Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
File:                     t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft (raw, json)
Hash identifier:          XTW8WCoUFvTsnVgghzkNj8h6sGqSfBbM6xkYqt29xho=
Subject key identifier:   A9:18:F5:65:94:EC:F4:2A:4B:FD:04:11:39:28:1B:F0:57:53:A2:55
Authority key identifier: B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
Certificate issuer:       /CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Certificate serial:       019E1DFE3E3CAADC78FAFEE9FD92489FCFA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
Manifest number:          136A
Signing time:             Tue 12 May 2026 21:01:01 +0000
Manifest this update:     Tue 12 May 2026 21:01:01 +0000
Manifest next update:     Wed 13 May 2026 21:01:01 +0000
Files and hashes:         1: 0lcAJcxkpyfEG67zvFLpBBWGRlo.roa (hash: D20ksOVfGRUnFokbm6FfRrXfye0JmM7Jy6FfAsNTS7g=)
                          2: t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl (hash: Q+qdp63hAkUr9+qf7HBcik4B8xNCfLjOtJSrKC9HCYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:3e:3c:aa:dc:78:fa:fe:e9:fd:92:48:9f:cf:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
        Validity
            Not Before: May 12 21:01:01 2026 GMT
            Not After : May 13 21:01:01 2026 GMT
        Subject: CN=a918f56594ecf42a4bfd041139281bf05753a255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:7e:bd:de:5c:4d:a6:17:e7:c9:16:5f:b4:
                    17:20:df:57:ef:2d:ed:5e:c5:ee:37:20:80:d7:93:
                    e2:29:ce:a3:fd:9f:d1:b0:24:ac:82:02:2a:8a:24:
                    d1:18:6a:91:e7:00:1f:92:3d:8c:a8:64:cf:31:09:
                    cc:ee:87:25:d7:00:aa:8b:36:ce:42:6c:01:e6:b6:
                    be:01:42:b5:20:4a:74:4f:78:39:72:f7:d4:77:34:
                    18:52:66:cd:81:f0:70:94:f1:fc:f5:df:94:cb:8e:
                    03:59:39:2d:16:a2:3a:40:6a:5e:29:74:24:4f:7d:
                    6e:99:5a:9a:25:cd:2f:05:04:f6:10:5b:03:66:e8:
                    d0:a1:c6:e5:dc:70:1b:4e:47:6b:0a:03:8a:fe:39:
                    d2:e2:2a:7c:61:a3:35:3c:0c:15:e2:27:d0:27:37:
                    1c:ff:cc:ef:d7:6b:51:04:76:26:90:b8:45:d2:20:
                    54:51:e5:22:86:6d:ac:58:48:64:fb:bf:bb:7b:c8:
                    40:43:e5:e5:97:63:98:a2:b5:2c:e5:3a:01:7f:72:
                    d1:c4:11:bd:21:98:d5:f2:5b:dd:96:8e:07:4d:8b:
                    d8:8a:f2:d2:27:3a:03:48:5c:38:c9:c8:a0:14:36:
                    ab:f7:c3:69:7c:d3:f6:25:8e:ef:a0:f8:75:df:43:
                    88:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:18:F5:65:94:EC:F4:2A:4B:FD:04:11:39:28:1B:F0:57:53:A2:55
