Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
File:                     r4TKySqfMTSUgaaOlRvFWvUI8uY.mft (raw, json)
Hash identifier:          N3EaF1J46lhEJhrbCYJnOj2AtMvewow/WsnzQwG5158=
Subject key identifier:   A8:0E:7B:AC:B9:E8:E0:AE:15:76:AF:9C:35:B0:F3:F5:39:50:BE:28
Authority key identifier: AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6
Certificate issuer:       /CN=af84cac92a9f31349481a68e951bc55af508f2e6
Certificate serial:       019E1E35ED1CA9424564D3485436662D9197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
Manifest number:          92
Signing time:             Tue 12 May 2026 22:01:51 +0000
Manifest this update:     Tue 12 May 2026 22:01:51 +0000
Manifest next update:     Wed 13 May 2026 22:01:51 +0000
Files and hashes:         1: 6jLG6sHP0uH-VWDXC-aY6pQShTw.asa (hash: uKIGD/vjcOdgcnZqgMesnuBDT0HiBxmR+kmrbx1+f7Y=)
                          2: BDgHG1Q9czVhyC3DjxtgNrwoTPc.roa (hash: DcjWP3L9YfgxacqAtFXHQOVruS1ILQzHmmRLjmZrdMk=)
                          3: iJxSVbAFop81tRZJNuYo6wfOif0.roa (hash: SxhE89MXr5geGOtet6ynyWQY6neN9HEjRfevzW29iyM=)
                          4: r4TKySqfMTSUgaaOlRvFWvUI8uY.crl (hash: m1g5yQ4kU8V/zQFItxTs/lgAClTD5GuLm4DylvUJZ+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:ed:1c:a9:42:45:64:d3:48:54:36:66:2d:91:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af84cac92a9f31349481a68e951bc55af508f2e6
        Validity
            Not Before: May 12 22:01:51 2026 GMT
            Not After : May 13 22:01:51 2026 GMT
        Subject: CN=a80e7bacb9e8e0ae1576af9c35b0f3f53950be28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:46:4d:e3:3c:50:60:3a:e5:20:9e:bc:7a:
                    b9:43:62:d4:b9:20:a1:19:6a:ad:87:02:6c:f9:11:
                    8a:9f:05:f3:a2:1b:70:c0:bc:b3:95:33:d6:ca:97:
                    75:3c:9f:af:76:2d:0e:4e:62:8a:6a:c0:f9:f9:ad:
                    fb:ff:e1:4c:f3:d2:6f:7b:bc:93:58:ac:05:e2:a1:
                    1c:0e:ff:ba:9c:16:ed:e2:0f:a1:ce:a0:7e:ef:58:
                    b9:8f:e9:54:18:2b:cd:45:55:a0:7e:5d:49:c4:71:
                    99:44:20:37:ff:df:8c:05:b2:7b:6a:aa:65:0d:e5:
                    d5:ea:a4:4f:4d:ac:13:8c:e9:09:e9:a8:3e:e8:5e:
                    20:5c:a0:68:02:3f:f8:2c:6b:5b:4f:f4:63:0a:34:
                    77:3b:47:af:58:03:ae:30:b4:87:e9:28:4e:3c:68:
                    38:3c:54:e8:ec:2c:57:fd:44:dd:54:fd:3d:92:ae:
                    26:c6:ce:72:48:41:3c:51:d9:95:f1:57:e2:87:0c:
                    57:bf:ae:45:f5:24:b6:21:e3:60:bc:de:93:cf:28:
                    d7:8e:f0:88:56:54:25:00:1d:11:bf:df:76:b4:e1:
                    a3:3c:5e:ff:a0:bd:b7:17:12:0e:a4:ad:21:98:38:
                    3b:56:67:84:8a:06:1b:9d:1e:05:63:4a:4e:4f:eb:
                    a3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0E:7B:AC:B9:E8:E0:AE:15:76:AF:9C:35:B0:F3:F5:39:50:BE:28
            X509v3 Authority Key Identifier:
                keyid:AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ab:72:ed:55:86:24:c9:2f:e8:27:9d:28:b9:35:78:f1:e8:
         c3:e7:8f:b6:57:99:b0:ab:11:99:2b:29:80:5a:2c:9f:57:ed:
         be:d4:4d:12:b1:5d:3c:30:03:1a:88:4d:20:1c:e4:38:a8:35:
         a2:48:53:46:5c:dc:a8:4c:76:f7:71:53:55:9d:49:9a:0a:b1:
         81:2e:3a:a6:7c:4e:b8:76:cd:b6:db:4e:c1:38:cb:1d:4e:6f:
         52:02:73:e4:8f:56:8c:8c:ca:2c:3e:c9:19:ed:43:f0:4e:af:
         5b:fe:9e:d9:13:e3:1e:93:7d:43:de:22:7b:bb:d4:87:20:fc:
         4f:2b:e3:41:d4:46:dd:4c:ee:ff:6f:03:78:5e:e4:28:34:d8:
         bc:52:f5:59:c3:68:f4:3b:c2:16:ad:11:91:aa:f7:f5:43:1e:
         4b:82:41:62:3a:a5:49:d9:0d:fe:c2:46:46:8c:18:b7:83:69:
         f9:67:c1:3c:7e:49:b3:98:16:03:eb:8f:69:42:ec:d0:9e:7b:
         b4:08:03:37:7b:80:cf:77:04:89:7c:59:5c:f5:51:54:f0:e1:
         b7:a3:fd:db:fb:3f:da:6d:a9:13:94:49:b4:bb:94:f1:e6:79:
         df:5b:06:94:aa:a3:e6:c5:45:fb:a5:c2:81:58:16:05:14:54:
         54:d9:13:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNe0cqUJFZNNIVDZmLZGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODRjYWM5MmE5ZjMxMzQ5NDgxYTY4ZTk1MWJjNTVhZjUw
OGYyZTYwHhcNMjYwNTEyMjIwMTUxWhcNMjYwNTEzMjIwMTUxWjAzMTEwLwYDVQQD
EyhhODBlN2JhY2I5ZThlMGFlMTU3NmFmOWMzNWIwZjNmNTM5NTBiZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkdGTeM8UGA65SCevHq5Q2LUuSCh
GWqthwJs+RGKnwXzohtwwLyzlTPWypd1PJ+vdi0OTmKKasD5+a37/+FM89Jve7yT
WKwF4qEcDv+6nBbt4g+hzqB+71i5j+lUGCvNRVWgfl1JxHGZRCA3/9+MBbJ7aqpl
DeXV6qRPTawTjOkJ6ag+6F4gXKBoAj/4LGtbT/RjCjR3O0evWAOuMLSH6ShOPGg4
PFTo7CxX/UTdVP09kq4mxs5ySEE8UdmV8VfihwxXv65F9SS2IeNgvN6TzyjXjvCI
VlQlAB0Rv992tOGjPF7/oL23FxIOpK0hmDg7VmeEigYbnR4FY0pOT+uj/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgOe6y56OCuFXavnDWw8/U5UL4oMB8GA1UdIwQY
MBaAFK+EyskqnzE0lIGmjpUbxVr1CPLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRUS3lTcWZNVFNVZ2FhT2xSdkZXdlVJOHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZGExYTAtNDRmMS00NWQ1LWE0NzMt
MzYxOGU1MDNmMjFmLzEvcjRUS3lTcWZNVFNVZ2FhT2xSdkZXdlVJOHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81ZGExYTAtNDRmMS00NWQ1LWE0NzMtMzYxOGU1MDNmMjFm
LzEvcjRUS3lTcWZNVFNVZ2FhT2xSdkZXdlVJOHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaty7VWG
JMkv6CedKLk1ePHow+ePtleZsKsRmSspgFosn1ftvtRNErFdPDADGohNIBzkOKg1
okhTRlzcqEx293FTVZ1JmgqxgS46pnxOuHbNtttOwTjLHU5vUgJz5I9WjIzKLD7J
Ge1D8E6vW/6e2RPjHpN9Q94ie7vUhyD8TyvjQdRG3Uzu/28DeF7kKDTYvFL1WcNo
9DvCFq0Rkar39UMeS4JBYjqlSdkN/sJGRowYt4Np+WfBPH5Js5gWA+uPaULs0J57
tAgDN3uAz3cEiXxZXPVRVPDht6P92/s/2m2pE5RJtLuU8eZ531sGlKqj5sVF+6XC
gVgWBRRUVNkTrA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:34:08 2026 by rpki-client