Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
File:                     cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json)
Hash identifier:          9EShszU375/1l2hcxO+gMNVt6m2LTDL2QOFy3ttF5kw=
Subject key identifier:   60:82:C4:8C:4A:7A:AE:AA:9E:9E:91:84:3C:44:4D:F1:0A:D9:25:AC
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Certificate issuer:       /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial:       019E1DFE46B496F290AA7C21FF5B30C000D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
Manifest number:          190C
Signing time:             Tue 12 May 2026 21:01:03 +0000
Manifest this update:     Tue 12 May 2026 21:01:03 +0000
Manifest next update:     Wed 13 May 2026 21:01:03 +0000
Files and hashes:         1: 1dppl4E5LeYed1_ddeBSXFRftKA.roa (hash: pN3g9tWO1Nl1OAJCCKTDocJwUcz7cU9lRTyplesScF8=)
                          2: 7hii_CBkhWFEcR7PBsbgDyXmQ9Y.roa (hash: VParP3CSdlBKMMaiiyOgc9apoYvJ3aLSGeumM5G2suQ=)
                          3: 9LHK8v8-9Ckf2KLnnMlZEiqUMBM.roa (hash: 0BBbEj9KrnkzQ7LI3Ja4k/fn10TEbD/JLEqh/Y7YN5Q=)
                          4: 9zJS2sLQdMyIEXItDHnz9vENCZc.roa (hash: smANRs03fyEMELSZXfc50FOww78+6TO01q3PcjqHhg0=)
                          5: MARvCBJj6pQzGNHhjfVRnTPDXRw.roa (hash: W1iO+ZpTnMCy3mYaAEE8YESIC/Lb3z77r6zn9zHVz2Q=)
                          6: NpN7l3_hUP3xVFpljOuMEBlStvc.roa (hash: T5g6uyNIkE7SmOO57cpKy2aBBJDWlR4fSl0bwzLwido=)
                          7: ZffOLXHzTQQ9w6R4Acsptb5X-ZQ.roa (hash: nT41EZi54SNK5Qom8A2J9oxN87+LC+L6D9g8JwOo3+E=)
                          8: b25kHpS94xs5d-Cb2gg_RWdRdqA.roa (hash: UnoS92iWWLeA3lFor4dioIwIwXhzelHfz1mr8ZCSkhY=)
                          9: cA6GYxFNrQzJXvnUUCTkZ74uPLY.roa (hash: 9ZlPADtkA5tNsCz6vf4xeuKDXE0oMu2t/mqNk4DDlVc=)
                          10: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: tlK+hXreHLD27LihRz5dNC7evMN/osApe74AhCVJtyo=)
                          11: laLTLAZUfnJXL9IgOMNUJBbcIYM.roa (hash: qH+8NsTPRO3q9UjCnJr8tq7a5R+TvAmnEtSTXrLT0C0=)
                          12: lcBaOkK9THwl0XIqZgkoB-TZsbs.roa (hash: wKKJUT7JPve5W6FxY/yzXFmsp0AF6c9Iy3VcPHnP9M4=)
                          13: oX2NoeenvY6od0noJwHOC0vVDFU.roa (hash: PaRvm0af3RdwqkLgxZ1C0CNPV7CmkxdUeLl6SbuiQd4=)
                          14: r2fhwRZgDnJ42tEzYpq9QARdwNg.roa (hash: UN6m1b3Vnp+W6gqg/ChwnnprYWWgYrCXDJiUYFQZheM=)
                          15: sPqeNjwkgKgIPC9F-wg4yZRw5vo.roa (hash: gkiNfTfDhe6OjPwvNFzi/YKFCVBUpR1D9DW8GG28M8I=)
                          16: ww6ypu6XKZLBnCmu95aBOLrx3W4.roa (hash: MJWr+hVoOJcU+dBCIlq6NQXj1hTEMRYcYO7YQk9u0qQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:46:b4:96:f2:90:aa:7c:21:ff:5b:30:c0:00:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
        Validity
            Not Before: May 12 21:01:03 2026 GMT
            Not After : May 13 21:01:03 2026 GMT
        Subject: CN=6082c48c4a7aaeaa9e9e91843c444df10ad925ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:03:63:3d:99:d5:19:cb:8f:c2:cb:2c:9f:
                    0f:fa:d3:b5:15:52:39:25:dd:10:b2:d2:76:12:36:
                    2b:d7:e8:44:4e:e6:cd:9e:f1:79:1a:a7:7a:77:a3:
                    94:6c:79:b0:fa:d6:94:81:e6:06:74:24:30:0f:a9:
                    cd:c5:2c:22:e5:64:f4:98:3d:b6:b4:32:56:2d:94:
                    20:b0:34:d1:5d:97:ed:40:3a:f8:3e:9b:88:5d:46:
                    d5:f7:28:fb:d1:e8:d5:32:50:98:fd:73:35:c3:47:
                    da:dd:15:20:e1:6b:f9:15:e5:56:b0:7d:ed:23:b3:
                    f1:d8:bf:70:56:26:0b:30:18:bb:d8:11:e5:1f:9f:
                    ed:66:45:3b:82:66:63:82:19:72:cb:6b:9e:b5:39:
                    f7:83:30:6e:20:6c:33:dd:82:0a:c5:da:cc:a7:bf:
                    3b:af:42:f4:09:49:09:50:a0:dc:80:72:55:66:43:
                    e6:ef:f9:df:11:51:30:1b:e1:60:52:5a:1b:06:95:
                    73:ff:b6:b7:9d:1e:ad:e7:66:8d:3e:2b:97:d1:62:
                    c2:f0:71:29:8a:ef:2d:8f:09:7b:0a:0c:b8:78:24:
                    af:3a:35:35:7f:b4:fa:5d:40:04:8a:20:0a:94:9c:
                    4a:7a:19:87:4c:c6:3d:8f:e7:6e:9e:2c:fb:5c:fd:
                    10:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:82:C4:8C:4A:7A:AE:AA:9E:9E:91:84:3C:44:4D:F1:0A:D9:25:AC
            X509v3 Authority Key Identifier:
                keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f2:5d:40:1f:a8:5c:92:ad:c4:9f:f4:01:99:2b:2f:78:40:
         38:20:7a:4a:1e:6d:af:41:d6:e9:77:03:c3:4e:d3:b6:6a:0d:
         09:92:10:2b:91:2a:a2:01:8f:22:11:41:84:3d:b5:75:23:6e:
         aa:fc:30:a9:77:e4:ee:3a:33:da:86:8c:3d:c2:f1:ef:bf:b7:
         26:07:e7:eb:66:ae:49:88:ef:f5:44:8b:e7:45:c4:61:a0:82:
         35:8c:60:7c:8c:48:02:f3:8a:68:23:9a:31:0b:1f:55:79:10:
         d4:76:f0:7f:74:2e:4e:be:9d:c5:f2:d3:40:59:b5:60:d9:4e:
         67:c8:c6:bb:a7:17:e1:0b:f4:a3:15:64:d0:ed:5e:dd:89:46:
         2c:27:e5:9e:c3:66:f6:27:04:0f:a5:e9:89:d3:34:59:a5:a1:
         c5:c7:14:25:3f:f1:b0:36:ba:4c:1a:a5:08:6b:a5:48:b8:7b:
         69:21:35:77:4c:75:b0:fb:14:1e:4d:2b:fe:f4:46:27:c2:a0:
         ac:bf:5c:33:7e:00:3c:1e:6e:ca:0e:68:08:c0:27:f6:e8:11:
         f0:c5:4d:a7:6f:30:89:d1:d1:a8:5f:d8:2b:97:8e:e3:b5:fd:
         6d:60:2e:c2:d3:9f:87:a1:02:b9:f4:df:0b:df:2d:05:6c:e2:
         63:8e:28:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/ka0lvKQqnwh/1swwADSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl
ZjRmZWEwHhcNMjYwNTEyMjEwMTAzWhcNMjYwNTEzMjEwMTAzWjAzMTEwLwYDVQQD
Eyg2MDgyYzQ4YzRhN2FhZWFhOWU5ZTkxODQzYzQ0NGRmMTBhZDkyNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApacDYz2Z1RnLj8LLLJ8P+tO1FVI5
Jd0QstJ2EjYr1+hETubNnvF5Gqd6d6OUbHmw+taUgeYGdCQwD6nNxSwi5WT0mD22
tDJWLZQgsDTRXZftQDr4PpuIXUbV9yj70ejVMlCY/XM1w0fa3RUg4Wv5FeVWsH3t
I7Px2L9wViYLMBi72BHlH5/tZkU7gmZjghlyy2uetTn3gzBuIGwz3YIKxdrMp787
r0L0CUkJUKDcgHJVZkPm7/nfEVEwG+FgUlobBpVz/7a3nR6t52aNPiuX0WLC8HEp
iu8tjwl7Cgy4eCSvOjU1f7T6XUAEiiAKlJxKehmHTMY9j+duniz7XP0QsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCCxIxKeq6qnp6RhDxETfEK2SWsMB8GA1UdIwQY
MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt
YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1
LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfJdQB+o
XJKtxJ/0AZkrL3hAOCB6Sh5tr0HW6XcDw07TtmoNCZIQK5EqogGPIhFBhD21dSNu
qvwwqXfk7joz2oaMPcLx77+3Jgfn62auSYjv9USL50XEYaCCNYxgfIxIAvOKaCOa
MQsfVXkQ1Hbwf3QuTr6dxfLTQFm1YNlOZ8jGu6cX4Qv0oxVk0O1e3YlGLCflnsNm
9icED6XpidM0WaWhxccUJT/xsDa6TBqlCGulSLh7aSE1d0x1sPsUHk0r/vRGJ8Kg
rL9cM34APB5uyg5oCMAn9ugR8MVNp28widHRqF/YK5eO47X9bWAuwtOfh6ECufTf
C98tBWziY44oZQ==
-----END CERTIFICATE-----
Generated at Wed May 13 00:23:56 2026 by rpki-client