Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
File:                     1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json)
Hash identifier:          r1NHX7lwPvtIgr415Gjlk0SdV1BzDlJcK/Y/4HYmiHo=
Subject key identifier:   15:AC:9D:A6:B8:22:83:46:80:5D:5C:B8:46:ED:3A:02:1D:F8:B0:8E
Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Certificate issuer:       /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Certificate serial:       019E1CB56CCDE671A61D0F26BC7397AD95AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
Manifest number:          0510
Signing time:             Tue 12 May 2026 15:01:52 +0000
Manifest this update:     Tue 12 May 2026 15:01:52 +0000
Manifest next update:     Wed 13 May 2026 15:01:52 +0000
Files and hashes:         1: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: b0qb4tcdmVJvuoLkngOimnUs1SVlQbonBSA0dY+mTIk=)
                          2: 22x8PN_1LTHR6l66GpUqyti_zA0.roa (hash: CSv7c1XejVckeMl+4KVZ0R5JwTwo6hy/rgUnKWrc8iE=)
                          3: JsDV0JgNIJsN-ibYdgtSHoMxIvw.roa (hash: cHo9xyUEk2HyEiBCUp1r4usf+4Crk42MuHgQ//gFieE=)
                          4: MN6U3VW42sb0OVdqBMcLBJ2g2zU.roa (hash: PPnAC3azWQhKiDxnnjOYt4M14J8iF87kO3d2yUA8Kfw=)
                          5: YbKvoesrYXHEmFEjcVByq5eynzo.roa (hash: +DYa+fe9egpPIsRsJIXZUMAsEnq8jTNkWLMhIYMd4Q8=)
                          6: byQ1yszhOcZFFPh_Y5AKBXMFwMw.roa (hash: b7qP0sl3+othoRFTec+oydZ8N3Jq1XUmt+VOT3v3hnY=)
                          7: gC5ojAbS6z97a05sXClJSkkJk3w.roa (hash: laV5VTUScUMrKJ3a9qdAMd2Oli3d8tpx9cRZCqQwMls=)
                          8: kHP0M6fVan_dV2bdSXbsBdJ27pU.roa (hash: z5ajzgWdArm34wD+Vi31zXSHcWy5YvyidurL0SZHcbU=)
                          9: snHZlA_rMzA-GJtkANTKKKsjJms.roa (hash: wWUHeupDm38JL23SWCuEwKVQP7+CZz4/f+h6ttaySF4=)
                          10: tIWBDaq4vNzJLG3YFrMngR6UjEI.roa (hash: 4zzhkvUoZZB4cgAYHJR/34Gu96Vut755O0lj9l2/tWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:6c:cd:e6:71:a6:1d:0f:26:bc:73:97:ad:95:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
        Validity
            Not Before: May 12 15:01:52 2026 GMT
            Not After : May 13 15:01:52 2026 GMT
        Subject: CN=15ac9da6b8228346805d5cb846ed3a021df8b08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:4c:4a:fd:46:43:e9:f6:fb:41:bf:9b:a6:
                    85:d1:3d:76:f7:47:7c:4c:fe:7c:8e:f0:f5:56:d2:
                    a6:52:26:6d:ab:3e:61:2e:9f:06:02:e9:a7:2c:fa:
                    5b:b3:70:5b:4a:8b:9b:6c:52:51:78:31:e0:e9:cc:
                    e1:fc:33:84:5d:75:13:a1:39:38:4a:0c:cf:c0:c5:
                    c4:49:71:16:d9:70:d6:c9:5c:38:eb:45:53:74:2f:
                    c8:77:ac:b5:9a:a5:2b:b2:22:93:e4:13:4c:04:ee:
                    86:6c:d5:66:68:93:07:9c:c4:e9:89:a8:32:e3:0c:
                    8c:ec:54:c1:02:52:36:1b:b4:e5:d8:89:a2:16:cb:
                    de:aa:32:f1:f6:30:53:2c:ed:d6:66:92:db:ec:be:
                    13:6d:82:09:36:85:95:d9:2c:24:4e:db:5f:92:3c:
