Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File:                     t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier:          VRkkfXhcsR0YyLdmoAsLu37clR1HncE9UndklE7eDrk=
Subject key identifier:   61:0E:9D:7C:72:D9:11:8A:D9:84:00:6D:B2:C8:90:E2:34:71:E2:E4
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer:       /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial:       019E1D90CD0EF60DC1D961BB9AAAB581DD84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number:          0850
Signing time:             Tue 12 May 2026 19:01:29 +0000
Manifest this update:     Tue 12 May 2026 19:01:29 +0000
Manifest next update:     Wed 13 May 2026 19:01:29 +0000
Files and hashes:         1: 2zOKVHZfMm9AxAnIgk6BSVssqPo.roa (hash: UxUPcLpqbBTjs1BO/RAIL95/BplOFFKqBnWYZsn/g5c=)
                          2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: fZC02S/Fa8csOeCEUlvcuxj+zwvuKvZhbkJDLONeKIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:cd:0e:f6:0d:c1:d9:61:bb:9a:aa:b5:81:dd:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
        Validity
            Not Before: May 12 19:01:29 2026 GMT
            Not After : May 13 19:01:29 2026 GMT
        Subject: CN=610e9d7c72d9118ad984006db2c890e23471e2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cd:86:4d:2c:ee:a5:fa:d1:d6:c8:ee:f1:0b:
                    4e:67:7a:78:66:c2:68:f7:b2:01:6e:6b:c8:14:71:
                    5e:b4:3d:3a:ff:32:b5:5d:6e:93:40:78:f7:4d:44:
                    1c:ea:ee:9e:1f:d1:c9:64:7a:cd:a4:7e:bf:d5:48:
                    95:91:60:23:a4:ae:d7:43:20:0d:7c:e7:b9:a1:47:
                    de:e8:0e:26:6b:a7:b7:44:ca:c0:6e:79:bd:91:b6:
                    20:7e:02:80:d8:31:c8:ea:ea:5c:05:e2:2d:c7:86:
                    36:c2:d2:90:9b:f4:da:66:1c:4e:15:fa:b9:9b:82:
                    b8:10:33:80:12:54:6a:7f:03:f9:5f:46:89:0d:3a:
                    17:a8:4e:e8:61:60:2e:b8:48:e9:3f:9c:c7:2c:7b:
                    7c:21:9c:08:59:ce:ac:42:e3:0c:c3:8b:af:d6:66:
                    8b:b6:7b:97:0a:86:d2:a5:19:80:ba:29:03:f4:76:
                    d5:10:31:78:b5:0e:67:58:58:be:0d:8a:f7:84:5f:
                    71:6e:e6:b3:28:78:19:46:6b:fa:a7:d5:1d:a9:81:
                    b3:bf:9b:49:78:dd:b9:6b:a6:38:d0:67:4c:40:0e:
                    2a:1a:bd:fd:37:93:d0:29:38:bd:f5:28:0b:3f:a6:
                    cb:02:0f:ca:b2:78:1f:19:d3:66:93:2b:dd:ca:93:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0E:9D:7C:72:D9:11:8A:D9:84:00:6D:B2:C8:90:E2:34:71:E2:E4
            X509v3 Authority Key Identifier:
                keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e8:8b:b5:df:9c:65:96:b1:c8:c0:2f:c6:28:87:d8:1a:39:
         b4:02:29:27:9a:8f:be:96:59:fa:40:34:6e:c4:9c:45:9f:33:
         ab:f9:96:5c:11:e5:dd:4f:29:47:f4:ca:ad:4a:21:44:47:25:
         8d:5b:c7:8e:d4:8c:80:4b:63:6e:35:f0:56:fa:b0:df:64:35:
         34:44:c6:b7:93:bc:d2:9c:ae:1b:20:a6:00:e9:6c:76:3d:9b:
         e7:14:d7:b9:c5:ab:74:79:d5:47:a1:ea:ef:31:6f:16:e8:06:
         27:ce:dd:7a:1b:cd:05:a4:c8:14:83:35:44:c1:e0:2d:60:c9:
         da:b7:26:f8:50:71:2a:7b:29:4a:36:73:5f:88:9f:56:a5:5f:
         04:a2:08:58:55:e1:4e:77:d2:c1:b3:01:68:54:20:be:e0:fc:
         4b:44:a8:2c:a6:54:f1:9c:93:ec:1e:f3:8e:8f:ca:bf:54:e7:
         c2:21:cb:98:7d:cb:2a:f1:cc:ca:e2:97:9e:43:b0:ce:51:29:
         89:ae:3a:db:fc:12:7a:fb:c6:c8:1b:78:29:8b:8f:84:e9:02:
         43:c7:9a:a7:4a:60:d6:9b:0b:69:32:62:67:4b:a5:cb:46:cf:
         1b:e3:bf:aa:47:dc:40:72:3b:81:09:e5:70:d5:3e:7e:ce:81:
         13:a9:77:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkM0O9g3B2WG7mqq1gd2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OWU1ZDRmODM1ZWE4OGQ3NmI2MDI1NmUwMDM3NTQ3Y2Q5
NjgyNzkwHhcNMjYwNTEyMTkwMTI5WhcNMjYwNTEzMTkwMTI5WjAzMTEwLwYDVQQD
Eyg2MTBlOWQ3YzcyZDkxMThhZDk4NDAwNmRiMmM4OTBlMjM0NzFlMmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo82GTSzupfrR1sju8QtOZ3p4ZsJo
97IBbmvIFHFetD06/zK1XW6TQHj3TUQc6u6eH9HJZHrNpH6/1UiVkWAjpK7XQyAN
fOe5oUfe6A4ma6e3RMrAbnm9kbYgfgKA2DHI6upcBeItx4Y2wtKQm/TaZhxOFfq5
m4K4EDOAElRqfwP5X0aJDToXqE7oYWAuuEjpP5zHLHt8IZwIWc6sQuMMw4uv1maL
tnuXCobSpRmAuikD9HbVEDF4tQ5nWFi+DYr3hF9xbuazKHgZRmv6p9UdqYGzv5tJ
eN25a6Y40GdMQA4qGr39N5PQKTi99SgLP6bLAg/KsngfGdNmkyvdypMhrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEOnXxy2RGK2YQAbbLIkOI0ceLkMB8GA1UdIwQY
MBaAFLeeXU+DXqiNdrYCVuADdUfNloJ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lMzY5NGItNzdmOS00MmIwLWI1YTMt
OWI3ZDQ5YWRlZGIzLzEvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lMzY5NGItNzdmOS00MmIwLWI1YTMtOWI3ZDQ5YWRlZGIz
LzEvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+iLtd+c
ZZaxyMAvxiiH2Bo5tAIpJ5qPvpZZ+kA0bsScRZ8zq/mWXBHl3U8pR/TKrUohREcl
jVvHjtSMgEtjbjXwVvqw32Q1NETGt5O80pyuGyCmAOlsdj2b5xTXucWrdHnVR6Hq
7zFvFugGJ87dehvNBaTIFIM1RMHgLWDJ2rcm+FBxKnspSjZzX4ifVqVfBKIIWFXh
TnfSwbMBaFQgvuD8S0SoLKZU8ZyT7B7zjo/Kv1TnwiHLmH3LKvHMyuKXnkOwzlEp
ia462/wSevvGyBt4KYuPhOkCQ8eap0pg1psLaTJiZ0uly0bPG+O/qkfcQHI7gQnl
cNU+fs6BE6l3+A==
-----END CERTIFICATE-----
Generated at Wed May 13 05:10:00 2026 by rpki-client