Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
File:                     L6XwX5ngJQBApDHSvtyrf4ko6bI.mft (raw, json)
Hash identifier:          MPEI1WzDVqqLSFxJ+PNXUP8w93bbdGvlMudFGYqj8xM=
Subject key identifier:   B2:A9:F7:49:90:4D:40:A2:99:0E:D1:C7:2D:1D:9E:F8:22:A1:9C:4A
Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
Certificate issuer:       /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Certificate serial:       019E326077B69296D9F492692C49BB6445BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
Manifest number:          1879
Signing time:             Sat 16 May 2026 20:00:43 +0000
Manifest this update:     Sat 16 May 2026 20:00:43 +0000
Manifest next update:     Sun 17 May 2026 20:00:43 +0000
Files and hashes:         1: 3Td8_KpnCVMIwy0JMauQgrbBuQQ.roa (hash: ABEQh5NopDc0Mx4tEJaetYGzLjPCdMdfeYzfxLmWlSg=)
                          2: L6XwX5ngJQBApDHSvtyrf4ko6bI.crl (hash: 8EukL+j+sOcLX/Cm0LGxbMU+2RZMcrovcmZBSiQxJqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:60:77:b6:92:96:d9:f4:92:69:2c:49:bb:64:45:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
        Validity
            Not Before: May 16 20:00:43 2026 GMT
            Not After : May 17 20:00:43 2026 GMT
        Subject: CN=b2a9f749904d40a2990ed1c72d1d9ef822a19c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:50:cc:21:23:12:14:eb:7d:7d:96:d6:d4:54:
                    50:f4:6a:8c:f7:6d:b5:a6:a0:c4:e4:e8:6e:8d:3f:
                    1a:03:90:3b:fb:39:03:2d:f8:5c:61:9a:22:6f:f7:
                    37:ea:8b:59:f7:ae:71:2f:d4:3e:75:7f:fb:0f:0b:
                    ed:37:d5:54:97:02:46:05:f8:e0:e8:17:a5:ac:c0:
                    82:80:8e:b9:4a:26:df:34:99:c3:f5:9f:86:5c:98:
                    67:59:7d:b6:96:47:df:81:ce:17:72:c4:61:40:58:
                    c9:9b:82:51:38:3b:20:6f:87:4a:a9:07:70:c3:7b:
                    67:6d:84:df:96:1e:a3:3d:2c:6e:5e:e0:f6:0d:6a:
                    d7:14:2b:71:a7:7a:8f:28:eb:bc:25:ad:18:63:a1:
                    cd:4f:c4:fb:43:40:1f:a2:63:4d:60:99:58:b1:cf:
                    bc:49:a6:c0:1c:ac:4b:85:e1:32:7d:e6:da:66:bd:
                    64:da:0b:15:d9:51:9a:e5:c9:fc:88:89:36:b7:e3:
                    8b:a4:46:35:60:ee:40:b2:00:35:10:db:fb:2d:53:
                    fc:98:e5:cf:80:47:fd:a8:e7:ce:ef:06:fb:cb:47:
                    7e:7a:2c:df:1b:25:ba:5e:52:7d:55:af:40:b6:bb:
                    da:9b:96:4e:58:7f:48:93:71:32:05:c8:21:80:3a:
                    22:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A9:F7:49:90:4D:40:A2:99:0E:D1:C7:2D:1D:9E:F8:22:A1:9C:4A
