Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File:                     3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier:          pG4DrG/Uge5Q+yCv4JcQcykMkNGUSQUsUbDQxQxz5/k=
Subject key identifier:   EF:74:D2:0F:D0:97:2C:A2:A1:44:A2:A0:52:A6:62:D5:99:6E:1C:E9
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer:       /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial:       019E1DFEAF6DC9CF0C34836AFB9A14BF5BDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 21:01:30 +0000
Manifest this update:     Tue 12 May 2026 21:01:30 +0000
Manifest next update:     Wed 13 May 2026 21:01:30 +0000
Files and hashes:         1: 0zAvG8q_rQz542VLQHfI3pwn2hU.roa (hash: EpeZpmHs3b50RgbC9T7I86EOA85BMvieUCH/Qo6Mt6U=)
                          2: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: Z+gAoKeq33+Wi39kz7BGzWGUdKKotQZjk8nBvngnBaA=)
                          3: gozTMRP9KybW0YQlfst5QWvJTAc.roa (hash: 1fB1QbWdo2Si+L9RD7xiEIKgMl1IQRY1BWEJBSr6TVA=)
                          4: nCAbVn_gsNs4x4asBKyazyvKXR0.roa (hash: Ir2ZDg7CX0Hx7nK6/8SSzS9hwNZYvwP7LhXhdGV2tlA=)
                          5: s5RTg8fa0nQHIcIumLzUhuAAt24.roa (hash: cqMD2IDYqFBpxsaJVxm5d2TxnTtqRKRBltHR4geFTsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:af:6d:c9:cf:0c:34:83:6a:fb:9a:14:bf:5b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
        Validity
            Not Before: May 12 21:01:30 2026 GMT
            Not After : May 13 21:01:30 2026 GMT
        Subject: CN=ef74d20fd0972ca2a144a2a052a662d5996e1ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:76:c8:ee:b2:a0:b9:e5:ad:2e:69:06:da:95:
                    d8:1f:9f:e4:69:25:c0:8b:36:e8:69:82:bb:20:d2:
                    da:35:ee:47:8b:57:4e:46:94:50:39:3d:e1:0c:a2:
                    34:53:77:a2:34:e8:8e:b2:46:14:56:cd:23:43:88:
                    7e:37:74:ad:37:57:cf:f1:94:2e:74:7e:a6:a6:74:
                    9a:67:5c:11:84:0c:35:38:03:bb:02:d4:d4:c9:fe:
                    b3:fd:2e:88:d3:93:df:14:16:cf:5a:6b:ce:5f:c7:
                    8b:8c:51:cb:36:cc:c3:56:cd:5e:87:d6:dc:fe:3f:
                    88:b1:17:c9:41:ef:c6:f8:17:34:e7:88:66:1d:7a:
                    2f:85:d5:eb:d9:d8:26:78:f9:d4:17:a0:ee:f5:1e:
                    3a:73:97:d3:d6:25:cc:05:e8:de:b1:cc:0e:b1:64:
                    99:b1:78:75:22:6f:18:59:b1:f7:5a:e7:79:b6:1e:
                    ed:f4:b3:92:4a:77:9f:5c:92:0f:ad:17:ef:3e:40:
                    e2:a5:c0:c8:8f:3f:3d:0a:f5:73:d7:8b:ef:4f:45:
                    4d:5c:58:29:11:b5:90:cb:7a:2f:c7:58:26:23:5d:
                    18:d3:b8:32:df:be:70:6e:f4:66:82:a1:ea:b7:11:
                    6e:c0:62:da:e6:b4:be:4e:8b:dd:e2:48:8f:13:cb:
                    af:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:74:D2:0F:D0:97:2C:A2:A1:44:A2:A0:52:A6:62:D5:99:6E:1C:E9
            X509v3 Authority Key Identifier:
                keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:30:d1:ec:73:df:08:21:19:2d:f0:f1:b4:16:73:9c:19:
         7c:af:80:40:7b:9c:de:a1:09:bc:4f:13:07:e8:58:d0:af:32:
         7d:9f:7e:36:7b:9c:f5:15:54:93:7f:f0:c5:a4:bb:e8:71:7c:
         cc:9f:ab:d6:26:df:89:df:27:c0:ea:51:cd:ec:73:8f:21:c2:
         b7:97:40:ab:3e:e1:87:1d:4a:8a:76:37:7d:b3:4f:3c:1c:ce:
         af:2a:ed:a5:0b:e3:2a:2f:52:18:27:10:b9:3b:12:67:78:ac:
         ae:b7:28:de:d5:c1:7f:da:ed:15:eb:ff:05:31:9d:bc:76:dc:
         f4:d1:ee:a3:6f:62:bd:79:6a:18:d0:2b:55:bb:4a:86:e3:f9:
         d5:30:01:88:d2:88:b8:83:dc:37:62:c7:a2:1f:0c:b4:63:b1:
         20:b5:d0:d6:a8:7a:ac:5c:59:4d:91:f4:4a:8e:5b:9c:76:29:
         46:a2:3e:d3:fd:55:cf:d6:30:60:49:84:af:b4:b3:36:b5:2d:
         8b:5c:31:bb:b0:df:3e:13:c8:c4:53:19:a0:56:12:a6:93:2f:
         55:63:5c:1d:e4:f3:f3:61:1b:b4:81:38:58:e5:89:b6:df:b4:
         9c:a5:11:05:cf:c4:3f:b0:db:98:5f:77:5d:23:f6:2b:4b:35:
         b1:00:d2:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/q9tyc8MNINq+5oUv1vbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMGI2NjNjNDVkN2JjMjcyNGQxNjg0ODUwODc1ODFlMTQ0
NDhmYjYwHhcNMjYwNTEyMjEwMTMwWhcNMjYwNTEzMjEwMTMwWjAzMTEwLwYDVQQD
EyhlZjc0ZDIwZmQwOTcyY2EyYTE0NGEyYTA1MmE2NjJkNTk5NmUxY2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HbI7rKgueWtLmkG2pXYH5/kaSXA
izboaYK7INLaNe5Hi1dORpRQOT3hDKI0U3eiNOiOskYUVs0jQ4h+N3StN1fP8ZQu
dH6mpnSaZ1wRhAw1OAO7AtTUyf6z/S6I05PfFBbPWmvOX8eLjFHLNszDVs1eh9bc
/j+IsRfJQe/G+Bc054hmHXovhdXr2dgmePnUF6Du9R46c5fT1iXMBejescwOsWSZ
sXh1Im8YWbH3Wud5th7t9LOSSnefXJIPrRfvPkDipcDIjz89CvVz14vvT0VNXFgp
EbWQy3ovx1gmI10Y07gy375wbvRmgqHqtxFuwGLa5rS+Tovd4kiPE8uvIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO900g/QlyyioUSioFKmYtWZbhzpMB8GA1UdIwQY
MBaAFN0LZjxF17wnJNFoSFCHWB4URI+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQt
M2I5ZTNjOGEyZmNhLzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQtM2I5ZTNjOGEyZmNh
LzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ10w0exz
3wghGS3w8bQWc5wZfK+AQHuc3qEJvE8TB+hY0K8yfZ9+Nnuc9RVUk3/wxaS76HF8
zJ+r1ibfid8nwOpRzexzjyHCt5dAqz7hhx1KinY3fbNPPBzOryrtpQvjKi9SGCcQ
uTsSZ3isrrco3tXBf9rtFev/BTGdvHbc9NHuo29ivXlqGNArVbtKhuP51TABiNKI
uIPcN2LHoh8MtGOxILXQ1qh6rFxZTZH0So5bnHYpRqI+0/1Vz9YwYEmEr7SzNrUt
i1wxu7DfPhPIxFMZoFYSppMvVWNcHeTz82EbtIE4WOWJtt+0nKURBc/EP7DbmF93
XSP2K0s1sQDSJg==
-----END CERTIFICATE-----
Generated at Wed May 13 01:12:32 2026 by rpki-client