Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File:                     SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier:          NumPgvuTYU3ZYc7lpId7vDxdEO5j+QCP8Ir76s6A56M=
Subject key identifier:   37:20:D5:C5:46:F9:8C:33:C2:E5:4E:B4:BD:67:64:5E:08:EE:D5:17
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer:       /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial:       019E20920C986172E0F724EA49AA7527B644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number:          190C
Signing time:             Wed 13 May 2026 09:01:42 +0000
Manifest this update:     Wed 13 May 2026 09:01:42 +0000
Manifest next update:     Thu 14 May 2026 09:01:42 +0000
Files and hashes:         1: LUGSDv7DrtC6uhqKMg1-4tFi0x8.roa (hash: fV+caAzqEo99T8yXb9ytJ67VOc9pjgshPYU0owP7CNs=)
                          2: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: K7Xpg0ArX3uYjtUigQFsj2fTGukkdYHPhtIiXO/7V1s=)
                          3: duU8-DqcrbJR-jS_G7eKQiKxR-8.roa (hash: cFWSCbveByhBThDaIpOI1aib6oTyv0EzcL769gpyL08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 09:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:0c:98:61:72:e0:f7:24:ea:49:aa:75:27:b6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
        Validity
            Not Before: May 13 09:01:42 2026 GMT
            Not After : May 14 09:01:42 2026 GMT
        Subject: CN=3720d5c546f98c33c2e54eb4bd67645e08eed517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4c:22:c9:99:ed:c8:d1:09:35:06:03:e0:fb:
                    7e:f3:9d:47:3d:b0:75:f6:cf:67:43:a2:7d:ab:b1:
                    c3:64:2b:7f:d6:68:f6:1c:bc:6d:c3:27:af:70:6d:
                    b8:a1:f2:8c:16:bd:a8:f6:8c:d8:4c:02:71:15:44:
                    4f:80:8f:ee:17:7f:4e:40:50:9f:44:c5:ed:5a:f2:
                    d9:de:67:14:34:76:70:a6:09:c2:c1:8b:bc:3e:ed:
                    d3:37:b6:18:14:11:06:6e:d1:10:36:e5:f2:8e:23:
                    32:d3:3a:65:78:a3:13:a0:16:67:34:fe:4e:74:8a:
                    76:6e:3e:0a:d8:85:e5:f8:da:88:83:be:ec:a4:34:
                    e2:7e:ef:3e:27:cf:5c:82:f1:67:86:1f:a4:c3:b2:
                    40:34:4f:be:c9:c7:ff:f1:61:b1:3e:64:d7:ca:69:
                    f8:da:74:b3:af:b1:44:e5:30:00:bb:d7:51:88:95:
                    93:44:5f:db:05:ab:80:03:ec:ee:c1:b8:d4:97:dc:
                    2c:91:84:8e:e2:a0:0f:68:44:88:d3:b3:e6:cd:a9:
                    13:53:6b:c8:89:e2:fd:ca:dc:ba:82:49:f4:e0:41:
                    cb:68:e5:50:49:c6:b7:3d:0e:6e:7b:3a:01:c8:1f:
                    df:25:86:c9:f1:07:ed:f9:77:c4:a6:d2:d6:d4:94:
                    bf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:20:D5:C5:46:F9:8C:33:C2:E5:4E:B4:BD:67:64:5E:08:EE:D5:17
            X509v3 Authority Key Identifier:
                keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:89:98:87:c3:f5:d3:df:f1:de:ab:c4:28:70:5a:d1:33:a1:
         84:ab:65:bf:77:58:00:a7:7e:d7:ff:6d:0b:d9:1e:42:e5:f0:
         b0:31:08:dd:56:86:23:ea:45:75:50:f2:62:76:2b:88:8b:62:
         97:57:9c:df:94:b1:3b:fd:f9:68:1b:e4:61:ec:e1:09:6c:36:
         b3:a6:ad:38:00:23:5a:dc:71:08:11:02:6b:d0:1b:8e:22:43:
         d9:18:03:a8:b5:48:e4:f6:ca:62:1d:e2:be:d4:eb:c4:5f:8f:
         42:a3:9d:5d:f9:65:61:28:9b:fd:e6:b4:8b:dd:53:00:3b:85:
         3f:d8:a1:e7:7e:fc:cf:7e:ff:79:03:25:a1:25:68:08:92:91:
         a5:17:62:7e:89:d9:9b:99:22:10:ac:f5:ac:ec:79:b2:1a:c8:
         2e:82:8a:d3:d5:66:f7:a2:0e:60:26:10:94:80:e5:f5:3b:65:
         35:eb:04:25:15:01:0a:00:fc:a3:3d:76:96:77:53:24:a2:22:
         14:48:0f:80:a5:f7:f0:a6:e6:5e:65:b4:b1:59:fa:3b:34:c5:
         de:5b:6c:62:b9:c9:ed:c6:89:48:a1:f8:10:72:f3:97:d1:54:
         4e:20:d8:0d:9b:a7:8f:d4:99:23:94:25:6c:ac:73:41:79:a9:
         6f:bd:b0:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkgyYYXLg9yTqSap1J7ZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjcxMjRkOTgwM2E3ZGU1NDg4MzE2NGEzNzZlYTcyZTNj
NjNlYWYwHhcNMjYwNTEzMDkwMTQyWhcNMjYwNTE0MDkwMTQyWjAzMTEwLwYDVQQD
EygzNzIwZDVjNTQ2Zjk4YzMzYzJlNTRlYjRiZDY3NjQ1ZTA4ZWVkNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kwiyZntyNEJNQYD4Pt+851HPbB1
9s9nQ6J9q7HDZCt/1mj2HLxtwyevcG24ofKMFr2o9ozYTAJxFURPgI/uF39OQFCf
RMXtWvLZ3mcUNHZwpgnCwYu8Pu3TN7YYFBEGbtEQNuXyjiMy0zpleKMToBZnNP5O
dIp2bj4K2IXl+NqIg77spDTifu8+J89cgvFnhh+kw7JANE++ycf/8WGxPmTXymn4
2nSzr7FE5TAAu9dRiJWTRF/bBauAA+zuwbjUl9wskYSO4qAPaESI07PmzakTU2vI
ieL9yty6gkn04EHLaOVQSca3PQ5uezoByB/fJYbJ8Qft+XfEptLW1JS/5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcg1cVG+YwzwuVOtL1nZF4I7tUXMB8GA1UdIwQY
MBaAFEknEk2YA6feVIgxZKN26nLjxj6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMt
ZjAxNTBjODFhY2Y1LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMtZjAxNTBjODFhY2Y1
LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlomYh8P1
09/x3qvEKHBa0TOhhKtlv3dYAKd+1/9tC9keQuXwsDEI3VaGI+pFdVDyYnYriIti
l1ec35SxO/35aBvkYezhCWw2s6atOAAjWtxxCBECa9AbjiJD2RgDqLVI5PbKYh3i
vtTrxF+PQqOdXfllYSib/ea0i91TADuFP9ih5378z37/eQMloSVoCJKRpRdifonZ
m5kiEKz1rOx5shrILoKK09Vm96IOYCYQlIDl9TtlNesEJRUBCgD8oz12lndTJKIi
FEgPgKX38KbmXmW0sVn6OzTF3ltsYrnJ7caJSKH4EHLzl9FUTiDYDZunj9SZI5Ql
bKxzQXmpb72wSw==
-----END CERTIFICATE-----
Generated at Wed May 13 17:12:52 2026 by rpki-client