Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
File:                     l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json)
Hash identifier:          xpIdT5OXSJFs8ZssE53OaxpoMuL0jJ2AL0RWblndrXs=
Subject key identifier:   36:5E:E9:DE:40:F0:20:34:8E:BF:F6:53:67:69:CC:F6:BD:0E:E5:A6
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Certificate issuer:       /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial:       019E20244B221105F56DAC2D137E7B7B8B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 07:01:49 +0000
Manifest this update:     Wed 13 May 2026 07:01:49 +0000
Manifest next update:     Thu 14 May 2026 07:01:49 +0000
Files and hashes:         1: 1-AA_Ym6EX8oobe6NeXk7HWy7rN8.roa (hash: 5t3UXfHRI3FdEzMfG7EasqVmyGfPVOTBzPUk3KiG+pQ=)
                          2: 4I6IeKRFTHTfCk6P0VsgUhk8zic.roa (hash: 0XVLTIXxWYyeiCe3iIXGikBSA8t/yImgovN3r1Pbd5A=)
                          3: Br6fq_1p0sOiKlI1DRwR_EbfW2E.roa (hash: WR8ZmHp+6ZanBZA6Ty89Up4dRZVpCdfJ23KhCqCS8TI=)
                          4: PT_eHk2Dy_Wh2XHSZ-ZM2UoqOTc.roa (hash: /7aQ7+RwkclmuJNtVK87g/73oEQXo6yAkx6IMmNGLuU=)
                          5: hjLY93sTfKVGtH04a9-qkylCHmE.roa (hash: /mrPE+eKM9yKGu2TBD1xblJ2DuTRrBr+lNyxB56PAiE=)
                          6: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: C50EWoh5YfpCmPyaTtMOvbaUUuR5KN+bcVXwVZ4VCMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:4b:22:11:05:f5:6d:ac:2d:13:7e:7b:7b:8b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
        Validity
            Not Before: May 13 07:01:49 2026 GMT
            Not After : May 14 07:01:49 2026 GMT
        Subject: CN=365ee9de40f020348ebff6536769ccf6bd0ee5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:16:ad:fa:84:41:ba:97:69:b2:a3:7e:c7:
                    9a:2a:dc:43:30:e9:79:21:bd:fd:0b:f1:54:24:23:
                    9d:f8:a5:71:bc:f1:35:ee:6e:2e:26:c3:2c:01:6e:
                    73:c3:ff:8f:74:e2:70:c9:b6:13:76:99:df:63:02:
                    6d:a9:87:f0:75:00:ec:48:35:6e:75:fb:0b:b5:82:
                    32:ca:12:45:f5:6e:cd:b8:82:e4:be:4d:d6:92:3a:
                    93:44:b2:bb:5c:36:ee:51:f2:88:6f:c8:b7:b4:11:
                    9d:11:c7:82:8e:44:cb:08:5f:01:f3:e8:8f:e4:91:
                    c7:9d:f1:bd:fb:c0:c0:81:79:b2:65:44:28:5d:ec:
                    4d:2a:79:d6:de:5b:dd:5c:89:97:7a:8f:af:dc:e1:
                    b8:af:5f:42:39:15:76:ab:3f:4b:d2:e4:af:2c:ae:
                    0d:de:50:6c:21:5b:a4:39:30:1d:4c:6b:4d:e2:d4:
                    b7:e1:84:c1:24:1b:08:1d:94:7c:44:bd:a0:94:1c:
                    9e:e6:08:c9:6e:3f:c5:a9:87:0b:33:7a:e5:52:3c:
                    79:0f:8c:fc:63:3a:f6:94:89:15:52:4b:a9:15:7d:
