Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File:                     3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier:          zMWgJcJNHkKj4Q/VjTxOaG7T0CY4QoC6vwqwxHC2Q4I=
Subject key identifier:   82:A2:78:15:D9:F1:74:8F:B1:09:0F:11:8A:3C:A7:B0:F4:48:B1:FD
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer:       /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial:       019E1D90B998D1A9F8BFEC52AB78AD25BB91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number:          185B
Signing time:             Tue 12 May 2026 19:01:24 +0000
Manifest this update:     Tue 12 May 2026 19:01:24 +0000
Manifest next update:     Wed 13 May 2026 19:01:24 +0000
Files and hashes:         1: 2VjRyY35srd4tFZwYR3n2JNFpTM.roa (hash: KVtq1ksbn0eFzWJ+vieJNzHVkLQs/x4Zv2yLi0iRHw8=)
                          2: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: sqnsKPNMMLJPB+A9CeufsFQgXG4R5NC6us5D7sOyk8I=)
                          3: 9BqiZznRTC9JSPLmSXD7Iy4lCmY.roa (hash: GZIDFs4jfGkO+SNPF/qf6wnC22M8x1B+nVZUJlDdzRQ=)
                          4: O6c_sWPEuIkptHQ9GoqxdPNGma0.roa (hash: nQDbcQ+hZgM3fnmlCao10gC2Eu9sMXU4j7YHjTJV+9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:b9:98:d1:a9:f8:bf:ec:52:ab:78:ad:25:bb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
        Validity
            Not Before: May 12 19:01:24 2026 GMT
            Not After : May 13 19:01:24 2026 GMT
        Subject: CN=82a27815d9f1748fb1090f118a3ca7b0f448b1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:6d:a7:d2:e2:19:dd:aa:2c:bc:e9:b4:a6:
                    fe:79:b3:92:f8:c6:66:ee:44:ba:a4:4c:a7:f4:da:
                    3e:04:40:ff:6c:92:3b:5f:8a:9a:11:91:fe:56:d4:
                    7e:f3:ae:57:e1:17:31:34:77:cf:ed:5b:6d:0a:4d:
                    19:63:03:9e:96:b3:7d:89:4e:0a:85:84:f4:5f:fa:
                    36:3b:f1:91:a3:10:38:2f:67:33:e5:f1:96:fa:15:
                    35:bb:41:c0:82:20:09:ff:2a:da:f2:86:49:cd:a1:
                    55:d7:ee:8f:7e:78:45:0a:7b:d9:cc:e2:94:e4:f1:
                    1f:64:54:52:b9:70:b2:96:a3:bf:aa:91:1d:e8:bf:
                    e7:13:85:dc:e4:7e:c7:fe:27:81:88:ef:c3:69:82:
                    b5:e5:03:86:51:32:82:26:dc:0d:df:a3:03:bc:8e:
                    06:93:9c:6f:da:44:0c:4b:2e:73:39:ab:1a:e1:e9:
                    c0:aa:8a:32:f9:a1:5c:a4:47:86:51:a4:d6:2e:1c:
                    7c:a6:32:73:b1:03:61:09:25:46:78:11:fe:95:66:
                    bd:82:10:29:e9:e3:ce:d4:75:ef:0f:33:90:8d:12:
                    9d:8c:c1:77:60:02:ee:e8:97:f3:91:4c:43:17:6a:
                    58:e1:12:4b:a3:1f:a0:0a:e8:4c:6d:f0:4f:4f:88:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A2:78:15:D9:F1:74:8F:B1:09:0F:11:8A:3C:A7:B0:F4:48:B1:FD
            X509v3 Authority Key Identifier:
                keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d8:6d:fe:2f:dd:c7:42:e6:f8:5c:70:86:c0:c5:b6:c0:4b:
         a2:56:4e:19:17:c3:38:c3:89:d9:d8:68:e8:fa:21:17:9d:bb:
         83:33:ea:56:fe:a0:1b:61:d3:3c:cf:ea:77:37:ff:52:d9:68:
         fb:d6:5f:d1:cb:7c:c2:09:06:02:6e:0f:45:26:73:0a:89:90:
         66:59:7c:a2:ab:31:c3:bb:bc:c4:ad:f2:48:88:26:6a:b7:bf:
         93:ba:18:ed:28:b9:ea:20:ca:aa:8a:77:ce:d1:44:5c:32:6f:
         3e:08:5b:4f:64:4e:d3:ed:ff:d9:aa:5f:e0:47:f3:15:07:8b:
         fd:4c:ca:f3:50:4d:2a:61:58:5e:49:f2:d1:4f:30:76:71:59:
         30:57:67:f6:9b:a2:81:3f:85:6b:5b:5c:1a:c0:cb:66:5d:25:
         9f:f5:4f:40:8b:a8:29:f7:d6:b4:e0:f1:94:d1:fd:57:be:bb:
         ee:ab:25:cb:02:3c:86:8c:4e:97:10:1d:94:9a:ec:cd:33:5a:
         d1:36:56:8b:48:f8:f8:ca:c8:c2:42:b2:b4:c4:08:96:bb:90:
         5b:d4:07:75:f6:84:fa:15:e1:ee:cc:e1:cb:c3:6b:8e:79:9f:
         0b:0d:6b:d6:ce:cb:2c:8c:c3:92:16:06:6b:78:59:25:b9:ae:
         c6:0d:e8:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkLmY0an4v+xSq3itJbuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNWY3MmYwZmFjZjUyNzA1NzI3YzAzOWJkYzFmYmI3Y2M5
N2Q0MjgwHhcNMjYwNTEyMTkwMTI0WhcNMjYwNTEzMTkwMTI0WjAzMTEwLwYDVQQD
Eyg4MmEyNzgxNWQ5ZjE3NDhmYjEwOTBmMTE4YTNjYTdiMGY0NDhiMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEVtp9LiGd2qLLzptKb+ebOS+MZm
7kS6pEyn9No+BED/bJI7X4qaEZH+VtR+865X4RcxNHfP7VttCk0ZYwOelrN9iU4K
hYT0X/o2O/GRoxA4L2cz5fGW+hU1u0HAgiAJ/yra8oZJzaFV1+6PfnhFCnvZzOKU
5PEfZFRSuXCylqO/qpEd6L/nE4Xc5H7H/ieBiO/DaYK15QOGUTKCJtwN36MDvI4G
k5xv2kQMSy5zOasa4enAqooy+aFcpEeGUaTWLhx8pjJzsQNhCSVGeBH+lWa9ghAp
6ePO1HXvDzOQjRKdjMF3YALu6JfzkUxDF2pY4RJLox+gCuhMbfBPT4gdjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKieBXZ8XSPsQkPEYo8p7D0SLH9MB8GA1UdIwQY
MBaAFN1fcvD6z1JwVyfAOb3B+7fMl9QoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTIt
Mjg4MDYxMjcwNWVlLzEvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTItMjg4MDYxMjcwNWVl
LzEvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNht/i/d
x0Lm+FxwhsDFtsBLolZOGRfDOMOJ2dho6PohF527gzPqVv6gG2HTPM/qdzf/Utlo
+9Zf0ct8wgkGAm4PRSZzComQZll8oqsxw7u8xK3ySIgmare/k7oY7Si56iDKqop3
ztFEXDJvPghbT2RO0+3/2apf4EfzFQeL/UzK81BNKmFYXkny0U8wdnFZMFdn9pui
gT+Fa1tcGsDLZl0ln/VPQIuoKffWtODxlNH9V7677qslywI8hoxOlxAdlJrszTNa
0TZWi0j4+MrIwkKytMQIlruQW9QHdfaE+hXh7szhy8NrjnmfCw1r1s7LLIzDkhYG
a3hZJbmuxg3o/w==
-----END CERTIFICATE-----
Generated at Wed May 13 06:43:46 2026 by rpki-client