Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
File:                     NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json)
Hash identifier:          7XDsWVAyz3dmqZIKn/21rex73IVxDfPzuCK6Y7s73nI=
Subject key identifier:   AD:B0:82:58:EA:E1:45:23:CC:72:90:FE:AF:0F:4D:40:80:5C:26:14
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Certificate issuer:       /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial:       019E1FB5A677648BF9BA72F177001F0052B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
Manifest number:          192E
Signing time:             Wed 13 May 2026 05:00:58 +0000
Manifest this update:     Wed 13 May 2026 05:00:58 +0000
Manifest next update:     Thu 14 May 2026 05:00:58 +0000
Files and hashes:         1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=)
                          2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=)
                          3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=)
                          4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=)
                          5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=)
                          6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=)
                          7: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=)
                          8: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: X5HMklt5nNZSNE8qVT8H5ydGGkkstsrJh9O1ouekDOc=)
                          9: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=)
                          10: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=)
                          11: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=)
                          12: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=)
                          13: Y717qVS96YjYgAZkrscDp7OEvWY.roa (hash: bvdM3ELPzWVbs/s6wCevWXdZqt/DIba2BD86BPGfAIQ=)
                          14: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=)
                          15: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=)
                          16: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=)
                          17: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=)
                          18: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=)
                          19: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=)
                          20: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=)
                          21: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:a6:77:64:8b:f9:ba:72:f1:77:00:1f:00:52:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
        Validity
            Not Before: May 13 05:00:58 2026 GMT
            Not After : May 14 05:00:58 2026 GMT
        Subject: CN=adb08258eae14523cc7290feaf0f4d40805c2614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:82:69:c8:aa:a7:98:ea:f5:e2:27:9a:8a:
                    07:97:59:0e:df:ff:f4:c0:ec:78:e6:3b:fd:dd:5d:
                    24:a5:dc:81:55:fe:6f:7f:3c:82:01:0d:25:47:34:
                    43:89:e6:73:26:39:9f:54:aa:16:4b:47:20:a0:95:
                    6a:17:e7:2f:01:1c:29:c7:b1:bd:94:72:2e:78:45:
                    83:86:f0:b1:d6:4a:8d:f7:9c:99:5b:d2:32:cb:5a:
                    24:17:da:6b:65:7f:08:ce:f2:b0:6a:46:da:23:35:
                    d3:27:06:fa:d5:2c:12:d8:2d:b0:bf:1c:39:af:09:
                    5a:92:9a:a4:ab:5a:a7:af:6c:a3:3f:a1:e8:43:70:
                    5c:75:e5:6e:82:d3:31:a8:46:7f:ed:3f:b3:d3:4f:
                    7e:6a:9f:5c:4e:75:e1:1b:8e:70:03:88:8a:ea:40:
                    f1:7c:3f:90:f8:5f:05:d4:96:bc:c1:6b:b6:e3:e6:
                    c7:e5:0d:89:c8:f9:2d:1a:0b:7b:6e:a2:3f:10:56:
                    fa:8e:07:f9:e8:5b:92:02:bc:e9:cb:46:7f:d0:87:
                    91:24:d1:c4:2f:4c:02:e8:d8:ce:9c:59:0b:8a:b2:
                    5f:ca:3e:2a:f0:b6:51:da:1b:d5:c7:2a:a0:51:ef:
                    be:63:97:c3:6f:8e:07:bb:9e:02:13:a9:2f:0a:f1:
                    78:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B0:82:58:EA:E1:45:23:CC:72:90:FE:AF:0F:4D:40:80:5C:26:14
            X509v3 Authority Key Identifier:
                keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0e:04:83:51:2c:bc:2e:92:40:79:1c:98:81:93:07:8b:4b:
         78:2b:55:d4:76:00:80:7d:d7:d4:ba:c4:74:56:8e:71:55:2b:
         98:dc:35:f7:3e:73:9e:95:49:df:f6:ee:73:73:c7:15:cc:c5:
         e9:e4:fa:74:69:a5:86:f9:dc:43:db:38:a6:0e:ad:99:48:32:
         70:4a:72:17:84:e1:29:8f:fa:a7:af:31:72:98:5d:3f:2d:a5:
         a0:a2:db:38:64:d2:56:03:11:4c:c4:3e:c4:56:49:6d:28:71:
         0b:3e:89:3e:b6:ff:7e:99:d4:3c:9b:87:23:55:2e:e0:49:3a:
         cf:f5:73:7d:d5:71:37:17:91:50:56:b7:7c:83:43:b8:b5:d6:
         7f:fa:58:c7:22:46:7b:1b:75:eb:a2:08:12:e3:b4:9d:dc:1f:
         0f:d6:4f:9b:d3:18:70:9d:6d:92:0a:99:d7:c5:2f:18:2d:73:
         f6:c1:d8:1e:41:6f:77:9c:3a:58:3f:dd:29:80:09:73:12:1b:
         ee:f5:d8:dc:7f:cb:f1:b3:5a:c3:92:c4:a4:0f:49:a7:44:30:
         55:78:07:b6:23:70:07:cb:83:95:69:0a:00:42:4b:9c:da:0f:
         b2:0c:84:15:90:c7:8d:a8:16:44:17:3c:42:a0:8f:bd:65:65:
         cf:b6:08:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:29:04 2026 by rpki-client