Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File:                     piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier:          sPLwPz5z1WD4qKDnz+GzPvjc9JgqmBKN0k7NbnC5bok=
Subject key identifier:   CD:9A:67:3D:F5:C7:19:D2:AE:3C:23:0D:26:D3:0F:C1:71:AA:24:5F
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer:       /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial:       019E202383C56BE0F0784CBE2A2D03DE2629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number:          0D4B
Signing time:             Wed 13 May 2026 07:00:58 +0000
Manifest this update:     Wed 13 May 2026 07:00:58 +0000
Manifest next update:     Thu 14 May 2026 07:00:58 +0000
Files and hashes:         1: Sr6zqiJ99FeqwYQ28f19iLqoqDg.roa (hash: TL3BARSlFoDZ5ZNhUOEZiPZ9fIVbuOQ2POjRAByuFjI=)
                          2: TGeDIFBGIW5eczvcX5q3jNyzVtA.roa (hash: DgUdGVPI56iMDORgQFEHjPBMjjgqkbyYMnQ4bBFfVcc=)
                          3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: KI8jr8P1nvaDfbqJYBBgA0S8zgxWbXQ2znNEfVvnEok=)
                          4: tVbgzppTtTNiiJtIVClKJaUjV5Q.roa (hash: +w5E9Iu1vewLPX6wA/Khvas6REQH1AClWY9b6rdLWo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:83:c5:6b:e0:f0:78:4c:be:2a:2d:03:de:26:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
        Validity
            Not Before: May 13 07:00:58 2026 GMT
            Not After : May 14 07:00:58 2026 GMT
        Subject: CN=cd9a673df5c719d2ae3c230d26d30fc171aa245f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2a:7f:2f:68:58:33:90:08:94:fb:97:24:17:
                    5a:ef:a2:c9:84:c9:9e:81:98:bf:e1:9c:8d:96:19:
                    5f:e7:d3:17:17:42:14:b1:f6:0d:cb:9a:93:df:74:
                    89:3d:4b:f3:51:c8:96:eb:76:7d:5a:0c:bf:45:07:
                    7f:1d:46:17:79:ee:46:90:26:05:7f:3b:6f:20:ad:
                    22:18:76:08:19:5f:34:7b:bb:4d:96:a9:62:c8:a4:
                    85:af:8d:6d:76:ad:d5:b7:78:4e:c8:55:f4:17:b7:
                    a7:1e:e2:4b:a4:e8:a0:a0:b4:74:49:27:48:5a:b3:
                    77:80:99:56:e0:18:18:f9:63:2f:65:55:72:4b:36:
                    c7:ec:73:e3:79:bb:89:47:a0:7b:7b:61:de:0f:0b:
                    b4:b4:81:94:c1:ef:0d:e1:ec:9c:f1:ea:49:ec:52:
                    7d:32:39:58:09:0f:47:95:c8:3d:22:3e:ad:97:84:
                    24:56:96:4a:44:5f:66:62:ca:47:0b:6b:d3:70:30:
                    68:11:99:c5:82:c5:8c:c1:da:cb:fc:e6:fb:b2:8d:
                    77:3b:31:83:67:c5:22:e8:56:dd:d1:ab:93:13:da:
                    43:2b:b1:1a:cd:b5:fd:2d:05:70:e2:b3:f2:1f:27:
