Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File:                     C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier:          HzoZf6ZcS02Kr4xGsU7Y+ewzrGNY4ELLerJB4BJMGek=
Subject key identifier:   FC:33:74:0B:B8:97:BD:B0:11:7E:3A:9B:E1:3A:BB:32:48:35:5F:6F
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer:       /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial:       019E1CB4DFF357AC21605DA0E9AFB9EE9C00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number:          190E
Signing time:             Tue 12 May 2026 15:01:16 +0000
Manifest this update:     Tue 12 May 2026 15:01:16 +0000
Manifest next update:     Wed 13 May 2026 15:01:16 +0000
Files and hashes:         1: Booj1ASQ-cXKqkh-r2x7fAQ_0Uw.roa (hash: zF9nqvpnqLrzZFWAUgKZQIRUSTlgxgEW6M1SkVs+U8w=)
                          2: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: stt+4KZbL/5Qggt1XPG+Qn2M3AjCBRs5E4jc7nTCXtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:df:f3:57:ac:21:60:5d:a0:e9:af:b9:ee:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
        Validity
            Not Before: May 12 15:01:16 2026 GMT
            Not After : May 13 15:01:16 2026 GMT
        Subject: CN=fc33740bb897bdb0117e3a9be13abb3248355f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1f:6b:ee:b6:db:45:63:87:3e:8b:7d:e6:cb:
                    5e:1e:7f:de:8f:dc:12:3d:29:8f:58:c5:a8:40:fa:
                    74:c7:00:5a:33:8d:b2:d2:aa:b9:7b:41:05:70:cf:
                    a3:23:0f:c8:a7:ce:b1:c2:a8:8f:0d:28:c0:f9:e7:
                    3a:10:51:a2:6d:92:7f:e5:bf:a2:a7:e7:36:8d:2b:
                    21:9b:e7:cd:b4:d2:0b:07:04:98:f9:22:ad:e6:c5:
                    16:09:de:9a:5a:9d:04:89:1a:c4:af:0f:7c:34:3e:
                    73:d2:16:ef:99:69:85:36:2b:ad:bd:01:1b:61:6f:
                    76:ed:23:72:0a:fe:ca:ae:0b:9b:21:48:b1:a0:55:
                    1a:20:c1:f4:3f:f2:03:1d:c3:35:e3:08:9f:37:6c:
                    3b:79:ed:fc:a8:85:95:6d:81:43:c9:9f:a6:88:a6:
                    e0:e4:49:ee:10:7d:97:d6:97:d9:88:35:bf:cd:77:
                    b6:82:e2:b2:33:0b:e5:98:16:95:e9:29:cd:e8:bb:
                    ea:6a:3c:5a:12:0f:4e:c4:fe:7e:4d:e5:0f:75:3d:
                    8c:53:55:95:23:2f:5f:b8:6b:0a:95:56:46:22:4e:
                    e2:23:48:6e:19:d1:5f:27:fb:24:f2:30:86:d9:88:
                    ec:c9:74:2a:a9:37:e6:6d:bb:18:4b:cf:2b:6d:f1:
                    d6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:33:74:0B:B8:97:BD:B0:11:7E:3A:9B:E1:3A:BB:32:48:35:5F:6F
            X509v3 Authority Key Identifier:
                keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:18:05:9f:cd:d2:a1:34:00:5c:95:64:6d:2d:c1:e6:b6:8d:
         e9:f5:03:b1:9d:62:64:6c:87:07:c2:2e:cf:99:14:05:e1:a9:
         31:a4:14:a5:18:f0:d1:18:04:dd:27:77:89:92:1e:56:64:34:
         e0:74:03:d8:3a:39:db:a6:3a:12:47:09:45:e7:fb:65:34:4b:
         a7:de:60:09:aa:63:d7:b1:6e:50:a6:bb:d6:53:50:80:0c:b1:
         71:fb:12:36:08:bc:78:8b:5e:e7:e5:37:fa:94:19:37:d8:67:
         7a:cf:65:9e:09:eb:09:a3:dc:c1:3c:9e:1a:a6:df:0a:52:e4:
         17:e2:8f:e4:7c:72:4a:a3:fb:6b:82:c2:40:93:88:df:93:77:
         f8:7b:d9:79:b8:5a:de:8b:84:6f:2f:57:09:f7:2f:f2:59:ca:
         dc:d4:52:06:e4:45:6d:e8:0f:0b:e1:59:f9:77:21:b2:fc:2b:
         f0:06:44:1d:6d:79:9b:23:35:b0:c6:fe:9b:94:e2:99:0a:c3:
         81:80:ce:09:2d:4b:75:1c:1f:59:f8:b2:af:48:3b:f3:2f:50:
         cd:4f:39:0a:93:38:1b:31:5b:da:23:86:31:37:d7:38:c0:8c:
         de:e4:d2:5d:08:ac:e8:14:84:e3:cd:03:a2:ca:fc:e8:c0:e9:
         f7:b0:5f:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctN/zV6whYF2g6a+57pwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmE3MzQ4ZDZjMWQ3MTg2MzI4MzI4NzIwNzMwZjY4NGZh
MjBlZGMwHhcNMjYwNTEyMTUwMTE2WhcNMjYwNTEzMTUwMTE2WjAzMTEwLwYDVQQD
EyhmYzMzNzQwYmI4OTdiZGIwMTE3ZTNhOWJlMTNhYmIzMjQ4MzU1ZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB9r7rbbRWOHPot95steHn/ej9wS
PSmPWMWoQPp0xwBaM42y0qq5e0EFcM+jIw/Ip86xwqiPDSjA+ec6EFGibZJ/5b+i
p+c2jSshm+fNtNILBwSY+SKt5sUWCd6aWp0EiRrErw98ND5z0hbvmWmFNiutvQEb
YW927SNyCv7KrgubIUixoFUaIMH0P/IDHcM14wifN2w7ee38qIWVbYFDyZ+miKbg
5EnuEH2X1pfZiDW/zXe2guKyMwvlmBaV6SnN6LvqajxaEg9OxP5+TeUPdT2MU1WV
Iy9fuGsKlVZGIk7iI0huGdFfJ/sk8jCG2YjsyXQqqTfmbbsYS88rbfHWPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwzdAu4l72wEX46m+E6uzJINV9vMB8GA1UdIwQY
MBaAFAv6c0jWwdcYYygyhyBzD2hPog7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19welNOYkIxeGhqS0RLSElITVBhRS1pRHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xZTJhMGUtOTUxNC00ZDcwLTkwM2Qt
ODU3MDY2NDVlNzM0LzEvQ19welNOYkIxeGhqS0RLSElITVBhRS1pRHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xZTJhMGUtOTUxNC00ZDcwLTkwM2QtODU3MDY2NDVlNzM0
LzEvQ19welNOYkIxeGhqS0RLSElITVBhRS1pRHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxgFn83S
oTQAXJVkbS3B5raN6fUDsZ1iZGyHB8Iuz5kUBeGpMaQUpRjw0RgE3Sd3iZIeVmQ0
4HQD2Do526Y6EkcJRef7ZTRLp95gCapj17FuUKa71lNQgAyxcfsSNgi8eIte5+U3
+pQZN9hnes9lngnrCaPcwTyeGqbfClLkF+KP5HxySqP7a4LCQJOI35N3+HvZebha
3ouEby9XCfcv8lnK3NRSBuRFbegPC+FZ+Xchsvwr8AZEHW15myM1sMb+m5TimQrD
gYDOCS1LdRwfWfiyr0g78y9QzU85CpM4GzFb2iOGMTfXOMCM3uTSXQis6BSE480D
osr86MDp97BfVg==
-----END CERTIFICATE-----
Generated at Wed May 13 01:43:17 2026 by rpki-client