Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
File:                     8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft (raw, json)
Hash identifier:          C+Knc+GvTW0PLx6xmBh1xmtZl2Z8xPgTNQH170oSdyY=
Subject key identifier:   42:A8:B3:6E:CB:8B:43:A0:41:27:0F:44:81:8B:4D:D3:7A:12:5A:A4
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Certificate issuer:       /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial:       019E1E3590B3B9FDC01D80A8706B838F695F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
Manifest number:          BB
Signing time:             Tue 12 May 2026 22:01:27 +0000
Manifest this update:     Tue 12 May 2026 22:01:27 +0000
Manifest next update:     Wed 13 May 2026 22:01:27 +0000
Files and hashes:         1: 8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl (hash: RaIIvXnXrHeXM0zuumUG7TnmctYT8e0wm7UFjuNkgNY=)
                          2: Ff6BouTNXT5eNhcKm-QyUQY5mmc.roa (hash: xacRAoEbQASFa3ri0NoVm1BfBttzL7W7adDm9SFCKzI=)
                          3: IWOP76e3mSYfx_IEdPrdxinDyFQ.roa (hash: VvuBWUh2GC77OqmEMIARUSDSRBEfVSoivBdhUIBtDow=)
                          4: bre_st4SWkBxIWi6nz1uzA273U0.roa (hash: qtJtto8czH7VsyXf5Qyg/HORT4zB1rywutdFtmoisQE=)
                          5: rh96YEpfSIvPLHfTi_lpKQmnjP8.roa (hash: y2f8KhwFa0vwIyLgbnlcTiZNOJgpzRCsXyp630yvoD8=)
                          6: uTltmkY4Yq89HmC7xO7YdnyqWVQ.roa (hash: pFBAzFh4nQl1Te9x/aO88GWNLmfO6IDPw+/Vc9C0I+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:90:b3:b9:fd:c0:1d:80:a8:70:6b:83:8f:69:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
        Validity
            Not Before: May 12 22:01:27 2026 GMT
            Not After : May 13 22:01:27 2026 GMT
        Subject: CN=42a8b36ecb8b43a041270f44818b4dd37a125aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f6:b8:e7:f5:0c:20:32:d6:9f:71:6a:b5:c1:
                    a2:0a:1f:ca:b8:93:00:74:ae:3d:13:79:39:85:60:
                    c6:f5:d7:4f:b0:eb:90:ab:76:de:5f:91:83:7c:41:
                    b4:d6:74:5f:3a:67:b9:09:91:58:54:f8:aa:8a:bb:
                    5f:54:ed:9f:ab:1a:a2:d6:06:76:ed:21:d3:ff:9d:
                    38:cc:cc:02:62:db:de:f4:02:be:c2:73:d0:53:c4:
                    41:88:24:00:b1:46:eb:56:28:8f:dd:42:a8:d2:3a:
                    ea:7b:6e:e7:2c:25:9a:d5:5a:54:e8:0e:87:cc:c2:
                    62:c2:b9:f8:df:52:f7:22:aa:db:2a:37:79:ff:62:
                    6b:d2:7b:f4:bb:46:f4:73:06:5b:01:b7:b1:2f:3d:
                    0b:f2:e7:81:68:9e:47:10:c4:55:31:ee:69:4c:27:
                    8b:70:3c:bc:47:fe:00:34:b3:62:b8:ea:c7:6c:6b:
                    94:25:a5:76:4e:ab:34:8e:71:7c:ab:d9:71:27:fe:
                    ec:8d:62:73:42:09:b8:b1:55:4e:2f:cd:db:ce:90:
                    29:e0:ff:9e:fa:70:88:c7:0f:ee:1e:53:8f:9a:88:
