Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File:                     oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier:          OKFxjc3BNknaEw8HYTMup9MwWXxocnuType6Le5ERIU=
Subject key identifier:   B2:FF:39:92:7E:CB:B3:61:8F:27:E4:54:D8:E7:CA:98:D5:25:C1:DD
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer:       /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial:       019E1D901A63496118C193DC6826DEFBB36F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number:          190E
Signing time:             Tue 12 May 2026 19:00:43 +0000
Manifest this update:     Tue 12 May 2026 19:00:43 +0000
Manifest next update:     Wed 13 May 2026 19:00:43 +0000
Files and hashes:         1: 9V0WZ8PI8v15dGOz9ud2NUPbtFw.roa (hash: m6Qu2Xqx80svOxwzCUQmwPokT3XN/f5adjPQAyqc/JU=)
                          2: SgwWdv9ocngRvW2K02ifqUivtcQ.roa (hash: izn7KBIRyMFNkWZLTgF4j0JhnqGHKfT+NOehKQRrMYg=)
                          3: eMBMJRgdEDn_L6M8hIMicll__44.roa (hash: k6Nu1b6Bx/0UWIX5lbuNFV05T26ikU/X+0H31VpJ3uM=)
                          4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: P3kEbI6bcudDxarrUQvVKJqOI+ycDPYZiGDTcUTnRw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:1a:63:49:61:18:c1:93:dc:68:26:de:fb:b3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
        Validity
            Not Before: May 12 19:00:43 2026 GMT
            Not After : May 13 19:00:43 2026 GMT
        Subject: CN=b2ff39927ecbb3618f27e454d8e7ca98d525c1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:a5:6c:43:e0:3a:83:22:68:d5:b6:2f:61:
                    b1:c0:1e:ad:d8:4e:48:7c:b8:27:b9:f9:d5:2f:cb:
                    cb:e3:ff:4b:21:e3:36:e1:b0:7b:8e:eb:a5:ff:a9:
                    81:86:de:7b:04:f3:aa:21:d4:29:80:d3:f4:bd:63:
                    22:28:04:95:59:2f:87:da:32:2b:4f:bb:18:7b:96:
                    8f:51:66:bc:19:63:2d:e7:98:01:d5:c7:b2:eb:48:
                    c3:4c:78:74:6f:be:eb:be:2e:c4:93:12:ab:cb:37:
                    d8:ad:68:3d:9a:bd:4a:21:f1:93:86:b7:85:15:b9:
                    63:4c:8e:5d:2c:b3:16:ff:99:d1:c6:96:df:7c:96:
                    40:c1:9d:69:f4:ce:02:cf:99:f0:b5:09:74:a1:cb:
                    be:6c:e3:15:37:2a:46:a0:d9:66:fe:94:9b:de:d6:
                    eb:2c:9e:5d:47:96:8d:ba:8e:05:b2:d8:69:0d:60:
                    78:22:f9:8a:37:f4:d9:de:fc:44:19:01:59:73:8e:
                    86:42:b3:3f:6b:21:0c:76:30:4a:34:9b:1b:6d:50:
                    b5:ff:49:4d:39:14:3e:d2:1d:87:f5:f0:ac:9d:34:
                    56:cf:76:12:4a:04:98:b4:51:ed:ad:ac:7e:e2:85:
                    af:a3:35:b6:1d:7c:32:cf:f4:a0:7b:5a:a4:85:f6:
                    d8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FF:39:92:7E:CB:B3:61:8F:27:E4:54:D8:E7:CA:98:D5:25:C1:DD
