Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
File:                     0YHQxAlRpPkA5NndnCDkhWNQkg4.mft (raw, json)
Hash identifier:          lgqUSMsfFJ9RoLVd3RA+aERnqjRZEsA6MKoJBgktrFY=
Subject key identifier:   11:A1:31:E8:72:16:0B:3D:ED:D6:37:6C:B6:57:3D:E7:FF:BF:6F:CE
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Certificate issuer:       /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial:       019E1D22BA1F3F1A765E383D063C7CDA8203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
Manifest number:          190B
Signing time:             Tue 12 May 2026 17:01:15 +0000
Manifest this update:     Tue 12 May 2026 17:01:15 +0000
Manifest next update:     Wed 13 May 2026 17:01:15 +0000
Files and hashes:         1: 0YHQxAlRpPkA5NndnCDkhWNQkg4.crl (hash: isxIG5RICLohoX6kqA/qL682jXEMJTEiFKDwYl01nhM=)
                          2: 6twj1FNGbSdC6GwrHJCaAlK97kQ.roa (hash: ZXy5hFs9BRqqonUgm00rE7vHIrD50csuYB7WxmR/ZMA=)
                          3: BfkIMDedHvkhA2THdLsjdvt92Lg.roa (hash: ltzWWyb9KbJKCS0qvZNQB+aDHpJjbdvCT6eRcpViW3Y=)
                          4: coJoVPwD-NPH-ETwi5cG_7WPcf8.roa (hash: GKRZPbLDmw4jESIu5RvOoK1/PXU2kw57mn7Q0tZcbW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:ba:1f:3f:1a:76:5e:38:3d:06:3c:7c:da:82:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
        Validity
            Not Before: May 12 17:01:15 2026 GMT
            Not After : May 13 17:01:15 2026 GMT
        Subject: CN=11a131e872160b3dedd6376cb6573de7ffbf6fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:47:79:e7:71:09:64:60:86:16:8b:14:b1:63:
                    77:ef:12:5d:ee:d0:81:38:21:8c:a3:1e:16:2b:9b:
                    51:1d:d5:77:7b:07:ad:a7:72:8a:f4:91:c8:b3:6e:
                    17:08:b8:65:b8:bb:7b:25:0e:4d:2e:26:ed:a2:d5:
                    5c:89:1d:4c:f7:0b:ee:42:b1:32:48:b6:1e:22:b7:
                    94:dd:51:27:36:5d:7a:57:75:e3:27:21:86:1d:32:
                    6c:4f:84:95:84:3a:2a:34:6c:c6:71:3f:28:6f:96:
                    cc:6b:ee:d0:bc:79:18:93:28:ed:90:71:1b:ad:bb:
                    a9:3a:f9:aa:12:15:43:c6:20:8a:a6:26:db:16:62:
                    6d:24:fc:7f:1f:2f:cc:f5:f3:7a:73:a7:7c:1f:c1:
                    64:d7:04:c3:e3:1a:17:21:ae:63:80:51:28:25:f1:
                    2f:46:cf:71:39:0a:d7:c3:86:ab:40:e2:08:f1:83:
                    72:c1:33:00:00:9f:81:27:49:a7:61:b9:14:28:d6:
                    b3:82:55:0c:fc:9b:76:b7:15:08:70:84:c9:57:76:
                    6f:c5:8d:a7:e0:f7:41:c6:37:d1:a1:05:5d:4c:a4:
                    d6:16:5c:f8:7e:f0:6b:4c:0b:a5:34:16:9b:34:ea:
