Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File:                     FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier:          s/J1BPy5y+h75Ty2ISbnQuQBEQEdGzd4uRrpgRIq2d8=
Subject key identifier:   B2:48:88:74:C5:F8:CC:C2:35:5C:CF:F8:51:98:57:22:EE:8E:84:05
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer:       /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial:       019E1BD924753A64B55DE8608914EB29E55D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number:          190E
Signing time:             Tue 12 May 2026 11:01:15 +0000
Manifest this update:     Tue 12 May 2026 11:01:15 +0000
Manifest next update:     Wed 13 May 2026 11:01:15 +0000
Files and hashes:         1: 1Cy83jCl7kBGDNxqyufm78TXI0c.roa (hash: FaDgiWoM3k5efyXcsEBG7laf/bYAZ1lac2yh8oD/pOo=)
                          2: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: Av9TODCWudVnRqQlM9QFriBHb18DlUukhYDwkP7Iho8=)
                          3: Gcgb4fKcIntpFBriNxDOmx88O0w.roa (hash: HNBuGy0i9eOtKQLzxEokhQmLu275mcy6wh+QVvZD+oA=)
                          4: JGYsNj9H1c_XLokkyRvioL1Icvs.asa (hash: FsSg7M51c+/dkmTYhVW+tHhpAYi4anL4jcOUSvzQsF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d9:24:75:3a:64:b5:5d:e8:60:89:14:eb:29:e5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
        Validity
            Not Before: May 12 11:01:15 2026 GMT
            Not After : May 13 11:01:15 2026 GMT
        Subject: CN=b2488874c5f8ccc2355ccff851985722ee8e8405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:c8:5a:1a:c7:70:4d:ab:51:d1:b7:10:ec:
                    a6:52:76:02:aa:07:41:56:ca:8c:56:1c:32:32:27:
                    87:05:b0:88:29:de:cc:59:1b:ed:22:d1:84:cf:40:
                    2d:dd:b1:9a:57:f3:0c:7e:35:b6:c2:9b:7b:48:80:
                    15:7e:47:40:bf:f2:b6:e2:ed:1a:da:ff:89:fc:41:
                    58:77:1d:3f:d3:b4:1d:46:37:9e:8b:e9:49:0e:28:
                    33:3f:12:8f:a4:7b:70:d2:fc:6a:8c:a8:19:04:b5:
                    52:37:1b:61:98:67:b3:fa:c9:4d:6f:a4:52:2d:fb:
                    c0:eb:57:29:c0:a4:4c:0f:37:2c:50:e9:7e:7b:46:
                    17:2d:59:85:db:02:2f:45:e5:cb:8b:61:53:d7:f9:
                    2c:7c:b2:33:3c:a4:d2:40:63:47:43:ab:0c:46:8c:
                    3b:ac:d5:0f:b3:92:d6:5f:25:68:c7:94:60:99:7c:
                    42:2d:b0:46:19:32:e7:5f:6d:4d:d9:e4:4c:52:13:
                    12:80:7c:7b:39:e6:28:1a:d4:e9:4d:f4:e0:59:cf:
                    3d:e6:7c:58:fc:d5:72:e4:73:4f:9f:15:fd:3a:42:
                    e1:ed:f3:34:61:56:a5:30:d8:61:50:66:c5:71:24:
                    db:17:6a:b6:6a:07:fc:94:f3:3f:02:da:5c:dc:51:
                    74:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:48:88:74:C5:F8:CC:C2:35:5C:CF:F8:51:98:57:22:EE:8E:84:05
            X509v3 Authority Key Identifier:
                keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ac:c2:85:74:e7:05:9c:07:c5:fb:e1:df:03:9a:33:e3:04:
         a6:8d:5b:35:ac:36:88:71:d2:ea:ba:53:95:73:c3:93:5a:8f:
         c6:c2:9c:8b:35:9f:0f:21:1b:06:e0:0b:f3:00:9b:27:5f:96:
         85:c4:93:5d:d7:de:54:45:59:1b:4b:8c:d7:da:a4:14:a0:e6:
         45:d5:f1:ca:46:18:15:04:ec:ab:e3:09:50:95:ce:fa:fc:0a:
         ac:2b:74:46:a5:4d:d8:46:ec:b0:a9:a5:dd:fb:f1:b5:32:0b:
         02:fd:c7:a8:27:20:4d:61:6d:8d:f7:92:cd:4e:6f:dd:79:b3:
         79:de:60:ef:e1:8c:3a:a0:b7:11:d0:d7:18:2b:10:ed:48:15:
         52:21:98:b1:01:b6:d9:c9:de:d8:a8:68:4c:d6:27:23:09:4b:
         4e:ad:55:bb:c5:b4:f1:ea:c5:7d:56:c9:da:db:ca:0f:88:86:
         bb:f5:13:fe:96:8f:21:91:2d:09:3c:5f:aa:1d:3f:ee:af:a5:
         8c:4a:76:0d:fe:19:da:26:16:26:cf:73:19:d9:df:ee:1f:29:
         6d:94:ff:84:99:bc:4a:96:e9:0e:fb:70:53:b2:57:0c:e2:f5:
         b9:4e:77:4d:d6:70:a5:13:64:c5:87:9d:92:bc:90:60:e5:97:
         59:65:bb:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2SR1OmS1XehgiRTrKeVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NWNlYjI5MjA4OWUwZGY3NTcxOWRiM2U5NmM1MDk3NTRm
OTQ4MzcwHhcNMjYwNTEyMTEwMTE1WhcNMjYwNTEzMTEwMTE1WjAzMTEwLwYDVQQD
EyhiMjQ4ODg3NGM1ZjhjY2MyMzU1Y2NmZjg1MTk4NTcyMmVlOGU4NDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9TIWhrHcE2rUdG3EOymUnYCqgdB
VsqMVhwyMieHBbCIKd7MWRvtItGEz0At3bGaV/MMfjW2wpt7SIAVfkdAv/K24u0a
2v+J/EFYdx0/07QdRjeei+lJDigzPxKPpHtw0vxqjKgZBLVSNxthmGez+slNb6RS
LfvA61cpwKRMDzcsUOl+e0YXLVmF2wIvReXLi2FT1/ksfLIzPKTSQGNHQ6sMRow7
rNUPs5LWXyVox5RgmXxCLbBGGTLnX21N2eRMUhMSgHx7OeYoGtTpTfTgWc895nxY
/NVy5HNPnxX9OkLh7fM0YValMNhhUGbFcSTbF2q2agf8lPM/Atpc3FF0IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJIiHTF+MzCNVzP+FGYVyLujoQFMB8GA1UdIwQY
MBaAFBRc6ykgieDfdXGds+lsUJdU+Ug3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEt
MTI3MTljMjYxY2MwLzEvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEtMTI3MTljMjYxY2Mw
LzEvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6zChXTn
BZwHxfvh3wOaM+MEpo1bNaw2iHHS6rpTlXPDk1qPxsKcizWfDyEbBuAL8wCbJ1+W
hcSTXdfeVEVZG0uM19qkFKDmRdXxykYYFQTsq+MJUJXO+vwKrCt0RqVN2EbssKml
3fvxtTILAv3HqCcgTWFtjfeSzU5v3Xmzed5g7+GMOqC3EdDXGCsQ7UgVUiGYsQG2
2cne2KhoTNYnIwlLTq1Vu8W08erFfVbJ2tvKD4iGu/UT/paPIZEtCTxfqh0/7q+l
jEp2Df4Z2iYWJs9zGdnf7h8pbZT/hJm8SpbpDvtwU7JXDOL1uU53TdZwpRNkxYed
kryQYOWXWWW7Cg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:58:30 2026 by rpki-client