                    72:bc:ce:9c:a5:74:7c:eb:4f:51:6d:63:41:47:04:
                    11:00:f2:f4:4b:f1:e5:38:f6:07:22:a5:0b:26:2f:
                    d9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5E:E9:DE:40:F0:20:34:8E:BF:F6:53:67:69:CC:F6:BD:0E:E5:A6
            X509v3 Authority Key Identifier:
                keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ea:50:a6:4b:96:b7:ca:d2:a8:1b:73:de:73:ae:1b:85:a6:
         96:0e:53:35:92:10:a2:c7:26:3f:34:a8:03:0a:89:14:c6:fa:
         8d:4a:8a:04:00:6c:25:0a:2d:2e:32:61:40:29:ae:d1:bf:90:
         57:d2:6a:e4:c9:fd:14:ae:dc:d7:4b:d1:e5:17:cd:4e:00:a0:
         81:8e:2d:ad:d4:b0:8b:bf:0a:88:dd:94:7d:a3:bd:cd:96:83:
         16:e2:de:fd:8c:63:95:5b:44:c4:f4:82:79:3c:93:c6:c5:ee:
         cf:61:a1:f3:99:ef:5f:d2:45:3c:f2:d4:fc:7f:1e:e1:cc:69:
         e5:0b:8f:8d:eb:55:0e:89:db:c5:93:42:6d:c0:47:3b:07:47:
         f5:78:fa:ee:aa:0e:ca:4b:4d:e4:d9:c5:ac:ff:49:7d:0d:59:
         21:7f:8b:55:30:d7:68:17:a6:f3:96:54:ee:d3:2c:c4:66:79:
         49:a1:3d:cd:81:a0:84:fa:b8:57:81:5f:73:9a:f4:3c:28:71:
         84:38:0e:49:4b:25:7c:4b:22:57:23:dd:2a:10:82:ab:fc:d5:
         de:a5:0e:2c:35:e0:b8:da:4e:72:e0:5b:ff:56:67:e2:85:5e:
         21:27:86:6a:e4:32:f2:15:73:08:d6:bd:0c:35:33:dd:b6:c1:
         06:45:27:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJEsiEQX1bawtE357e4tIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODkzMTgyYjE2NzE4OTgzYmMwMDhjOGQwODdmOGRkY2Ez
ZDg2MTQwHhcNMjYwNTEzMDcwMTQ5WhcNMjYwNTE0MDcwMTQ5WjAzMTEwLwYDVQQD
EygzNjVlZTlkZTQwZjAyMDM0OGViZmY2NTM2NzY5Y2NmNmJkMGVlNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyQWrfqEQbqXabKjfseaKtxDMOl5
Ib39C/FUJCOd+KVxvPE17m4uJsMsAW5zw/+PdOJwybYTdpnfYwJtqYfwdQDsSDVu
dfsLtYIyyhJF9W7NuILkvk3WkjqTRLK7XDbuUfKIb8i3tBGdEceCjkTLCF8B8+iP
5JHHnfG9+8DAgXmyZUQoXexNKnnW3lvdXImXeo+v3OG4r19CORV2qz9L0uSvLK4N
3lBsIVukOTAdTGtN4tS34YTBJBsIHZR8RL2glBye5gjJbj/FqYcLM3rlUjx5D4z8
Yzr2lIkVUkupFX1yvM6cpXR8609RbWNBRwQRAPL0S/HlOPYHIqULJi/ZwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZe6d5A8CA0jr/2U2dpzPa9DuWmMB8GA1UdIwQY
MBaAFJeJMYKxZxiYO8AIyNCH+N3KPYYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDct
YmMwZTUxMWMyMGNlLzEvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDctYmMwZTUxMWMyMGNl
LzEvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+pQpkuW
t8rSqBtz3nOuG4Wmlg5TNZIQoscmPzSoAwqJFMb6jUqKBABsJQotLjJhQCmu0b+Q
V9Jq5Mn9FK7c10vR5RfNTgCggY4trdSwi78KiN2UfaO9zZaDFuLe/YxjlVtExPSC
eTyTxsXuz2Gh85nvX9JFPPLU/H8e4cxp5QuPjetVDonbxZNCbcBHOwdH9Xj67qoO
yktN5NnFrP9JfQ1ZIX+LVTDXaBem85ZU7tMsxGZ5SaE9zYGghPq4V4Ffc5r0PChx
hDgOSUslfEsiVyPdKhCCq/zV3qUOLDXguNpOcuBb/1Zn4oVeISeGauQy8hVzCNa9
DDUz3bbBBkUnWw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:57:37 2026 by rpki-client