Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File:                     McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier:          8MveXDb05/VcE/c3I0T+l+2JV9wv0+mhX/CxTl3klOY=
Subject key identifier:   79:ED:E5:A1:B4:2E:C8:ED:70:15:93:CC:7A:E4:4F:50:BA:40:C0:29
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer:       /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial:       019E1FB5DD898A30D033B8DC3A83161360A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number:          088D
Signing time:             Wed 13 May 2026 05:01:12 +0000
Manifest this update:     Wed 13 May 2026 05:01:12 +0000
Manifest next update:     Thu 14 May 2026 05:01:12 +0000
Files and hashes:         1: 1-p3HaYx4IqX4cWvi0vNEwtBCaHk.roa (hash: i3bN04ehC6KNjZ/mU1aU2Jp/6ScotgzMImvrL9el+ok=)
                          2: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: S7Zs9dsCY+f0MJ3us1HE5IaQwv//feJatEwpxIpgz8M=)
                          3: YHYbmuz_pM9wn1qc-egcCE-kAEA.roa (hash: 6Tz9Tz8OM7622P+63dPrrdM/er/OUWTKt1lvg0lixIg=)
                          4: pIxw3KC603JdsybhpGY7_5Fn_9o.roa (hash: Ci8maKrft1TBBCcPJqKFYTduIXPenh2T5qk94PPEQ08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:dd:89:8a:30:d0:33:b8:dc:3a:83:16:13:60:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
        Validity
            Not Before: May 13 05:01:12 2026 GMT
            Not After : May 14 05:01:12 2026 GMT
        Subject: CN=79ede5a1b42ec8ed701593cc7ae44f50ba40c029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:8f:08:08:95:7a:e7:d7:73:84:2b:8b:8b:
                    30:2a:f2:a7:f5:91:5c:70:b6:d9:52:54:16:db:8e:
                    27:56:9f:75:82:42:7b:d7:de:02:a1:e0:59:57:9d:
                    eb:4b:86:e6:9a:b3:5c:f2:90:72:48:44:72:14:6c:
                    7d:0e:db:75:be:92:97:ee:28:43:9c:e6:52:8a:b7:
                    b0:06:5a:55:67:0a:57:41:a8:09:d8:bc:ad:6f:77:
                    02:54:46:54:55:6e:40:7a:21:fe:f5:18:e2:5d:df:
                    e2:fa:92:c7:e9:bd:58:b2:7f:c4:bf:f4:a7:e4:a2:
                    f4:80:80:01:5a:fd:43:5c:f0:a5:ce:da:43:5c:04:
                    0a:07:66:68:84:b9:69:6b:e8:0f:cf:8c:9d:43:4c:
                    44:2c:ec:a0:de:23:fc:7d:c6:3e:ce:aa:ac:fe:38:
                    ec:4d:76:fa:ee:0f:bb:bd:59:d2:e7:f3:bb:db:19:
                    60:30:cd:49:8e:bc:e6:aa:18:5f:8a:dd:6e:05:24:
                    e8:82:86:4a:43:55:69:6d:20:ed:f0:83:ce:04:28:
                    39:df:72:81:37:55:c0:4b:c8:0b:1f:ce:ea:18:2e:
                    94:2b:72:26:bf:5c:8f:11:12:49:90:28:05:e1:45:
                    24:10:ff:c8:6a:c0:d2:96:62:fc:22:a7:f8:a0:9d:
