Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
File:                     lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json)
Hash identifier:          lqW1BYfKB6FfjCWNH29I6sSeRCmgSxdA7EpUCKAaZ+Y=
Subject key identifier:   BF:9B:07:B9:E9:F4:8F:E6:E0:BA:8D:66:17:E1:1D:E7:26:A4:DB:13
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Certificate issuer:       /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial:       019E1D5937B3EEAAD74AED148B1C08B1A582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
Manifest number:          193A
Signing time:             Tue 12 May 2026 18:00:46 +0000
Manifest this update:     Tue 12 May 2026 18:00:46 +0000
Manifest next update:     Wed 13 May 2026 18:00:46 +0000
Files and hashes:         1: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=)
                          2: 4hH57FydlHdc4V1rY5LVn5D_lUA.roa (hash: bQ1e0/IxpkasqU8EsI7sNLsUave4BUbp6/mKopiE7ps=)
                          3: E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa (hash: 7uI1YsgPEgxKnbIzjDUu68rwsx6hVD90WAbaTfQ1PeQ=)
                          4: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=)
                          5: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=)
                          6: MQQzsxU40W_xEpXzt8cvUT-bq9E.roa (hash: d2EdB5G5EgArFhc3OWiFNquY+C0ERTnVWLmjHj1Wbbo=)
                          7: NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa (hash: Et/9ehhdVf0NmhMuGdiZdz+LErbH+Fl/Psv/5/v/xGQ=)
                          8: OxhwppLGol158lCsq2yWJNLf_NE.roa (hash: MmzmN0W/m1dLKAb2mybZa7hE2FPBvGD3tTttqagSblg=)
                          9: Pr90WuSkqHq-lxUoQH2NqVzEu94.roa (hash: 6wVWcialsagT7geFrAaPhDZyYoMTpj0MkP2MqolJPfQ=)
                          10: Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa (hash: X0Zha2ZlfUGqlz4gFH70EfU/pfb2w6wYl+Jrpp2l7d8=)
                          11: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=)
                          12: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=)
                          13: e-5TSb_mYHCdIuOD8vrCl1XPRAk.roa (hash: MQEDBz7zEe5IyXk9VD7pLY8AZKLie90h1keE21n1bzQ=)
                          14: gkoYWKhPVWJSzZKZ2UhHAj9zfS4.roa (hash: 2xLLVXq/Jt50epuLgX+yGtG0U3JwB6BPWJQju9wVWPo=)
                          15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: hw0+rtA7w0aLOF1Z4dNEceyvpLGbs3qaHJE9jhblqbo=)
                          16: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=)
                          17: tBM0BH84k4nIGXqIG37qLS0XebI.roa (hash: TQyYsWASmngbIW8Lh2ErsWEikXlEbvLYLPYi3fMojKA=)
                          18: tEZKD388wfIDI8SQ6X1kfbzjo_E.roa (hash: 6Al032wawyD0hBtB0AfHL41lnybj15pPaY89dRyaIg8=)
                          19: ttBmnLsLGk0QiBDZZrhpXLeq2Ro.roa (hash: aVi6Xk9A2f5Su9Y+yYYHIztt83ZG9tqYXEgyisye2K0=)
                          20: zLMAY1Q0XdWgZEDzB54ODnJ61Fc.roa (hash: 9HJq4nBdDYh3plgXx2Yf3DlxX8vzCFlzEoL5n+klIYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:37:b3:ee:aa:d7:4a:ed:14:8b:1c:08:b1:a5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
        Validity
            Not Before: May 12 18:00:46 2026 GMT
            Not After : May 13 18:00:46 2026 GMT
        Subject: CN=bf9b07b9e9f48fe6e0ba8d6617e11de726a4db13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:06:8e:d7:3a:7f:c2:3b:95:4f:95:f3:16:ba:
                    25:49:b5:33:1c:4c:5b:2f:75:86:45:70:5f:15:6c:
                    fe:d9:f7:bd:ca:18:f1:ec:c3:27:b1:6e:81:ae:9c:
