Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File:                     psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier:          p73+zWNpW45ngODV4z1tUdAnervI8/oQOVyeLWRTvcs=
Subject key identifier:   8F:58:72:50:D6:C1:0B:19:73:13:24:8A:9D:D9:E7:33:03:93:AF:F0
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer:       /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial:       019E1E6C354FC421C412B175365445FA1CFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number:          190A
Signing time:             Tue 12 May 2026 23:01:08 +0000
Manifest this update:     Tue 12 May 2026 23:01:08 +0000
Manifest next update:     Wed 13 May 2026 23:01:08 +0000
Files and hashes:         1: YB8uK3pVluHiYzZPZMIZIoTnMfI.roa (hash: 7tVqBE7ngonAMrRLqWAl1nUrhE0O3jGUi08m3ADIJNY=)
                          2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: o71US2A5+RL8guD62SHf7+stxDIVchzveF1JOqkZ6rE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:35:4f:c4:21:c4:12:b1:75:36:54:45:fa:1c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
        Validity
            Not Before: May 12 23:01:08 2026 GMT
            Not After : May 13 23:01:08 2026 GMT
        Subject: CN=8f587250d6c10b197313248a9dd9e7330393aff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:3e:31:30:2e:2a:d8:15:d4:2e:6a:c7:fb:
                    b6:85:75:58:0e:eb:d9:05:01:14:fd:b4:a3:42:0d:
                    8c:06:f0:4a:4f:13:f3:e1:1c:29:3e:cb:4f:1e:90:
                    e3:ee:75:d5:2a:bd:5c:81:f7:08:7f:69:4c:53:0d:
                    8e:92:d8:83:2c:ce:ff:80:6a:27:32:49:b4:10:61:
                    13:73:5b:b6:79:28:9f:8a:35:bc:17:76:8b:b7:dd:
                    0b:f6:9b:9e:09:ba:6f:48:87:d4:63:d3:f5:f5:4f:
                    a2:08:56:0f:75:54:9f:8b:fe:ea:14:10:e8:4b:92:
                    db:10:da:03:98:5d:54:89:58:77:b8:d0:f5:4a:cb:
                    57:14:e3:01:dd:61:85:9f:90:50:60:a1:cf:c9:d3:
                    7b:51:d5:ce:4f:70:ea:f3:3b:90:c1:2e:b3:96:9c:
                    64:5f:96:0c:64:c9:15:6f:ea:b4:47:4f:b7:06:68:
                    d6:e5:53:e5:d3:fa:15:1a:0a:5a:e8:2e:c7:ee:e0:
                    bf:13:e6:9d:97:ef:61:70:56:35:39:e0:16:d4:4f:
                    d7:00:73:af:2d:e0:5f:07:f3:0d:03:a0:8c:96:f1:
                    a8:1e:6d:75:e7:ed:5d:60:59:5a:1f:8a:02:fe:c1:
                    e6:08:a5:3c:13:84:7c:c7:56:47:98:53:3d:3a:1e:
                    ef:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:58:72:50:D6:C1:0B:19:73:13:24:8A:9D:D9:E7:33:03:93:AF:F0
            X509v3 Authority Key Identifier:
                keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:1e:44:b9:e8:ca:29:df:94:09:fc:34:b8:f3:1f:ce:57:80:
         47:5a:16:26:c4:a1:c7:66:ce:50:6b:ee:f3:e6:13:53:56:60:
         4f:78:07:47:90:d3:bc:05:fb:ac:07:79:f6:62:d1:d3:e2:42:
         b1:c7:2d:74:2c:32:4e:f5:67:c3:8d:cb:78:2b:9d:76:84:ae:
         3f:49:ae:2f:21:52:92:13:95:40:ba:df:03:ff:ea:01:83:bc:
         d1:86:34:b1:2a:26:11:2c:8f:f6:87:df:56:10:59:d9:62:9c:
         73:4d:06:b3:88:fd:35:09:43:97:3d:48:2a:27:92:31:be:1f:
         cd:f7:ce:c7:d4:51:dc:ba:96:ff:af:80:1f:ad:6a:b3:1f:20:
         c0:8f:e5:49:46:51:0a:0d:a3:fa:da:4a:58:44:73:b6:9c:71:
         e4:eb:79:6b:69:88:4c:ab:de:ea:ec:a8:69:3d:dd:e1:a9:b5:
         45:f2:0b:8a:b0:c1:4c:3a:cc:6a:cd:ef:61:f1:9f:2e:1e:1c:
         53:b5:e8:66:d5:d0:b0:25:f4:ab:57:6d:80:00:a8:4d:98:a7:
         6f:56:13:6c:ae:b0:60:2b:cc:ec:33:c9:85:0f:f4:f0:97:79:
         70:70:91:7c:d0:9d:20:d2:b4:db:f2:75:dc:22:43:0c:01:21:
         54:8e:af:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebDVPxCHEErF1NlRF+hz6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YzZmY2E3NTI2OWM2YjAxMGE2ZmE3MTA5ZTQzMTVlMDZh
MDgzZGMwHhcNMjYwNTEyMjMwMTA4WhcNMjYwNTEzMjMwMTA4WjAzMTEwLwYDVQQD
Eyg4ZjU4NzI1MGQ2YzEwYjE5NzMxMzI0OGE5ZGQ5ZTczMzAzOTNhZmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw50+MTAuKtgV1C5qx/u2hXVYDuvZ
BQEU/bSjQg2MBvBKTxPz4RwpPstPHpDj7nXVKr1cgfcIf2lMUw2OktiDLM7/gGon
Mkm0EGETc1u2eSifijW8F3aLt90L9pueCbpvSIfUY9P19U+iCFYPdVSfi/7qFBDo
S5LbENoDmF1UiVh3uND1SstXFOMB3WGFn5BQYKHPydN7UdXOT3Dq8zuQwS6zlpxk
X5YMZMkVb+q0R0+3BmjW5VPl0/oVGgpa6C7H7uC/E+adl+9hcFY1OeAW1E/XAHOv
LeBfB/MNA6CMlvGoHm115+1dYFlaH4oC/sHmCKU8E4R8x1ZHmFM9Oh7vFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9YclDWwQsZcxMkip3Z5zMDk6/wMB8GA1UdIwQY
MBaAFKbG/KdSacawEKb6cQnkMV4GoIPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUt
ODZlMjlmMDVlYjk3LzEvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUtODZlMjlmMDVlYjk3
LzEvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXx5EuejK
Kd+UCfw0uPMfzleAR1oWJsShx2bOUGvu8+YTU1ZgT3gHR5DTvAX7rAd59mLR0+JC
scctdCwyTvVnw43LeCuddoSuP0muLyFSkhOVQLrfA//qAYO80YY0sSomESyP9off
VhBZ2WKcc00Gs4j9NQlDlz1IKieSMb4fzffOx9RR3LqW/6+AH61qsx8gwI/lSUZR
Cg2j+tpKWERztpxx5Ot5a2mITKve6uyoaT3d4am1RfILirDBTDrMas3vYfGfLh4c
U7XoZtXQsCX0q1dtgACoTZinb1YTbK6wYCvM7DPJhQ/08Jd5cHCRfNCdINK02/J1
3CJDDAEhVI6vnQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:46:15 2026 by rpki-client