Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
File:                     OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json)
Hash identifier:          5kkj/tdKWqMlBWLZHE7hmnHg6w+Yp/XBLzF0E0lZb5w=
Subject key identifier:   0E:DC:6A:60:FF:B3:75:B9:40:82:EC:98:DA:18:68:D6:86:91:CE:37
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Certificate issuer:       /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial:       019E1FB5B34DC244EC311845C354F6484A75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
Manifest number:          193B
Signing time:             Wed 13 May 2026 05:01:02 +0000
Manifest this update:     Wed 13 May 2026 05:01:02 +0000
Manifest next update:     Thu 14 May 2026 05:01:02 +0000
Files and hashes:         1: 1--uZd9q-jqlCwf4KSHTkKxdp1P0.roa (hash: yJgoBtaw97/X+Yl828Ilk6xaEg2wiibhZ1X313r+u+s=)
                          2: 6iaqLomTHcn35nOgS7u2_TW-xhs.roa (hash: Mi7/BGP/3N9pUm1kAumWXNagsUDM+4h/oInYolOAkPE=)
                          3: 8BEgv2DgNKbNbNuzLHl3VGFIGL8.roa (hash: SQFbOHpDcvay1MqsdXqe1YtJV1othwB2O5ZriM/HbH0=)
                          4: DVctQHuUFs5Ww1nxg7BOkHHIxmA.roa (hash: NAYQAcei8ET2orLJQeLFFdmfCZY62HVhsb/rGilJLnI=)
                          5: DcqHCtebdDgiEuSQXxi6ig8mM8o.roa (hash: cRfNZKkpr+LQ6VmzZJFfJ/S+gQUsEnhyoZIF9XUOHHw=)
                          6: Jbj7ynIvhap5I_QFhGzfNQth1KM.roa (hash: Z7XUHDDtftkWoWOYjRWVurOY4SlFKKJE535VEXNm4iU=)
                          7: LmZ65ahj31rbnRy9vWbROzqmhcU.roa (hash: SvoOUMNxC/Ob/2VuP/7YeBr/5a0sbiKFw1vWGYN+3kw=)
                          8: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: L43k+HlHTvChTZds/wq/6rnlP631Wce4teof6DgzvSw=)
                          9: Rfztg_t5JVeMZSj2mDqPGyp9q44.roa (hash: /89m2QYUYW/bhcHvnKgQT+IpW6Y9wQwv8T9fEb+5DrQ=)
                          10: TB2uobnUVymGTH4RA03gIOhAZRg.roa (hash: 6oz05ThoSNjSotd8Y3/7ZJcBXHZDvJhujoU9Z+4I/C0=)
                          11: ZuhzTaDClxjmQVXxvnkYsTWFFGQ.roa (hash: sV8EfVihdKiLsfcrDwHQZu5bOJ9OiQzvEOBbJ1cZbxk=)
                          12: _Z7JEWza1bSPD-7PWbG0vX89s3o.roa (hash: OZMVtPUDYR+RELQo2A6anCLj+47zVFIRgvSkDtlYuQw=)
                          13: aaE0S3Um5Vi6BhDQqr6tOzK4JaE.roa (hash: I/6hh1gjRcNeCWSUlY12OXaqWDkdOdsjtuMQtrQZ6bs=)
                          14: g3dNjS4XgY8klkPhCyZdKToAlGM.roa (hash: peZC7FKDdVQt9t0rZ2GL+oL22WvV/nKBVc+dvOTk7TE=)
                          15: gB_s-WdUnxEPR2XESWswld-SB24.roa (hash: qRp5667FdJ5J3f1BulVc/pqFyv4XSQMc14cF/bbrQac=)
                          16: h2z5PFUk9kCOYl2Qfq1nfpB1Cow.roa (hash: bmKxTPlO70DQG41qe3REDk+7OXfpbhyEVC0cTa4zyE0=)
                          17: iCDLvxYdAykrIxvCC48ohuJmwcs.roa (hash: Ume17i9/BCAtK0RFxYp+aFptPOFLeGk5A4An1t7V2u4=)
                          18: ixvTApwJ0LOFuR5J5-NGSIKMqNk.roa (hash: BDKxCeeuSykbUbxzQ/ZPnLJUCKHXvds6WrwRPz6ZbCc=)
                          19: nZX_nzH3JzTrJeZ8L9ZU0lIyk-4.roa (hash: BdZa7hgF5JlHhd3QhsJDvnmYPHKo0HSuto3Mzwo2NpU=)
                          20: pO0qGsq_BKRgOQ_8WYJpqKXk4C0.roa (hash: P0kO1Oni6LjDeROb0o6wKxl0oRXYlJoyDIs7yU4qHZQ=)
                          21: pxwmw3bWAUG0G2zeWP6wAlWdZpo.roa (hash: TGTRkz6GAsY4o7A1nVyZO49OKe6IHq8N/DzCAZl1Ss0=)
                          22: u8wDHAu62fejNzSsl66nMVncyJ8.roa (hash: DS9lRY1FbYp3Sl7zQdRRW/sRlCsiVp9bm3HNS4WoCpo=)
                          23: vDtti9xnyakhZ1WWiOjhX42Cz4E.roa (hash: C355/1wMzaPIkZLvnFKM+IMHqthGrw6arcc7tCzyvb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:b3:4d:c2:44:ec:31:18:45:c3:54:f6:48:4a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
        Validity
            Not Before: May 13 05:01:02 2026 GMT
            Not After : May 14 05:01:02 2026 GMT
