Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
File:                     m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft (raw, json)
Hash identifier:          DuopZftIEgGD+uY05RGfTBpqWfTPYzBEYOfOLiqbRN8=
Subject key identifier:   21:0C:BF:DD:89:79:02:F1:F6:31:38:D7:B3:CD:87:ED:C0:CC:90:BA
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Certificate issuer:       /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial:       019E1DFE7F6F19FBDF432367BC34BBC5EEB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
Manifest number:          141A
Signing time:             Tue 12 May 2026 21:01:18 +0000
Manifest this update:     Tue 12 May 2026 21:01:18 +0000
Manifest next update:     Wed 13 May 2026 21:01:18 +0000
Files and hashes:         1: 7jj42obFD8RD0DjQ1ozNQQKQyX4.roa (hash: nLM/rezqL1i4yqf0Rz+h3pdwMXHwlPmA9MtXcIXiwTY=)
                          2: CCQOO8anG7WZQ-CMnCxWzdFShTs.roa (hash: M83hlMTeAUf+xS69MU+OXr2z18iSzDUopMQnLTo5ras=)
                          3: gzPjxSV5NT3n9pyhl6YdC1VefSA.roa (hash: mmHPwTp+4ezqtnWysDoJTp93kBZueU6MUxs9A6m03vY=)
                          4: m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl (hash: nSzxUqx9Mrp1t6nv99shKjRZHhE/OtuUJ0QaeyYNLQw=)
                          5: ngZw_Aqalo4a-WBAo61UeGloX7M.roa (hash: s2t7boy4rl1XclJAMGdyD80QMpg5tZS7P2s0Nr+Sbwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:7f:6f:19:fb:df:43:23:67:bc:34:bb:c5:ee:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
        Validity
            Not Before: May 12 21:01:18 2026 GMT
            Not After : May 13 21:01:18 2026 GMT
        Subject: CN=210cbfdd897902f1f63138d7b3cd87edc0cc90ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cc:7f:30:6e:81:0e:0a:00:47:5f:92:e3:0d:
                    02:85:02:1c:83:d5:96:b2:6b:bb:32:4b:14:ae:3c:
                    64:77:b3:76:2f:0d:7a:c5:a4:e1:e4:ca:7b:f6:e1:
                    b4:69:49:4a:86:5a:27:f0:6e:7f:84:72:7a:ad:e4:
                    ec:48:10:db:89:c6:fe:d0:ba:6b:8d:5b:14:f8:92:
                    54:a7:40:1a:97:3a:20:b3:0d:aa:85:c9:11:a6:fc:
                    2c:eb:cc:64:ba:36:0f:a8:f1:ab:4e:f6:35:26:4f:
                    4b:46:51:1d:f0:c0:17:96:5b:e6:fe:e1:e6:e9:50:
                    32:03:1c:cc:d8:b2:ce:89:16:6a:e2:fa:b1:d6:93:
                    e8:b2:44:f1:4c:98:d8:61:16:ac:c4:c3:99:c1:c4:
                    02:06:3b:01:24:92:1a:6b:5a:a0:62:96:b3:16:77:
                    c3:23:5c:6f:86:43:1e:f4:6a:29:a8:47:1a:2e:93:
                    ef:1e:f0:71:d7:6c:a0:13:4f:8b:0e:70:de:22:82:
                    01:92:3a:23:d9:f3:cc:f7:86:f6:e8:08:cc:3a:22:
                    77:f4:82:45:8c:32:46:4a:9e:78:86:b3:80:22:9f:
                    ac:6b:e8:1c:07:f4:08:6f:64:8b:e3:1b:92:f6:8a:
                    dd:db:af:21:c3:39:3e:33:81:fa:bf:bf:83:a2:fd:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0C:BF:DD:89:79:02:F1:F6:31:38:D7:B3:CD:87:ED:C0:CC:90:BA
            X509v3 Authority Key Identifier:
                keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:06:ff:f4:19:7b:07:41:45:d7:f4:bb:56:a5:35:e4:27:69:
         b9:88:84:0a:af:a5:2d:a5:e6:9a:3e:a3:d3:de:2e:98:a4:33:
         c6:ab:25:63:e7:95:6b:89:4f:7a:67:01:33:45:e0:bb:93:fa:
         95:2d:c1:ae:9b:5d:ce:7f:0d:fb:9b:db:5b:76:8d:c3:81:52:
         00:49:0f:2e:0f:9c:b0:b2:a7:a7:9a:16:e9:c1:4e:c8:a5:e6:
         a2:1d:36:26:70:14:dd:81:a5:29:15:7d:c5:21:3a:a1:21:16:
         1e:eb:ac:0a:06:2a:71:96:a3:a6:27:08:cd:77:fc:34:b3:5f:
         e9:6b:1f:8a:0c:c9:e7:79:c6:46:8a:b3:c9:36:1a:e2:a6:12:
         b6:29:34:d8:92:a5:28:72:30:2c:bf:ea:50:71:c5:6b:49:6c:
         32:53:4b:e4:d5:c3:18:fa:42:7e:56:7c:8a:da:f1:e0:b5:f3:
         9d:b5:08:1f:87:a5:2a:13:40:06:b1:c2:cd:40:e7:5d:59:d3:
         81:0d:c0:3e:1b:85:c5:47:61:b9:2c:e4:68:a4:6d:60:94:76:
         15:0c:c4:f0:ed:b3:74:9d:b7:91:59:20:89:27:15:1a:bc:ca:
         52:2b:35:b7:ca:32:11:bb:c7:a1:3a:b8:ec:a7:1d:50:19:31:
         06:c4:8f:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/n9vGfvfQyNnvDS7xe6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYzZmZDNmMzJjYTQ1OTRjOTYwNzU2NTlhNzA4OWIyN2Fl
M2ZlZjMwHhcNMjYwNTEyMjEwMTE4WhcNMjYwNTEzMjEwMTE4WjAzMTEwLwYDVQQD
EygyMTBjYmZkZDg5NzkwMmYxZjYzMTM4ZDdiM2NkODdlZGMwY2M5MGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsx/MG6BDgoAR1+S4w0ChQIcg9WW
smu7MksUrjxkd7N2Lw16xaTh5Mp79uG0aUlKhlon8G5/hHJ6reTsSBDbicb+0Lpr
jVsU+JJUp0Aalzogsw2qhckRpvws68xkujYPqPGrTvY1Jk9LRlEd8MAXllvm/uHm
6VAyAxzM2LLOiRZq4vqx1pPoskTxTJjYYRasxMOZwcQCBjsBJJIaa1qgYpazFnfD
I1xvhkMe9GopqEcaLpPvHvBx12ygE0+LDnDeIoIBkjoj2fPM94b26AjMOiJ39IJF
jDJGSp54hrOAIp+sa+gcB/QIb2SL4xuS9ord268hwzk+M4H6v7+Dov0k4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEMv92JeQLx9jE417PNh+3AzJC6MB8GA1UdIwQY
MBaAFJvG/T8yykWUyWB1ZZpwibJ64/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYt
ZGNiZTUzZGE3ODYwLzEvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYtZGNiZTUzZGE3ODYw
LzEvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwb/9Bl7
B0FF1/S7VqU15CdpuYiECq+lLaXmmj6j094umKQzxqslY+eVa4lPemcBM0Xgu5P6
lS3Brptdzn8N+5vbW3aNw4FSAEkPLg+csLKnp5oW6cFOyKXmoh02JnAU3YGlKRV9
xSE6oSEWHuusCgYqcZajpicIzXf8NLNf6WsfigzJ53nGRoqzyTYa4qYStik02JKl
KHIwLL/qUHHFa0lsMlNL5NXDGPpCflZ8itrx4LXznbUIH4elKhNABrHCzUDnXVnT
gQ3APhuFxUdhuSzkaKRtYJR2FQzE8O2zdJ23kVkgiScVGrzKUis1t8oyEbvHoTq4
7KcdUBkxBsSPng==
-----END CERTIFICATE-----
Generated at Wed May 13 08:49:20 2026 by rpki-client