Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File:                     lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier:          l4CdJzh/Z6H0l2oVbf4p+AqLR2hDslzDaoNUWg4k/Rs=
Subject key identifier:   2D:72:6F:94:58:D3:F0:41:1B:0E:81:2F:83:C3:1F:39:5D:8A:F7:F1
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer:       /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial:       019E1F10A697A19DAD3DF2A1FFCAC2B85E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number:          1897
Signing time:             Wed 13 May 2026 02:00:45 +0000
Manifest this update:     Wed 13 May 2026 02:00:45 +0000
Manifest next update:     Thu 14 May 2026 02:00:45 +0000
Files and hashes:         1: VQc3sfrfQ_ZcFsmsomF7nXLcToI.roa (hash: Uu3/xUJRPzGLWpwX2MPE5NEGEZBd6a2iLzvQAqiaoY0=)
                          2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: eFskNKAKFGwgVhWr8pQ4hPMDK13vihI2YbYrKKv1CSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:a6:97:a1:9d:ad:3d:f2:a1:ff:ca:c2:b8:5e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
        Validity
            Not Before: May 13 02:00:45 2026 GMT
            Not After : May 14 02:00:45 2026 GMT
        Subject: CN=2d726f9458d3f0411b0e812f83c31f395d8af7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:2d:8c:9f:e1:dd:79:50:7a:a4:03:19:0b:
                    76:ac:86:db:94:9e:e3:0b:a8:99:8d:64:64:f7:d3:
                    b4:4b:09:03:1a:d8:b4:d0:9e:08:1d:5f:c1:71:d0:
                    4a:60:39:8a:c6:9a:0b:e9:72:79:38:a3:df:9e:75:
                    97:3b:a1:ac:fa:e2:06:d3:32:a9:ed:e5:03:4e:94:
                    95:d0:b6:18:51:af:b8:c9:37:44:d3:15:e5:a9:09:
                    ef:71:c3:63:f6:09:87:8a:c6:2d:0c:cb:c1:70:15:
                    5a:d8:45:87:69:46:46:e4:d6:04:ba:5b:36:da:20:
                    18:cc:9d:8d:e5:2f:c2:85:d1:c4:7b:32:a9:6c:9a:
                    84:43:9b:d6:45:3b:6d:0c:69:10:9c:8a:6b:58:99:
                    98:01:72:01:2f:1b:fd:e6:31:0b:eb:f2:21:00:61:
                    3f:6d:3c:32:3c:0d:a1:a9:6f:64:d0:54:57:10:dc:
                    3b:42:f0:5b:87:bc:83:e9:61:8d:7b:75:09:6f:9e:
                    63:cd:1f:a6:2c:78:b7:08:31:7f:8b:12:1e:51:fc:
                    ea:70:81:27:d2:1b:45:60:32:c4:75:2e:ac:b2:83:
                    8c:f6:b2:44:b8:d5:fe:a4:3a:7a:4a:c8:ed:81:f1:
                    cb:4d:ea:cf:a6:c0:b7:b1:b2:f6:e2:b6:fd:14:6a:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:72:6F:94:58:D3:F0:41:1B:0E:81:2F:83:C3:1F:39:5D:8A:F7:F1
            X509v3 Authority Key Identifier:
                keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7f:a0:6c:c9:d0:c9:7e:48:44:33:cc:ae:f4:11:2a:20:70:
         84:6f:6e:77:f3:b9:01:8c:15:e3:be:42:ef:b0:74:63:43:ba:
         72:f8:8e:f0:26:21:fe:dd:d3:0c:12:95:32:4f:2e:67:cb:46:
         7f:b5:7f:26:73:f2:2e:a5:21:54:9b:66:17:0f:c8:07:32:e8:
         ee:b9:51:4c:10:8d:79:bb:32:d0:6c:01:75:6e:4c:12:f1:2f:
         f3:0f:1e:1c:60:ea:4e:6a:c6:32:b3:c9:13:81:7f:d8:80:3e:
         ba:dc:7c:b3:c9:dc:ec:0a:05:c2:89:e3:19:f1:49:ca:99:87:
         4a:fe:ba:1c:aa:5f:71:b7:b1:ef:a3:e1:1d:0f:dc:32:56:de:
         b2:9f:be:9d:87:3d:af:6e:fa:24:93:c6:e0:94:0d:23:d0:b5:
         b3:17:d1:bc:79:d1:e6:e1:87:84:57:e4:02:90:ce:a9:3a:bb:
         1d:c5:60:5c:08:69:69:d1:71:94:df:64:dc:05:6e:aa:db:06:
         e2:81:86:65:83:89:35:d0:47:2c:b0:5a:fb:4f:e0:c2:58:fd:
         31:f7:6d:d4:0f:61:b6:06:99:8d:2e:b1:b1:4a:ea:7e:0d:ff:
         bb:23:18:6a:9d:d6:1a:bf:ce:10:a4:18:27:bb:31:8f:43:4b:
         94:82:a0:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEKaXoZ2tPfKh/8rCuF6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MWYyMGFkZDIxMmMwZTBlNjhlM2YxYWU4ZWEyYTc5NjQ5
ZjRmNGMwHhcNMjYwNTEzMDIwMDQ1WhcNMjYwNTE0MDIwMDQ1WjAzMTEwLwYDVQQD
EygyZDcyNmY5NDU4ZDNmMDQxMWIwZTgxMmY4M2MzMWYzOTVkOGFmN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSgtjJ/h3XlQeqQDGQt2rIbblJ7j
C6iZjWRk99O0SwkDGti00J4IHV/BcdBKYDmKxpoL6XJ5OKPfnnWXO6Gs+uIG0zKp
7eUDTpSV0LYYUa+4yTdE0xXlqQnvccNj9gmHisYtDMvBcBVa2EWHaUZG5NYEuls2
2iAYzJ2N5S/ChdHEezKpbJqEQ5vWRTttDGkQnIprWJmYAXIBLxv95jEL6/IhAGE/
bTwyPA2hqW9k0FRXENw7QvBbh7yD6WGNe3UJb55jzR+mLHi3CDF/ixIeUfzqcIEn
0htFYDLEdS6ssoOM9rJEuNX+pDp6SsjtgfHLTerPpsC3sbL24rb9FGpu0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1yb5RY0/BBGw6BL4PDHzldivfxMB8GA1UdIwQY
MBaAFJQfIK3SEsDg5o4/GujqKnlkn09MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYt
MzY1ZTEzZGE2MmVhLzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYtMzY1ZTEzZGE2MmVh
LzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKX+gbMnQ
yX5IRDPMrvQRKiBwhG9ud/O5AYwV475C77B0Y0O6cviO8CYh/t3TDBKVMk8uZ8tG
f7V/JnPyLqUhVJtmFw/IBzLo7rlRTBCNebsy0GwBdW5MEvEv8w8eHGDqTmrGMrPJ
E4F/2IA+utx8s8nc7AoFwonjGfFJypmHSv66HKpfcbex76PhHQ/cMlbesp++nYc9
r276JJPG4JQNI9C1sxfRvHnR5uGHhFfkApDOqTq7HcVgXAhpadFxlN9k3AVuqtsG
4oGGZYOJNdBHLLBa+0/gwlj9Mfdt1A9htgaZjS6xsUrqfg3/uyMYap3WGr/OEKQY
J7sxj0NLlIKgXg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:36:50 2026 by rpki-client