Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
File:                     sMnhFmeJWbipR4_Op8o8BgMQIWI.mft (raw, json)
Hash identifier:          J5baHLpefuSY/Ak3rlPT2WoU1oi8lMPEBFuxGuWi5ZQ=
Subject key identifier:   98:C0:A5:D8:BC:9F:D1:B1:71:CF:9F:57:15:B2:6A:DA:25:CC:31:65
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Certificate issuer:       /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial:       019E1D9A12612D16032F32B354945C90860E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
Manifest number:          F9
Signing time:             Tue 12 May 2026 19:11:36 +0000
Manifest this update:     Tue 12 May 2026 19:11:36 +0000
Manifest next update:     Wed 13 May 2026 19:11:36 +0000
Files and hashes:         1: RMnY74IXrxIzrEpQbRpmph3q8R0.asa (hash: JAjN8qRxcxnoJZBhLtdkDMeTm58l3dRximDWFlR560I=)
                          2: XUGY9TbOMBX49Z8u90RGUe-ExLs.roa (hash: qtTspg26ND5GYRKyrYjwXIvA6gCRcdmehMVXE9EcA5s=)
                          3: hXnc0aouohGqhAOMrSzDtkaexCE.roa (hash: yxy01ATSTnYLsImDsi6PNp5Z8L3PmHHYPfhY47FWh+A=)
                          4: sMnhFmeJWbipR4_Op8o8BgMQIWI.crl (hash: 47i9ojwKDuvCrNOOYTO5fTWI11a2W9K5A06aGhvFGyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:9a:12:61:2d:16:03:2f:32:b3:54:94:5c:90:86:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
        Validity
            Not Before: May 12 19:11:36 2026 GMT
            Not After : May 13 19:11:36 2026 GMT
        Subject: CN=98c0a5d8bc9fd1b171cf9f5715b26ada25cc3165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a8:48:2e:0f:68:12:26:ca:4f:69:b6:c5:80:
                    9b:66:70:ee:a7:c5:15:7e:3e:4c:84:46:e7:0a:0f:
                    11:ab:bd:cc:d4:0e:e7:bd:4f:f8:af:6d:38:d8:d0:
                    50:5c:f6:33:95:8b:a0:9c:c2:5e:8b:06:2c:2e:c9:
                    f4:37:a8:e7:d6:c6:99:0b:5f:e0:05:7c:40:9d:2a:
                    45:5b:cb:e6:65:35:10:b4:c1:52:03:d8:8a:b7:ec:
                    e2:4c:de:6b:54:20:e0:18:80:c2:8d:ac:5d:e9:d7:
                    d6:50:56:d1:df:61:9a:7e:d7:b3:4e:e0:a4:8e:3f:
                    16:7b:2d:b7:3c:23:27:dd:59:05:5e:05:96:91:4c:
                    f6:90:e9:4c:82:13:71:ae:3f:e7:98:88:d7:27:aa:
                    cf:80:be:08:9e:02:f8:44:e4:6d:df:16:4f:e3:6b:
                    a6:73:b8:44:2d:39:bb:ea:91:86:f0:58:2c:13:78:
                    7f:58:86:1a:f8:09:53:e8:87:d7:a6:7f:23:f0:95:
                    11:2a:a4:0c:2d:6d:9f:4f:73:0b:e0:b7:a3:71:28:
                    5c:38:6e:79:28:80:ad:a2:a5:95:43:4c:75:05:f0:
                    57:9f:65:73:ae:04:9e:0b:19:1e:85:9b:19:25:34:
                    60:19:dc:af:13:47:28:6c:d6:b1:f4:e4:c4:bc:09:
                    a4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C0:A5:D8:BC:9F:D1:B1:71:CF:9F:57:15:B2:6A:DA:25:CC:31:65
