Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
File:                     5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json)
Hash identifier:          XzY6x1dHU7Yp44fpopT5kSKVVzPZqaNUBUNpB74YeZ8=
Subject key identifier:   79:BF:4E:35:01:45:B6:5D:BF:20:15:99:BB:87:92:18:97:0D:96:11
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Certificate issuer:       /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial:       019E1D9096DF807B46311AC0190FDF1B38EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
Manifest number:          1921
Signing time:             Tue 12 May 2026 19:01:15 +0000
Manifest this update:     Tue 12 May 2026 19:01:15 +0000
Manifest next update:     Wed 13 May 2026 19:01:15 +0000
Files and hashes:         1: 5-klHAcjuib2_FofmnEGi_QZtBo.roa (hash: MgJJh9H/jXeBJcDEupeJ7ZVHU2fjFH9Kd5p1q+gOEoI=)
                          2: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: kmSISG4I+KBpLwaVSRpONh32j2DS0Blxx7lQrFmxpm4=)
                          3: 97PhypZv2zu5_OJfA9RRiy48R8g.roa (hash: nIzEQ3BbMqorKqduXDknSy/VPwO4KFszJMOCHH7kKrc=)
                          4: BPQtimnpXi0to5PJq-7OXT1p6Kg.roa (hash: PekLxUPS5x993K7hJZTV/uCUzvBB2o6IwRQlq0KNRsM=)
                          5: CEZhxXddcJSu8GtDeoUO1Fq3l8g.roa (hash: moNzp9N4VIrR1YCZjmlUZKwlRY+vy/jtfRsH+cwJ3Is=)
                          6: CNXwsSf4_4ESwE7Z2tHMnF1t0fI.roa (hash: 6TNmvaRAq+/xsichI9upjJiUhRz6TxFS4gf++ifnQHM=)
                          7: IvxIJlsusGINjyd7ChcDCT4l6As.roa (hash: zyUdft6I0UPWxcrLYXWhMDg+rjyI8hIE2YfsToF0boc=)
                          8: L6vphMwfNSBNvr8n1Lq9ZQF5mHU.roa (hash: oMpak7/xlmg2k0Kw2nNqPLD2SFclHDjV9oFak9G23Tk=)
                          9: Q-M_plqHvIQQ4Omd0fzKbn8MMIE.roa (hash: 9RcrwO2pLiY7IHYvOtx1yuwN7Rb/p8KIBf/Lu5xB6g4=)
                          10: QdwEGDEr6Ax0sFIqcVK01z0gwFc.roa (hash: KB/jxrFMK5gxklmy0S1tcQXJ7NAaIcgucGRfgVGUTL0=)
                          11: R0firsytRcLjGnGFeTReX_mJsTo.roa (hash: ZELUdwpvqbd6r7PVB+5YZQ5dM2v9c5GEjwWTQyZ4GD8=)
                          12: RxxmdBVq18xBTu5txmqjYwtEcpU.roa (hash: 0qKhOj0Lxs9GMhc9/OQQ5tOrCNAxGZ18Ve40BFZyMVU=)
                          13: SLxM4-QYW5vdBWKJN_1LSVWNQI8.roa (hash: 8/pZhmkiqWxucVdJO5fLGO+U3cowY5Hypcm03HRtJoA=)
                          14: TxxrVfz2u2F0xUEANYlHvUuyeVI.roa (hash: 0f/+WR0UOyysTWAKgWWvmTz3+3MFbGsdfLPYHRKrVL8=)
                          15: V7bxJ7fZWKrgYC13aNpYpf4-Q9M.roa (hash: jzw1vz6ZEXyxdGOPFQhYOp4v00XuXiS4bMqLV6Nev1o=)
                          16: WoXz8LEgluCQDtouES2_1t3quKQ.roa (hash: NFO0YmWMko3tEX8tTvzsRFbcyphfVpUnLsRfBg6EMBw=)
                          17: X3CxDxdArCain-hHzMiYZG7wqTY.roa (hash: VGIBYhWyA0ZSidIn3eUOjZGeUibcoLiE0Nr0g0fgtac=)
                          18: aTXtQ3Z2K6TSE6KNWgBdEr8tXhg.roa (hash: ayQ15/oxxjtoAl0GHDbaT1Ld3ENYq1g1s6ZPtUrE0LE=)
                          19: gfS_vnH3Vnvh7i3z3bgWBoj_Cfs.roa (hash: zzxnJ8kipLM4KRusndIlOFpip8UeHfcdpJcHOaAuZ5c=)
                          20: gkqFAdULp-MSlNo8ljKdmzxNnW8.roa (hash: MUtCuN0kNobHKk0C/st+dCMUhmlNlDPz4Sloa+o6ysc=)
                          21: p0LQmmHi2QvQtDWz-XJ05OkVyok.roa (hash: jYOqdXjJ1djt3waBPEAnIDBEUk//W+EO/dGl6v18IuQ=)
                          22: wPrOTLIMFBa9xSPd967CbqnruOM.roa (hash: V3ywu5M8hUS56cV276Qc7nvD0rqUdNAgudSMZjJuzUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:96:df:80:7b:46:31:1a:c0:19:0f:df:1b:38:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
        Validity
            Not Before: May 12 19:01:15 2026 GMT
            Not After : May 13 19:01:15 2026 GMT
        Subject: CN=79bf4e350145b65dbf201599bb879218970d9611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:4b:fe:33:ed:42:a6:b0:a1:5b:30:ab:e9:
