Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
File:                     wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft (raw, json)
Hash identifier:          Fl7sGRmn0cDbgNtMe4vrNWYKk2bBdab3Mm9Lz7mlLkA=
Subject key identifier:   5F:24:52:31:4C:22:68:16:FC:CE:03:BC:95:79:2C:F6:48:53:4E:32
Authority key identifier: C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
Certificate issuer:       /CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Certificate serial:       019E1D90B2540D02D07C862242C596B3327E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 19:01:22 +0000
Manifest this update:     Tue 12 May 2026 19:01:22 +0000
Manifest next update:     Wed 13 May 2026 19:01:22 +0000
Files and hashes:         1: jsDYE34UviBew9m4vDFXo1V4oc8.roa (hash: gdIEnE0XT9mqo9eWipuUMBco0clAJ+AoSte8Ebzw+Y4=)
                          2: wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl (hash: EdX9xpc/wGbCp/kYdrbMiI3iP7eqliFZXtSan4sWlO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:b2:54:0d:02:d0:7c:86:22:42:c5:96:b3:32:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
        Validity
            Not Before: May 12 19:01:22 2026 GMT
            Not After : May 13 19:01:22 2026 GMT
        Subject: CN=5f2452314c226816fcce03bc95792cf648534e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:73:51:c4:42:ca:29:b1:a1:22:d6:54:4a:
                    13:d4:94:83:36:7a:b9:c9:63:3b:4c:26:28:7e:48:
                    ed:64:7c:c5:9a:b3:6f:78:73:82:05:22:78:58:95:
                    15:91:3f:39:b7:b9:11:93:c2:74:38:f1:f8:a6:f7:
                    54:e0:8c:c9:83:e5:d9:79:b8:9c:26:7e:b0:9c:45:
                    47:9f:e0:a5:ce:40:c8:1b:80:44:6e:ff:50:97:f1:
                    29:55:4f:84:28:48:32:66:8a:f4:55:59:6e:d4:a9:
                    fa:ce:c7:10:2d:05:db:bc:f6:12:62:ba:b8:b6:21:
                    0a:eb:e6:5e:f8:b7:5f:e0:0e:2d:95:fa:73:23:47:
                    99:48:97:c6:9c:f0:43:51:7e:19:35:95:3c:fa:cc:
                    d6:f5:3d:e3:35:ac:d0:30:5f:d3:dc:28:44:78:99:
                    6d:b0:27:a2:d0:c4:3a:e2:29:13:b8:4b:3e:44:c1:
                    30:2a:65:7e:03:7f:92:59:06:ea:da:82:32:31:c0:
                    5b:d5:0e:c8:b4:9e:6f:23:77:75:69:9c:d4:14:72:
                    1c:0f:20:5b:56:83:ea:0d:f7:92:6b:45:b7:11:cb:
                    61:f8:80:23:73:71:a3:57:08:be:3c:69:84:6e:66:
                    8c:10:e1:87:05:8d:23:81:7f:ee:48:3a:76:88:5d:
                    3d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:24:52:31:4C:22:68:16:FC:CE:03:BC:95:79:2C:F6:48:53:4E:32
            X509v3 Authority Key Identifier:
