Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
File:                     4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json)
Hash identifier:          MA9JIgGqW+4gs7XWHniBDdbg7Q0UZnly2N2d4eP0/VM=
Subject key identifier:   5D:3A:CB:A3:A0:20:CA:14:5A:34:B9:67:F2:F7:1F:C6:C8:E3:F0:BD
Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
Certificate issuer:       /CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Certificate serial:       019E1E6CBF20A36E4088D5650DC8F91787FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
Manifest number:          189C
Signing time:             Tue 12 May 2026 23:01:43 +0000
Manifest this update:     Tue 12 May 2026 23:01:43 +0000
Manifest next update:     Wed 13 May 2026 23:01:43 +0000
Files and hashes:         1: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: 3Q4le+CkJjx01XnvTYi5yLiorUT+qFA2zlhpCRDjL28=)
                          2: w9M7qFYAM8Bc_3Ry_zHFbT7tXaQ.roa (hash: S9cgU4aODgbYFlt1oo6eD08eYcxMr87FOJ/xbk/bpB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:bf:20:a3:6e:40:88:d5:65:0d:c8:f9:17:87:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422
        Validity
            Not Before: May 12 23:01:43 2026 GMT
            Not After : May 13 23:01:43 2026 GMT
        Subject: CN=5d3acba3a020ca145a34b967f2f71fc6c8e3f0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:1d:99:ea:a5:ea:c2:fc:80:84:11:c9:1b:
                    aa:40:6a:ad:90:9f:71:02:76:f0:66:75:a0:6f:35:
                    f5:28:24:49:41:2f:08:d9:4a:9c:9b:41:ac:84:1f:
                    fe:72:a8:54:e4:40:2e:7e:ca:cb:33:27:dc:5e:2c:
                    a8:41:50:f0:4f:ee:72:15:fc:9a:d8:67:83:92:55:
                    a9:c8:f2:26:ed:28:29:75:dc:84:74:43:f3:66:66:
                    d3:85:4f:2d:dd:33:4b:51:7b:54:66:8e:42:2c:b4:
                    35:29:9e:65:12:5c:26:c5:2a:d8:c0:85:80:fc:37:
                    96:cf:da:d4:b3:2f:88:2f:85:23:95:19:3a:0b:43:
                    af:8d:35:3f:72:36:99:33:7f:d4:13:6b:cf:21:3c:
                    19:d5:72:11:f6:86:99:d0:48:ba:b8:00:7d:e1:af:
                    5b:ed:a1:90:6c:85:c8:b2:fc:31:b9:96:1f:87:d9:
                    95:df:51:81:85:fe:99:2a:d2:c2:e8:7b:e8:cd:7a:
                    a1:50:4e:46:2a:4b:a2:2d:66:79:1b:08:3d:1e:54:
                    36:4a:3e:6b:04:2d:29:8e:c9:c7:1f:d3:a3:80:b5:
                    42:0d:1a:7f:c1:a0:12:06:e0:53:36:47:bb:bf:fe:
                    ff:ed:d9:83:e7:de:b4:fb:95:f9:fb:3a:48:9a:a7:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3A:CB:A3:A0:20:CA:14:5A:34:B9:67:F2:F7:1F:C6:C8:E3:F0:BD
            X509v3 Authority Key Identifier:
                keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:03:35:3d:60:38:8e:d3:22:78:8f:fc:cd:97:2a:01:7f:0e:
         9d:8e:85:4b:f7:6f:5c:6e:8e:67:f0:65:76:2e:b2:73:5f:eb:
         bc:21:f4:53:7d:9b:84:e0:d4:2c:f7:30:2c:3f:38:85:8f:ea:
         bf:63:a0:bd:ae:50:c5:30:e1:fd:de:12:96:cc:e4:75:e0:34:
         e9:b5:ff:ed:37:85:9c:f5:64:35:eb:4b:fc:45:17:6d:77:1f:
         39:3a:f3:f3:ed:77:cf:32:91:86:b9:f5:a8:31:a5:83:4c:7d:
         09:8a:b6:8f:12:2b:7b:1c:fd:09:10:9b:88:38:9d:43:43:65:
         c7:4b:20:7b:2f:c2:e6:6f:4c:37:35:0a:2e:01:dd:d7:00:b4:
         f0:f8:7f:53:46:8f:72:a6:82:78:d5:94:aa:d8:49:f3:f3:5a:
         47:00:e9:a1:ce:c6:72:61:3f:c8:c0:6b:cf:23:ee:fd:39:a5:
         71:11:ab:dc:71:da:bd:7b:65:37:76:10:e8:ea:01:bd:11:4a:
         74:3e:32:68:df:c7:59:4e:39:13:ff:64:64:5c:5c:ef:eb:83:
         c6:97:0b:17:1e:3f:b5:48:0d:90:60:b8:23:7a:a8:c4:c5:c7:
         81:f1:f8:3b:13:e5:3b:63:2c:a4:1a:cf:00:78:1c:2a:0f:b7:
         fe:49:26:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebL8go25AiNVlDcj5F4f6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjlhYjZmMDk1NzJhZmI0NmU5ZjhlOWEwNjM5ZDgyMGI5
Njk0MjIwHhcNMjYwNTEyMjMwMTQzWhcNMjYwNTEzMjMwMTQzWjAzMTEwLwYDVQQD
Eyg1ZDNhY2JhM2EwMjBjYTE0NWEzNGI5NjdmMmY3MWZjNmM4ZTNmMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUAdmeql6sL8gIQRyRuqQGqtkJ9x
AnbwZnWgbzX1KCRJQS8I2Uqcm0GshB/+cqhU5EAufsrLMyfcXiyoQVDwT+5yFfya
2GeDklWpyPIm7SgpddyEdEPzZmbThU8t3TNLUXtUZo5CLLQ1KZ5lElwmxSrYwIWA
/DeWz9rUsy+IL4UjlRk6C0OvjTU/cjaZM3/UE2vPITwZ1XIR9oaZ0Ei6uAB94a9b
7aGQbIXIsvwxuZYfh9mV31GBhf6ZKtLC6HvozXqhUE5GKkuiLWZ5Gwg9HlQ2Sj5r
BC0pjsnHH9OjgLVCDRp/waASBuBTNke7v/7/7dmD5960+5X5+zpImqdqyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF06y6OgIMoUWjS5Z/L3H8bI4/C9MB8GA1UdIwQY
MBaAFOBpq28JVyr7Run46aBjnYILlpQiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdtcmJ3bFhLdnRHNmZqcG9HT2RnZ3VXbENJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9hYTVjYzAtYmI1Ni00YjQ3LWI3YzEt
NDRmNDFkOWUxMjc3LzEvNEdtcmJ3bFhLdnRHNmZqcG9HT2RnZ3VXbENJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9hYTVjYzAtYmI1Ni00YjQ3LWI3YzEtNDRmNDFkOWUxMjc3
LzEvNEdtcmJ3bFhLdnRHNmZqcG9HT2RnZ3VXbENJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgM1PWA4
jtMieI/8zZcqAX8OnY6FS/dvXG6OZ/Bldi6yc1/rvCH0U32bhODULPcwLD84hY/q
v2Ogva5QxTDh/d4SlszkdeA06bX/7TeFnPVkNetL/EUXbXcfOTrz8+13zzKRhrn1
qDGlg0x9CYq2jxIrexz9CRCbiDidQ0Nlx0sgey/C5m9MNzUKLgHd1wC08Ph/U0aP
cqaCeNWUqthJ8/NaRwDpoc7GcmE/yMBrzyPu/TmlcRGr3HHavXtlN3YQ6OoBvRFK
dD4yaN/HWU45E/9kZFxc7+uDxpcLFx4/tUgNkGC4I3qoxMXHgfH4OxPlO2MspBrP
AHgcKg+3/kkmQw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:50:02 2026 by rpki-client