Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File:                     ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier:          D0TaXaC5TL9shEbhpd4UEqhlZEz7uxOzOaLn/irLxaQ=
Subject key identifier:   C6:20:91:33:8E:DA:DE:24:A2:2A:3F:C6:17:8B:DC:4D:38:AE:AC:01
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer:       /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial:       019E20FF51BC69BD4BC6A602F415C81CEDEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number:          1653
Signing time:             Wed 13 May 2026 11:01:03 +0000
Manifest this update:     Wed 13 May 2026 11:01:03 +0000
Manifest next update:     Thu 14 May 2026 11:01:03 +0000
Files and hashes:         1: 123WXGbRTZdeisXrE-k_3g3EMvk.roa (hash: PVrjq81b7ONxfTHO259I9HIBssHsthuK6wCJzCfRRBw=)
                          2: 3JLEaN47mFd4AJ1ulcTajHwX46Q.roa (hash: 7nuv0xJK6J/Wz9ZBABmkHA68zDZCu6LbMkw8k4JA0aY=)
                          3: 3m4ZcWe4AoRitpxIdoHTfvPCTz4.roa (hash: R1IDNKkyr2PRIrfMe44b/uoEQJhofAwIdcVDkSZ0J1s=)
                          4: ktGWBH_rz8CZASP_zJHcbXXlp7Y.roa (hash: WQj8sJ8bysuFkPbFG5oVPz6oUf8fVBbz+1mkOQXAzAY=)
                          5: qmwlU-LpszPGm_f_AiX4jfEipIU.roa (hash: eBcbl11HwyKBKgKCJIYPrcRxwRYlzqQyOytUqmTgqj8=)
                          6: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: uL+HqFh7YSm5PFRt+4RjES/4j27E1FhLF6NkJakdKuc=)
                          7: wwateRuj040-ENpDYQ6qLA2XVl0.roa (hash: NH6PZI4atftudx1FEvFD8kdIjwc++XEY3pey7kw2zFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:51:bc:69:bd:4b:c6:a6:02:f4:15:c8:1c:ed:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
        Validity
            Not Before: May 13 11:01:03 2026 GMT
            Not After : May 14 11:01:03 2026 GMT
        Subject: CN=c62091338edade24a22a3fc6178bdc4d38aeac01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:29:65:ab:63:8f:cc:51:d7:58:54:65:00:d5:
                    26:93:59:da:31:ce:4b:ca:0f:17:c4:59:25:63:6e:
                    cc:f7:60:94:5a:00:5e:9d:9d:d3:90:82:3c:db:45:
                    0d:7a:73:5e:e6:56:6a:56:91:10:71:cd:b2:3f:91:
                    9e:17:8e:47:2b:9c:c6:f2:75:66:7a:26:f6:73:c1:
                    b1:3d:f6:23:61:bb:cd:ed:5a:44:c0:92:4f:4c:74:
                    0e:c2:62:57:22:62:bf:39:ee:3c:0e:a1:91:a8:19:
                    c9:31:5f:67:cd:84:8b:ab:18:62:42:87:54:4c:72:
                    71:1e:46:d0:25:4a:6c:13:ef:f9:3d:89:1b:74:ce:
                    c0:e9:ba:91:02:8e:ab:c1:ef:05:f8:36:eb:cf:9d:
                    f1:f3:3b:18:0f:b1:2b:3a:b9:35:a3:41:86:35:52:
                    d0:57:74:b8:4f:a6:35:21:28:3d:f9:92:7e:38:de:
                    77:6b:06:ca:61:77:43:cb:05:c6:5a:29:8f:6b:64:
                    96:24:85:6f:a2:97:da:e9:94:b2:c0:cf:16:2b:76:
