Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
File:                     mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json)
Hash identifier:          3EpbBtGX66nyt+UG8cgjQBV30YV6aTVIWWr+q6sXy9g=
Subject key identifier:   EC:88:B5:9E:54:C1:40:A3:FB:26:C7:B1:B6:B2:BA:47:CF:9B:EE:46
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Certificate issuer:       /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial:       019E1F110D693E5B615D29876C1EA3870F9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
Manifest number:          0E94
Signing time:             Wed 13 May 2026 02:01:11 +0000
Manifest this update:     Wed 13 May 2026 02:01:11 +0000
Manifest next update:     Thu 14 May 2026 02:01:11 +0000
Files and hashes:         1: RTCwtH7ZWIYWogG8SzF47UbA26A.roa (hash: cp0ZS5qVAjMrv/xO5fzJ4jhrguG1YkL8kQ9RzgIwSl4=)
                          2: T2785FZtezCL_6MGZVNWjJWLkV4.roa (hash: vLx5BTbQ5gwqNSQW0r0QpCkolwPmMCxbInfB7uOoJt8=)
                          3: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: uBg7qLDpifoykoMh5yA4d4DCekbQdsVR44qkGMgTdxw=)
                          4: tIO_Frmyb630hOFMV5X9t-LFjlM.roa (hash: A+6xfI16vy2Eu1vSrt6AeJ63kgJErM2gSoHCauuaBDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:0d:69:3e:5b:61:5d:29:87:6c:1e:a3:87:0f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
        Validity
            Not Before: May 13 02:01:11 2026 GMT
            Not After : May 14 02:01:11 2026 GMT
        Subject: CN=ec88b59e54c140a3fb26c7b1b6b2ba47cf9bee46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:52:7d:95:7e:0b:1e:78:30:ee:5b:f7:09:c1:
                    6b:49:20:17:fa:73:ba:3d:8b:6d:db:77:07:59:c7:
                    e0:a9:3c:ee:2a:21:6e:46:b7:22:8b:db:62:17:1e:
                    36:72:5d:7a:0b:54:8d:f8:b4:91:92:ec:14:8f:9f:
                    11:dd:4c:a8:39:f3:65:16:15:00:dd:20:72:e5:ff:
                    47:1a:e2:dc:e5:54:57:70:6f:20:4d:98:5f:cb:c4:
                    09:cb:e0:4e:5b:55:08:17:2f:3b:73:10:e7:98:e8:
                    ea:14:84:bc:32:53:8d:67:a9:40:18:58:a8:9d:40:
                    7f:e9:1e:2f:ae:1b:52:07:49:40:1b:18:dd:89:68:
                    9a:73:28:de:f0:da:ed:0f:8f:e4:d8:3c:ca:ce:63:
                    97:4f:52:91:42:8a:66:3d:a8:8d:31:67:37:ab:1e:
                    ba:9c:95:44:bc:20:c8:ee:63:90:b7:4e:c9:3f:d2:
                    ba:ca:66:48:e4:17:53:bd:15:0b:ec:4f:51:99:52:
                    5e:a1:40:48:d5:de:38:eb:f1:4d:b9:ae:b2:f3:1f:
                    f4:5c:22:70:f3:7c:48:a6:dc:4d:02:a7:c3:c9:12:
                    6f:e7:88:4e:35:41:49:2a:a5:c3:36:0f:59:8b:dd:
                    df:d0:9e:30:6f:53:13:cb:8b:7f:d1:88:f4:fa:25:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:88:B5:9E:54:C1:40:A3:FB:26:C7:B1:B6:B2:BA:47:CF:9B:EE:46
            X509v3 Authority Key Identifier:
                keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:49:1e:0a:ed:cc:07:d4:17:cb:9d:56:9f:31:9a:6f:ae:99:
         0b:ac:89:dd:c1:10:8a:03:ca:3e:5c:2b:1b:c5:a6:e2:23:24:
         b7:91:e5:fd:ca:78:d0:40:c8:f6:6b:86:c8:81:b5:42:f4:0b:
         93:47:54:f4:8b:b4:fc:09:a5:d4:da:a3:ed:9f:3f:c1:5f:57:
         07:43:a1:14:0d:d8:97:14:2a:17:5e:af:3a:57:64:19:d8:55:
         db:f7:9c:c0:66:9d:c6:a0:df:f0:6b:e7:6d:b3:86:2c:9c:4d:
         80:ff:5b:f5:05:52:3e:c0:23:9c:3c:3a:64:38:b6:c4:6e:af:
         8c:36:45:85:be:99:13:29:bc:b2:72:ad:c3:96:91:c6:23:ad:
         38:b3:4b:61:90:02:57:c0:eb:64:b3:bd:ae:f9:4e:37:4c:51:
         67:76:28:13:c4:b3:72:04:90:83:b3:c2:90:16:29:35:78:cb:
         b5:36:a4:a2:c8:58:bc:21:64:77:24:bf:63:03:f9:fd:52:32:
         35:58:97:56:5b:34:86:65:8f:80:88:1b:22:6d:e6:17:d3:d3:
         23:11:4f:7a:3a:4f:63:e1:37:11:cf:e8:b9:94:41:23:e9:46:
         12:98:9b:e7:c4:89:00:46:72:c1:60:93:c7:25:6c:f0:5e:b4:
         e2:6b:e0:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEQ1pPlthXSmHbB6jhw+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NDRmODEyYTBlMDAyYzM4ZTg0ZTQ3NjI4YmRiYTAzODU5
ODA5MGIwHhcNMjYwNTEzMDIwMTExWhcNMjYwNTE0MDIwMTExWjAzMTEwLwYDVQQD
EyhlYzg4YjU5ZTU0YzE0MGEzZmIyNmM3YjFiNmIyYmE0N2NmOWJlZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VJ9lX4LHngw7lv3CcFrSSAX+nO6
PYtt23cHWcfgqTzuKiFuRrcii9tiFx42cl16C1SN+LSRkuwUj58R3UyoOfNlFhUA
3SBy5f9HGuLc5VRXcG8gTZhfy8QJy+BOW1UIFy87cxDnmOjqFIS8MlONZ6lAGFio
nUB/6R4vrhtSB0lAGxjdiWiacyje8NrtD4/k2DzKzmOXT1KRQopmPaiNMWc3qx66
nJVEvCDI7mOQt07JP9K6ymZI5BdTvRUL7E9RmVJeoUBI1d446/FNua6y8x/0XCJw
83xIptxNAqfDyRJv54hONUFJKqXDNg9Zi93f0J4wb1MTy4t/0Yj0+iU/TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyItZ5UwUCj+ybHsbayukfPm+5GMB8GA1UdIwQY
MBaAFJlE+BKg4ALDjoTkdii9ugOFmAkLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zYzZjYjUtYTcyYy00NzAxLWFlNmMt
MzA2YzU2NTEzNDNlLzEvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zYzZjYjUtYTcyYy00NzAxLWFlNmMtMzA2YzU2NTEzNDNl
LzEvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUkeCu3M
B9QXy51WnzGab66ZC6yJ3cEQigPKPlwrG8Wm4iMkt5Hl/cp40EDI9muGyIG1QvQL
k0dU9Iu0/Aml1Nqj7Z8/wV9XB0OhFA3YlxQqF16vOldkGdhV2/ecwGadxqDf8Gvn
bbOGLJxNgP9b9QVSPsAjnDw6ZDi2xG6vjDZFhb6ZEym8snKtw5aRxiOtOLNLYZAC
V8DrZLO9rvlON0xRZ3YoE8SzcgSQg7PCkBYpNXjLtTakoshYvCFkdyS/YwP5/VIy
NViXVls0hmWPgIgbIm3mF9PTIxFPejpPY+E3Ec/ouZRBI+lGEpib58SJAEZywWCT
xyVs8F604mvgjA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:43:27 2026 by rpki-client