                    82:d6:53:69:2d:c0:39:ee:f2:bf:b2:f9:18:51:ce:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9A:67:3D:F5:C7:19:D2:AE:3C:23:0D:26:D3:0F:C1:71:AA:24:5F
            X509v3 Authority Key Identifier:
                keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4b:53:6d:61:54:cb:08:f0:20:35:8f:bc:cd:b3:5d:ab:9f:
         5b:7f:ab:9e:ab:ec:a4:f7:56:f5:68:31:f7:e8:11:0c:cc:99:
         db:e9:e5:c7:a4:d3:c4:3b:3d:34:40:51:8a:7b:a3:8b:bb:0e:
         34:49:97:64:42:3b:ac:e5:59:dd:e8:f1:29:ba:78:22:cc:84:
         76:f6:96:a9:a8:f3:f1:4a:83:b3:2d:cc:43:1b:41:73:f1:40:
         46:35:6f:4f:16:a0:b4:03:f2:37:31:ce:d7:02:ca:84:fa:27:
         f4:56:d2:02:8c:17:21:83:34:a7:c6:5e:fd:b4:85:d0:20:d1:
         0c:fd:ef:31:8f:38:fa:87:97:a9:e8:28:b2:c1:2a:0e:12:7f:
         a2:ad:b9:e4:1e:fa:ea:15:43:ac:ca:3b:e5:78:27:11:68:8c:
         35:7d:72:e9:ea:0a:10:5f:72:48:0e:37:d6:fb:71:47:c5:3d:
         39:c2:48:ef:13:1b:1e:a3:70:53:ec:76:fe:f6:16:10:56:aa:
         96:72:3a:e5:47:42:6a:89:eb:67:0d:d0:b7:92:34:1e:94:04:
         bf:97:44:70:5c:34:74:5e:fc:3c:e5:f0:e6:7e:ea:e6:70:5e:
         22:e5:d3:67:3e:1f:00:ad:a2:a2:50:a7:9a:39:98:2d:6b:cc:
         c7:06:fb:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI4PFa+DweEy+Ki0D3iYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MmE4YzdhMWY2YTRjOTQ5ZTAyN2I1MzY5ZDk3ZDc1NzZl
MTQ3ZjgwHhcNMjYwNTEzMDcwMDU4WhcNMjYwNTE0MDcwMDU4WjAzMTEwLwYDVQQD
EyhjZDlhNjczZGY1YzcxOWQyYWUzYzIzMGQyNmQzMGZjMTcxYWEyNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyp/L2hYM5AIlPuXJBda76LJhMme
gZi/4ZyNlhlf59MXF0IUsfYNy5qT33SJPUvzUciW63Z9Wgy/RQd/HUYXee5GkCYF
fztvIK0iGHYIGV80e7tNlqliyKSFr41tdq3Vt3hOyFX0F7enHuJLpOigoLR0SSdI
WrN3gJlW4BgY+WMvZVVySzbH7HPjebuJR6B7e2HeDwu0tIGUwe8N4eyc8epJ7FJ9
MjlYCQ9Hlcg9Ij6tl4QkVpZKRF9mYspHC2vTcDBoEZnFgsWMwdrL/Ob7so13OzGD
Z8Ui6Fbd0auTE9pDK7EazbX9LQVw4rPyHyeC1lNpLcA57vK/svkYUc6tcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2aZz31xxnSrjwjDSbTD8FxqiRfMB8GA1UdIwQY
MBaAFKYqjHofakyUngJ7U2nZfXV24Uf4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYt
NThjODVkNDMzNmJjLzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYtNThjODVkNDMzNmJj
LzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUtTbWFU
ywjwIDWPvM2zXaufW3+rnqvspPdW9Wgx9+gRDMyZ2+nlx6TTxDs9NEBRinuji7sO
NEmXZEI7rOVZ3ejxKbp4IsyEdvaWqajz8UqDsy3MQxtBc/FARjVvTxagtAPyNzHO
1wLKhPon9FbSAowXIYM0p8Ze/bSF0CDRDP3vMY84+oeXqegossEqDhJ/oq255B76
6hVDrMo75XgnEWiMNX1y6eoKEF9ySA431vtxR8U9OcJI7xMbHqNwU+x2/vYWEFaq
lnI65UdCaonrZw3Qt5I0HpQEv5dEcFw0dF78POXw5n7q5nBeIuXTZz4fAK2iolCn
mjmYLWvMxwb7kA==
-----END CERTIFICATE-----
Generated at Wed May 13 10:16:08 2026 by rpki-client