Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
File:                     83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json)
Hash identifier:          SPMGW9hdNgaKrAnH64q8AT6yxlehYB3F66MhBR16NMc=
Subject key identifier:   F4:D9:37:A0:B2:EB:51:A0:5B:AE:29:6B:88:D6:16:3A:70:8A:B3:84
Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
Certificate issuer:       /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Certificate serial:       019E1E6C8A0A7247596C9B921DDEB48D287B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
Manifest number:          0BD7
Signing time:             Tue 12 May 2026 23:01:30 +0000
Manifest this update:     Tue 12 May 2026 23:01:30 +0000
Manifest next update:     Wed 13 May 2026 23:01:30 +0000
Files and hashes:         1: 0zzNK_dip5D-vbdS46pdPM0bWmY.roa (hash: +Q7jclQp9h+mglscOOjepjoQV01QfX45LZ55s+yRBPA=)
                          2: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: 5tCe3L55iG24rcshR7ZZYdHNYTRv23ZTtk/5pVjbwos=)
                          3: TOdssmECwVP8bGD2vmk5VV7S5q8.roa (hash: i0+RAc65INiM3wP9huvJS9AUFFUa8IJxYIWJTeUW7tI=)
                          4: XF5YCv5InZ3eQDwQtIZCzm4p-p8.roa (hash: WZz5fH/inmisjDgfduYv271FfaeCoOytDiztCH+AR90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:8a:0a:72:47:59:6c:9b:92:1d:de:b4:8d:28:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
        Validity
            Not Before: May 12 23:01:30 2026 GMT
            Not After : May 13 23:01:30 2026 GMT
        Subject: CN=f4d937a0b2eb51a05bae296b88d6163a708ab384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bb:7e:63:fa:95:1f:4e:48:29:bb:a6:2f:87:
                    ea:ff:51:c2:15:39:90:43:aa:87:ce:94:bf:d4:cb:
                    9a:3d:87:6c:ac:61:38:27:ac:90:60:52:ea:51:40:
                    fe:98:09:b1:18:5d:ad:8f:6d:81:ce:ce:17:24:12:
                    00:3f:37:cd:7c:49:28:56:2e:6f:96:45:71:54:2e:
                    a2:b0:f7:86:86:0b:92:ed:80:28:ea:50:1b:01:38:
                    ba:db:6f:e0:fc:4f:b4:68:ed:40:2b:5f:c0:c4:d8:
                    4b:5c:2e:5a:16:80:81:8b:64:01:33:d1:ff:50:0a:
                    8a:d1:91:7f:81:54:f8:82:a3:a0:38:79:28:e2:bd:
                    12:0f:c0:a1:a6:9f:03:dd:c6:5d:e6:54:13:ec:2c:
                    83:86:32:d2:df:a3:e7:3c:da:88:79:6e:46:99:10:
                    c2:3a:a2:37:9a:56:a4:e0:7a:8c:27:a9:a7:32:00:
                    ec:90:a4:a2:01:6b:c2:d4:f3:a8:b1:ca:c1:d0:21:
                    f8:1b:4f:9c:a9:23:ef:c0:ce:47:31:75:32:58:60:
                    ea:f2:69:78:9f:07:41:62:4e:04:c6:7e:94:f5:2b:
                    76:46:f4:6b:b6:59:87:63:03:cd:d4:05:3c:67:b5:
                    ed:2d:1b:2f:c6:9f:dd:ad:ba:f1:6e:87:8b:04:2f:
                    9c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D9:37:A0:B2:EB:51:A0:5B:AE:29:6B:88:D6:16:3A:70:8A:B3:84
            X509v3 Authority Key Identifier:
                keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:17:03:78:46:e1:bd:6b:39:c1:a2:65:84:63:ea:a7:da:f7:
         8b:fe:6d:44:98:a7:f7:94:f4:09:d1:f8:54:dc:4e:fb:b8:4c:
         da:75:94:99:b2:d2:82:46:d2:30:d6:41:8a:e7:bb:f5:03:5c:
         13:be:ae:f4:1e:63:51:81:46:8a:93:40:ea:5e:75:d6:62:1e:
         f5:28:b7:2b:1b:30:1d:2c:08:81:aa:70:4c:40:42:de:49:57:
         17:f1:ca:2f:8d:fc:0c:76:b3:94:ab:d7:da:e5:bc:81:4e:9d:
         40:47:47:b8:22:02:a9:19:1a:4b:61:66:89:68:7b:63:9b:0c:
         36:47:f4:fa:f7:05:6c:4b:18:f8:d7:bc:bb:c4:72:f6:4a:0b:
         47:0e:dd:e7:f7:9a:88:39:e6:06:6c:85:a0:37:e1:fa:ae:60:
         1c:5b:bf:28:0f:e6:b4:e7:df:46:59:77:cb:db:b9:95:43:65:
         ca:15:51:75:9f:b4:84:40:c9:5f:cb:d2:a8:dd:1d:8a:e8:df:
         f9:cd:e1:b1:6a:6a:7e:13:bd:0f:d2:b9:fc:8a:e3:af:91:3d:
         21:11:7f:0d:d2:c0:94:e6:f2:97:cd:ba:fc:28:d4:d3:1b:24:
         d0:dc:25:98:da:9b:1d:c3:9b:07:91:32:e6:e5:40:b5:8b:fc:
         60:e7:e8:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebIoKckdZbJuSHd60jSh7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNzRmNzM0YzM2OTVlNjc5MDZhNzAzMmViMmU1OWZiM2Vi
NDFiMjIwHhcNMjYwNTEyMjMwMTMwWhcNMjYwNTEzMjMwMTMwWjAzMTEwLwYDVQQD
EyhmNGQ5MzdhMGIyZWI1MWEwNWJhZTI5NmI4OGQ2MTYzYTcwOGFiMzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bt+Y/qVH05IKbumL4fq/1HCFTmQ
Q6qHzpS/1MuaPYdsrGE4J6yQYFLqUUD+mAmxGF2tj22Bzs4XJBIAPzfNfEkoVi5v
lkVxVC6isPeGhguS7YAo6lAbATi622/g/E+0aO1AK1/AxNhLXC5aFoCBi2QBM9H/
UAqK0ZF/gVT4gqOgOHko4r0SD8Chpp8D3cZd5lQT7CyDhjLS36PnPNqIeW5GmRDC
OqI3mlak4HqMJ6mnMgDskKSiAWvC1POoscrB0CH4G0+cqSPvwM5HMXUyWGDq8ml4
nwdBYk4Exn6U9St2RvRrtlmHYwPN1AU8Z7XtLRsvxp/drbrxboeLBC+cAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTZN6Cy61GgW64pa4jWFjpwirOEMB8GA1UdIwQY
MBaAFPN09zTDaV5nkGpwMusuWfs+tBsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTIt
NGJlZjgzMjhhYWFiLzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTItNGJlZjgzMjhhYWFi
LzEvODNUM05NTnBYbWVRYW5BeTZ5NVotejYwR3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxcDeEbh
vWs5waJlhGPqp9r3i/5tRJin95T0CdH4VNxO+7hM2nWUmbLSgkbSMNZBiue79QNc
E76u9B5jUYFGipNA6l511mIe9Si3KxswHSwIgapwTEBC3klXF/HKL438DHazlKvX
2uW8gU6dQEdHuCICqRkaS2FmiWh7Y5sMNkf0+vcFbEsY+Ne8u8Ry9koLRw7d5/ea
iDnmBmyFoDfh+q5gHFu/KA/mtOffRll3y9u5lUNlyhVRdZ+0hEDJX8vSqN0diujf
+c3hsWpqfhO9D9K5/Irjr5E9IRF/DdLAlObyl826/CjU0xsk0NwlmNqbHcObB5Ey
5uVAtYv8YOfoyw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:06:58 2026 by rpki-client