Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
File:                     iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft (raw, json)
Hash identifier:          RUC3drjonHXP/wzz5x1tTjfuTWzs9qA5oa+E9bibu9g=
Subject key identifier:   EB:C1:BD:4D:FE:CE:20:69:27:37:93:2C:C2:AE:4D:AC:C7:07:03:9E
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Certificate issuer:       /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial:       019E1EA30568036B1C6A4BF396C9EBFD564A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
Manifest number:          190D
Signing time:             Wed 13 May 2026 00:01:00 +0000
Manifest this update:     Wed 13 May 2026 00:01:00 +0000
Manifest next update:     Thu 14 May 2026 00:01:00 +0000
Files and hashes:         1: 1-31Qdpidhxq3xowdRMl7OHQzMLs.roa (hash: oI7KFd2CFmvACdhWk+lCI6kk2+KzSDbEVQ5Q/GClnlA=)
                          2: WrX7SpElIvxm2JSwON41PMyuiBw.roa (hash: veKhilt8GIBABvA7UBWxe+++Nd8y9DAgj8iYUCvKPKw=)
                          3: cdbequdWz-xAkJleNGiLDk_Jz3M.roa (hash: HI+pTuLCHVDyiJQKC1oiE5CPWcrcJlPJsbkgYVNmobE=)
                          4: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl (hash: 7zrbsDVwkpasnF6jtEjyn+3KHbuX04YdVW7PuptRa9Y=)
                          5: skOBNp-MqDUEJE5rJDVczMRWsSQ.roa (hash: ptsmt66Y1LL2J3u0hqrRJ5WLcMHSX/QUwEl4kYw0eCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:05:68:03:6b:1c:6a:4b:f3:96:c9:eb:fd:56:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
        Validity
            Not Before: May 13 00:01:00 2026 GMT
            Not After : May 14 00:01:00 2026 GMT
        Subject: CN=ebc1bd4dfece20692737932cc2ae4dacc707039e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0b:2c:0b:16:5b:13:e9:a0:11:2e:94:0a:01:
                    ef:89:92:b0:f6:28:9a:85:40:55:d9:a3:02:22:ce:
                    85:fe:6b:dc:e7:7c:73:c0:db:4b:05:8d:36:32:a2:
                    77:cd:87:51:cf:15:97:de:ca:86:70:35:e0:8f:b4:
                    b5:2c:16:94:07:df:ca:a6:9c:3f:73:6e:15:d7:3a:
                    31:26:b0:36:e3:8b:25:30:e5:4c:f7:4d:c4:a8:8f:
                    33:74:b1:9e:96:6b:be:cb:dc:a0:57:bd:25:1d:a9:
                    a1:71:ff:0f:02:a1:1b:9c:9c:a6:08:36:a0:88:68:
                    87:c0:ce:9d:3d:e8:39:dd:83:98:9e:41:52:ba:eb:
                    5d:8a:24:5c:62:ff:60:80:d9:d1:50:8f:59:01:18:
                    0e:02:67:0b:f4:18:e8:28:4e:92:21:69:9b:9c:9a:
                    ea:8d:e4:93:cc:7c:05:61:6d:b8:c4:6b:38:a5:62:
                    36:98:a3:6e:77:56:16:33:08:8f:67:eb:8e:5b:f0:
                    85:28:4e:2c:f8:e4:34:8f:87:b3:e6:cb:c9:d9:3d:
                    b0:5f:d1:fb:8e:b9:37:05:6a:62:8d:e9:fe:f7:69:
                    4e:85:08:62:44:b7:7e:73:e3:41:34:4b:80:30:6f:
                    a4:2f:8f:51:da:6b:1d:bc:97:a2:34:a5:37:84:c9:
                    be:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C1:BD:4D:FE:CE:20:69:27:37:93:2C:C2:AE:4D:AC:C7:07:03:9E
            X509v3 Authority Key Identifier:
                keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c3:96:22:35:41:85:65:23:35:49:85:51:ee:10:25:e4:e4:
         0d:c4:a5:ea:ff:cd:3b:12:5b:a8:ff:19:87:bc:2d:ac:1b:fd:
         cf:ee:50:8c:6f:35:65:d0:ee:b5:91:8a:45:ae:52:58:a3:fa:
         2c:6d:4e:bf:2f:86:50:b4:ed:a0:19:e5:60:d8:0c:c3:3c:f9:
         d0:79:08:ee:47:7e:1b:68:ad:50:53:ec:d8:df:2e:63:e6:8a:
         1e:81:7e:ee:e4:44:88:b9:76:1e:8d:1c:25:dd:c1:0b:5e:7a:
         59:c8:82:e8:3d:cf:0d:fa:35:5b:5e:4d:ac:d2:4b:b8:e0:f9:
         35:0a:16:cc:6f:7c:bb:2b:29:cf:00:a5:12:5e:af:2a:70:4c:
         32:5f:85:f8:5a:e9:b4:6a:e3:2a:49:7c:4d:e6:14:65:da:18:
         f1:6a:01:8c:63:ec:03:b9:fc:84:33:6f:21:55:40:59:1b:9f:
         0c:88:06:de:02:f1:9d:0c:7f:b0:93:31:fe:65:62:76:53:45:
         07:5f:54:da:cd:3b:97:d0:90:f6:e5:d1:e4:c6:e8:4c:dd:e5:
         3d:80:35:7f:ff:69:e3:37:a4:fe:fc:a3:de:35:47:d0:38:ac:
         0b:6f:7e:f4:b0:b5:fd:8a:3d:0b:4e:a8:67:84:41:da:b9:ba:
         3d:45:d4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:52 2026 by rpki-client