                    c1:eb:ce:16:e2:09:49:d6:85:62:f3:a1:96:2f:67:
                    21:db:b5:e1:94:a5:8f:fb:55:78:b0:6e:d4:5a:b0:
                    05:3f:93:6f:2f:f4:b3:39:c8:85:b2:1f:49:c6:20:
                    ab:06:c0:97:26:2a:09:1b:83:fd:4a:cf:33:de:ee:
                    86:15:06:ac:be:f6:27:1e:19:3e:77:67:7d:f2:b5:
                    ba:dd:bc:41:17:36:23:be:63:c4:89:82:7e:4e:1c:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AC:9D:A6:B8:22:83:46:80:5D:5C:B8:46:ED:3A:02:1D:F8:B0:8E
            X509v3 Authority Key Identifier:
                keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:49:e1:2f:7c:ca:24:a3:ad:b2:72:11:6d:8e:be:c8:9a:78:
         eb:fb:3d:44:91:51:95:9c:09:82:14:1d:70:c4:e5:c9:57:6c:
         1e:43:59:db:0e:45:e7:b8:2c:33:be:58:da:3f:d6:3b:c6:b4:
         8f:1e:64:10:3d:a0:72:a7:12:74:a7:ba:ef:13:bb:c0:2d:45:
         8a:4e:52:58:69:f3:38:c9:3f:ec:41:6c:34:df:a3:04:ca:39:
         bf:f8:b8:36:58:d0:d6:5a:87:49:75:ac:f8:c4:7e:a3:60:90:
         b7:e6:1e:07:66:09:3e:5c:9a:1f:4b:f3:b4:0f:ab:61:2e:cf:
         90:82:01:f9:c0:b5:cf:f7:06:e9:7c:b5:60:68:6d:0b:3a:7b:
         01:1b:11:57:f0:b5:51:8d:9b:1c:02:26:70:0a:b3:4a:02:63:
         b3:0c:97:2a:84:18:be:bc:a0:9a:d0:04:50:b3:2e:fc:3c:36:
         63:c4:1c:38:46:27:c2:d0:ba:50:ca:07:85:e4:09:2b:30:01:
         51:c3:6c:91:53:27:18:7f:7d:2c:8d:b9:e2:f2:5d:7c:92:27:
         f4:d5:b6:93:f2:82:c7:ab:23:f1:d6:cb:67:8c:4b:2f:d1:e7:
         14:d3:14:18:44:e9:7c:58:c3:13:04:20:bc:8b:cc:93:1c:e6:
         e0:7c:d2:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctWzN5nGmHQ8mvHOXrZWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ODgyMTJiZjVkYWNlMTA4MGRjNDVlMmM1NWI5MmZmODVj
NmMxOTIwHhcNMjYwNTEyMTUwMTUyWhcNMjYwNTEzMTUwMTUyWjAzMTEwLwYDVQQD
EygxNWFjOWRhNmI4MjI4MzQ2ODA1ZDVjYjg0NmVkM2EwMjFkZjhiMDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAZMSv1GQ+n2+0G/m6aF0T1290d8
TP58jvD1VtKmUiZtqz5hLp8GAumnLPpbs3BbSoubbFJReDHg6czh/DOEXXUToTk4
SgzPwMXESXEW2XDWyVw460VTdC/Id6y1mqUrsiKT5BNMBO6GbNVmaJMHnMTpiagy
4wyM7FTBAlI2G7Tl2ImiFsveqjLx9jBTLO3WZpLb7L4TbYIJNoWV2SwkTttfkjzB
684W4glJ1oVi86GWL2ch27XhlKWP+1V4sG7UWrAFP5NvL/SzOciFsh9JxiCrBsCX
JioJG4P9Ss8z3u6GFQasvvYnHhk+d2d98rW63bxBFzYjvmPEiYJ+ThwdkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWsnaa4IoNGgF1cuEbtOgId+LCOMB8GA1UdIwQY
MBaAFNWIISv12s4QgNxF4sVbkv+FxsGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMt
MWIyYWMzNWMwOWFhLzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMtMWIyYWMzNWMwOWFh
LzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUnhL3zK
JKOtsnIRbY6+yJp46/s9RJFRlZwJghQdcMTlyVdsHkNZ2w5F57gsM75Y2j/WO8a0
jx5kED2gcqcSdKe67xO7wC1Fik5SWGnzOMk/7EFsNN+jBMo5v/i4NljQ1lqHSXWs
+MR+o2CQt+YeB2YJPlyaH0vztA+rYS7PkIIB+cC1z/cG6Xy1YGhtCzp7ARsRV/C1
UY2bHAImcAqzSgJjswyXKoQYvrygmtAEULMu/Dw2Y8QcOEYnwtC6UMoHheQJKzAB
UcNskVMnGH99LI254vJdfJIn9NW2k/KCx6sj8dbLZ4xLL9HnFNMUGETpfFjDEwQg
vIvMkxzm4HzSYQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:29:21 2026 by rpki-client