                    0d:51:27:9e:87:35:d2:a7:bd:99:bd:f7:93:a0:04:
                    45:29:ca:18:90:91:12:c9:61:51:4c:c6:50:78:4f:
                    55:42:b2:4f:43:58:43:bf:75:b3:2a:a2:93:c5:fc:
                    4d:ef:2d:67:79:8f:bf:8e:8b:81:b4:b4:0a:25:f9:
                    c5:28:5f:04:3f:b1:7d:ec:40:84:41:84:ca:1f:75:
                    7b:71:03:32:8f:ac:54:29:c8:02:d3:ac:99:c1:ec:
                    ff:7d:0c:85:53:35:bb:c0:aa:22:67:4c:48:66:0c:
                    52:24:10:02:0e:6e:cb:f8:ad:3e:9e:84:d1:f7:bb:
                    33:f5:9a:66:a8:5e:79:bb:31:01:35:1e:e6:30:bd:
                    46:c0:5e:de:6f:d6:0f:52:a3:bf:a7:ed:4d:73:7a:
                    76:7f:dc:f8:f6:30:da:e8:1d:f9:0d:22:fc:d6:74:
                    da:91:39:2f:3a:95:dc:b5:9c:5f:c1:a6:fd:a4:57:
                    6f:21:16:9f:e0:27:4f:0f:04:57:77:e1:fb:17:a7:
                    d1:4b:c5:c8:43:16:4a:31:13:ea:4d:fd:0a:f1:40:
                    44:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9B:07:B9:E9:F4:8F:E6:E0:BA:8D:66:17:E1:1D:E7:26:A4:DB:13
            X509v3 Authority Key Identifier:
                keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1c:d3:1e:4d:e8:7b:10:e1:3d:dc:6b:a0:b4:53:40:ff:fa:
         73:c7:58:be:3a:f8:c9:47:b1:99:66:86:5c:5a:81:74:96:04:
         7e:f0:5a:01:6c:73:78:d4:bb:b8:bb:9d:42:46:89:18:26:23:
         da:f1:21:75:5a:a7:e7:f2:3b:f3:2f:a0:35:2b:1b:80:49:20:
         27:20:74:26:e1:7f:e0:47:6e:9d:06:6f:22:4b:63:2a:30:fa:
         75:18:e8:3c:65:9c:3b:fc:82:1b:c8:d0:f4:16:ee:c7:32:75:
         29:8c:db:6e:f0:9a:71:8f:54:87:a4:45:dd:d8:99:06:7a:7b:
         2b:a1:b7:73:e2:29:b3:d2:67:b1:06:9c:99:fb:66:54:49:95:
         c0:3f:11:50:33:ca:c5:a5:99:c1:df:44:9f:e9:52:0b:ae:46:
         b9:7e:03:b6:26:01:a5:1b:cb:0f:18:97:97:d7:17:f5:b0:01:
         69:f1:c0:6c:10:d2:a0:30:eb:61:44:98:b8:45:2a:8a:47:d0:
         9c:4d:b4:c4:87:35:13:dc:75:c3:74:c9:13:bb:4b:fd:15:26:
         e3:62:01:3a:ae:24:59:45:b2:cf:aa:39:dd:04:f0:11:4a:5e:
         9d:18:9d:19:9f:66:4a:fd:13:60:4e:74:95:d2:9f:98:32:24:
         bb:52:91:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWTez7qrXSu0UixwIsaWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0
NjVjMmUwHhcNMjYwNTEyMTgwMDQ2WhcNMjYwNTEzMTgwMDQ2WjAzMTEwLwYDVQQD
EyhiZjliMDdiOWU5ZjQ4ZmU2ZTBiYThkNjYxN2UxMWRlNzI2YTRkYjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gaO1zp/wjuVT5XzFrolSbUzHExb
L3WGRXBfFWz+2fe9yhjx7MMnsW6BrpwNUSeehzXSp72ZvfeToARFKcoYkJESyWFR
TMZQeE9VQrJPQ1hDv3WzKqKTxfxN7y1neY+/jouBtLQKJfnFKF8EP7F97ECEQYTK
H3V7cQMyj6xUKcgC06yZwez/fQyFUzW7wKoiZ0xIZgxSJBACDm7L+K0+noTR97sz
9ZpmqF55uzEBNR7mML1GwF7eb9YPUqO/p+1Nc3p2f9z49jDa6B35DSL81nTakTkv
OpXctZxfwab9pFdvIRaf4CdPDwRXd+H7F6fRS8XIQxZKMRPqTf0K8UBEZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+bB7np9I/m4LqNZhfhHecmpNsTMB8GA1UdIwQY
MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt
OTE2NDZiZjAxNTNkLzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk
LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRzTHk3o
exDhPdxroLRTQP/6c8dYvjr4yUexmWaGXFqBdJYEfvBaAWxzeNS7uLudQkaJGCYj
2vEhdVqn5/I78y+gNSsbgEkgJyB0JuF/4EdunQZvIktjKjD6dRjoPGWcO/yCG8jQ
9BbuxzJ1KYzbbvCacY9Uh6RF3diZBnp7K6G3c+Ips9JnsQacmftmVEmVwD8RUDPK
xaWZwd9En+lSC65GuX4DtiYBpRvLDxiXl9cX9bABafHAbBDSoDDrYUSYuEUqikfQ
nE20xIc1E9x1w3TJE7tL/RUm42IBOq4kWUWyz6o53QTwEUpenRidGZ9mSv0TYE50
ldKfmDIku1KR9g==
-----END CERTIFICATE-----
Generated at Wed May 13 02:21:09 2026 by rpki-client