Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
File:                     bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json)
Hash identifier:          FE8H9x71pb0JIkn5CGZWNqssHNKoRT2kiy2YxWIZ9ao=
Subject key identifier:   6F:66:32:75:ED:24:C4:2F:20:6F:39:BE:FF:45:EC:0D:4F:FB:4D:E6
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Certificate issuer:       /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial:       019E1CEB6EDD17FF77240EBC84198FB807F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
Manifest number:          181F
Signing time:             Tue 12 May 2026 16:00:51 +0000
Manifest this update:     Tue 12 May 2026 16:00:51 +0000
Manifest next update:     Wed 13 May 2026 16:00:51 +0000
Files and hashes:         1: 9xgiRaoDHZpfEWCuWGLVozZH1gk.roa (hash: v8wEhG7uE5X+Pic34dsR8NNSQFk/2P4s8T0Y6bprmWQ=)
                          2: Aq5wESOUolAkTosvnE7ETStDfyU.roa (hash: yfEBzyPkUQCnnTcx22tGTzIIsK+Ma5c/+X+c6Yry/fU=)
                          3: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=)
                          4: BGTIebFN8Np0NsQtF_avGDoUny4.roa (hash: NPCQmuapy/fWkxHdwPSPdnEK1QY4KGIX45+Q8l7yby0=)
                          5: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=)
                          6: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=)
                          7: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=)
                          8: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=)
                          9: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=)
                          10: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=)
                          11: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=)
                          12: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: kAtzIicrafeUrX07GEBqk53BFCGAjvP2cCXAP1dC5fw=)
                          13: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=)
                          14: iuRgfu21PTYsbZmCXChlKNQrvwY.roa (hash: bBVTlacYWROGx5pT6t29eLcMFfwpCwecFakjUlLqFkQ=)
                          15: lQ5I1RQhBLo7oEEMwItGQL1D4co.roa (hash: JsbTSCE7CBEzvAaKOwDU8edPgIOKQAAWgiGQC/UlKpg=)
                          16: sxM1hppwo8IA3sUIRWSmuh2DulM.roa (hash: d0rCe3Bx8Ky5qROI9ax/UnPDyR2WjD1W4X7Y8WVQZls=)
                          17: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=)
                          18: uPXsHfVse8rlnzUbj2UoRMWOq8g.roa (hash: SCLabx4GN4AnmWRb1f32gO5dZZyqhDCGfjhfHlPlGlM=)
                          19: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=)
                          20: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:6e:dd:17:ff:77:24:0e:bc:84:19:8f:b8:07:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
        Validity
            Not Before: May 12 16:00:51 2026 GMT
            Not After : May 13 16:00:51 2026 GMT
        Subject: CN=6f663275ed24c42f206f39beff45ec0d4ffb4de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8a:99:29:30:9b:f3:85:6b:8c:a8:3c:87:2e:
                    7f:8e:fc:27:f0:59:66:7d:78:f1:ab:0a:91:b9:a4:
                    20:ce:cd:5e:e3:0d:7b:50:f6:c5:03:8d:33:a9:cf:
                    bf:93:66:91:cb:76:21:7d:2d:e4:bb:89:cb:6f:ae:
                    2b:74:b2:92:64:e3:03:63:e9:eb:30:b7:2e:d8:3f:
                    ac:79:c7:c9:0c:b9:72:42:ba:b0:47:28:6e:08:7f:
                    39:aa:a0:c6:13:57:a9:50:ca:e7:ac:d9:e2:05:e0:
                    6c:47:b5:32:ee:d6:8f:ca:1c:ab:e4:1e:55:e6:74:
                    29:64:fa:77:ad:a9:85:3c:ba:6c:b2:68:7f:60:c4:
                    a9:8d:1e:1b:5f:9e:a0:e6:e8:17:d2:7b:a9:49:4e:
                    4f:60:34:8f:40:d5:82:e2:d7:a4:a6:2c:e1:e0:25:
                    42:24:f8:82:a2:b8:ab:ad:05:58:f9:b0:0d:a6:54:
                    58:37:86:9f:46:0b:78:b2:0c:ae:aa:b6:1a:d1:9e:
                    3b:8d:cf:8e:d6:34:c7:84:7f:f3:cf:c2:07:e7:c4:
                    7d:db:e8:54:ce:37:c2:3d:ad:d9:ff:87:72:31:14:
                    e4:de:a5:0f:c7:98:d5:3e:e7:2a:41:d0:94:5c:69:
                    c7:eb:5d:b5:2f:79:fa:35:e9:18:24:95:72:f0:75:
                    d5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:66:32:75:ED:24:C4:2F:20:6F:39:BE:FF:45:EC:0D:4F:FB:4D:E6
            X509v3 Authority Key Identifier:
                keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8c:ae:c9:81:07:23:bd:2b:0e:bf:e3:43:ae:57:92:02:6b:
         b1:fe:20:a1:35:c7:8e:14:97:5f:4b:7e:b6:94:da:e3:75:04:
         8e:81:8c:52:51:0c:95:01:59:99:13:0c:a4:37:00:30:2d:59:
         88:d6:24:6f:b2:3a:f4:56:73:11:51:d6:0a:a7:95:a3:ca:ff:
         57:ee:be:1f:9d:a5:2a:2f:9f:d2:0c:04:ca:34:ff:54:50:ea:
         aa:a6:1f:a9:64:b9:b1:37:26:bf:6c:de:67:9f:c7:6f:14:42:
         ea:40:5e:3a:93:8c:47:d6:e5:67:a2:5c:05:46:ac:f0:c9:0d:
         f5:8f:3e:c5:2d:82:2d:63:b7:74:43:3c:c2:a5:68:f5:30:7f:
         60:b4:ed:2d:86:4c:21:d2:12:c8:5a:52:0c:a5:cd:61:5c:84:
         e9:a1:f8:16:e2:27:bf:63:5c:54:d8:c1:64:64:d6:c9:20:12:
         ac:3b:eb:af:18:e6:96:cd:b3:a7:27:52:f8:57:2b:9f:1f:e4:
         0a:69:be:97:c1:9d:24:58:ee:77:44:68:a5:69:ee:09:63:62:
         0b:3b:03:97:5f:71:b0:fa:d5:2f:2c:ff:53:e5:4b:68:8e:7c:
         ba:98:de:05:98:90:69:0b:f1:2d:b9:15:62:f6:12:80:2d:8c:
         68:ea:fd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:22:24 2026 by rpki-client