Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File:                     9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier:          VHVOwmFVvf7uezw48s/x9IZNKjHzMEUtd/sugI6DIZY=
Subject key identifier:   66:27:27:29:C1:78:A6:D5:C5:77:FD:84:6E:FB:3E:F4:09:53:7C:D1
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer:       /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial:       019E1DC76462059E85E26E01B0480A87F198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number:          199D
Signing time:             Tue 12 May 2026 20:01:06 +0000
Manifest this update:     Tue 12 May 2026 20:01:06 +0000
Manifest next update:     Wed 13 May 2026 20:01:06 +0000
Files and hashes:         1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=)
                          2: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (hash: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=)
                          3: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=)
                          4: 9QOoNpd76OPVl49TOCbIH5K-Xuc.roa (hash: iHslUv59RlEtWqhiDG50P5ptUXczZiGq5UnFqrvblIU=)
                          5: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: o/0h9hRnTkYu54DpOJ29DcG0uoEpXQj1tN917uStifs=)
                          6: X_fEJIYYuwQlx3XcGK0irNSX02o.roa (hash: Pqs0Zhky1DYH+KL+3hoS8to+Kz8z6fF9tAhtoYNSPQo=)
                          7: Xlo2dAjL9Nrixz0iYa0SAY5SYBc.roa (hash: Bg+pB+Sxi3uvjFsg12Ez9WbynlaVnSIe2mie+DFh+2c=)
                          8: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=)
                          9: wUIQuE5RAl6yjUP9k5UHyxLRIPw.roa (hash: NCMtFKefqHShmwgJRWPFU+3g5xSc9WX2hSElA5v9Foo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:64:62:05:9e:85:e2:6e:01:b0:48:0a:87:f1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
        Validity
            Not Before: May 12 20:01:06 2026 GMT
            Not After : May 13 20:01:06 2026 GMT
        Subject: CN=66272729c178a6d5c577fd846efb3ef409537cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d5:59:7e:88:da:6c:b5:00:b7:e0:48:34:05:
                    7d:ce:af:11:0c:19:66:9e:56:45:a4:e9:d9:a0:8d:
                    be:77:4e:e9:c8:fc:d8:7c:b3:7b:06:20:85:91:73:
                    25:1c:4a:5a:a4:79:f9:97:b6:92:7a:0f:19:11:c7:
                    69:f7:11:41:60:99:59:d8:fb:19:a3:9f:22:1d:00:
                    f0:7d:c4:dc:50:3c:45:9c:a3:f6:f5:08:45:db:83:
                    f8:ea:f1:35:82:85:6f:04:8e:47:b5:1e:6a:44:a4:
                    43:01:22:32:ed:1d:0e:c0:fa:e1:dd:75:64:3f:8d:
                    d2:39:ea:f5:0f:c4:c4:af:56:9d:4c:a5:19:95:76:
                    81:89:da:dc:07:3d:a3:b7:86:a2:8c:4d:e2:63:bc:
                    c5:93:e8:6c:f6:fe:5c:8f:93:c9:5f:cd:17:3b:a1:
                    0a:a9:ec:cb:6e:1f:01:8c:c2:c9:50:cf:49:63:04:
                    a3:c5:d8:3a:8c:52:7a:40:21:9a:3a:63:76:6b:f4:
                    4b:f1:1c:61:fa:d7:13:c9:1c:c5:13:75:0d:58:d3:
                    ff:c7:05:6a:4f:df:ab:99:87:06:40:5e:31:c1:c5:
                    f7:ba:73:e9:2b:02:64:2f:4a:18:c8:0d:f2:59:48:
                    52:c9:bf:f8:e5:e6:4c:c3:92:62:a5:99:5d:15:ac:
                    ae:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:27:27:29:C1:78:A6:D5:C5:77:FD:84:6E:FB:3E:F4:09:53:7C:D1
            X509v3 Authority Key Identifier:
                keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a6:cc:f7:fd:12:01:d6:29:e6:88:95:e2:92:34:3d:5c:5a:
         2f:66:65:37:88:7c:e3:9b:88:ad:e3:14:ca:f8:a5:2f:37:6c:
         f7:ae:2a:c0:fe:75:21:58:97:ee:11:0f:3d:13:62:ee:ef:25:
         da:96:04:3d:b5:7a:0c:b0:5f:5a:4d:48:5e:3f:ce:a8:f6:b4:
         af:ca:f3:ab:19:ad:01:a8:a4:c4:a3:c9:a1:7a:71:31:ad:42:
         6c:18:76:49:6b:51:91:c6:6d:fa:91:15:42:f4:c9:a0:69:94:
         d7:d4:05:34:ef:68:cd:e0:c1:20:77:81:c8:db:45:63:8b:63:
         ec:49:20:59:0e:e8:4b:f6:99:b3:0e:5c:61:ed:47:7b:1b:c6:
         f2:0d:1c:9e:5f:f9:d1:dd:d9:47:26:4d:92:3b:09:36:11:af:
         58:75:5d:c6:25:23:15:e1:35:27:76:ce:f9:b8:0b:30:f0:bb:
         95:8b:99:9f:a0:7a:5e:20:42:69:04:46:2e:a8:59:66:00:d9:
         a6:79:d3:73:3f:68:e6:41:4e:86:0a:ff:86:7d:4e:16:9e:49:
         c9:b2:a0:62:b6:df:85:bc:d9:9e:1c:fb:3f:19:fc:d5:66:7f:
         1a:20:7d:e4:3c:4d:7c:74:bb:fa:59:e0:c9:a8:0f:e6:78:2a:
         63:3e:2c:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx2RiBZ6F4m4BsEgKh/GYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3
NTJhZTcwHhcNMjYwNTEyMjAwMTA2WhcNMjYwNTEzMjAwMTA2WjAzMTEwLwYDVQQD
Eyg2NjI3MjcyOWMxNzhhNmQ1YzU3N2ZkODQ2ZWZiM2VmNDA5NTM3Y2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNVZfojabLUAt+BINAV9zq8RDBlm
nlZFpOnZoI2+d07pyPzYfLN7BiCFkXMlHEpapHn5l7aSeg8ZEcdp9xFBYJlZ2PsZ
o58iHQDwfcTcUDxFnKP29QhF24P46vE1goVvBI5HtR5qRKRDASIy7R0OwPrh3XVk
P43SOer1D8TEr1adTKUZlXaBidrcBz2jt4aijE3iY7zFk+hs9v5cj5PJX80XO6EK
qezLbh8BjMLJUM9JYwSjxdg6jFJ6QCGaOmN2a/RL8Rxh+tcTyRzFE3UNWNP/xwVq
T9+rmYcGQF4xwcX3unPpKwJkL0oYyA3yWUhSyb/45eZMw5JipZldFayuvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYnJynBeKbVxXf9hG77PvQJU3zRMB8GA1UdIwQY
MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt
MmI5MjBiZGUzOTkwLzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw
LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKbM9/0S
AdYp5oiV4pI0PVxaL2ZlN4h845uIreMUyvilLzds964qwP51IViX7hEPPRNi7u8l
2pYEPbV6DLBfWk1IXj/OqPa0r8rzqxmtAaikxKPJoXpxMa1CbBh2SWtRkcZt+pEV
QvTJoGmU19QFNO9ozeDBIHeByNtFY4tj7EkgWQ7oS/aZsw5cYe1HexvG8g0cnl/5
0d3ZRyZNkjsJNhGvWHVdxiUjFeE1J3bO+bgLMPC7lYuZn6B6XiBCaQRGLqhZZgDZ
pnnTcz9o5kFOhgr/hn1OFp5JybKgYrbfhbzZnhz7Pxn81WZ/GiB95DxNfHS7+lng
yagP5ngqYz4swA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:23:59 2026 by rpki-client