Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File:                     7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier:          DAQkV+NzXcLdaWNwNU393E5x0DV8cYSwYy39zEZKHzQ=
Subject key identifier:   28:64:19:C1:8B:12:7F:BE:14:D2:E2:40:F5:B8:2B:49:A7:AE:D1:11
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer:       /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial:       019E1EA3A5ED3D668D95D303480D076F405E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number:          1904
Signing time:             Wed 13 May 2026 00:01:41 +0000
Manifest this update:     Wed 13 May 2026 00:01:41 +0000
Manifest next update:     Thu 14 May 2026 00:01:41 +0000
Files and hashes:         1: 16IES9haatKMkP-HejVSazJdMkY.roa (hash: mQPtnV+K2FeabOm74g9Ubv3nHZo4wLPT4wK0cMDSkes=)
                          2: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: inw6shb70CVmeL99cIv8Ozqzvv3ayEHMJ6eZ/+1VqFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:a5:ed:3d:66:8d:95:d3:03:48:0d:07:6f:40:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
        Validity
            Not Before: May 13 00:01:41 2026 GMT
            Not After : May 14 00:01:41 2026 GMT
        Subject: CN=286419c18b127fbe14d2e240f5b82b49a7aed111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:cd:be:e5:43:f3:2a:ff:45:af:ed:f1:c8:
                    73:af:b6:7a:0d:1f:70:d9:f5:67:5c:8b:9c:d7:57:
                    b1:a4:b7:d4:a8:d2:f6:ef:f3:32:d3:63:b9:1a:08:
                    be:21:75:fb:9a:da:34:a6:70:4f:55:92:ed:a8:66:
                    16:f5:20:d3:57:d7:76:fa:a5:9d:c9:35:2b:10:12:
                    a0:7a:fb:a3:1c:0d:e2:d0:62:e4:02:9f:b6:47:19:
                    67:43:3f:91:5b:10:28:e6:68:d9:c0:9f:40:3b:39:
                    b4:e4:3d:91:8e:e8:cc:27:02:1a:db:67:4a:02:9e:
                    af:f9:a9:d1:7d:4f:d3:fc:bc:be:7b:f5:9b:a9:90:
                    37:92:59:3f:3b:88:31:07:ab:f8:e9:a1:fe:0a:ac:
                    27:41:61:87:71:3a:64:97:ff:0f:1d:2c:d0:81:bd:
                    12:d5:81:cd:74:48:e0:21:65:1a:f9:3f:90:85:45:
                    e9:23:11:d3:ac:56:c6:de:ac:8d:4d:ec:4a:44:ac:
                    41:6e:47:27:d8:42:b6:05:e4:59:02:83:48:a0:7e:
                    5e:c7:58:4c:4b:06:18:37:ea:f6:ec:4a:9e:fb:87:
                    72:40:14:d3:42:50:49:07:91:78:fc:0d:e6:e1:7d:
                    84:b5:f7:66:ed:33:a3:fe:58:a2:88:70:db:aa:09:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:19:C1:8B:12:7F:BE:14:D2:E2:40:F5:B8:2B:49:A7:AE:D1:11
            X509v3 Authority Key Identifier:
                keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a0:18:ea:4a:04:52:38:ff:2b:cd:1d:6b:54:99:09:77:a8:
         73:7c:46:b4:d3:a5:6f:36:19:04:7e:24:16:8b:01:4c:dd:30:
         5b:b1:dd:52:47:4b:7f:7d:28:34:b7:19:e5:bf:71:c9:f7:1e:
         d4:72:ff:a5:d0:50:f4:33:14:cf:b6:70:39:e3:ae:14:16:9f:
         47:6c:2d:e6:eb:b7:a0:eb:44:ee:9d:cb:bf:44:c8:66:f9:5a:
         df:3b:03:67:a2:88:f4:da:b0:43:19:73:11:53:68:72:a8:91:
         e9:91:28:2b:37:6c:4b:d9:0e:70:71:9d:71:6a:65:9d:5f:f0:
         ed:91:da:9c:d5:6c:81:17:e8:2f:78:e0:5d:7a:f1:66:a4:36:
         d7:44:1a:7d:27:e6:f0:f2:c6:bd:1a:67:11:c1:e7:da:7f:fc:
         4e:8c:0f:8c:12:0a:bf:15:ef:9a:e0:4b:0d:cf:35:93:e9:db:
         9a:58:df:0c:5f:dd:b8:ba:0a:cd:f4:05:e3:f9:55:bd:09:4b:
         ff:ee:47:b3:75:de:45:e5:6e:1c:cf:fb:9d:cc:6d:e7:10:7a:
         6a:30:fc:68:0b:33:b2:4f:ea:08:2c:cb:18:e1:6c:07:0d:e8:
         3f:cb:94:ce:6f:09:7d:4d:45:17:95:9d:27:24:51:7c:92:5d:
         fc:64:e0:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo6XtPWaNldMDSA0Hb0BeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjN2Y0YTMzODdkYjgzOGNkYTgzN2FiOTJhNmNlOGY2ZmZj
M2M5OTAwHhcNMjYwNTEzMDAwMTQxWhcNMjYwNTE0MDAwMTQxWjAzMTEwLwYDVQQD
EygyODY0MTljMThiMTI3ZmJlMTRkMmUyNDBmNWI4MmI0OWE3YWVkMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlLNvuVD8yr/Ra/t8chzr7Z6DR9w
2fVnXIuc11expLfUqNL27/My02O5Ggi+IXX7mto0pnBPVZLtqGYW9SDTV9d2+qWd
yTUrEBKgevujHA3i0GLkAp+2RxlnQz+RWxAo5mjZwJ9AOzm05D2RjujMJwIa22dK
Ap6v+anRfU/T/Ly+e/WbqZA3klk/O4gxB6v46aH+CqwnQWGHcTpkl/8PHSzQgb0S
1YHNdEjgIWUa+T+QhUXpIxHTrFbG3qyNTexKRKxBbkcn2EK2BeRZAoNIoH5ex1hM
SwYYN+r27Eqe+4dyQBTTQlBJB5F4/A3m4X2Etfdm7TOj/liiiHDbqgmGBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChkGcGLEn++FNLiQPW4K0mnrtERMB8GA1UdIwQY
MBaAFOx/SjOH24OM2oN6uSps6Pb/w8mQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUt
OGE4NjVmZDYyMWM4LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUtOGE4NjVmZDYyMWM4
LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6AY6koE
Ujj/K80da1SZCXeoc3xGtNOlbzYZBH4kFosBTN0wW7HdUkdLf30oNLcZ5b9xyfce
1HL/pdBQ9DMUz7ZwOeOuFBafR2wt5uu3oOtE7p3Lv0TIZvla3zsDZ6KI9NqwQxlz
EVNocqiR6ZEoKzdsS9kOcHGdcWplnV/w7ZHanNVsgRfoL3jgXXrxZqQ210QafSfm
8PLGvRpnEcHn2n/8TowPjBIKvxXvmuBLDc81k+nbmljfDF/duLoKzfQF4/lVvQlL
/+5Hs3XeReVuHM/7ncxt5xB6ajD8aAszsk/qCCzLGOFsBw3oP8uUzm8JfU1FF5Wd
JyRRfJJd/GTgfw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:09:40 2026 by rpki-client