Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
File:                     PpvRijUxNTVm7RgUDK10GQW-r64.mft (raw, json)
Hash identifier:          1S5VDDZo0xPEncvU57bORrsXRE4/LzzFTnx0BFq4+WM=
Subject key identifier:   0E:BA:31:DF:EA:A7:B1:1E:B3:25:E0:EA:92:2F:1F:B2:08:0A:41:B8
Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
Certificate issuer:       /CN=3e9bd18a3531353566ed18140cad741905beafae
Certificate serial:       019E20FF0FF8B32C99E7972050E78AE8928E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
Manifest number:          01B0
Signing time:             Wed 13 May 2026 11:00:47 +0000
Manifest this update:     Wed 13 May 2026 11:00:47 +0000
Manifest next update:     Thu 14 May 2026 11:00:47 +0000
Files and hashes:         1: A2ExeyQHGNk51S6yOHeJr6XOVf4.roa (hash: GO30lk5aBIlBJaHx15f4eDa39AuOipkWS6SvYKidn14=)
                          2: PpvRijUxNTVm7RgUDK10GQW-r64.crl (hash: bYydiN4r7PwhP8synOgBpW8jKJSWFXf+DkjkU6tmkAs=)
                          3: _Wx9ZdmaJOp3eTANlK2NIeFmYuk.roa (hash: bRwEhLFQbPYT/IaKYTgc19M1MjVlqvi4YYR+NLvZd8U=)
                          4: c9WYdkuX9vqM1-rZ5wrXob8ras4.roa (hash: ejB+bZrxr1eJ74m85KOaG7NFYs4ZFTEAPocrQGNRHSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:0f:f8:b3:2c:99:e7:97:20:50:e7:8a:e8:92:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae
        Validity
            Not Before: May 13 11:00:47 2026 GMT
            Not After : May 14 11:00:47 2026 GMT
        Subject: CN=0eba31dfeaa7b11eb325e0ea922f1fb2080a41b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:69:46:da:b3:e8:c4:ce:e6:aa:74:6a:ef:
                    08:07:a1:e4:83:f5:7a:8e:09:9d:c0:5b:f9:06:69:
                    d9:43:ea:4f:96:19:b9:3f:cc:46:d7:c0:b5:15:76:
                    fe:2b:2d:4c:d8:48:44:76:73:9f:e6:e4:37:91:70:
                    38:c3:f2:d3:b0:5b:02:f8:c7:93:df:3e:d8:4b:c1:
                    1c:11:dc:0b:dc:93:82:fb:16:1b:16:c4:c0:98:c0:
                    26:bc:50:8f:a1:33:df:fb:c1:19:21:28:5f:8d:03:
                    3d:ed:61:23:40:6c:f0:2a:cf:b1:12:02:12:88:70:
                    48:f6:1e:9a:c4:40:82:81:02:94:6e:58:6b:28:60:
                    16:8e:78:a8:e5:ba:7e:94:2d:39:9d:8a:3d:36:00:
                    c7:da:bd:a2:51:b4:ae:dc:ee:be:f7:23:08:c1:4e:
                    31:2f:73:67:c6:29:61:4c:05:8a:22:8d:a4:9f:ce:
                    8f:b1:cc:20:87:d5:a6:55:ac:6d:2e:d3:48:1a:bf:
                    43:e7:ad:bc:f7:08:cc:fb:cb:d9:19:e0:fa:97:55:
                    da:a2:95:62:12:36:d3:47:66:26:65:56:25:b9:33:
                    6d:75:4d:de:9f:69:84:5b:ab:6b:9e:0d:fa:90:77:
                    1d:e0:2b:ad:2d:20:ad:07:4f:2f:cc:44:02:bf:e4:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BA:31:DF:EA:A7:B1:1E:B3:25:E0:EA:92:2F:1F:B2:08:0A:41:B8
            X509v3 Authority Key Identifier:
                keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:52:29:64:70:37:23:63:51:cb:94:1d:3d:51:7c:1c:c7:f1:
         9c:bf:b1:5c:26:65:bf:89:44:18:c3:e2:c0:80:d5:6d:64:43:
         1f:60:d6:fc:6f:ba:56:99:95:45:07:03:e6:e1:f6:3e:2a:41:
         03:21:6c:b6:51:84:8c:e0:92:62:d7:1e:4c:74:ca:cb:83:11:
         99:30:2e:17:f3:23:5a:b0:a4:33:98:1e:e3:37:3d:a4:6c:2a:
         cd:c7:d5:c2:b7:69:b9:8d:6b:18:cf:e6:6e:16:df:f5:cb:01:
         63:d3:35:20:bd:ae:80:68:1b:77:5e:8c:6a:96:48:13:23:d6:
         00:99:56:f5:3f:9d:bb:0f:d4:bc:f8:93:bb:a3:bc:74:19:1c:
         47:5b:b6:c8:6e:15:07:8c:c1:5c:e7:38:e2:1f:a9:47:24:fb:
         25:bd:4c:b7:9b:0b:f2:5c:41:25:93:f8:9a:54:52:a3:c2:8c:
         14:12:6c:bf:a8:f1:09:4f:68:a6:a4:fc:58:41:9b:a5:13:79:
         f6:4e:83:28:ea:5d:a8:72:ec:85:ea:05:54:b6:d4:76:d7:40:
         8e:b9:04:68:ed:b5:99:f5:34:b4:88:ef:1f:ac:99:c4:df:21:
         87:16:15:49:ec:19:bd:a0:c7:13:41:74:ee:c7:1b:35:c3:a2:
         83:74:5f:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/w/4syyZ55cgUOeK6JKOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlOWJkMThhMzUzMTM1MzU2NmVkMTgxNDBjYWQ3NDE5MDVi
ZWFmYWUwHhcNMjYwNTEzMTEwMDQ3WhcNMjYwNTE0MTEwMDQ3WjAzMTEwLwYDVQQD
EygwZWJhMzFkZmVhYTdiMTFlYjMyNWUwZWE5MjJmMWZiMjA4MGE0MWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnJpRtqz6MTO5qp0au8IB6Hkg/V6
jgmdwFv5BmnZQ+pPlhm5P8xG18C1FXb+Ky1M2EhEdnOf5uQ3kXA4w/LTsFsC+MeT
3z7YS8EcEdwL3JOC+xYbFsTAmMAmvFCPoTPf+8EZIShfjQM97WEjQGzwKs+xEgIS
iHBI9h6axECCgQKUblhrKGAWjnio5bp+lC05nYo9NgDH2r2iUbSu3O6+9yMIwU4x
L3NnxilhTAWKIo2kn86Pscwgh9WmVaxtLtNIGr9D56289wjM+8vZGeD6l1XaopVi
EjbTR2YmZVYluTNtdU3en2mEW6trng36kHcd4CutLSCtB08vzEQCv+RB0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA66Md/qp7EesyXg6pIvH7IICkG4MB8GA1UdIwQY
MBaAFD6b0Yo1MTU1Zu0YFAytdBkFvq+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEt
ZWEyNzdiNDkyZjFlLzEvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEtZWEyNzdiNDkyZjFl
LzEvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlIpZHA3
I2NRy5QdPVF8HMfxnL+xXCZlv4lEGMPiwIDVbWRDH2DW/G+6VpmVRQcD5uH2PipB
AyFstlGEjOCSYtceTHTKy4MRmTAuF/MjWrCkM5ge4zc9pGwqzcfVwrdpuY1rGM/m
bhbf9csBY9M1IL2ugGgbd16MapZIEyPWAJlW9T+duw/UvPiTu6O8dBkcR1u2yG4V
B4zBXOc44h+pRyT7Jb1Mt5sL8lxBJZP4mlRSo8KMFBJsv6jxCU9opqT8WEGbpRN5
9k6DKOpdqHLsheoFVLbUdtdAjrkEaO21mfU0tIjvH6yZxN8hhxYVSewZvaDHE0F0
7scbNcOig3Rf7Q==
-----END CERTIFICATE-----
Generated at Wed May 13 14:28:49 2026 by rpki-client