Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
File:                     O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json)
Hash identifier:          cgNIT6hgI5CLUxy24iGGTRGznjSsBBs2hzo5y4u6NdY=
Subject key identifier:   1C:2E:0B:46:7B:47:11:19:53:27:11:4A:6B:9F:80:89:EB:4E:CA:D6
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Certificate issuer:       /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial:       019E1ED9ED56A576BFA843011EFCC9D5CCF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
Manifest number:          190F
Signing time:             Wed 13 May 2026 01:00:58 +0000
Manifest this update:     Wed 13 May 2026 01:00:58 +0000
Manifest next update:     Thu 14 May 2026 01:00:58 +0000
Files and hashes:         1: 1-ehuABryUVINj2W3NK-g46DB49o.roa (hash: YXDM1cCPDyh4BpBxko9niqIGoA4Nx7Wm0bIxDril5ZU=)
                          2: 49TpBZIbyHobsWcoh4oSwqHHj24.roa (hash: H3ZabpGlNw6ABVIQ/nTAsG4jZDJmHYwqGcghd6J47mU=)
                          3: CJMQtEYFaJCIAob5YTIM33reer0.roa (hash: 2fmW/5EjPlZQDHVPyDvXpi5tn/bBcbJ02R3RN2NWWE8=)
                          4: GhJdnyWj9py61uVvaxvqFfy0V7c.roa (hash: ljlh5bK4up2SZeKlCTioJwKwERt/6WFEKI2x/h9hHl8=)
                          5: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: xmNK+moCm2+7NQwhDHFU9vbM1f5ko8FmPhmIsWBQfvw=)
                          6: YTSwtqCla-KMN-KojPP7ZcEJhCI.roa (hash: ucZ995yNrK5VHoaXITb+Y7tbONn7bL9sNblRcrvwpcQ=)
                          7: eSL82eEcvzSK2dkw6o4hr1h_hm0.roa (hash: iOpyDBpoorKPMwT1bNhIwY8hNcyUZXYXJpDFE6NQs9Q=)
                          8: gLrTd-tF6YKwKPVyN-B9kSozUjE.roa (hash: TmnCSJykitabQj5d7T0dn/Ydx5URkDDijEKhCVoUSe8=)
                          9: nKmF1TZGqw4Rl01o8Upo8B1uARg.roa (hash: jsNr28qDsooPsLwTF7PUY4RAqfXcXlMffZUWeSf+lRc=)
                          10: y2kC-JHxws7OdlKjntbmzAIGoYo.roa (hash: LqoUkGt/W9j9zMAyvyXO0TzR2hTHbWsAzvz5pfbOIEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:ed:56:a5:76:bf:a8:43:01:1e:fc:c9:d5:cc:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
        Validity
            Not Before: May 13 01:00:58 2026 GMT
            Not After : May 14 01:00:58 2026 GMT
        Subject: CN=1c2e0b467b4711195327114a6b9f8089eb4ecad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fb:4e:27:4e:94:5b:54:26:12:dd:4e:78:da:
                    a4:d9:f8:49:58:d3:d0:14:af:d2:ef:9b:00:d8:88:
                    75:7b:5a:8a:01:e7:79:94:18:1f:20:88:23:a7:73:
                    16:e6:4c:00:39:b2:0a:31:fa:5c:2a:b9:39:a8:9c:
                    43:60:97:1f:85:95:b1:94:a7:aa:de:ef:cf:ab:53:
                    b7:ff:ac:d4:0c:fd:a5:5c:26:10:f0:a7:e6:63:ae:
                    5c:ed:8d:16:17:77:ac:0e:e9:ad:57:61:b5:8f:1b:
                    e7:b1:9d:8f:f3:34:ec:dc:26:4f:d9:cf:0f:7f:67:
                    35:13:d1:ea:27:e4:1a:09:0a:b9:d2:c7:29:d2:3c:
                    fa:b8:f0:d0:64:79:91:98:1d:ef:ef:a5:78:2e:59:
                    5a:91:86:ce:29:31:97:8d:98:94:c9:14:5c:df:d9:
                    4d:a3:08:ef:32:40:a2:4f:cb:89:8d:bc:70:59:dd:
                    77:29:f5:89:4f:c6:ea:26:9d:d3:95:43:33:f1:61:
                    54:a6:b2:29:b2:dd:80:86:fb:fa:b1:ff:09:a4:79:
                    38:5c:db:63:6a:f8:c7:d3:68:c4:3d:98:a7:09:b6:
                    92:cc:9c:83:be:15:44:a1:dd:32:b1:b3:80:c4:91:
                    2f:1c:15:32:f1:a3:ac:de:6b:47:f6:43:7b:7c:5b:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2E:0B:46:7B:47:11:19:53:27:11:4A:6B:9F:80:89:EB:4E:CA:D6
            X509v3 Authority Key Identifier:
                keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:6b:21:4b:ea:f8:a9:7f:15:09:da:f7:99:98:ff:b3:b5:08:
         61:1f:b1:a8:7d:14:9a:72:fe:d5:eb:b9:62:c9:ee:4d:bf:bd:
         29:a6:6f:f0:e7:49:71:93:4b:26:35:d4:ce:1c:30:ff:f4:a8:
         90:b7:d3:ce:c1:59:6f:da:e6:b3:64:24:5b:f0:e2:9a:d3:ec:
         8c:be:d5:4b:c6:22:4f:5d:04:17:05:49:d1:54:ea:5e:10:3b:
         ba:44:39:7e:ab:b4:4c:9f:fb:e0:2f:44:28:b6:8f:44:82:40:
         2c:91:ab:6b:84:49:67:3c:44:71:07:ff:c3:a6:af:a7:9b:3e:
         ae:85:38:5f:83:54:2b:ea:cc:9f:e2:7c:5d:5e:cb:96:a0:37:
         ed:ba:c2:95:c3:0b:e1:c0:0e:2b:d0:bb:d1:3b:1f:7b:3c:b1:
         86:32:a9:d9:2f:6a:f5:71:4c:67:33:94:16:5b:df:8d:8c:5e:
         66:86:f6:3f:fa:88:7b:ac:c5:a0:e3:36:67:dc:a1:f8:c8:e2:
         bd:7a:d6:14:35:b8:b2:f1:ce:71:dc:7a:49:16:c0:38:aa:ff:
         e0:e9:31:94:d0:70:76:ae:19:1e:55:a7:ef:06:04:32:3c:52:
         43:9e:bf:d5:20:b1:69:c2:22:8e:40:be:82:dc:d8:aa:5d:42:
         76:02:09:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:35 2026 by rpki-client