                    4a:fe:7c:dc:0a:10:91:d9:53:be:9d:b7:8e:14:fd:
                    71:72:d5:7d:89:95:2a:dd:7a:4d:df:ca:e7:23:1a:
                    7e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A8:B3:6E:CB:8B:43:A0:41:27:0F:44:81:8B:4D:D3:7A:12:5A:A4
            X509v3 Authority Key Identifier:
                keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f1:be:2e:8d:01:f6:14:57:8e:84:8f:41:f2:27:0f:79:e9:
         f3:62:7d:60:5b:4b:99:d7:c4:88:42:da:89:ce:28:25:21:97:
         f8:59:d3:02:66:ab:e6:b6:bc:a3:ae:7d:22:a4:07:3e:6e:34:
         4d:b3:66:25:99:89:13:64:88:b1:2d:fd:57:ba:2e:88:32:38:
         92:a7:97:80:6d:09:81:a3:16:ac:3e:0f:70:7e:47:78:d6:c5:
         0f:15:f5:1e:2d:1b:1c:fa:f6:d5:47:a3:55:5f:cf:1c:b6:05:
         42:4a:dc:c3:9c:02:96:c0:81:a3:2c:2c:16:a4:b0:55:09:8d:
         e7:3b:40:1c:1b:ca:5a:6e:77:50:f2:3a:ed:99:e4:3f:52:67:
         23:f8:e9:9b:29:37:f8:67:79:ff:54:f0:92:7d:cb:c1:64:9e:
         54:44:cf:2d:b4:86:7c:e2:3a:79:25:b7:74:53:29:f5:82:eb:
         e8:e1:0d:9a:05:82:94:7f:b3:90:de:5a:4d:3f:ff:28:29:4b:
         bb:07:58:61:3e:02:ee:3a:7a:f5:64:79:a2:1d:42:ad:83:6b:
         09:02:24:d3:45:da:7c:ba:ce:d5:8d:83:5b:1b:39:b3:ea:e0:
         ac:dd:d7:14:09:64:c9:3f:38:4e:c5:11:12:8c:cc:21:04:82:
         8b:a8:d4:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNZCzuf3AHYCocGuDj2lfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMGU0NDUxOTViNjRkNzk5YjgyMmU5OTk0Nzc5MmUwY2Fi
MzJiNmQwHhcNMjYwNTEyMjIwMTI3WhcNMjYwNTEzMjIwMTI3WjAzMTEwLwYDVQQD
Eyg0MmE4YjM2ZWNiOGI0M2EwNDEyNzBmNDQ4MThiNGRkMzdhMTI1YWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3va45/UMIDLWn3FqtcGiCh/KuJMA
dK49E3k5hWDG9ddPsOuQq3beX5GDfEG01nRfOme5CZFYVPiqirtfVO2fqxqi1gZ2
7SHT/504zMwCYtve9AK+wnPQU8RBiCQAsUbrViiP3UKo0jrqe27nLCWa1VpU6A6H
zMJiwrn431L3IqrbKjd5/2Jr0nv0u0b0cwZbAbexLz0L8ueBaJ5HEMRVMe5pTCeL
cDy8R/4ANLNiuOrHbGuUJaV2Tqs0jnF8q9lxJ/7sjWJzQgm4sVVOL83bzpAp4P+e
+nCIxw/uHlOPmohK/nzcChCR2VO+nbeOFP1xctV9iZUq3XpN38rnIxp+hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKos27Li0OgQScPRIGLTdN6ElqkMB8GA1UdIwQY
MBaAFPMORFGVtk15m4IumZR3kuDKsyttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iNTJjNWQtOTViYS00ZGQzLWJiYTgt
YjdjYTFmNDcyOGQwLzEvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iNTJjNWQtOTViYS00ZGQzLWJiYTgtYjdjYTFmNDcyOGQw
LzEvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfG+Lo0B
9hRXjoSPQfInD3np82J9YFtLmdfEiELaic4oJSGX+FnTAmar5ra8o659IqQHPm40
TbNmJZmJE2SIsS39V7ouiDI4kqeXgG0JgaMWrD4PcH5HeNbFDxX1Hi0bHPr21Uej
VV/PHLYFQkrcw5wClsCBoywsFqSwVQmN5ztAHBvKWm53UPI67ZnkP1JnI/jpmyk3
+Gd5/1Twkn3LwWSeVETPLbSGfOI6eSW3dFMp9YLr6OENmgWClH+zkN5aTT//KClL
uwdYYT4C7jp69WR5oh1CrYNrCQIk00XafLrO1Y2DWxs5s+rgrN3XFAlkyT84TsUR
EozMIQSCi6jUlw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:04:49 2026 by rpki-client