Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File:                     nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier:          w97fY92GuI13H9PfglFHmGG0CyYBJi1RbhZ57LnMGio=
Subject key identifier:   5C:21:B2:51:92:96:AC:5D:4A:15:07:00:B9:22:14:E9:7A:A8:A3:45
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer:       /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial:       019E1CB4C247DAF7EF351FCA3607D64659E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number:          18E6
Signing time:             Tue 12 May 2026 15:01:08 +0000
Manifest this update:     Tue 12 May 2026 15:01:08 +0000
Manifest next update:     Wed 13 May 2026 15:01:08 +0000
Files and hashes:         1: 1-CMu0p1qNg0e63aYoj_D4LrDxfY.roa (hash: lOabOtnZlG49slymDCg4DYEF9uaLsHuP8kozmEeWWJk=)
                          2: NhBesxbcMyD0yBQrL2MrPFZhlpM.roa (hash: doi57fugVWY7hzj7Rlf76Ryk/Bx6TRKhE01hpolLsig=)
                          3: Vx7x_kcOmv3pHdfN4JeJkZMt0-E.roa (hash: H/ghuncbtOSKrShu1dgfSXsTU1/uj8pKrjpq8yu2Ers=)
                          4: XPTuMOSHPxC4TQkhQQhMLupKp7g.roa (hash: TDD3hEBL7CPqvnrfrg7l4hY6bRfLkH7/ULGfUjsBzoo=)
                          5: h4LJjNrzp4fAWVmt9xZ04UKNInQ.roa (hash: hPnSIuqaeCZAtukV9F+5jwRGZESxgM1eDjQaNz+/KSs=)
                          6: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: X+EBbcmvWZ5w3XxpxqdL4nS82IlTWZsI98fJlAfkQUk=)
                          7: nqfdhUcL9cEhRFGA3epCciCW5S4.roa (hash: IIzxcFRfs7wicO4VvZHLFcN54s0V/nVCkQfttWBnBQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:c2:47:da:f7:ef:35:1f:ca:36:07:d6:46:59:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
        Validity
            Not Before: May 12 15:01:08 2026 GMT
            Not After : May 13 15:01:08 2026 GMT
        Subject: CN=5c21b2519296ac5d4a150700b92214e97aa8a345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:51:eb:a6:38:6e:d2:4d:dc:8d:7e:b8:ae:
                    18:cc:91:c3:70:9b:10:f7:a0:4f:f6:f6:17:51:2b:
                    8d:dd:f7:ab:84:1c:4c:ca:18:9f:0e:09:46:33:ba:
                    f9:10:20:ea:72:25:0e:18:05:e1:98:ca:4e:e0:e0:
                    a0:c2:d8:d9:58:5e:73:aa:30:b0:7e:56:6d:5d:55:
                    76:bc:85:a7:73:f3:07:43:d8:2f:bf:51:3e:c7:f5:
                    62:34:5d:ce:bf:ff:0e:b8:64:87:62:67:0e:93:8d:
                    61:eb:8c:fe:00:0e:86:ef:38:6c:72:5a:7e:20:58:
                    7a:56:b6:bf:c0:36:6d:d6:a0:88:a1:f2:e5:93:f1:
                    50:78:71:99:2a:8f:0a:9d:ec:ea:d7:ac:23:91:86:
                    49:5d:ac:91:a0:c5:8c:83:f6:72:07:8a:49:1e:a4:
                    ec:9f:e9:65:e6:4a:a4:c2:81:ac:23:71:73:38:20:
                    09:5d:f4:d9:8a:00:88:10:d5:2e:69:69:f7:ee:4e:
                    cd:4d:84:b5:81:fd:b6:60:e5:e5:97:13:9f:23:40:
