Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
File:                     f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json)
Hash identifier:          Tv0Ed30TOvm0C+1zfMqkZlvzDScmU1DuCV44NlWP7Dc=
Subject key identifier:   46:FC:E1:3F:FC:7B:A3:C2:4A:0B:0A:CB:9F:71:FD:35:29:E7:67:1F
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Certificate issuer:       /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial:       019E1F11777B918DCAC8ACDA1BD5EBB285C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
Manifest number:          189A
Signing time:             Wed 13 May 2026 02:01:38 +0000
Manifest this update:     Wed 13 May 2026 02:01:38 +0000
Manifest next update:     Thu 14 May 2026 02:01:38 +0000
Files and hashes:         1: 66GZ7l6QQwcv2bCy6Osuwz05vyI.roa (hash: XdLrvyU74+Rq/gqsf2OvY8CqJfc5BuoyG2y3sfoMhOw=)
                          2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: yJPAoLhECxjy5qJSDC3tTvMH2+qZ7gfzKI1YWtSnf5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:77:7b:91:8d:ca:c8:ac:da:1b:d5:eb:b2:85:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
        Validity
            Not Before: May 13 02:01:38 2026 GMT
            Not After : May 14 02:01:38 2026 GMT
        Subject: CN=46fce13ffc7ba3c24a0b0acb9f71fd3529e7671f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a4:a8:8b:cd:3d:f1:53:98:ba:9a:cd:c0:bb:
                    40:eb:3b:39:cf:ae:35:48:49:fb:cc:24:c2:36:9d:
                    9e:98:fe:01:6b:30:24:9f:09:1d:9f:59:b9:ee:d3:
                    ac:0a:98:7d:38:3e:bf:af:f7:0b:dc:7b:29:0c:f0:
                    4e:cb:19:08:03:6a:72:db:7c:ed:5f:df:16:ba:19:
                    f8:8f:4a:5b:8b:c7:78:55:2e:e5:dc:9a:5d:6f:d4:
                    0e:f7:e8:0c:fc:42:f7:69:8a:83:66:ef:26:b8:b6:
                    a2:75:27:cf:90:99:f9:77:11:08:90:54:72:f1:31:
                    9b:54:2a:cc:3a:78:c8:e0:53:04:24:59:24:dc:65:
                    3c:7a:11:33:62:1e:88:6b:aa:39:08:ad:b5:7d:f2:
                    35:f5:a1:ec:f5:68:02:14:9a:6e:b0:20:42:dc:c4:
                    0c:89:48:e6:60:67:b7:4f:38:8e:4b:14:b3:0f:2c:
                    f7:81:7a:8e:e9:ba:99:3b:46:ae:9e:8c:e8:ce:d4:
                    75:6c:2f:13:a5:2c:27:23:34:dc:75:8f:a8:72:f6:
                    09:4b:e6:27:17:62:1b:11:33:cc:ac:30:95:2e:e2:
                    3a:98:ae:73:b8:77:86:97:59:0d:1e:e3:fb:c7:ea:
                    49:91:7d:da:91:0f:2b:81:c3:64:96:57:1f:5a:3f:
                    be:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FC:E1:3F:FC:7B:A3:C2:4A:0B:0A:CB:9F:71:FD:35:29:E7:67:1F
            X509v3 Authority Key Identifier:
                keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d5:fb:1e:81:7e:69:b6:a4:9b:b6:04:8a:35:88:d9:7d:4a:
         94:63:e6:be:27:df:9a:4e:aa:3f:c5:03:04:61:23:0e:9e:e0:
         79:a7:89:c5:d2:46:2a:a5:df:98:f8:b2:38:4f:b5:84:15:84:
         f6:2b:c9:25:89:d1:cb:65:5c:c8:12:85:cf:67:00:de:08:de:
         73:fb:62:e8:2b:1c:4d:01:60:ed:49:b2:af:8f:43:bc:08:9d:
         72:5a:a7:6f:8d:88:66:5c:f1:3e:e5:d7:81:43:ee:f2:1e:72:
         14:ff:a1:a6:d3:64:de:5e:61:46:c9:98:89:1e:d0:62:14:e7:
         b1:8f:30:2c:b7:6c:32:af:03:f3:f5:34:d5:b3:54:8e:d0:57:
         9f:9b:b1:27:bf:3c:d8:22:0c:57:29:82:de:d6:a6:57:6d:b9:
         ac:90:4d:ee:24:f5:1c:f9:b7:41:f9:0a:3a:b6:63:9f:23:1e:
         a0:3c:74:a2:bc:76:5e:dd:c4:86:17:3d:59:01:d2:54:fb:7c:
         bc:5a:8c:c9:46:78:f6:35:a1:7b:d3:9d:18:c3:02:ba:fc:9e:
         53:0f:44:94:eb:5c:84:2a:03:b7:65:bd:63:59:b4:d4:b5:62:
         0d:31:84:07:86:0a:ef:64:57:a3:b5:f3:40:2c:6b:6a:43:60:
         78:dc:f9:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEXd7kY3KyKzaG9XrsoXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmOTJkZjc2MTBmMDQ4ZjQzYmY0NGMzMzZkNDFjNmMxMTU3
ZWYwZTIwHhcNMjYwNTEzMDIwMTM4WhcNMjYwNTE0MDIwMTM4WjAzMTEwLwYDVQQD
Eyg0NmZjZTEzZmZjN2JhM2MyNGEwYjBhY2I5ZjcxZmQzNTI5ZTc2NzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46Soi8098VOYuprNwLtA6zs5z641
SEn7zCTCNp2emP4BazAknwkdn1m57tOsCph9OD6/r/cL3HspDPBOyxkIA2py23zt
X98Wuhn4j0pbi8d4VS7l3Jpdb9QO9+gM/EL3aYqDZu8muLaidSfPkJn5dxEIkFRy
8TGbVCrMOnjI4FMEJFkk3GU8ehEzYh6Ia6o5CK21ffI19aHs9WgCFJpusCBC3MQM
iUjmYGe3TziOSxSzDyz3gXqO6bqZO0aunozoztR1bC8TpSwnIzTcdY+ocvYJS+Yn
F2IbETPMrDCVLuI6mK5zuHeGl1kNHuP7x+pJkX3akQ8rgcNkllcfWj++AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEb84T/8e6PCSgsKy59x/TUp52cfMB8GA1UdIwQY
MBaAFH+S33YQ8Ej0O/RMM21BxsEVfvDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEt
N2Y3MmY0NGI4OTgyLzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEtN2Y3MmY0NGI4OTgy
LzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9X7HoF+
abakm7YEijWI2X1KlGPmviffmk6qP8UDBGEjDp7geaeJxdJGKqXfmPiyOE+1hBWE
9ivJJYnRy2VcyBKFz2cA3gjec/ti6CscTQFg7Umyr49DvAidclqnb42IZlzxPuXX
gUPu8h5yFP+hptNk3l5hRsmYiR7QYhTnsY8wLLdsMq8D8/U01bNUjtBXn5uxJ788
2CIMVymC3tamV225rJBN7iT1HPm3QfkKOrZjnyMeoDx0orx2Xt3Ehhc9WQHSVPt8
vFqMyUZ49jWhe9OdGMMCuvyeUw9ElOtchCoDt2W9Y1m01LViDTGEB4YK72RXo7Xz
QCxrakNgeNz5kw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:53:09 2026 by rpki-client