                    ac:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:ED:E5:A1:B4:2E:C8:ED:70:15:93:CC:7A:E4:4F:50:BA:40:C0:29
            X509v3 Authority Key Identifier:
                keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2a:ff:a5:09:fb:55:fa:88:5a:b7:d5:d2:84:08:50:6b:96:
         e1:51:ff:cc:29:38:6d:7e:93:be:14:8f:30:3a:73:4a:98:0d:
         79:5b:7b:a9:42:cc:f1:2d:7a:29:05:8d:20:ea:97:76:5f:62:
         75:53:0e:38:e6:f4:11:f2:ab:94:cf:05:7f:20:e8:b1:e1:dc:
         ba:3e:cc:89:8f:99:ac:71:5c:97:e7:23:a2:98:2b:4f:00:ff:
         d4:be:b3:ce:da:b3:31:78:55:c6:8d:c6:b5:ba:c6:93:4a:a3:
         26:86:93:f0:fd:08:bc:69:b9:46:54:d6:43:ff:65:4a:df:4d:
         0b:af:74:7d:87:9a:a7:d7:95:9a:1a:a5:78:65:5f:e9:b3:df:
         68:80:e1:4c:02:76:f3:03:76:92:82:29:a6:e4:cd:b6:a5:59:
         c6:b8:64:ab:2c:65:b7:69:92:02:14:33:e6:3f:c0:2f:4f:23:
         f1:46:68:6d:61:55:25:46:ad:18:47:c4:ec:a2:d0:4b:11:1e:
         4c:75:3d:09:ac:34:13:49:ef:74:52:f6:90:6b:66:bb:b1:5e:
         bc:23:9b:b2:f2:be:fc:37:79:70:c3:f5:42:1e:7d:4e:a0:63:
         fb:7a:97:3b:71:09:4b:9c:06:1d:b6:e1:4e:32:bf:b2:82:2b:
         49:78:a3:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftd2JijDQM7jcOoMWE2ChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxY2IwMGQyZjg0NDAxODEwYzMyMDBiNTJmYTM4OGU5MzY1
MWRkZjMwHhcNMjYwNTEzMDUwMTEyWhcNMjYwNTE0MDUwMTEyWjAzMTEwLwYDVQQD
Eyg3OWVkZTVhMWI0MmVjOGVkNzAxNTkzY2M3YWU0NGY1MGJhNDBjMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUmPCAiVeufXc4Qri4swKvKn9ZFc
cLbZUlQW244nVp91gkJ7194CoeBZV53rS4bmmrNc8pBySERyFGx9Dtt1vpKX7ihD
nOZSirewBlpVZwpXQagJ2Lytb3cCVEZUVW5AeiH+9RjiXd/i+pLH6b1Ysn/Ev/Sn
5KL0gIABWv1DXPClztpDXAQKB2ZohLlpa+gPz4ydQ0xELOyg3iP8fcY+zqqs/jjs
TXb67g+7vVnS5/O72xlgMM1Jjrzmqhhfit1uBSTogoZKQ1VpbSDt8IPOBCg533KB
N1XAS8gLH87qGC6UK3Imv1yPERJJkCgF4UUkEP/IasDSlmL8Iqf4oJ2scwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnt5aG0LsjtcBWTzHrkT1C6QMApMB8GA1UdIwQY
MBaAFDHLANL4RAGBDDIAtS+jiOk2Ud3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZTk1MTktZmY2MS00Njc5LTkwMTUt
ODBlNDI3NTk2YjVkLzEvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lZTk1MTktZmY2MS00Njc5LTkwMTUtODBlNDI3NTk2YjVk
LzEvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJir/pQn7
VfqIWrfV0oQIUGuW4VH/zCk4bX6TvhSPMDpzSpgNeVt7qULM8S16KQWNIOqXdl9i
dVMOOOb0EfKrlM8FfyDoseHcuj7MiY+ZrHFcl+cjopgrTwD/1L6zztqzMXhVxo3G
tbrGk0qjJoaT8P0IvGm5RlTWQ/9lSt9NC690fYeap9eVmhqleGVf6bPfaIDhTAJ2
8wN2koIppuTNtqVZxrhkqyxlt2mSAhQz5j/AL08j8UZobWFVJUatGEfE7KLQSxEe
THU9Caw0E0nvdFL2kGtmu7FevCObsvK+/Dd5cMP1Qh59TqBj+3qXO3EJS5wGHbbh
TjK/soIrSXijCQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:31:49 2026 by rpki-client