Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
File:                     r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft (raw, json)
Hash identifier:          ZzcmBjEO9PJaQE/nScqq5noBFefRs7+S3YO79R73NH4=
Subject key identifier:   F4:87:EF:C6:B5:73:B8:C6:C6:3D:99:BE:D2:47:5C:73:13:F7:C0:E7
Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
Certificate issuer:       /CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Certificate serial:       019E1F7F84F7C1A16EFD4B2022946B97718E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
Manifest number:          0D73
Signing time:             Wed 13 May 2026 04:01:51 +0000
Manifest this update:     Wed 13 May 2026 04:01:51 +0000
Manifest next update:     Thu 14 May 2026 04:01:51 +0000
Files and hashes:         1: niXIs67HnTRfFLGC1HZAY3uj8cU.roa (hash: wwuo2W8ON5QM/uq0sqdrnWPPJasVC2ONRBN1iw5lrCg=)
                          2: r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl (hash: 2v41gOqOXRSGlYD3XjPguI4lZsbBV3c0YWcGb1ZUXgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:84:f7:c1:a1:6e:fd:4b:20:22:94:6b:97:71:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2
        Validity
            Not Before: May 13 04:01:51 2026 GMT
            Not After : May 14 04:01:51 2026 GMT
        Subject: CN=f487efc6b573b8c6c63d99bed2475c7313f7c0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:86:7b:78:81:04:c8:b3:2f:98:9e:8d:66:12:
                    8d:00:6b:dd:1c:34:3d:97:23:27:81:2e:80:af:c7:
                    f3:70:12:ed:38:c0:6e:79:b7:4b:ed:e8:cb:b3:2d:
                    5f:7d:4d:82:e2:21:92:a8:ff:e9:ed:f8:13:34:d0:
                    ba:13:09:f5:cc:04:b7:0d:cf:41:bb:04:b1:05:4b:
                    c3:58:9b:a7:0e:8c:28:ac:1b:c1:5a:4f:33:b3:eb:
                    a2:a4:55:20:1b:a8:15:21:f8:d5:4a:43:92:d5:20:
                    d8:4d:bd:57:17:26:10:7b:dc:07:e3:67:d5:ac:db:
                    82:47:ca:e6:dc:c5:fe:61:1f:73:9b:59:e3:c6:da:
                    97:3c:7b:a2:0b:e8:e6:ac:86:b1:21:9b:39:ba:97:
                    99:b0:a5:19:96:52:72:e2:48:ba:fc:2b:6d:3a:d5:
                    76:45:17:91:d8:af:d0:c8:ac:bb:d2:3c:32:81:b4:
                    3f:a4:7f:7e:c3:6d:46:03:9f:cd:9e:2c:66:06:f2:
                    6c:f8:af:3a:5d:8b:0e:a5:3e:c7:16:1a:a6:48:b6:
                    10:00:f9:6f:90:fa:05:9f:d4:04:36:66:8e:8b:27:
                    e9:3a:22:1b:dd:28:38:de:2b:bc:b2:f5:19:e6:1f:
                    67:ad:c4:6e:4f:1d:bd:bc:f5:cb:2c:11:b3:e0:93:
                    91:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:87:EF:C6:B5:73:B8:C6:C6:3D:99:BE:D2:47:5C:73:13:F7:C0:E7
            X509v3 Authority Key Identifier:
                keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e6:c5:c5:20:4d:35:06:c8:ac:a2:f9:fa:80:1d:56:97:37:
         79:81:6b:36:d7:be:92:07:ba:65:fb:eb:b9:47:b6:2a:b8:1c:
         31:c9:06:b7:7f:62:a3:cf:35:72:73:cb:83:8d:d3:84:9f:b3:
         f4:cb:56:49:c8:64:8e:41:85:78:14:9e:b4:20:82:9f:e1:b6:
         c6:1e:6b:f8:6a:15:4b:8c:fb:ae:80:0c:27:5a:46:99:f4:39:
         51:40:58:c0:9f:8b:5f:10:97:e2:a4:36:17:2b:21:62:18:8f:
         bb:87:1f:b2:76:a3:e0:42:50:88:f4:24:b7:58:f7:67:91:02:
         10:36:39:85:a1:7b:16:73:4a:de:9e:10:4e:1e:36:67:33:9e:
         dc:3a:21:72:45:2e:8e:cd:59:15:fc:97:1c:7e:ff:d2:e5:88:
         f2:78:bf:52:03:39:1d:cc:1a:d2:bd:d4:f0:72:3d:bb:96:9b:
         03:4d:4f:75:90:b6:d9:af:bb:7e:fd:6d:c1:c9:05:3e:0f:8f:
         bc:16:6c:d3:6e:3b:ac:05:95:21:c0:ac:e5:65:1d:27:b8:7f:
         af:86:d4:fb:4d:65:31:fe:4b:f7:43:46:c8:c9:4f:57:62:a9:
         45:2e:f6:64:b6:68:d0:4a:80:35:9d:16:90:8a:c6:cf:c2:36:
         e3:47:af:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ff4T3waFu/UsgIpRrl3GOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTMxMDI1MTFlNjYwMjYzZjhlZjZlNGMxZjlhYjMyMzkz
ODM5YjIwHhcNMjYwNTEzMDQwMTUxWhcNMjYwNTE0MDQwMTUxWjAzMTEwLwYDVQQD
EyhmNDg3ZWZjNmI1NzNiOGM2YzYzZDk5YmVkMjQ3NWM3MzEzZjdjMGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44Z7eIEEyLMvmJ6NZhKNAGvdHDQ9
lyMngS6Ar8fzcBLtOMBuebdL7ejLsy1ffU2C4iGSqP/p7fgTNNC6Ewn1zAS3Dc9B
uwSxBUvDWJunDoworBvBWk8zs+uipFUgG6gVIfjVSkOS1SDYTb1XFyYQe9wH42fV
rNuCR8rm3MX+YR9zm1njxtqXPHuiC+jmrIaxIZs5upeZsKUZllJy4ki6/CttOtV2
RReR2K/QyKy70jwygbQ/pH9+w21GA5/NnixmBvJs+K86XYsOpT7HFhqmSLYQAPlv
kPoFn9QENmaOiyfpOiIb3Sg43iu8svUZ5h9nrcRuTx29vPXLLBGz4JOR3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSH78a1c7jGxj2ZvtJHXHMT98DnMB8GA1UdIwQY
MBaAFK+TECUR5mAmP4725MH5qzI5ODmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kMTZlOTYtMDMxMy00YzliLTljMDkt
YTk1ZmUzMTAyNjQ1LzEvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kMTZlOTYtMDMxMy00YzliLTljMDktYTk1ZmUzMTAyNjQ1
LzEvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABObFxSBN
NQbIrKL5+oAdVpc3eYFrNte+kge6ZfvruUe2KrgcMckGt39io881cnPLg43ThJ+z
9MtWSchkjkGFeBSetCCCn+G2xh5r+GoVS4z7roAMJ1pGmfQ5UUBYwJ+LXxCX4qQ2
FyshYhiPu4cfsnaj4EJQiPQkt1j3Z5ECEDY5haF7FnNK3p4QTh42ZzOe3DohckUu
js1ZFfyXHH7/0uWI8ni/UgM5Hcwa0r3U8HI9u5abA01PdZC22a+7fv1twckFPg+P
vBZs0247rAWVIcCs5WUdJ7h/r4bU+01lMf5L90NGyMlPV2KpRS72ZLZo0EqANZ0W
kIrGz8I240evoA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:28:11 2026 by rpki-client