                    fe:d2:b8:82:8c:82:48:3d:77:e7:62:f1:95:15:61:
                    0b:c5:33:78:c1:86:7b:ae:26:32:c6:2c:5a:bf:63:
                    28:46:aa:d3:c6:10:49:22:52:21:9a:b3:e0:0a:3e:
                    3d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:21:B2:51:92:96:AC:5D:4A:15:07:00:B9:22:14:E9:7A:A8:A3:45
            X509v3 Authority Key Identifier:
                keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:97:9f:e0:80:79:e0:a3:8f:96:cf:c0:9e:87:92:d7:33:78:
         1b:85:4b:13:11:10:1f:90:22:22:5f:4a:1d:d7:ea:50:3e:38:
         80:02:14:2b:9d:0f:96:6d:4c:98:0a:bb:e0:33:15:e3:5b:d6:
         8c:87:5d:65:c3:dd:3d:69:90:b4:75:bb:fb:5f:ab:fb:a1:91:
         dc:07:17:0d:ec:4b:2f:ce:21:86:c5:3b:50:0b:f3:57:21:97:
         ba:00:fe:11:89:e0:14:b1:54:82:86:ca:78:4c:f0:be:cd:12:
         bc:69:49:c9:85:24:6a:36:54:cc:64:60:ef:30:85:b2:de:85:
         63:e2:42:c6:91:a8:78:80:63:71:97:e2:02:65:21:52:a6:4a:
         ec:c4:8d:6a:29:1e:cd:84:cf:bb:bc:9a:21:13:ff:00:e3:ea:
         c0:75:51:39:00:de:fb:65:98:8d:8f:22:64:ee:cc:3b:e6:1c:
         e7:b3:d2:cb:43:d2:a9:54:a8:99:1e:44:41:8c:49:0e:88:b3:
         50:52:c2:26:f9:5e:87:3c:2b:3f:28:bf:19:00:06:39:3e:1e:
         3c:89:b2:86:4c:bb:97:8c:2d:d9:50:c7:36:f1:d8:25:db:b8:
         d6:16:32:3c:de:cf:33:07:4b:bc:61:d4:5d:18:8f:aa:58:74:
         28:88:7b:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctMJH2vfvNR/KNgfWRlnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNmNGNiNGJhYjVjMTA4MDFhNzcwNjU4ZGY4OTFjZmI4
YzY4YzYwHhcNMjYwNTEyMTUwMTA4WhcNMjYwNTEzMTUwMTA4WjAzMTEwLwYDVQQD
Eyg1YzIxYjI1MTkyOTZhYzVkNGExNTA3MDBiOTIyMTRlOTdhYThhMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0xR66Y4btJN3I1+uK4YzJHDcJsQ
96BP9vYXUSuN3ferhBxMyhifDglGM7r5ECDqciUOGAXhmMpO4OCgwtjZWF5zqjCw
flZtXVV2vIWnc/MHQ9gvv1E+x/ViNF3Ov/8OuGSHYmcOk41h64z+AA6G7zhsclp+
IFh6Vra/wDZt1qCIofLlk/FQeHGZKo8Knezq16wjkYZJXayRoMWMg/ZyB4pJHqTs
n+ll5kqkwoGsI3FzOCAJXfTZigCIENUuaWn37k7NTYS1gf22YOXllxOfI0D+0riC
jIJIPXfnYvGVFWELxTN4wYZ7riYyxixav2MoRqrTxhBJIlIhmrPgCj49KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwhslGSlqxdShUHALkiFOl6qKNFMB8GA1UdIwQY
MBaAFJ0j9MtLq1wQgBp3BljfiRz7jGjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODkt
MDE1NzdhOTI3ZmE5LzEvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODktMDE1NzdhOTI3ZmE5
LzEvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJef4IB5
4KOPls/AnoeS1zN4G4VLExEQH5AiIl9KHdfqUD44gAIUK50Plm1MmAq74DMV41vW
jIddZcPdPWmQtHW7+1+r+6GR3AcXDexLL84hhsU7UAvzVyGXugD+EYngFLFUgobK
eEzwvs0SvGlJyYUkajZUzGRg7zCFst6FY+JCxpGoeIBjcZfiAmUhUqZK7MSNaike
zYTPu7yaIRP/AOPqwHVROQDe+2WYjY8iZO7MO+Yc57PSy0PSqVSomR5EQYxJDoiz
UFLCJvlehzwrPyi/GQAGOT4ePImyhky7l4wt2VDHNvHYJdu41hYyPN7PMwdLvGHU
XRiPqlh0KIh7nA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:15:32 2026 by rpki-client