Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
File:                     _JgxNwQvyMSSFwfU622l9sSnmls.mft (raw, json)
Hash identifier:          L+tiiUEeEwMz1NlV1DbUPo6F9+A9hkrJuiEA4o7pRSo=
Subject key identifier:   EC:33:44:FB:2D:70:E9:4E:83:48:BB:80:E8:C9:87:F7:6A:AF:80:37
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Certificate issuer:       /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial:       019E205A80E26BA265DB27E9E2ACF4F1CA5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
Manifest number:          190C
Signing time:             Wed 13 May 2026 08:01:02 +0000
Manifest this update:     Wed 13 May 2026 08:01:02 +0000
Manifest next update:     Thu 14 May 2026 08:01:02 +0000
Files and hashes:         1: U8t2JW_kjuRPOEEcuD5OXG8vU5s.roa (hash: AonXRXVRx1Opw2zNQQjpzxeB1MfNANDEV8Jlm8F8xC8=)
                          2: WrfLi6B4C5n8KYb3aO5hiWyqrQw.roa (hash: l450E1VbjWMP09lLWfXBdFYDcmgMKFdvyz3EAYHxkx4=)
                          3: _JgxNwQvyMSSFwfU622l9sSnmls.crl (hash: z2pHyOreCAQJJPIOPmQeB0VRKlTyoNRFPXDWxDSOp4U=)
                          4: oj9oX7VOpSpHPa8jC4mFQUNG32g.roa (hash: Hw7z02cVTJ9+JSdnwOvxaUFM6zH/Yq09kWqzPwdi4Yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:80:e2:6b:a2:65:db:27:e9:e2:ac:f4:f1:ca:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
        Validity
            Not Before: May 13 08:01:02 2026 GMT
            Not After : May 14 08:01:02 2026 GMT
        Subject: CN=ec3344fb2d70e94e8348bb80e8c987f76aaf8037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3a:59:94:2f:03:53:90:f1:da:e9:f1:c9:a3:
                    8a:08:bd:92:eb:a9:83:af:8a:7c:8e:4e:a5:87:e8:
                    06:46:2b:69:9b:56:88:b4:40:86:06:e1:00:45:71:
                    e0:f0:3a:56:c8:c7:2e:8b:e3:b9:09:23:d1:41:3e:
                    54:2f:4c:d8:a8:e6:74:01:b0:f0:ec:fa:25:4c:64:
                    9c:6c:f2:2c:34:a0:bf:0f:fb:02:25:84:28:b6:36:
                    b0:c5:c9:c7:63:b3:f4:ab:62:37:ca:50:25:d5:17:
                    e7:92:c1:3b:55:0a:9f:fd:b4:41:c2:73:7f:c9:d1:
                    d0:81:95:52:1f:61:fa:bc:68:7e:2f:79:39:b8:eb:
                    4b:a1:ac:e1:0e:a2:b5:fa:07:d2:dd:40:d9:3e:e5:
                    2e:ef:98:6b:e4:ae:9f:d2:b3:4d:8c:01:27:88:92:
                    2d:39:f5:87:d9:53:1f:3f:7c:24:80:3a:32:90:da:
                    8e:8b:bd:32:08:ba:25:d6:95:9c:e8:a4:ac:9a:e3:
                    e8:78:c0:83:62:55:fb:4b:e5:97:58:ab:4e:45:90:
                    3a:9c:64:b0:37:18:78:9b:d8:4a:4b:62:37:a0:2d:
                    4e:d3:1e:f0:2f:b0:23:51:a3:80:8b:03:6d:02:3f:
                    db:ca:be:60:5f:0b:9f:d4:55:15:9e:43:b6:26:e6:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:33:44:FB:2D:70:E9:4E:83:48:BB:80:E8:C9:87:F7:6A:AF:80:37
            X509v3 Authority Key Identifier:
                keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b5:ff:18:66:6b:30:ed:7d:df:ea:32:9e:44:b6:34:49:a7:
         04:a9:31:03:84:5c:2e:48:60:f4:00:9b:aa:22:bc:c2:44:7b:
         9c:e6:8f:c4:ed:f9:7c:a5:96:f2:2a:84:8e:f9:f1:3d:a1:65:
         98:a3:48:c1:a0:b7:98:6d:9c:19:88:b2:0f:6f:9b:17:11:7e:
         81:a7:e4:57:dd:fb:96:fb:6c:85:92:96:04:92:7f:9c:a8:10:
         74:16:ae:07:1f:cc:2a:0b:8b:df:80:3e:04:6f:ac:49:6b:9b:
         06:bc:2d:08:1f:62:65:6f:d0:46:87:25:c8:e7:34:6b:cb:15:
         e4:a9:eb:d9:39:37:11:40:a7:1b:9d:f1:1e:50:c2:7c:76:42:
         b3:6b:07:25:a1:aa:fb:bd:0e:d7:10:74:cb:8a:b8:43:6c:d2:
         e7:f3:6f:73:65:50:bb:d4:b9:b2:19:ba:95:ab:e3:61:1f:6e:
         5d:c2:2f:ee:98:6a:62:68:e9:f7:e9:a7:6c:2c:3e:e5:ec:a2:
         bc:8c:d5:6d:05:c0:1b:03:30:f7:8c:39:39:ba:fc:6f:33:6d:
         2d:6f:31:d1:c5:20:56:ae:4a:71:fc:6e:9e:7e:81:b7:fb:56:
         f1:a4:2a:56:d7:34:42:08:d6:dd:5c:10:53:ab:91:2e:10:c2:
         af:25:fb:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWoDia6Jl2yfp4qz08cpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTgzMTM3MDQyZmM4YzQ5MjE3MDdkNGViNmRhNWY2YzRh
NzlhNWIwHhcNMjYwNTEzMDgwMTAyWhcNMjYwNTE0MDgwMTAyWjAzMTEwLwYDVQQD
EyhlYzMzNDRmYjJkNzBlOTRlODM0OGJiODBlOGM5ODdmNzZhYWY4MDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjpZlC8DU5Dx2unxyaOKCL2S66mD
r4p8jk6lh+gGRitpm1aItECGBuEARXHg8DpWyMcui+O5CSPRQT5UL0zYqOZ0AbDw
7PolTGScbPIsNKC/D/sCJYQotjawxcnHY7P0q2I3ylAl1RfnksE7VQqf/bRBwnN/
ydHQgZVSH2H6vGh+L3k5uOtLoazhDqK1+gfS3UDZPuUu75hr5K6f0rNNjAEniJIt
OfWH2VMfP3wkgDoykNqOi70yCLol1pWc6KSsmuPoeMCDYlX7S+WXWKtORZA6nGSw
Nxh4m9hKS2I3oC1O0x7wL7AjUaOAiwNtAj/byr5gXwuf1FUVnkO2JuY2MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwzRPstcOlOg0i7gOjJh/dqr4A3MB8GA1UdIwQY
MBaAFPyYMTcEL8jEkhcH1OttpfbEp5pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMt
MjI0ZjEwYTk4MWZlLzEvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMtMjI0ZjEwYTk4MWZl
LzEvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7X/GGZr
MO193+oynkS2NEmnBKkxA4RcLkhg9ACbqiK8wkR7nOaPxO35fKWW8iqEjvnxPaFl
mKNIwaC3mG2cGYiyD2+bFxF+gafkV937lvtshZKWBJJ/nKgQdBauBx/MKguL34A+
BG+sSWubBrwtCB9iZW/QRoclyOc0a8sV5Knr2Tk3EUCnG53xHlDCfHZCs2sHJaGq
+70O1xB0y4q4Q2zS5/Nvc2VQu9S5shm6lavjYR9uXcIv7phqYmjp9+mnbCw+5eyi
vIzVbQXAGwMw94w5Obr8bzNtLW8x0cUgVq5Kcfxunn6Bt/tW8aQqVtc0QgjW3VwQ
U6uRLhDCryX7/g==
-----END CERTIFICATE-----
Generated at Wed May 13 12:32:12 2026 by rpki-client