                    1b:58:7c:09:bb:58:74:00:d7:eb:40:f4:e9:31:21:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A1:31:E8:72:16:0B:3D:ED:D6:37:6C:B6:57:3D:E7:FF:BF:6F:CE
            X509v3 Authority Key Identifier:
                keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d2:39:a5:08:29:94:80:88:72:ed:a7:66:19:9f:6b:f6:54:
         b7:71:71:db:dc:9f:fc:7d:51:0e:a3:cc:0e:38:6b:d4:62:3d:
         71:92:0f:52:20:49:d8:56:8c:2c:20:b9:42:26:54:fb:e8:de:
         8c:b3:4f:e7:31:0c:72:33:4d:c7:7e:6d:11:cb:01:7a:12:84:
         c1:36:b8:7c:7b:82:68:a7:e2:8c:67:91:75:cc:cd:b0:83:8b:
         80:70:f6:ee:3a:0a:96:cf:fe:6d:44:67:3e:cb:ec:ad:19:7b:
         03:a2:88:88:6a:c6:c5:32:15:aa:1a:0e:76:c1:9e:e8:56:b6:
         cd:59:bf:7b:23:46:9e:55:a6:fb:d0:a1:00:70:ea:0e:55:34:
         2b:20:49:d3:ea:97:87:a8:c2:85:7d:63:c5:2b:f1:a3:8b:28:
         d4:80:98:e9:aa:46:d5:84:d2:d7:ce:d0:05:23:1b:81:36:ad:
         d0:d2:7d:05:e8:b7:a3:ab:cd:0a:68:eb:a7:0a:3e:92:4c:39:
         97:87:22:37:3c:38:99:9e:39:3a:46:bd:ad:47:d5:3d:d2:a7:
         81:6e:74:c7:59:51:f8:ba:0a:e1:98:8d:50:b7:22:f8:5d:62:
         1f:46:a9:76:0d:71:7c:b0:24:4b:98:4f:4c:2f:76:8a:d1:fc:
         86:7d:9c:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIrofPxp2Xjg9Bjx82oIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODFkMGM0MDk1MWE0ZjkwMGU0ZDlkZDljMjBlNDg1NjM1
MDkyMGUwHhcNMjYwNTEyMTcwMTE1WhcNMjYwNTEzMTcwMTE1WjAzMTEwLwYDVQQD
EygxMWExMzFlODcyMTYwYjNkZWRkNjM3NmNiNjU3M2RlN2ZmYmY2ZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40d553EJZGCGFosUsWN37xJd7tCB
OCGMox4WK5tRHdV3ewetp3KK9JHIs24XCLhluLt7JQ5NLibtotVciR1M9wvuQrEy
SLYeIreU3VEnNl16V3XjJyGGHTJsT4SVhDoqNGzGcT8ob5bMa+7QvHkYkyjtkHEb
rbupOvmqEhVDxiCKpibbFmJtJPx/Hy/M9fN6c6d8H8Fk1wTD4xoXIa5jgFEoJfEv
Rs9xOQrXw4arQOII8YNywTMAAJ+BJ0mnYbkUKNazglUM/Jt2txUIcITJV3ZvxY2n
4PdBxjfRoQVdTKTWFlz4fvBrTAulNBabNOobWHwJu1h0ANfrQPTpMSFu0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGhMehyFgs97dY3bLZXPef/v2/OMB8GA1UdIwQY
MBaAFNGB0MQJUaT5AOTZ3Zwg5IVjUJIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEt
Mzg4YjgxYzBjOTBjLzEvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEtMzg4YjgxYzBjOTBj
LzEvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNI5pQgp
lICIcu2nZhmfa/ZUt3Fx29yf/H1RDqPMDjhr1GI9cZIPUiBJ2FaMLCC5QiZU++je
jLNP5zEMcjNNx35tEcsBehKEwTa4fHuCaKfijGeRdczNsIOLgHD27joKls/+bURn
PsvsrRl7A6KIiGrGxTIVqhoOdsGe6Fa2zVm/eyNGnlWm+9ChAHDqDlU0KyBJ0+qX
h6jChX1jxSvxo4so1ICY6apG1YTS187QBSMbgTat0NJ9Bei3o6vNCmjrpwo+kkw5
l4ciNzw4mZ45Oka9rUfVPdKngW50x1lR+LoK4ZiNULci+F1iH0apdg1xfLAkS5hP
TC92itH8hn2cxg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:00:53 2026 by rpki-client