Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
File:                     tWKscBwU00uy5EdexRFSpAydPTw.mft (raw, json)
Hash identifier:          JWAXHFcxdK3da7bHiKmdGLZdobRDEQlL8j1+/mzeP1Q=
Subject key identifier:   50:75:8C:5C:D9:65:93:95:9D:46:D8:1C:C9:89:81:AC:C3:CE:0F:5A
Authority key identifier: B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C
Certificate issuer:       /CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
Certificate serial:       019E1DC743C955D3DC2250EB442677221D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
Manifest number:          09F0
Signing time:             Tue 12 May 2026 20:00:58 +0000
Manifest this update:     Tue 12 May 2026 20:00:58 +0000
Manifest next update:     Wed 13 May 2026 20:00:58 +0000
Files and hashes:         1: SziyxY1sZxMSjtHJqiVs05V-vCk.asa (hash: Wrcy9/aQFlANW1WRGXEsgQya2i/bD8AmCJIRuIiIad0=)
                          2: nKY7wkxqr552tFA6FDOkz_QoAvw.roa (hash: fJ0VHAnJRXOGfnfiS67MPLPgf5X/K6jwriRMCPSDxNo=)
                          3: tWKscBwU00uy5EdexRFSpAydPTw.crl (hash: sPsf99Jpi40dq/7i3pl7A3anyIdTUA9mTI5PmABbVUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:43:c9:55:d3:dc:22:50:eb:44:26:77:22:1d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
        Validity
            Not Before: May 12 20:00:58 2026 GMT
            Not After : May 13 20:00:58 2026 GMT
        Subject: CN=50758c5cd96593959d46d81cc98981acc3ce0f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:d0:58:8c:f9:60:b2:08:b7:25:38:34:3b:
                    aa:c2:b6:63:d9:24:1c:04:7d:b0:ed:fc:1d:23:1a:
                    e9:30:b5:71:26:be:7c:f2:1c:5f:75:e0:c5:bf:25:
                    e5:10:f7:be:b7:60:d1:c7:7c:d1:79:fb:ce:a9:ab:
                    f9:99:77:2e:a7:f3:32:e4:b4:5a:9c:b6:f1:7c:4d:
                    bf:f6:04:ee:1a:ac:02:89:af:e4:96:02:51:d1:b8:
                    dd:fb:26:73:54:2f:e2:1a:fe:98:4d:12:e0:4a:4f:
                    b8:63:d9:03:39:ad:82:ca:2b:9e:6e:3b:d4:76:e3:
                    1a:01:4a:4e:b9:73:60:24:ca:48:95:6b:5f:f0:30:
                    a4:6a:f0:01:4a:5f:63:5f:65:ff:c3:aa:fd:e6:7f:
                    fb:bf:e5:57:3f:cb:d2:97:1b:34:6f:b7:c7:25:91:
                    01:25:48:c1:55:49:8b:9f:fd:01:5b:bb:41:7c:84:
                    76:da:6b:76:ce:88:bb:c8:32:71:44:61:9c:83:09:
                    45:72:43:7b:b9:ae:4d:b2:8f:cb:d9:89:0e:1b:fe:
                    5b:f7:8c:99:4c:86:3b:3b:1e:47:8c:19:0d:a4:27:
                    36:47:19:8e:1c:22:8b:fe:97:b9:ed:f2:a6:a0:e8:
                    eb:fe:16:fc:79:01:0b:cc:fa:72:be:32:5a:d1:8b:
                    d7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:75:8C:5C:D9:65:93:95:9D:46:D8:1C:C9:89:81:AC:C3:CE:0F:5A
            X509v3 Authority Key Identifier:
                keyid:B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:35:25:68:65:10:19:64:c2:87:5e:8b:8c:0f:7a:32:fa:b8:
         7e:0e:5b:e6:92:c9:9e:20:e5:a6:28:2b:df:c0:d7:39:e2:7d:
         f2:46:51:22:a5:f1:ba:81:d4:65:72:08:28:dd:d3:52:ae:80:
         e0:ae:bc:5a:2a:3e:99:17:ca:43:14:db:5b:c0:d1:0b:27:b8:
         13:13:11:08:6a:7b:d2:16:0f:3a:16:27:eb:f1:ce:60:01:43:
         f5:39:68:31:67:cf:a9:79:82:73:0e:01:2e:45:a9:94:d8:43:
         cf:1a:c0:78:3c:88:8a:67:05:93:66:ee:f5:77:5a:15:ef:70:
         99:20:82:fd:fb:31:59:bc:6e:19:97:f0:60:d1:26:1a:5f:2b:
         04:86:9f:7b:ba:a6:74:30:58:83:ef:22:52:d8:4a:6e:6b:06:
         67:59:b2:bd:e5:8f:35:e9:70:f9:9c:00:6f:c7:01:eb:c9:f0:
         0a:9e:e9:fc:18:81:0b:c3:ab:e4:2a:9c:f6:dc:78:44:f5:54:
         f4:b5:80:4a:62:2a:7e:e0:24:a8:8d:30:67:e3:6b:7b:3d:7e:
         9b:4d:15:a7:6a:47:57:81:e7:b1:6c:9d:a0:6a:9f:d9:02:01:
         cd:7b:14:87:f2:08:7b:4a:7f:de:9d:29:cd:a7:fd:60:16:5e:
         97:74:e6:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx0PJVdPcIlDrRCZ3Ih0+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NjJhYzcwMWMxNGQzNGJiMmU0NDc1ZWM1MTE1MmE0MGM5
ZDNkM2MwHhcNMjYwNTEyMjAwMDU4WhcNMjYwNTEzMjAwMDU4WjAzMTEwLwYDVQQD
Eyg1MDc1OGM1Y2Q5NjU5Mzk1OWQ0NmQ4MWNjOTg5ODFhY2MzY2UwZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7nQWIz5YLIItyU4NDuqwrZj2SQc
BH2w7fwdIxrpMLVxJr588hxfdeDFvyXlEPe+t2DRx3zRefvOqav5mXcup/My5LRa
nLbxfE2/9gTuGqwCia/klgJR0bjd+yZzVC/iGv6YTRLgSk+4Y9kDOa2CyiuebjvU
duMaAUpOuXNgJMpIlWtf8DCkavABSl9jX2X/w6r95n/7v+VXP8vSlxs0b7fHJZEB
JUjBVUmLn/0BW7tBfIR22mt2zoi7yDJxRGGcgwlFckN7ua5Nso/L2YkOG/5b94yZ
TIY7Ox5HjBkNpCc2RxmOHCKL/pe57fKmoOjr/hb8eQELzPpyvjJa0YvXSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFB1jFzZZZOVnUbYHMmJgazDzg9aMB8GA1UdIwQY
MBaAFLVirHAcFNNLsuRHXsURUqQMnT08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84ZjAxYjMtMjU3Yi00OGQ1LTgyZTIt
MDk3MzI0ZGQ5ZWM4LzEvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84ZjAxYjMtMjU3Yi00OGQ1LTgyZTItMDk3MzI0ZGQ5ZWM4
LzEvdFdLc2NCd1UwMHV5NUVkZXhSRlNwQXlkUFR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALzUlaGUQ
GWTCh16LjA96Mvq4fg5b5pLJniDlpigr38DXOeJ98kZRIqXxuoHUZXIIKN3TUq6A
4K68Wio+mRfKQxTbW8DRCye4ExMRCGp70hYPOhYn6/HOYAFD9TloMWfPqXmCcw4B
LkWplNhDzxrAeDyIimcFk2bu9XdaFe9wmSCC/fsxWbxuGZfwYNEmGl8rBIafe7qm
dDBYg+8iUthKbmsGZ1myveWPNelw+ZwAb8cB68nwCp7p/BiBC8Or5Cqc9tx4RPVU
9LWASmIqfuAkqI0wZ+Nrez1+m00Vp2pHV4HnsWydoGqf2QIBzXsUh/IIe0p/3p0p
zaf9YBZel3Tmqg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:01:10 2026 by rpki-client