:6a:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
        Validity
            Not Before: May 16 15:00:47 2026 GMT
            Not After : May 17 15:00:47 2026 GMT
        Subject: CN=fccb4e64495d0961c22d19de980a2ef414fed940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:05:58:80:11:7f:18:d6:cb:21:22:5a:e9:b3:
                    cf:30:25:9d:4b:8a:8a:d3:1d:29:fc:1a:44:e7:ea:
                    a5:e7:9d:28:df:3e:5c:2d:19:54:45:68:e2:85:80:
                    39:ca:8d:d7:6e:97:bc:ef:b1:77:13:d1:4f:ae:d2:
                    1f:8f:e1:1c:75:e4:e9:2c:ce:e0:44:63:ef:6a:f1:
                    5c:d1:68:14:59:11:be:d8:c0:dc:25:a6:9a:ab:89:
                    94:23:55:c8:5d:ef:6f:f1:3b:ab:3b:56:b5:f0:45:
                    5a:8d:a8:ca:e4:c4:2b:ef:a4:a6:63:47:61:67:97:
                    3f:7f:c0:6a:44:10:d0:03:92:c4:64:75:f8:e9:47:
                    61:ff:52:17:70:7c:07:5c:d7:e1:98:c9:4b:72:29:
                    19:ec:11:d0:b8:5a:b9:78:88:40:43:89:b2:ec:73:
                    d9:86:53:10:a2:81:22:aa:77:0d:19:19:67:d1:09:
                    0a:33:3b:86:6f:4b:65:2f:b8:13:d1:1f:a0:b1:e1:
                    11:b8:25:4a:b6:6d:4a:c0:51:60:3c:c9:32:76:cb:
                    0f:78:e9:64:75:3a:21:18:9e:fc:17:49:ab:8b:71:
                    b2:c5:bb:e7:2b:a1:a2:75:9b:87:4f:59:db:06:24:
                    7a:3c:e8:38:bc:b2:a1:9d:72:a8:b0:12:44:cc:aa:
                    f8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CB:4E:64:49:5D:09:61:C2:2D:19:DE:98:0A:2E:F4:14:FE:D9:40
            X509v3 Authority Key Identifier:
                keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e2:ea:33:bc:ba:d5:46:03:45:be:94:3c:3f:ad:2d:0b:1b:
         8f:ba:a6:a6:8a:52:0a:c6:aa:1e:d0:44:9f:ae:6a:a9:10:e3:
         e6:20:33:67:04:fa:b2:49:d5:01:6b:16:e1:0c:01:86:09:46:
         71:9d:a7:7d:86:bd:35:86:c9:38:1b:40:cf:cf:65:70:56:3e:
         61:0d:46:a0:d9:22:09:01:f1:90:44:84:ac:3a:88:90:ae:fc:
         aa:25:bf:34:ad:28:36:ee:d3:88:af:de:90:a0:b5:8b:f1:16:
         6f:4e:08:cc:11:62:3f:53:5b:5d:df:ff:4a:4d:d3:32:11:d8:
         35:e2:13:4a:31:de:bf:ce:c5:d7:31:f9:1c:3f:40:e1:34:58:
         0d:19:89:68:b9:84:05:18:44:1c:f3:8c:31:bb:e7:eb:a8:73:
         98:75:41:6b:10:26:5a:c5:ba:3d:84:14:23:42:3e:61:f0:ea:
         ca:6a:6c:72:1c:e2:3c:af:ec:b7:d6:f7:4d:fc:77:a7:16:a9:
         84:91:a8:8b:96:5d:65:d9:bb:87:94:92:5b:36:f4:c0:c5:20:
         fb:0a:43:99:6c:5a:b4:13:4a:02:4c:53:40:99:63:b9:33:09:
         86:1b:77:fb:f9:32:18:94:36:3b:bf:19:50:29:d2:ab:5b:03:
         8a:bc:8e:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTeDVaKSKyxj8Lw8yamaAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGIzM2NkZGI3OTliN2JjZjVkM2RjZTAwNGZkYmE4YzNl
ODY0ZmYwHhcNMjYwNTE2MTUwMDQ3WhcNMjYwNTE3MTUwMDQ3WjAzMTEwLwYDVQQD
EyhmY2NiNGU2NDQ5NWQwOTYxYzIyZDE5ZGU5ODBhMmVmNDE0ZmVkOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AVYgBF/GNbLISJa6bPPMCWdS4qK
0x0p/BpE5+ql550o3z5cLRlURWjihYA5yo3Xbpe877F3E9FPrtIfj+EcdeTpLM7g
RGPvavFc0WgUWRG+2MDcJaaaq4mUI1XIXe9v8TurO1a18EVajajK5MQr76SmY0dh
Z5c/f8BqRBDQA5LEZHX46Udh/1IXcHwHXNfhmMlLcikZ7BHQuFq5eIhAQ4my7HPZ
hlMQooEiqncNGRln0QkKMzuGb0tlL7gT0R+gseERuCVKtm1KwFFgPMkydssPeOlk
dTohGJ78F0mri3GyxbvnK6GidZuHT1nbBiR6POg4vLKhnXKosBJEzKr4awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzLTmRJXQlhwi0Z3pgKLvQU/tlAMB8GA1UdIwQY
MBaAFNoLM83beZt7z109zgBP26jD6GT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wMzJkOGItNDg4MS00NmZhLWI2NzQt
NzczM2JkODg4ZTI4LzEvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wMzJkOGItNDg4MS00NmZhLWI2NzQtNzczM2JkODg4ZTI4
LzEvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOLqM7y6
1UYDRb6UPD+tLQsbj7qmpopSCsaqHtBEn65qqRDj5iAzZwT6sknVAWsW4QwBhglG
cZ2nfYa9NYbJOBtAz89lcFY+YQ1GoNkiCQHxkESErDqIkK78qiW/NK0oNu7TiK/e
kKC1i/EWb04IzBFiP1NbXd//Sk3TMhHYNeITSjHev87F1zH5HD9A4TRYDRmJaLmE
BRhEHPOMMbvn66hzmHVBaxAmWsW6PYQUI0I+YfDqympschziPK/st9b3Tfx3pxap
hJGoi5ZdZdm7h5SSWzb0wMUg+wpDmWxatBNKAkxTQJljuTMJhht3+/kyGJQ2O78Z
UCnSq1sDiryOMg==
-----END CERTIFICATE-----
Generated at Sat May 16 19:29:56 2026 by rpki-client