Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
File:                     I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json)
Hash identifier:          jGa/Xzg7vY9lGKY3MYE7ySUW1dt2OOeKbLTfc6dFD+c=
Subject key identifier:   CC:19:23:12:0D:19:77:87:DB:08:7B:B5:ED:A7:00:45:62:64:24:F2
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Certificate issuer:       /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial:       019E202434604E7F1C780A1921017266E55D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
Manifest number:          164F
Signing time:             Wed 13 May 2026 07:01:43 +0000
Manifest this update:     Wed 13 May 2026 07:01:43 +0000
Manifest next update:     Thu 14 May 2026 07:01:43 +0000
Files and hashes:         1: EBjSa7A-On9uI8_gmDnR7SDL_J8.roa (hash: cYEOk8Kxrw9KuVJI4MOZDU2QZ9S+tI4rD6Xrsxto8lg=)
                          2: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: 4FRKALWYINO9kuv96NLXITibrdVR/CJsZXq5IJx06Aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:34:60:4e:7f:1c:78:0a:19:21:01:72:66:e5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
        Validity
            Not Before: May 13 07:01:43 2026 GMT
            Not After : May 14 07:01:43 2026 GMT
        Subject: CN=cc1923120d197787db087bb5eda70045626424f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:32:fe:89:2b:42:e8:d3:0e:20:b3:9e:67:
                    6e:8e:8f:0b:f9:e6:57:9e:5d:9f:df:ae:05:2a:5f:
                    cf:b9:15:5b:4b:53:0f:c8:65:8b:f3:4b:1d:cc:56:
                    fd:18:e5:b5:d9:4d:fc:9f:5e:bc:f6:fd:1b:15:67:
                    d5:8c:fd:7c:6f:35:d5:72:9d:c5:1e:86:a6:5b:87:
                    75:2a:f2:63:48:65:3e:f7:5e:86:82:59:71:4b:1e:
                    e2:e3:a3:39:e7:ac:8c:bf:37:70:6a:b1:c6:0f:94:
                    5e:66:b6:a4:cb:bf:1d:67:6d:3e:17:1c:7f:27:6f:
                    1e:79:6d:7d:31:7e:cd:11:51:db:d9:07:6e:4f:1e:
                    18:9c:8a:51:0c:6e:5e:fc:2a:70:31:82:b5:c7:70:
                    88:8a:32:aa:3c:e3:74:fd:d5:31:92:a0:78:64:54:
                    ad:03:47:15:fc:5f:f7:cb:2f:0d:5b:d0:ca:2d:fa:
                    f7:3c:ec:6b:d8:c3:bc:fd:8f:4b:9b:05:71:42:5b:
                    6b:27:3c:72:5a:f1:d1:eb:31:d0:4b:5b:e2:52:77:
                    c6:e8:a3:4c:d5:44:a8:e6:38:fb:70:80:cc:65:4d:
                    6b:51:d1:48:46:13:6d:e1:a6:bf:ea:ee:d9:db:68:
                    2b:e8:ae:84:c8:4c:58:cc:36:5e:7e:e6:58:86:8c:
                    ee:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:19:23:12:0D:19:77:87:DB:08:7B:B5:ED:A7:00:45:62:64:24:F2
            X509v3 Authority Key Identifier:
                keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c7:58:c6:aa:9f:5a:b6:0d:43:0d:af:40:95:59:e9:ee:5b:
         7e:8c:c9:b8:a1:f0:b8:41:92:6d:7c:fa:26:0a:e6:2f:4f:b9:
         69:52:9f:f7:de:34:57:3f:4c:b7:6a:f3:0b:0a:4e:7b:c3:ce:
         83:ce:22:c6:95:0b:cf:a0:75:2c:3c:eb:24:66:96:2d:e1:c2:
         79:88:60:3f:22:40:4f:a5:a1:ee:76:80:6d:e2:1e:37:3c:35:
         7e:ee:01:e9:69:aa:01:e1:32:8e:db:06:5e:d6:4f:91:ee:01:
         d0:2c:9a:e2:b0:25:bc:4a:f0:fa:4c:a7:f5:41:11:f1:69:58:
         e5:30:00:e7:8c:c8:3d:32:3b:ad:1c:84:53:d1:1d:0f:3e:61:
         4e:9b:fa:b7:cc:b6:51:95:28:a4:bc:88:b0:3b:d2:49:2e:e6:
         e4:d3:c2:86:ce:71:85:ac:c2:a7:01:1d:bc:fd:01:a8:fb:c5:
         b5:7e:b9:37:06:c9:01:c7:75:87:57:c2:bb:54:3c:57:e6:1b:
         41:6b:e2:4d:d9:ba:16:51:bc:d2:af:f2:e3:50:18:78:99:90:
         47:03:40:1d:58:b8:8b:9a:8b:e5:a1:9c:08:23:93:be:19:67:
         e0:c4:12:ca:77:c4:6d:42:2f:11:56:eb:a0:df:a8:a2:7e:1e:
         73:96:2b:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJDRgTn8ceAoZIQFyZuVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTdiNTkzYzgwNGE2ODNmMGM4ZmEzZWRhOTMzNWFmOTJh
ODkwNDQwHhcNMjYwNTEzMDcwMTQzWhcNMjYwNTE0MDcwMTQzWjAzMTEwLwYDVQQD
EyhjYzE5MjMxMjBkMTk3Nzg3ZGIwODdiYjVlZGE3MDA0NTYyNjQyNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPcy/okrQujTDiCznmdujo8L+eZX
nl2f364FKl/PuRVbS1MPyGWL80sdzFb9GOW12U38n1689v0bFWfVjP18bzXVcp3F
HoamW4d1KvJjSGU+916GgllxSx7i46M556yMvzdwarHGD5ReZraky78dZ20+Fxx/
J28eeW19MX7NEVHb2QduTx4YnIpRDG5e/CpwMYK1x3CIijKqPON0/dUxkqB4ZFSt
A0cV/F/3yy8NW9DKLfr3POxr2MO8/Y9LmwVxQltrJzxyWvHR6zHQS1viUnfG6KNM
1USo5jj7cIDMZU1rUdFIRhNt4aa/6u7Z22gr6K6EyExYzDZefuZYhozuVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwZIxINGXeH2wh7te2nAEViZCTyMB8GA1UdIwQY
MBaAFCOntZPIBKaD8Mj6PtqTNa+SqJBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjIt
M2ZiNWFkZGU2MDQwLzEvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9kZGY1NTktNDMzYi00MDhmLWE1YjItM2ZiNWFkZGU2MDQw
LzEvSTZlMWs4Z0Vwb1B3eVBvLTJwTTFyNUtva0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcdYxqqf
WrYNQw2vQJVZ6e5bfozJuKHwuEGSbXz6JgrmL0+5aVKf9940Vz9Mt2rzCwpOe8PO
g84ixpULz6B1LDzrJGaWLeHCeYhgPyJAT6Wh7naAbeIeNzw1fu4B6WmqAeEyjtsG
XtZPke4B0Cya4rAlvErw+kyn9UER8WlY5TAA54zIPTI7rRyEU9EdDz5hTpv6t8y2
UZUopLyIsDvSSS7m5NPChs5xhazCpwEdvP0BqPvFtX65NwbJAcd1h1fCu1Q8V+Yb
QWviTdm6FlG80q/y41AYeJmQRwNAHVi4i5qL5aGcCCOTvhln4MQSynfEbUIvEVbr
oN+oon4ec5Yrjw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:20:23 2026 by rpki-client