Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File:                     1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier:          USXiZCTVyvG72JNImuPp4aeAKrJJkkQNibTALP9j8R0=
Subject key identifier:   15:E9:F9:A8:21:1F:5C:04:E6:BA:42:60:B3:F9:ED:29:17:6A:74:B9
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer:       /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial:       019E1D227858751986F79EFC57C68CE752D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number:          190C
Signing time:             Tue 12 May 2026 17:00:58 +0000
Manifest this update:     Tue 12 May 2026 17:00:58 +0000
Manifest next update:     Wed 13 May 2026 17:00:58 +0000
Files and hashes:         1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: F8psy+0AygagP3WWPxqjnkl0NOdoi7Sk9mDKFe6DNN8=)
                          2: iTc4QiTRTDUVzAoc9HgTQBj9vNk.roa (hash: M7YGFKI/ySmqCxDcz0c66t0IiUvrgr0f2weY7qCCabo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:78:58:75:19:86:f7:9e:fc:57:c6:8c:e7:52:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
        Validity
            Not Before: May 12 17:00:58 2026 GMT
            Not After : May 13 17:00:58 2026 GMT
        Subject: CN=15e9f9a8211f5c04e6ba4260b3f9ed29176a74b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:e2:91:26:30:be:78:90:34:0e:01:1b:6b:
                    3a:16:a6:4d:c0:73:3a:d5:d6:ca:8a:0d:ec:69:8a:
                    8a:5f:a1:25:ec:2a:2e:5a:67:ab:e1:4e:45:7b:d8:
                    ed:6e:04:91:29:20:20:67:36:d2:cf:87:9a:b0:f5:
                    d4:18:90:b6:6b:25:53:30:83:5d:84:e7:05:bd:5a:
                    3a:4a:01:48:12:fa:41:18:9a:90:14:f1:2d:b9:16:
                    e0:77:65:28:a9:2b:7d:b0:4a:1c:f7:c3:11:58:9c:
                    d4:79:c9:e1:37:cb:da:5b:64:53:44:03:bf:94:b4:
                    e5:ee:4a:7a:70:dc:d7:41:57:46:77:29:1e:74:2e:
                    14:cc:f8:22:0e:1b:84:38:a1:eb:e4:ec:93:da:2c:
                    15:7f:7a:45:48:2a:27:b7:ee:ab:2e:84:b9:6c:59:
                    39:7a:a0:38:30:b4:db:57:5e:75:77:06:d5:e3:ec:
                    90:27:5f:79:4e:5f:45:8a:de:ee:3d:2d:4e:b3:ef:
                    11:35:42:57:10:c1:78:cc:b8:f6:1c:8c:f6:56:f3:
                    e7:cb:ab:6d:a4:f5:64:95:bb:23:68:ef:a8:30:d4:
                    ea:4c:fb:b4:c9:a7:94:5d:2f:2b:22:4c:d9:08:4e:
                    40:51:73:d3:b1:bd:bb:f5:fb:bd:46:89:bd:74:5f:
                    67:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E9:F9:A8:21:1F:5C:04:E6:BA:42:60:B3:F9:ED:29:17:6A:74:B9
            X509v3 Authority Key Identifier:
                keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4c:08:da:b5:3f:2a:e5:7c:f4:f0:0b:3c:f8:94:ce:7a:5e:
         83:a7:e8:c9:30:38:dc:b7:97:43:9f:96:08:73:74:93:a6:54:
         f9:84:23:11:a1:90:ff:7c:55:27:23:64:19:b5:fe:f7:38:68:
         a1:af:0e:76:49:e3:ff:2f:31:ae:b4:f4:26:07:fd:6c:c2:ea:
         59:4f:1a:d1:a1:cc:6b:f2:6f:c3:75:e5:36:92:59:ea:74:c4:
         54:80:82:12:30:59:a6:d6:96:ef:df:13:c2:30:25:4c:df:e7:
         8c:8a:80:ca:8a:55:80:d0:fd:41:2d:d9:fc:87:24:87:e2:d6:
         e9:67:75:40:db:f0:f4:c5:8a:6e:c4:9f:0c:f4:b9:58:d1:87:
         aa:17:21:5c:fd:8b:e4:7a:b5:ea:d6:38:50:1a:8b:7a:02:bf:
         d7:23:eb:fd:0b:54:1a:93:b0:9f:13:c1:3f:6a:24:7d:4b:98:
         52:f2:81:a5:3f:d0:2b:eb:5e:5f:d0:81:39:af:c7:d2:0e:8c:
         a4:6a:ea:eb:cb:b8:f5:3b:b2:fa:14:ca:0e:11:6d:e3:c8:ec:
         2c:fe:6a:86:a5:7f:ae:6b:0c:56:f9:76:99:b5:ab:96:65:f2:
         40:85:d9:47:da:44:74:9d:ef:16:b7:cb:d8:c0:a7:02:bd:eb:
         22:d6:f0:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dInhYdRmG9578V8aM51LZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmRkNTk2MjY3ZDU2ZjdjZTU2ZWJmYWVjODZhMzI3MDhm
ZWRlMDAwHhcNMjYwNTEyMTcwMDU4WhcNMjYwNTEzMTcwMDU4WjAzMTEwLwYDVQQD
EygxNWU5ZjlhODIxMWY1YzA0ZTZiYTQyNjBiM2Y5ZWQyOTE3NmE3NGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPnikSYwvniQNA4BG2s6FqZNwHM6
1dbKig3saYqKX6El7CouWmer4U5Fe9jtbgSRKSAgZzbSz4easPXUGJC2ayVTMINd
hOcFvVo6SgFIEvpBGJqQFPEtuRbgd2UoqSt9sEoc98MRWJzUecnhN8vaW2RTRAO/
lLTl7kp6cNzXQVdGdykedC4UzPgiDhuEOKHr5OyT2iwVf3pFSCont+6rLoS5bFk5
eqA4MLTbV151dwbV4+yQJ195Tl9Fit7uPS1Os+8RNUJXEMF4zLj2HIz2VvPny6tt
pPVklbsjaO+oMNTqTPu0yaeUXS8rIkzZCE5AUXPTsb279fu9Rom9dF9nKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXp+aghH1wE5rpCYLP57SkXanS5MB8GA1UdIwQY
MBaAFNT91ZYmfVb3zlbr+uyGoycI/t4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAt
NjdhODdkOGEzYjliLzEvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAtNjdhODdkOGEzYjli
LzEvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0wI2rU/
KuV89PALPPiUznpeg6foyTA43LeXQ5+WCHN0k6ZU+YQjEaGQ/3xVJyNkGbX+9zho
oa8Odknj/y8xrrT0Jgf9bMLqWU8a0aHMa/Jvw3XlNpJZ6nTEVICCEjBZptaW798T
wjAlTN/njIqAyopVgND9QS3Z/Ickh+LW6Wd1QNvw9MWKbsSfDPS5WNGHqhchXP2L
5Hq16tY4UBqLegK/1yPr/QtUGpOwnxPBP2okfUuYUvKBpT/QK+teX9CBOa/H0g6M
pGrq68u49Tuy+hTKDhFt48jsLP5qhqV/rmsMVvl2mbWrlmXyQIXZR9pEdJ3vFrfL
2MCnAr3rItbwaw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:21:22 2026 by rpki-client