        Subject: CN=0edc6a60ffb375b94082ec98da1868d68691ce37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1b:8d:fe:04:46:0a:7d:28:7c:83:8c:98:eb:
                    be:80:71:2c:1d:b3:e5:67:30:c1:c8:4c:80:12:10:
                    e3:8b:5f:76:3f:64:d0:a3:65:b4:3b:1f:42:04:a5:
                    10:27:57:09:bf:cd:eb:c7:3f:dd:78:0a:01:96:37:
                    85:31:12:72:50:41:5f:2b:e0:f1:23:3f:13:9e:97:
                    68:39:61:d9:f3:a2:4e:be:04:6c:02:69:97:28:e6:
                    2f:ab:db:11:d1:02:c2:20:9c:80:94:56:26:f9:bb:
                    f9:40:7b:35:7b:55:7a:2b:6a:63:ff:5c:49:97:e3:
                    e0:6b:98:ff:03:bd:a6:fe:1d:58:fe:aa:a9:d6:67:
                    7b:9f:1b:f6:25:6a:e0:99:12:aa:5b:41:9e:c7:5b:
                    ee:fa:3c:53:5a:64:54:22:7e:90:d2:57:88:17:ec:
                    72:7d:4e:18:62:bd:bb:20:e9:8d:94:88:02:e5:d5:
                    77:ed:6c:59:57:cd:6b:ae:e5:76:14:99:23:1d:9e:
                    26:c0:84:f1:3b:e8:b2:e5:c5:1f:84:88:29:5f:e1:
                    12:ec:8c:7e:ed:71:ae:ed:3c:61:90:b6:e1:c9:f7:
                    fa:6b:1a:6b:5c:85:32:15:0a:30:3f:42:30:90:3e:
                    aa:f0:c8:e9:bf:19:eb:1b:8e:76:fe:83:9c:ff:a7:
                    60:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DC:6A:60:FF:B3:75:B9:40:82:EC:98:DA:18:68:D6:86:91:CE:37
            X509v3 Authority Key Identifier:
                keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:dd:11:f5:95:ca:4e:29:92:c8:0d:04:cc:72:76:9f:9e:b6:
         6d:df:9e:99:6c:5a:83:e6:21:24:42:1d:ab:cd:8e:57:09:d1:
         9c:a5:3c:c2:1e:b6:30:48:5b:27:9f:16:28:c2:88:77:e9:ec:
         a3:25:9d:ed:55:d8:49:13:10:ac:b5:42:9b:c7:7c:1f:cd:1b:
         5d:13:71:e9:12:7e:e8:9e:b3:82:78:b0:4d:91:43:41:77:a5:
         b4:34:3d:d7:b6:f6:5f:a5:0b:f7:e6:bd:67:49:9e:9f:cc:2d:
         15:83:74:5f:86:e0:de:58:cf:ac:73:33:68:5e:a2:aa:b2:2d:
         c3:7f:14:72:3a:ca:87:b8:24:6b:8b:a2:a1:bf:a6:3d:28:a7:
         fd:75:c2:32:ff:fe:d4:c7:e2:be:13:0c:4c:29:10:a1:9f:b7:
         28:f2:1b:f7:ee:f3:9b:90:65:49:cd:03:78:82:47:72:be:69:
         2d:49:0d:88:24:d7:7e:f0:4b:c3:e2:89:ad:bb:23:3a:49:b4:
         54:bc:55:34:17:1e:9d:71:f7:77:11:fa:fb:ee:99:e7:6d:4f:
         f8:4f:50:74:cf:e1:60:ca:c8:7d:cd:1c:51:48:e1:e3:e9:d0:
         1c:65:e8:8d:c4:88:1b:ef:16:14:18:29:1b:02:94:e3:b6:59:
         5d:c6:4f:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftbNNwkTsMRhFw1T2SEp1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi
YzU5MDEwHhcNMjYwNTEzMDUwMTAyWhcNMjYwNTE0MDUwMTAyWjAzMTEwLwYDVQQD
EygwZWRjNmE2MGZmYjM3NWI5NDA4MmVjOThkYTE4NjhkNjg2OTFjZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRuN/gRGCn0ofIOMmOu+gHEsHbPl
ZzDByEyAEhDji192P2TQo2W0Ox9CBKUQJ1cJv83rxz/deAoBljeFMRJyUEFfK+Dx
Iz8TnpdoOWHZ86JOvgRsAmmXKOYvq9sR0QLCIJyAlFYm+bv5QHs1e1V6K2pj/1xJ
l+Pga5j/A72m/h1Y/qqp1md7nxv2JWrgmRKqW0Gex1vu+jxTWmRUIn6Q0leIF+xy
fU4YYr27IOmNlIgC5dV37WxZV81rruV2FJkjHZ4mwITxO+iy5cUfhIgpX+ES7Ix+
7XGu7TxhkLbhyff6axprXIUyFQowP0IwkD6q8MjpvxnrG452/oOc/6dg3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7camD/s3W5QILsmNoYaNaGkc43MB8GA1UdIwQY
MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt
NGRkMDQzNDZhYmMzLzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz
LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc90R9ZXK
TimSyA0EzHJ2n562bd+emWxag+YhJEIdq82OVwnRnKU8wh62MEhbJ58WKMKId+ns
oyWd7VXYSRMQrLVCm8d8H80bXRNx6RJ+6J6zgniwTZFDQXeltDQ917b2X6UL9+a9
Z0men8wtFYN0X4bg3ljPrHMzaF6iqrItw38UcjrKh7gka4uiob+mPSin/XXCMv/+
1MfivhMMTCkQoZ+3KPIb9+7zm5BlSc0DeIJHcr5pLUkNiCTXfvBLw+KJrbsjOkm0
VLxVNBcenXH3dxH6++6Z521P+E9QdM/hYMrIfc0cUUjh4+nQHGXojcSIG+8WFBgp
GwKU47ZZXcZP5g==
-----END CERTIFICATE-----
Generated at Wed May 13 10:53:38 2026 by rpki-client