                    e3:24:7d:38:c2:e6:27:4a:0b:bf:36:fd:d0:de:f7:
                    f5:2e:1d:8e:83:ef:9f:ce:fa:bc:da:20:8e:26:05:
                    9b:74:7c:39:f4:22:56:74:85:e8:a7:56:29:e5:6d:
                    20:b3:95:a9:62:4d:8c:24:74:1c:fd:74:36:a7:2e:
                    13:78:fb:67:24:5c:36:a8:d0:ab:98:e8:d1:09:3f:
                    34:91:5b:bb:dd:8e:45:91:1b:0a:6c:54:1a:0a:ce:
                    d6:6c:51:ad:26:f1:26:06:47:09:09:9b:6f:e7:66:
                    72:1c:e1:77:1c:55:75:92:2e:d2:46:10:66:fb:a3:
                    03:ad:21:d5:8a:41:79:d3:63:c9:1d:d8:05:89:5a:
                    26:80:72:8e:8a:af:4a:cb:88:ba:1b:f8:0c:cc:17:
                    bc:63:58:1a:b1:9c:17:35:71:29:35:5b:ba:ac:c1:
                    84:f3:ac:7a:e7:78:68:c5:e8:87:58:4f:16:2e:0e:
                    c8:4b:52:2d:4f:31:cc:44:26:8a:1f:02:b3:dd:87:
                    82:c4:8b:a0:78:b7:21:15:08:d7:10:63:35:6f:78:
                    37:6b:f6:90:6f:cf:2f:71:56:ea:33:c1:3f:ca:41:
                    43:00:42:1e:81:4c:87:8a:f9:ad:ec:b1:8d:f3:08:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BF:4E:35:01:45:B6:5D:BF:20:15:99:BB:87:92:18:97:0D:96:11
            X509v3 Authority Key Identifier:
                keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:95:f0:30:08:aa:58:67:4a:81:46:98:d9:fe:34:57:62:eb:
         c3:23:cf:e3:38:18:cb:d1:85:54:7f:48:5f:73:77:4c:2c:dd:
         e4:24:96:9b:63:bb:39:02:7d:42:ce:28:e8:68:1a:74:77:50:
         f0:ca:d6:00:db:12:61:9d:55:1b:21:b3:98:5e:1a:98:57:de:
         d7:b8:01:65:eb:d2:a6:ba:a2:d6:5b:77:14:bd:66:56:3c:c8:
         22:a4:c1:99:6f:c1:51:40:c6:38:7e:ae:0c:03:ff:f7:92:5a:
         b8:cf:6f:51:10:26:7c:7b:a7:75:46:65:bf:19:03:60:e2:64:
         e0:62:53:aa:c1:69:d6:a7:87:3c:e1:bb:40:e6:4f:80:20:e2:
         7f:62:8b:7c:b5:c6:f3:52:f5:82:b9:e0:a3:6c:67:4f:fa:e5:
         79:ae:6f:10:80:80:3e:c8:2f:a0:ee:05:70:af:69:66:b7:99:
         03:68:51:ed:cb:6e:8c:04:6f:d4:c5:6c:fa:0d:03:c8:f6:07:
         48:65:16:f4:ea:c6:48:ab:f8:ec:94:9b:51:dc:46:f3:3b:36:
         7e:9b:42:86:c4:3a:cd:79:41:3a:c0:4e:ed:36:e5:dd:a1:0a:
         87:bf:4d:78:c1:a2:68:80:99:ba:c2:ce:8a:e4:32:da:d9:dd:
         1d:00:a1:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkJbfgHtGMRrAGQ/fGzjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4
NDFhZTgwHhcNMjYwNTEyMTkwMTE1WhcNMjYwNTEzMTkwMTE1WjAzMTEwLwYDVQQD
Eyg3OWJmNGUzNTAxNDViNjVkYmYyMDE1OTliYjg3OTIxODk3MGQ5NjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh1L/jPtQqawoVswq+njJH04wuYn
Sgu/Nv3Q3vf1Lh2Og++fzvq82iCOJgWbdHw59CJWdIXop1Yp5W0gs5WpYk2MJHQc
/XQ2py4TePtnJFw2qNCrmOjRCT80kVu73Y5FkRsKbFQaCs7WbFGtJvEmBkcJCZtv
52ZyHOF3HFV1ki7SRhBm+6MDrSHVikF502PJHdgFiVomgHKOiq9Ky4i6G/gMzBe8
Y1gasZwXNXEpNVu6rMGE86x653hoxeiHWE8WLg7IS1ItTzHMRCaKHwKz3YeCxIug
eLchFQjXEGM1b3g3a/aQb88vcVbqM8E/ykFDAEIegUyHivmt7LGN8wgu1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHm/TjUBRbZdvyAVmbuHkhiXDZYRMB8GA1UdIwQY
MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt
YmQyNDliNjI1Nzk3LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3
LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5XwMAiq
WGdKgUaY2f40V2LrwyPP4zgYy9GFVH9IX3N3TCzd5CSWm2O7OQJ9Qs4o6GgadHdQ
8MrWANsSYZ1VGyGzmF4amFfe17gBZevSprqi1lt3FL1mVjzIIqTBmW/BUUDGOH6u
DAP/95JauM9vURAmfHundUZlvxkDYOJk4GJTqsFp1qeHPOG7QOZPgCDif2KLfLXG
81L1grngo2xnT/rlea5vEICAPsgvoO4FcK9pZreZA2hR7ctujARv1MVs+g0DyPYH
SGUW9OrGSKv47JSbUdxG8zs2fptChsQ6zXlBOsBO7Tbl3aEKh79NeMGiaICZusLO
iuQy2tndHQCh1Q==
-----END CERTIFICATE-----
Generated at Wed May 13 05:16:12 2026 by rpki-client