Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
File:                     aYLwUTKpmJUH6_bumJUYdTuizbU.mft (raw, json)
Hash identifier:          86igla4/hNbBRNEDRKkFCwNBJHxGe2Q/WhtUjQbVVZg=
Subject key identifier:   85:EE:C7:C8:1F:6E:6B:0B:EF:F3:67:37:20:9A:76:F8:B3:1A:E4:53
Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
Certificate issuer:       /CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Certificate serial:       019E1FB5D37060ADB1A1466ACF8F723F1A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
Manifest number:          0DB9
Signing time:             Wed 13 May 2026 05:01:10 +0000
Manifest this update:     Wed 13 May 2026 05:01:10 +0000
Manifest next update:     Thu 14 May 2026 05:01:10 +0000
Files and hashes:         1: SDv1pmvtKKy8j5zdxmiuQfAHvKA.roa (hash: la1FbIJeldqJDtutGbiRvWT587OJLuf+NXuNKZUoghY=)
                          2: aYLwUTKpmJUH6_bumJUYdTuizbU.crl (hash: EBWk5CYGx+TOZs6g4QxWGHk+0oomNMlutePvkPo+Jk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:d3:70:60:ad:b1:a1:46:6a:cf:8f:72:3f:1a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5
        Validity
            Not Before: May 13 05:01:10 2026 GMT
            Not After : May 14 05:01:10 2026 GMT
        Subject: CN=85eec7c81f6e6b0beff36737209a76f8b31ae453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:ad:9d:7b:07:72:33:c8:6f:5a:18:14:07:
                    54:95:fa:1a:e7:80:53:35:f8:06:c2:e9:99:44:01:
                    2a:f3:12:fc:c8:db:26:c5:3a:4a:c9:85:bc:3c:16:
                    8a:9c:45:d0:d3:11:f4:6a:f1:27:7c:07:09:c0:a1:
                    7c:cf:5d:15:0d:4b:16:70:81:2a:84:86:a7:d2:a5:
                    24:00:d9:cf:fd:d8:f4:2f:df:3b:47:3f:91:21:08:
                    3a:44:cc:04:ca:55:75:ed:26:56:f7:fd:fc:f4:15:
                    f7:db:11:6e:10:02:cf:cb:3a:79:8f:bf:eb:83:b5:
                    1b:24:94:64:6c:18:d8:45:d7:cc:97:e8:bd:29:a4:
                    f9:5e:c0:e7:80:f5:48:8e:68:32:7f:bf:8a:59:d6:
                    19:e9:4d:ba:cc:16:0e:b0:a6:e3:ef:a5:f3:76:33:
                    7c:30:c1:d2:b7:d1:f0:a4:4f:e4:d8:ea:ae:65:c4:
                    4e:f6:bb:1a:c5:6a:cb:74:20:d2:96:5f:7f:bc:e4:
                    4f:6b:c7:4f:57:df:fd:28:1f:96:9a:57:9e:23:29:
                    73:c4:8e:e3:d2:0a:a1:0c:46:cc:4b:85:fc:3c:67:
                    ed:3f:e8:cc:8d:d0:0d:5c:00:b4:78:e9:70:c1:ad:
                    06:b6:d2:0b:be:8d:57:c0:da:36:16:ed:c2:82:45:
                    92:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EE:C7:C8:1F:6E:6B:0B:EF:F3:67:37:20:9A:76:F8:B3:1A:E4:53
            X509v3 Authority Key Identifier:
                keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:26:83:42:0a:06:14:ab:0c:e6:bd:d3:fc:3d:4d:f8:38:37:
         cc:62:e4:04:69:17:31:38:c3:60:ca:da:e3:a2:23:c7:9d:d5:
         d9:9c:53:e0:d2:5e:bd:f8:64:25:d2:43:54:f4:22:26:c8:11:
         54:eb:db:f6:41:d1:02:6b:a0:65:e2:49:6e:f3:74:a1:36:a0:
         b1:14:1e:f5:f5:34:66:c2:7c:a7:1e:09:58:de:c6:b2:60:6f:
         57:e7:3c:61:74:4c:e0:e8:86:f6:32:ea:60:7a:eb:94:ad:e8:
         0f:92:b7:3d:e3:78:a3:3a:77:70:f3:88:ef:b7:fe:5f:9f:3d:
         c0:47:05:3e:16:c4:e9:a9:17:79:20:78:05:32:ec:d3:78:70:
         a2:a7:2d:68:2e:6d:de:ba:cd:86:57:8b:09:39:bd:e6:ba:d0:
         6e:8a:ac:c9:76:f4:97:04:d5:80:48:d2:f4:b0:be:c6:4b:00:
         9e:bb:fb:6e:4e:db:fc:88:ca:58:5d:c7:fe:a7:1e:3f:1c:08:
         0b:c4:96:35:fd:05:8c:21:94:66:d8:55:42:5b:35:7b:59:f1:
         d6:ee:bf:87:c3:f6:e2:17:f1:af:c5:27:60:91:3f:35:a7:1d:
         a7:be:cd:9d:6a:79:94:47:16:53:bc:1c:b0:60:2f:8d:a3:d9:
         b6:4c:8e:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftdNwYK2xoUZqz49yPxonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ODJmMDUxMzJhOTk4OTUwN2ViZjZlZTk4OTUxODc1M2Jh
MmNkYjUwHhcNMjYwNTEzMDUwMTEwWhcNMjYwNTE0MDUwMTEwWjAzMTEwLwYDVQQD
Eyg4NWVlYzdjODFmNmU2YjBiZWZmMzY3MzcyMDlhNzZmOGIzMWFlNDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMCtnXsHcjPIb1oYFAdUlfoa54BT
NfgGwumZRAEq8xL8yNsmxTpKyYW8PBaKnEXQ0xH0avEnfAcJwKF8z10VDUsWcIEq
hIan0qUkANnP/dj0L987Rz+RIQg6RMwEylV17SZW9/389BX32xFuEALPyzp5j7/r
g7UbJJRkbBjYRdfMl+i9KaT5XsDngPVIjmgyf7+KWdYZ6U26zBYOsKbj76XzdjN8
MMHSt9HwpE/k2OquZcRO9rsaxWrLdCDSll9/vORPa8dPV9/9KB+WmleeIylzxI7j
0gqhDEbMS4X8PGftP+jMjdANXAC0eOlwwa0GttILvo1XwNo2Fu3CgkWSoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXux8gfbmsL7/NnNyCadvizGuRTMB8GA1UdIwQY
MBaAFGmC8FEyqZiVB+v27piVGHU7os21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVlMd1VUS3BtSlVINl9idW1KVVlkVHVpemJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82OTA0MDktMDE5ZC00ODEyLTkzMGMt
ZjkyNmZhYmY3YWZhLzEvYVlMd1VUS3BtSlVINl9idW1KVVlkVHVpemJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi82OTA0MDktMDE5ZC00ODEyLTkzMGMtZjkyNmZhYmY3YWZh
LzEvYVlMd1VUS3BtSlVINl9idW1KVVlkVHVpemJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiaDQgoG
FKsM5r3T/D1N+Dg3zGLkBGkXMTjDYMra46Ijx53V2ZxT4NJevfhkJdJDVPQiJsgR
VOvb9kHRAmugZeJJbvN0oTagsRQe9fU0ZsJ8px4JWN7GsmBvV+c8YXRM4OiG9jLq
YHrrlK3oD5K3PeN4ozp3cPOI77f+X589wEcFPhbE6akXeSB4BTLs03hwoqctaC5t
3rrNhleLCTm95rrQboqsyXb0lwTVgEjS9LC+xksAnrv7bk7b/IjKWF3H/qcePxwI
C8SWNf0FjCGUZthVQls1e1nx1u6/h8P24hfxr8UnYJE/Nacdp77NnWp5lEcWU7wc
sGAvjaPZtkyOTA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:12:34 2026 by rpki-client