            X509v3 Authority Key Identifier:
                keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:cd:2c:20:3e:0d:12:cb:fb:48:f8:bf:f3:1c:94:2e:7f:4a:
         73:df:d9:3e:84:cb:48:08:cc:f9:d3:f5:47:2b:19:e1:5a:04:
         72:fe:a4:9d:1c:19:3e:a8:1a:e3:6b:ca:f7:e4:a8:1a:96:d7:
         18:58:bf:2f:fd:db:1a:68:4e:6d:29:ff:fe:77:fa:40:cc:35:
         5c:97:59:bc:7b:c0:81:65:95:33:82:9e:42:b4:23:14:4f:8f:
         ae:84:2d:52:43:39:56:a4:e7:70:e7:1c:a5:e9:ae:4c:65:6e:
         d8:16:c5:09:b4:a2:29:bf:1a:a5:a2:9f:b5:65:62:ed:1a:fa:
         7c:f6:dd:42:e0:f3:b6:ba:70:0f:ad:4b:74:53:6e:b1:f1:1e:
         39:9a:b6:7f:45:65:74:76:67:d0:c6:8f:2a:a1:8a:78:01:6e:
         f8:bc:2c:b2:e4:8e:30:e3:f4:95:04:7f:1f:b5:1c:bb:26:47:
         9b:a3:25:bd:f8:03:95:3a:59:d8:43:76:b4:90:76:32:f4:08:
         db:50:a1:2b:db:f5:ee:41:f2:77:cd:fa:e4:e6:a5:f4:ec:61:
         6b:7e:63:f8:aa:e7:e1:c9:a4:ba:7e:48:b8:79:5d:5d:55:c7:
         36:35:bb:08:d7:77:5e:67:37:92:1d:f4:33:ab:5e:13:e1:ee:
         c3:00:3c:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dmhJhLRYDLzKzVJRckIYOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzllMTE2Njc4OTU5YjhhOTQ3OGZjZWE3Y2EzYzA2MDMx
MDIxNjIwHhcNMjYwNTEyMTkxMTM2WhcNMjYwNTEzMTkxMTM2WjAzMTEwLwYDVQQD
Eyg5OGMwYTVkOGJjOWZkMWIxNzFjZjlmNTcxNWIyNmFkYTI1Y2MzMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6hILg9oEibKT2m2xYCbZnDup8UV
fj5MhEbnCg8Rq73M1A7nvU/4r2042NBQXPYzlYugnMJeiwYsLsn0N6jn1saZC1/g
BXxAnSpFW8vmZTUQtMFSA9iKt+ziTN5rVCDgGIDCjaxd6dfWUFbR32GaftezTuCk
jj8Wey23PCMn3VkFXgWWkUz2kOlMghNxrj/nmIjXJ6rPgL4IngL4RORt3xZP42um
c7hELTm76pGG8FgsE3h/WIYa+AlT6IfXpn8j8JURKqQMLW2fT3ML4LejcShcOG55
KICtoqWVQ0x1BfBXn2VzrgSeCxkehZsZJTRgGdyvE0cobNax9OTEvAmkVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjApdi8n9Gxcc+fVxWyatolzDFlMB8GA1UdIwQY
MBaAFLDJ4RZniVm4qUePzqfKPAYDECFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01uaEZtZUpXYmlwUjRfT3A4bzhCZ01RSVdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82OGJmMWQtNmU1MC00OTk2LTgyYWYt
MGFjNTgxYTU4Y2QxLzEvc01uaEZtZUpXYmlwUjRfT3A4bzhCZ01RSVdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82OGJmMWQtNmU1MC00OTk2LTgyYWYtMGFjNTgxYTU4Y2Qx
LzEvc01uaEZtZUpXYmlwUjRfT3A4bzhCZ01RSVdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAac0sID4N
Esv7SPi/8xyULn9Kc9/ZPoTLSAjM+dP1RysZ4VoEcv6knRwZPqga42vK9+SoGpbX
GFi/L/3bGmhObSn//nf6QMw1XJdZvHvAgWWVM4KeQrQjFE+ProQtUkM5VqTncOcc
pemuTGVu2BbFCbSiKb8apaKftWVi7Rr6fPbdQuDztrpwD61LdFNusfEeOZq2f0Vl
dHZn0MaPKqGKeAFu+LwssuSOMOP0lQR/H7UcuyZHm6MlvfgDlTpZ2EN2tJB2MvQI
21ChK9v17kHyd8365Oal9Oxha35j+Krn4cmkun5IuHldXVXHNjW7CNd3Xmc3kh30
M6teE+HuwwA83g==
-----END CERTIFICATE-----
Generated at Tue May 12 21:48:11 2026 by rpki-client