Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File:                     mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier:          ciE/goMHXJJeUcKcO1vzAXJuURsCUj0qjBUcByOW/G8=
Subject key identifier:   78:9E:E9:C2:FD:53:45:51:41:2D:4A:CD:39:B3:E8:2E:F3:8D:0B:53
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer:       /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial:       019E1D909617C2D04FFC8505C791B941B167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number:          0A62
Signing time:             Tue 12 May 2026 19:01:15 +0000
Manifest this update:     Tue 12 May 2026 19:01:15 +0000
Manifest next update:     Wed 13 May 2026 19:01:15 +0000
Files and hashes:         1: T8N7nCQnGIjhbsR3LmsuRAA0G8M.roa (hash: PEOG98xvhnROQhfBX1D6hwED9IIyduE7r0HR6hXEDLk=)
                          2: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: /EIS8ndPaNjdTganAAocSRT1tlQnYZKFg4h101eYc10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:96:17:c2:d0:4f:fc:85:05:c7:91:b9:41:b1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
        Validity
            Not Before: May 12 19:01:15 2026 GMT
            Not After : May 13 19:01:15 2026 GMT
        Subject: CN=789ee9c2fd534551412d4acd39b3e82ef38d0b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:71:2c:36:03:0b:db:91:77:f5:82:96:bd:
                    6f:d0:8a:79:c9:89:fc:a4:01:ef:c0:b0:88:f5:c6:
                    1d:c4:70:67:0b:64:7a:11:bf:99:85:4c:71:de:d2:
                    c9:ce:f0:e3:a4:07:42:b8:4e:11:36:7a:70:5c:8b:
                    1d:e4:8d:93:3c:0d:b8:6e:a9:f3:91:f1:e8:54:20:
                    f5:f4:45:aa:e6:cd:fa:65:2e:07:33:2d:fc:f7:a1:
                    7c:33:18:ba:23:83:f5:44:e4:04:e9:e6:40:0d:ec:
                    80:3b:96:f0:37:da:01:e5:d7:fa:9c:6c:b7:53:9b:
                    45:cd:80:07:c1:77:89:85:ba:7f:88:9b:c8:0c:2a:
                    3a:bd:ea:af:d7:41:33:b5:54:41:5f:bd:77:05:8a:
                    57:ec:4f:f7:3a:4e:06:b3:72:ff:f2:2a:9b:1d:da:
                    b8:e8:30:b1:bd:7a:ed:33:c9:e0:a9:ba:d9:32:c7:
                    ec:c1:d4:cd:19:fe:eb:ad:4f:83:a9:e1:5e:ee:0b:
                    ee:e7:c4:73:bf:17:ab:36:e6:e9:57:1b:0e:8d:b6:
                    11:19:13:64:51:ae:d2:2b:ae:4d:9c:c7:f1:4c:53:
                    05:e2:1e:72:73:66:0d:a9:7d:18:e6:5a:ca:69:d6:
                    83:f6:5e:ba:3e:08:5c:ab:2b:75:a6:d5:38:74:c9:
                    f8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9E:E9:C2:FD:53:45:51:41:2D:4A:CD:39:B3:E8:2E:F3:8D:0B:53
            X509v3 Authority Key Identifier:
                keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c3:e9:a0:5d:56:b9:29:dc:35:24:e1:59:dc:0c:c5:97:e6:
         6e:62:45:7d:7b:cb:58:14:87:7b:10:6d:66:cf:07:2e:42:f9:
         47:07:5d:0b:c8:e1:fc:87:e0:99:26:1b:5f:2d:6c:18:ae:0c:
         be:ae:59:66:3f:5a:38:54:43:87:e6:09:a2:f8:a9:dd:e2:9e:
         f1:cb:69:e3:ab:86:87:50:3c:e9:e2:6c:4a:05:7c:f5:41:2a:
         8f:ca:c1:40:e0:2d:b5:78:9d:e5:53:ea:fa:e7:e3:b8:b6:1b:
         27:52:84:3c:fc:1a:8a:09:a9:04:40:8d:37:60:4f:62:04:1f:
         f0:93:53:0a:84:53:44:3a:11:be:94:d7:49:03:a9:87:9e:ac:
         d1:4e:3f:ad:16:8d:e6:f0:2b:87:46:63:d9:cc:2e:fe:4d:1e:
         65:d3:a9:72:ff:61:54:cc:29:07:df:ae:c1:37:c9:95:17:4d:
         a1:7e:ab:c8:a5:f0:99:3c:76:85:92:85:d9:58:70:19:d0:27:
         51:91:e5:f8:e9:3a:ff:a9:3d:26:80:05:db:8a:18:f6:0a:fc:
         dc:3d:53:bb:57:cf:fb:45:00:c3:79:cd:ec:10:0c:e6:6e:13:
         4f:b2:5d:71:29:0c:28:de:57:bc:0c:2b:25:c2:98:38:9a:eb:
         46:5e:6d:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkJYXwtBP/IUFx5G5QbFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YmY3ZDVjNzBjNjMyNTRkMGNkZTM0YzJiYTQ5ZDk0MDdm
YzI0ZjMwHhcNMjYwNTEyMTkwMTE1WhcNMjYwNTEzMTkwMTE1WjAzMTEwLwYDVQQD
Eyg3ODllZTljMmZkNTM0NTUxNDEyZDRhY2QzOWIzZTgyZWYzOGQwYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvpxLDYDC9uRd/WClr1v0Ip5yYn8
pAHvwLCI9cYdxHBnC2R6Eb+ZhUxx3tLJzvDjpAdCuE4RNnpwXIsd5I2TPA24bqnz
kfHoVCD19EWq5s36ZS4HMy3896F8Mxi6I4P1ROQE6eZADeyAO5bwN9oB5df6nGy3
U5tFzYAHwXeJhbp/iJvIDCo6veqv10EztVRBX713BYpX7E/3Ok4Gs3L/8iqbHdq4
6DCxvXrtM8ngqbrZMsfswdTNGf7rrU+DqeFe7gvu58RzvxerNubpVxsOjbYRGRNk
Ua7SK65NnMfxTFMF4h5yc2YNqX0Y5lrKadaD9l66Pghcqyt1ptU4dMn4ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHie6cL9U0VRQS1KzTmz6C7zjQtTMB8GA1UdIwQY
MBaAFJm/fVxwxjJU0M3jTCuknZQH/CTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYt
NThiY2RhMzU2ZTYyLzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lNDgyNTYtYzZmYy00NjMxLThmNWYtNThiY2RhMzU2ZTYy
LzEvbWI5OVhIREdNbFRRemVOTUs2U2RsQWY4SlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvsPpoF1W
uSncNSThWdwMxZfmbmJFfXvLWBSHexBtZs8HLkL5RwddC8jh/IfgmSYbXy1sGK4M
vq5ZZj9aOFRDh+YJovip3eKe8ctp46uGh1A86eJsSgV89UEqj8rBQOAttXid5VPq
+ufjuLYbJ1KEPPwaigmpBECNN2BPYgQf8JNTCoRTRDoRvpTXSQOph56s0U4/rRaN
5vArh0Zj2cwu/k0eZdOpcv9hVMwpB9+uwTfJlRdNoX6ryKXwmTx2hZKF2VhwGdAn
UZHl+Ok6/6k9JoAF24oY9gr83D1Tu1fP+0UAw3nN7BAM5m4TT7JdcSkMKN5XvAwr
JcKYOJrrRl5t0Q==
-----END CERTIFICATE-----
Generated at Wed May 13 06:17:11 2026 by rpki-client