Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
File:                     xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft (raw, json)
Hash identifier:          dHfcTGLLUHE9JENWt+pGqkZeSdTkTndn8kPk1mZpIsM=
Subject key identifier:   92:53:1F:A0:43:2E:FF:85:F7:9D:6B:DC:57:E0:03:F5:1D:09:04:6D
Authority key identifier: C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
Certificate issuer:       /CN=c49c88442ba97345bc0106559e6fa786944adca4
Certificate serial:       019E1F7EC62AECD7F80D68725257482CEC39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
Manifest number:          0ED8
Signing time:             Wed 13 May 2026 04:01:02 +0000
Manifest this update:     Wed 13 May 2026 04:01:02 +0000
Manifest next update:     Thu 14 May 2026 04:01:02 +0000
Files and hashes:         1: TxIZNzzKaH19rbmOUyZ9uXJGBrA.roa (hash: /R4FGOkjkhFDesEVBEJOaS2Lp1AMWloELlEn3WOI3+4=)
                          2: xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl (hash: WYnXMiKS0e+L8R2BISf8aZ3U/0c6xR96Hdo9QcaGXhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:c6:2a:ec:d7:f8:0d:68:72:52:57:48:2c:ec:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49c88442ba97345bc0106559e6fa786944adca4
        Validity
            Not Before: May 13 04:01:02 2026 GMT
            Not After : May 14 04:01:02 2026 GMT
        Subject: CN=92531fa0432eff85f79d6bdc57e003f51d09046d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:ee:8b:c1:a1:79:ae:55:df:c7:4e:28:63:
                    ef:63:3d:f2:88:c9:f1:3f:30:48:cc:f0:75:ab:66:
                    7a:97:aa:69:01:11:e9:3f:4c:03:ef:ac:77:08:c3:
                    cc:04:ff:d1:c4:3d:16:9c:3a:31:2d:ae:67:ac:d4:
                    1d:0e:6f:75:f2:ea:15:81:0c:76:c0:52:bc:34:04:
                    39:0d:5a:ce:b3:aa:79:55:50:80:a3:63:48:bb:1c:
                    98:c5:78:67:17:79:ab:da:21:72:3b:0a:34:c5:0d:
                    f3:9a:81:f1:b5:dd:0c:c4:62:af:33:72:f6:46:15:
                    c1:77:fe:44:16:d7:c3:6d:7e:6c:81:76:70:e4:af:
                    ea:f8:5b:62:3e:c0:ad:50:d8:30:d6:6a:85:dd:ee:
                    74:4c:3f:47:98:12:6c:c3:ca:8a:0e:8d:e9:ab:d5:
                    2b:55:3d:9c:ff:70:45:9b:52:b0:8f:11:a8:7e:9d:
                    51:c4:9e:36:2a:6e:e2:9f:dd:79:72:05:41:e8:5b:
                    c1:cd:d7:96:d0:71:76:8c:f8:de:7d:15:e5:75:bd:
                    03:b4:24:38:9d:a1:d5:20:de:34:ec:0a:4c:ec:85:
                    bc:17:c2:39:93:7f:a2:b7:ac:81:a5:5b:9f:ca:cc:
                    aa:1a:5f:bc:53:90:df:eb:b1:4e:62:0b:b8:ea:52:
                    51:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:53:1F:A0:43:2E:FF:85:F7:9D:6B:DC:57:E0:03:F5:1D:09:04:6D
            X509v3 Authority Key Identifier:
                keyid:C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:cc:25:7a:c2:98:58:42:a2:5f:ce:61:5d:e3:36:1d:94:4c:
         c1:d0:87:3f:7b:36:33:ed:03:1e:06:0f:95:45:5b:61:b5:da:
         f8:7e:47:44:a6:a7:0d:59:a9:76:4d:79:1d:ef:d9:94:7f:1e:
         18:82:27:e5:c1:6c:4f:a7:79:0c:d7:69:b2:2c:f0:58:8f:69:
         e6:3a:73:62:b6:0a:bb:c0:85:ce:eb:2a:53:f7:f2:3c:dc:19:
         f9:f4:01:95:e7:8b:a8:ef:58:57:6f:92:4b:46:18:ae:3a:e8:
         45:1d:57:30:39:e2:be:86:04:28:75:05:a1:8d:df:3b:a9:9e:
         93:f4:fa:58:e9:fe:f5:99:64:2c:e7:6f:bc:6b:a2:4d:6c:89:
         7b:1f:36:19:66:01:0b:e3:27:44:54:1a:d6:2f:8c:c7:72:af:
         5a:0c:c6:82:c3:fe:5c:aa:b5:75:34:b5:c6:96:2e:16:0e:24:
         f7:55:ec:8d:46:3f:fc:85:6a:c7:70:c2:75:6f:0d:dc:5c:41:
         da:67:91:03:e3:ee:d6:d9:23:68:20:ad:6a:c6:eb:96:ce:ee:
         15:fa:f2:55:e1:8b:ed:30:2d:6e:4f:07:f7:44:56:e4:5c:70:
         67:06:25:da:4a:f9:de:a3:a4:21:7d:b4:f1:71:06:6a:4e:f4:
         b6:86:50:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffsYq7Nf4DWhyUldILOw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWM4ODQ0MmJhOTczNDViYzAxMDY1NTllNmZhNzg2OTQ0
YWRjYTQwHhcNMjYwNTEzMDQwMTAyWhcNMjYwNTE0MDQwMTAyWjAzMTEwLwYDVQQD
Eyg5MjUzMWZhMDQzMmVmZjg1Zjc5ZDZiZGM1N2UwMDNmNTFkMDkwNDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA3ui8Ghea5V38dOKGPvYz3yiMnx
PzBIzPB1q2Z6l6ppARHpP0wD76x3CMPMBP/RxD0WnDoxLa5nrNQdDm918uoVgQx2
wFK8NAQ5DVrOs6p5VVCAo2NIuxyYxXhnF3mr2iFyOwo0xQ3zmoHxtd0MxGKvM3L2
RhXBd/5EFtfDbX5sgXZw5K/q+FtiPsCtUNgw1mqF3e50TD9HmBJsw8qKDo3pq9Ur
VT2c/3BFm1KwjxGofp1RxJ42Km7in915cgVB6FvBzdeW0HF2jPjefRXldb0DtCQ4
naHVIN407ApM7IW8F8I5k3+it6yBpVufysyqGl+8U5Df67FOYgu46lJRowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJTH6BDLv+F951r3FfgA/UdCQRtMB8GA1UdIwQY
MBaAFMSciEQrqXNFvAEGVZ5vp4aUStykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80ZjYxODctYmM2Ny00YWMzLTljOGQt
YTcwZjk5MmE1NTI5LzEveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80ZjYxODctYmM2Ny00YWMzLTljOGQtYTcwZjk5MmE1NTI5
LzEveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMwlesKY
WEKiX85hXeM2HZRMwdCHP3s2M+0DHgYPlUVbYbXa+H5HRKanDVmpdk15He/ZlH8e
GIIn5cFsT6d5DNdpsizwWI9p5jpzYrYKu8CFzusqU/fyPNwZ+fQBleeLqO9YV2+S
S0YYrjroRR1XMDnivoYEKHUFoY3fO6mek/T6WOn+9ZlkLOdvvGuiTWyJex82GWYB
C+MnRFQa1i+Mx3KvWgzGgsP+XKq1dTS1xpYuFg4k91XsjUY//IVqx3DCdW8N3FxB
2meRA+Pu1tkjaCCtasbrls7uFfryVeGL7TAtbk8H90RW5FxwZwYl2kr53qOkIX20
8XEGak70toZQjQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:57:59 2026 by rpki-client