            X509v3 Authority Key Identifier:
                keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:57:85:c7:24:4e:3d:2d:ad:dd:55:48:9a:69:ec:91:28:bd:
         be:07:92:9d:99:3d:05:ec:2a:06:a5:e0:ad:19:bd:94:e3:c8:
         92:64:48:a4:16:30:d3:8e:0e:e8:75:87:8a:0a:0f:0e:e6:f5:
         63:9a:32:84:7d:4e:70:87:85:37:74:1a:75:e2:21:b4:d9:e4:
         de:78:2e:da:bd:58:43:7e:54:2e:46:96:22:79:65:76:2c:89:
         15:41:23:6e:d0:17:3f:c3:94:2c:bc:30:dc:53:65:7f:90:c0:
         23:12:90:1c:2a:6f:01:84:03:69:24:eb:35:4e:ee:0a:9f:74:
         38:5e:bd:08:13:90:7a:2e:14:8f:66:71:9b:93:2a:e8:07:44:
         88:0a:b0:62:0c:dd:81:b4:92:3d:64:1a:67:07:0d:6b:d4:dd:
         fd:31:1e:28:ab:06:6d:88:ed:da:a3:6a:11:ac:4b:3c:b6:e4:
         b4:b1:57:a9:bc:6d:a1:52:09:20:60:5c:c7:b2:02:05:e3:7e:
         18:a5:e0:9c:b6:58:6b:0d:7c:c3:8e:9c:5e:ae:40:96:5d:f8:
         0a:83:79:be:cc:3a:60:2a:c7:eb:86:e3:44:d4:6d:0e:aa:86:
         a2:26:41:7d:66:49:e1:8c:32:be:68:e3:2a:7d:f9:80:42:ca:
         40:fc:39:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkBpjSWEYwZPcaCbe+7NvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNGI0OGVkYzdhMzI1ZDdmMWFlMGYyNTdjMGUyODM1MTcx
YmM5YWUwHhcNMjYwNTEyMTkwMDQzWhcNMjYwNTEzMTkwMDQzWjAzMTEwLwYDVQQD
EyhiMmZmMzk5MjdlY2JiMzYxOGYyN2U0NTRkOGU3Y2E5OGQ1MjVjMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf6lbEPgOoMiaNW2L2GxwB6t2E5I
fLgnufnVL8vL4/9LIeM24bB7juul/6mBht57BPOqIdQpgNP0vWMiKASVWS+H2jIr
T7sYe5aPUWa8GWMt55gB1cey60jDTHh0b77rvi7EkxKryzfYrWg9mr1KIfGThreF
FbljTI5dLLMW/5nRxpbffJZAwZ1p9M4Cz5nwtQl0ocu+bOMVNypGoNlm/pSb3tbr
LJ5dR5aNuo4FsthpDWB4IvmKN/TZ3vxEGQFZc46GQrM/ayEMdjBKNJsbbVC1/0lN
ORQ+0h2H9fCsnTRWz3YSSgSYtFHtrax+4oWvozW2HXwyz/Sge1qkhfbYIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLL/OZJ+y7NhjyfkVNjnypjVJcHdMB8GA1UdIwQY
MBaAFKJLSO3HoyXX8a4PJXwOKDUXG8muMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2t0STdjZWpKZGZ4cmc4bGZBNG9OUmNieWE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82MmFmZWYtNzBkMS00ZmUyLTllZGYt
N2YxZTU3NDg3YzFhLzEvb2t0STdjZWpKZGZ4cmc4bGZBNG9OUmNieWE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82MmFmZWYtNzBkMS00ZmUyLTllZGYtN2YxZTU3NDg3YzFh
LzEvb2t0STdjZWpKZGZ4cmc4bGZBNG9OUmNieWE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVeFxyRO
PS2t3VVImmnskSi9vgeSnZk9BewqBqXgrRm9lOPIkmRIpBYw044O6HWHigoPDub1
Y5oyhH1OcIeFN3QadeIhtNnk3ngu2r1YQ35ULkaWInlldiyJFUEjbtAXP8OULLww
3FNlf5DAIxKQHCpvAYQDaSTrNU7uCp90OF69CBOQei4Uj2Zxm5Mq6AdEiAqwYgzd
gbSSPWQaZwcNa9Td/TEeKKsGbYjt2qNqEaxLPLbktLFXqbxtoVIJIGBcx7ICBeN+
GKXgnLZYaw18w46cXq5All34CoN5vsw6YCrH64bjRNRtDqqGoiZBfWZJ4Ywyvmjj
Kn35gELKQPw5ow==
-----END CERTIFICATE-----
Generated at Wed May 13 07:25:50 2026 by rpki-client