                    c7:62:93:64:9f:1b:31:c8:97:c0:1c:6b:bf:19:1e:
                    a1:94:e7:62:55:55:88:ac:d2:41:31:53:de:3c:53:
                    a3:71:bb:e1:3f:79:39:42:d7:85:b7:4e:aa:b2:e6:
                    7e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:20:91:33:8E:DA:DE:24:A2:2A:3F:C6:17:8B:DC:4D:38:AE:AC:01
            X509v3 Authority Key Identifier:
                keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e7:7f:f3:fe:4e:72:88:2e:54:c8:2c:97:78:74:6c:0f:ac:
         52:76:b0:1f:f5:d5:10:68:32:ae:ca:80:0d:10:86:8f:b8:3e:
         c3:a7:46:50:53:45:1c:0c:7b:50:26:70:c6:29:a9:17:fe:ae:
         b2:2c:dc:76:20:ab:dc:b7:30:fb:45:25:ee:8a:76:94:c7:d7:
         71:04:ed:e8:6c:ae:3a:00:03:4b:93:f0:d3:29:87:c5:66:16:
         d7:d5:a1:86:b4:74:9b:ef:c5:f5:c3:56:61:e4:ab:25:f2:66:
         e0:67:27:51:2d:8f:22:c2:41:e5:89:c9:81:55:e7:ac:19:c4:
         8a:a0:ee:92:d6:61:8b:1f:97:53:09:9d:d3:c9:d1:ce:a1:06:
         10:d5:17:37:89:46:6d:a3:0f:44:b2:38:91:bb:ed:48:41:ed:
         f7:78:50:2f:cc:ce:e4:6b:fe:b1:e9:f2:c7:cc:4d:d5:2a:2d:
         16:51:bc:ef:5c:06:49:0d:ad:d1:6d:2f:da:a7:ca:67:53:12:
         3e:ef:93:71:cc:6c:3e:90:b5:18:3d:70:5d:7e:16:a1:82:3e:
         9f:e4:f2:a4:dd:3e:a8:de:70:24:b9:65:c8:28:6d:e0:d3:05:
         cd:aa:e0:d8:43:68:7f:6b:54:c9:bd:98:8c:46:f9:28:1e:a5:
         57:b1:b9:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/1G8ab1LxqYC9BXIHO3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZTA4ZDkzMzZmMmU2Y2QxNjVlYjczMDI5N2ZlNmQyMGM4
M2MzOWEwHhcNMjYwNTEzMTEwMTAzWhcNMjYwNTE0MTEwMTAzWjAzMTEwLwYDVQQD
EyhjNjIwOTEzMzhlZGFkZTI0YTIyYTNmYzYxNzhiZGM0ZDM4YWVhYzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yllq2OPzFHXWFRlANUmk1naMc5L
yg8XxFklY27M92CUWgBenZ3TkII820UNenNe5lZqVpEQcc2yP5GeF45HK5zG8nVm
eib2c8GxPfYjYbvN7VpEwJJPTHQOwmJXImK/Oe48DqGRqBnJMV9nzYSLqxhiQodU
THJxHkbQJUpsE+/5PYkbdM7A6bqRAo6rwe8F+Dbrz53x8zsYD7ErOrk1o0GGNVLQ
V3S4T6Y1ISg9+ZJ+ON53awbKYXdDywXGWimPa2SWJIVvopfa6ZSywM8WK3bHYpNk
nxsxyJfAHGu/GR6hlOdiVVWIrNJBMVPePFOjcbvhP3k5QteFt06qsuZ+dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYgkTOO2t4koio/xheL3E04rqwBMB8GA1UdIwQY
MBaAFK7gjZM28ubNFl63MCl/5tIMg8OaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAt
NDk3YmVkZDcxZWI5LzEvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAtNDk3YmVkZDcxZWI5
LzEvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiud/8/5O
coguVMgsl3h0bA+sUnawH/XVEGgyrsqADRCGj7g+w6dGUFNFHAx7UCZwximpF/6u
sizcdiCr3Lcw+0Ul7op2lMfXcQTt6GyuOgADS5Pw0ymHxWYW19WhhrR0m+/F9cNW
YeSrJfJm4GcnUS2PIsJB5YnJgVXnrBnEiqDuktZhix+XUwmd08nRzqEGENUXN4lG
baMPRLI4kbvtSEHt93hQL8zO5Gv+senyx8xN1SotFlG871wGSQ2t0W0v2qfKZ1MS
Pu+TccxsPpC1GD1wXX4WoYI+n+TypN0+qN5wJLllyCht4NMFzarg2ENof2tUyb2Y
jEb5KB6lV7G5/A==
-----END CERTIFICATE-----
Generated at Wed May 13 14:55:07 2026 by rpki-client