            X509v3 Authority Key Identifier:
                keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:ce:7b:06:87:94:21:57:27:e0:3e:27:8c:e3:c0:f9:6a:6e:
         12:cc:98:ca:ba:06:48:a4:d9:09:e4:da:07:f9:26:4b:6b:5d:
         69:be:5a:78:84:c2:62:e3:05:ca:4f:c2:2d:34:0c:9f:86:60:
         97:cf:9b:b2:3c:1c:39:54:85:7f:2a:d7:7e:29:cb:16:e6:b0:
         c3:05:0c:2f:23:72:5c:60:67:4d:2a:0e:ba:d8:71:8b:08:51:
         e1:a1:b7:25:dc:0b:9a:09:2b:38:10:ce:eb:07:49:ac:3e:19:
         fa:b6:3d:46:fc:5e:3e:c5:7e:dd:b8:25:1e:01:4b:9d:c7:47:
         e1:2d:f6:e4:bd:0f:da:75:45:ab:c4:b4:45:08:36:a0:56:4e:
         23:55:d6:0a:34:dc:7b:81:a4:38:85:ca:13:de:d9:a7:1e:cb:
         71:cc:68:8e:9a:e5:b6:03:46:7e:3b:5f:e3:af:ee:14:64:56:
         54:79:3e:ff:99:1e:b3:ba:e0:fb:11:ea:10:bb:65:31:4b:4a:
         63:7c:49:0d:a7:28:a3:5a:13:0f:cd:43:da:76:ce:64:87:c3:
         09:b9:3f:2a:b9:71:11:92:c5:43:dc:c2:85:b8:ba:68:11:fc:
         29:90:d3:2a:8a:f1:00:35:ec:74:a9:72:11:68:19:1c:41:69:
         0c:03:65:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yYHe2kpbZ9JJpLEm7ZEW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTVmMDVmOTllMDI1MDA0MGE0MzFkMmJlZGNhYjdmODky
OGU5YjIwHhcNMjYwNTE2MjAwMDQzWhcNMjYwNTE3MjAwMDQzWjAzMTEwLwYDVQQD
EyhiMmE5Zjc0OTkwNGQ0MGEyOTkwZWQxYzcyZDFkOWVmODIyYTE5YzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FDMISMSFOt9fZbW1FRQ9GqM9221
pqDE5OhujT8aA5A7+zkDLfhcYZoib/c36otZ965xL9Q+dX/7DwvtN9VUlwJGBfjg
6BelrMCCgI65SibfNJnD9Z+GXJhnWX22lkffgc4XcsRhQFjJm4JRODsgb4dKqQdw
w3tnbYTflh6jPSxuXuD2DWrXFCtxp3qPKOu8Ja0YY6HNT8T7Q0AfomNNYJlYsc+8
SabAHKxLheEyfebaZr1k2gsV2VGa5cn8iIk2t+OLpEY1YO5AsgA1ENv7LVP8mOXP
gEf9qOfO7wb7y0d+eizfGyW6XlJ9Va9Atrvam5ZOWH9Ik3EyBcghgDoiFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKp90mQTUCimQ7Rxy0dnvgioZxKMB8GA1UdIwQY
MBaAFC+l8F+Z4CUAQKQx0r7cq3+JKOmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYzA2YmQtZTgzNC00MDVmLThjMzMt
OWU1ZjkwNTM4MzM2LzEvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kYzA2YmQtZTgzNC00MDVmLThjMzMtOWU1ZjkwNTM4MzM2
LzEvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4857BoeU
IVcn4D4njOPA+WpuEsyYyroGSKTZCeTaB/kmS2tdab5aeITCYuMFyk/CLTQMn4Zg
l8+bsjwcOVSFfyrXfinLFuawwwUMLyNyXGBnTSoOuthxiwhR4aG3JdwLmgkrOBDO
6wdJrD4Z+rY9RvxePsV+3bglHgFLncdH4S325L0P2nVFq8S0RQg2oFZOI1XWCjTc
e4GkOIXKE97Zpx7LccxojprltgNGfjtf46/uFGRWVHk+/5kes7rg+xHqELtlMUtK
Y3xJDacoo1oTD81D2nbOZIfDCbk/KrlxEZLFQ9zChbi6aBH8KZDTKorxADXsdKly
EWgZHEFpDANluw==
-----END CERTIFICATE-----
Generated at Sat May 16 23:28:38 2026 by rpki-client