            X509v3 Authority Key Identifier:
                keyid:B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:3c:a8:ef:74:54:6f:e6:5a:c7:64:e2:bf:7a:4a:72:ed:2a:
         d5:26:58:58:b9:c9:44:b8:4c:af:cf:9e:09:94:31:a0:d0:71:
         eb:42:f1:ed:5f:30:a6:f9:db:e5:98:a0:59:d4:7a:a9:c2:96:
         45:bd:51:3f:8d:ea:58:f7:8d:d1:a8:16:74:a1:18:2a:12:6d:
         a2:b1:58:3c:18:33:34:f6:8d:82:19:ca:42:d9:c9:01:49:e5:
         ed:4c:74:80:7c:06:d1:29:be:60:83:8d:08:f7:90:bd:5a:86:
         66:dc:88:87:27:9b:84:00:d3:57:e9:fd:f1:c4:4b:13:23:61:
         ff:80:38:e5:02:97:f5:aa:51:f9:89:27:1d:bc:11:65:d1:c1:
         fb:b5:3e:7f:6e:15:dd:0b:7b:4d:51:9b:54:90:7a:dc:00:ba:
         f1:df:30:ab:ff:e4:a7:86:51:f1:91:b7:cb:92:81:53:04:1d:
         b6:58:d0:76:ac:74:21:14:c0:ef:67:21:b7:06:17:3a:67:b0:
         66:3a:e6:bc:af:7b:a5:d2:82:08:41:c8:81:46:a8:f7:a7:20:
         2b:37:23:9b:3e:7a:11:af:98:95:e3:ae:2b:8b:20:30:13:c9:
         97:da:be:01:00:db:52:93:06:b3:07:09:38:fa:dc:16:0f:04:
         5e:6c:90:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/j48qtx4+v7p/ZJIn8+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YTIzMDMxNmIzZTI1OGU5MjU1ZjQ2YjIwODAyYWUyZjNj
YjQ2YTAwHhcNMjYwNTEyMjEwMTAxWhcNMjYwNTEzMjEwMTAxWjAzMTEwLwYDVQQD
EyhhOTE4ZjU2NTk0ZWNmNDJhNGJmZDA0MTEzOTI4MWJmMDU3NTNhMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNN+vd5cTaYX58kWX7QXIN9X7y3t
XsXuNyCA15PiKc6j/Z/RsCSsggIqiiTRGGqR5wAfkj2MqGTPMQnM7ocl1wCqizbO
QmwB5ra+AUK1IEp0T3g5cvfUdzQYUmbNgfBwlPH89d+Uy44DWTktFqI6QGpeKXQk
T31umVqaJc0vBQT2EFsDZujQocbl3HAbTkdrCgOK/jnS4ip8YaM1PAwV4ifQJzcc
/8zv12tRBHYmkLhF0iBUUeUihm2sWEhk+7+7e8hAQ+Xll2OYorUs5ToBf3LRxBG9
IZjV8lvdlo4HTYvYivLSJzoDSFw4ycigFDar98NpfNP2JY7voPh130OIowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkY9WWU7PQqS/0EETkoG/BXU6JVMB8GA1UdIwQY
MBaAFLeiMDFrPiWOklX0ayCAKuLzy0agMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZJd01Xcy1KWTZTVmZScklJQXE0dlBMUnFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83ZmU1NTktMmYxZC00N2U4LTg0NjYt
ZWY5MTM1YTJjODJmLzEvdDZJd01Xcy1KWTZTVmZScklJQXE0dlBMUnFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83ZmU1NTktMmYxZC00N2U4LTg0NjYtZWY5MTM1YTJjODJm
LzEvdDZJd01Xcy1KWTZTVmZScklJQXE0dlBMUnFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjyo73RU
b+Zax2Tiv3pKcu0q1SZYWLnJRLhMr8+eCZQxoNBx60Lx7V8wpvnb5ZigWdR6qcKW
Rb1RP43qWPeN0agWdKEYKhJtorFYPBgzNPaNghnKQtnJAUnl7Ux0gHwG0Sm+YION
CPeQvVqGZtyIhyebhADTV+n98cRLEyNh/4A45QKX9apR+YknHbwRZdHB+7U+f24V
3Qt7TVGbVJB63AC68d8wq//kp4ZR8ZG3y5KBUwQdtljQdqx0IRTA72chtwYXOmew
ZjrmvK97pdKCCEHIgUao96cgKzcjmz56Ea+YleOuK4sgMBPJl9q+AQDbUpMGswcJ
OPrcFg8EXmyQGQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:25:28 2026 by rpki-client