                keyid:C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2a:a7:4b:3b:94:f0:f3:57:c2:23:0d:a4:53:3a:8a:9c:a0:
         a3:c5:88:28:83:11:53:2d:12:52:a8:58:fc:9c:6c:5f:63:d0:
         4c:93:d8:bc:e0:69:59:17:0e:f5:81:a8:89:25:b5:1f:32:9f:
         09:5a:89:06:a1:20:66:c6:c6:f6:32:25:c2:84:97:ae:39:49:
         c8:8d:90:03:82:8b:f5:22:1e:be:0e:b3:7f:f6:c5:5c:cc:a8:
         87:63:a1:f4:12:fb:99:01:c1:c6:59:e4:22:bc:4d:fe:f6:f1:
         ac:b4:a1:99:a0:1b:74:8c:c3:3d:e6:82:af:f4:54:b9:6f:18:
         9c:d7:71:1e:ef:25:18:94:9c:13:cd:3c:5c:b4:ff:dd:8b:4d:
         f9:86:be:e6:69:9a:82:ea:9a:83:6e:df:6a:1b:3d:73:18:56:
         da:29:50:32:d6:60:c7:6e:20:da:8d:e0:9c:f8:93:df:da:35:
         3a:89:f7:b6:7e:cb:de:04:ab:85:a0:ba:69:c0:b2:cf:d5:fb:
         55:37:76:08:4b:b6:53:18:19:71:6a:67:79:5a:c1:87:36:33:
         e8:60:bf:be:e6:da:41:17:63:96:04:b9:26:8d:68:22:28:d1:
         7f:09:89:c5:31:5f:2e:43:9b:92:7b:37:18:cd:bf:1b:e6:22:
         96:1d:53:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkLJUDQLQfIYiQsWWszJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjYxMjJiNGNlZWU0MWY5N2ZmYjhjYzIyNTUwYmUzZmEw
YTUzZGMwHhcNMjYwNTEyMTkwMTIyWhcNMjYwNTEzMTkwMTIyWjAzMTEwLwYDVQQD
Eyg1ZjI0NTIzMTRjMjI2ODE2ZmNjZTAzYmM5NTc5MmNmNjQ4NTM0ZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/dzUcRCyimxoSLWVEoT1JSDNnq5
yWM7TCYofkjtZHzFmrNveHOCBSJ4WJUVkT85t7kRk8J0OPH4pvdU4IzJg+XZebic
Jn6wnEVHn+ClzkDIG4BEbv9Ql/EpVU+EKEgyZor0VVlu1Kn6zscQLQXbvPYSYrq4
tiEK6+Ze+Ldf4A4tlfpzI0eZSJfGnPBDUX4ZNZU8+szW9T3jNazQMF/T3ChEeJlt
sCei0MQ64ikTuEs+RMEwKmV+A3+SWQbq2oIyMcBb1Q7ItJ5vI3d1aZzUFHIcDyBb
VoPqDfeSa0W3Ecth+IAjc3GjVwi+PGmEbmaMEOGHBY0jgX/uSDp2iF095wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8kUjFMImgW/M4DvJV5LPZIU04yMB8GA1UdIwQY
MBaAFMEmEitM7uQfl/+4zCJVC+P6ClPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NZU0swenU1Qi1YXzdqTUlsVUw0X29LVTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84MDM5M2YtMmJkNS00NjY4LWFjYmQt
MTUyYjQ2M2FhM2NhLzEvd1NZU0swenU1Qi1YXzdqTUlsVUw0X29LVTl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC84MDM5M2YtMmJkNS00NjY4LWFjYmQtMTUyYjQ2M2FhM2Nh
LzEvd1NZU0swenU1Qi1YXzdqTUlsVUw0X29LVTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCqnSzuU
8PNXwiMNpFM6ipygo8WIKIMRUy0SUqhY/JxsX2PQTJPYvOBpWRcO9YGoiSW1HzKf
CVqJBqEgZsbG9jIlwoSXrjlJyI2QA4KL9SIevg6zf/bFXMyoh2Oh9BL7mQHBxlnk
IrxN/vbxrLShmaAbdIzDPeaCr/RUuW8YnNdxHu8lGJScE808XLT/3YtN+Ya+5mma
guqag27fahs9cxhW2ilQMtZgx24g2o3gnPiT39o1Oon3tn7L3gSrhaC6acCyz9X7
VTd2CEu2UxgZcWpneVrBhzYz6GC/vubaQRdjlgS5Jo1oIijRfwmJxTFfLkObkns3
GM2/G+Yilh1TBA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:52:54 2026 by rpki-client