Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
File:                     dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft (raw, json)
Hash identifier:          tNuOIgvCuZ5vd9xpAMwlCQe3xxCgmBkNqbxKuIb9JqM=
Subject key identifier:   14:92:F8:49:65:2C:5F:29:78:B4:D1:4B:2D:4F:6C:E1:12:F0:CF:60
Authority key identifier: 76:6D:18:B7:A5:A8:37:E6:71:4F:BA:B2:52:40:0A:3B:EA:BC:22:0A
Certificate issuer:       /CN=766d18b7a5a837e6714fbab252400a3beabc220a
Certificate serial:       019E20235E5DB607F429C4D4FEDA9F6F7980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
Manifest number:          9A
Signing time:             Wed 13 May 2026 07:00:49 +0000
Manifest this update:     Wed 13 May 2026 07:00:49 +0000
Manifest next update:     Thu 14 May 2026 07:00:49 +0000
Files and hashes:         1: TPgJA7asD1USxd5F7pee5lciH88.roa (hash: J3JqRxhZZokO/izJrrFgyJGCYZDVRXSpr2zjvNoSLcU=)
                          2: dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.crl (hash: VF3MvEj9zEaeYtgHDWLm5AJhEPlKseuLAq4rYAvoNtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:5e:5d:b6:07:f4:29:c4:d4:fe:da:9f:6f:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766d18b7a5a837e6714fbab252400a3beabc220a
        Validity
            Not Before: May 13 07:00:49 2026 GMT
            Not After : May 14 07:00:49 2026 GMT
        Subject: CN=1492f849652c5f2978b4d14b2d4f6ce112f0cf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:38:cd:77:a3:2b:e5:02:28:ee:27:0e:a4:
                    a3:6a:e0:a8:ef:5f:ad:af:1c:97:69:d5:ce:7a:55:
                    ae:51:f5:f8:cd:d6:30:31:1e:b4:18:70:eb:82:f6:
                    37:d2:19:c7:1b:c4:f7:ad:59:c8:a8:90:63:39:4e:
                    d8:15:30:97:2f:41:43:5f:74:99:f2:31:de:77:d3:
                    5c:1d:9d:b2:c4:fa:e6:67:35:34:86:90:39:e2:89:
                    8e:fc:28:58:9d:cb:a8:98:55:f0:80:e3:1c:54:75:
                    1e:61:04:21:54:0e:1c:c4:cb:4f:49:3d:e8:d4:bd:
                    39:53:ce:14:a0:e7:24:4a:e8:ca:71:06:82:88:55:
                    5d:1d:c2:c6:26:1e:01:43:cb:20:7d:0f:c6:5a:32:
                    a1:5d:ce:45:bb:a8:ef:49:f2:04:9c:7e:ce:f7:21:
                    8e:40:97:b8:1f:ca:ca:3f:c5:da:fa:f6:33:8c:e9:
                    0a:71:19:7c:62:a1:3d:f2:cc:b3:49:dc:86:f2:6c:
                    86:fc:fa:52:2e:45:16:45:f4:f4:38:b4:e2:fe:60:
                    35:7c:44:22:f1:51:f6:95:ea:b5:2d:6a:11:98:02:
                    c6:7f:75:88:49:29:59:0e:2d:23:b1:5e:dd:19:b9:
                    db:0a:f5:ff:6e:c3:97:d0:0a:00:a2:aa:9b:e3:f2:
                    16:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:92:F8:49:65:2C:5F:29:78:B4:D1:4B:2D:4F:6C:E1:12:F0:CF:60
            X509v3 Authority Key Identifier:
                keyid:76:6D:18:B7:A5:A8:37:E6:71:4F:BA:B2:52:40:0A:3B:EA:BC:22:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b5:36:5d:45:fa:10:94:60:56:80:53:28:55:cf:16:cf:8e:
         1a:1c:83:ce:bb:d3:6d:a3:3b:db:f4:00:19:65:7e:89:c6:a1:
         72:38:c8:1d:ee:9b:35:fb:b2:17:64:06:76:16:5a:81:48:aa:
         ff:23:e9:cf:2f:c8:06:49:66:5f:8c:d0:88:9b:91:34:9f:f8:
         6a:8a:f5:b7:d4:c0:d2:90:c4:eb:cf:22:57:1b:54:74:28:54:
         7d:ae:69:00:e1:80:2a:b6:08:cb:9c:cd:98:cf:7e:bd:84:ba:
         72:03:e0:a7:8a:08:aa:f8:f8:b5:1d:51:ad:b2:12:4b:0e:ca:
         b9:b2:69:17:4c:28:62:3c:ad:2e:ff:d7:12:31:2e:5d:fe:13:
         59:b8:53:35:cd:ce:a7:38:f0:8a:c2:0c:78:41:a5:d6:c6:a9:
         02:ca:ca:47:5b:16:5c:ab:76:10:16:bc:dc:db:6d:f3:1d:08:
         c5:3d:2c:a6:87:7b:d9:26:03:2a:3a:bf:0c:4e:73:4b:0d:ca:
         4b:26:c8:78:43:54:a5:82:92:c0:3b:2b:d1:15:ad:11:b2:4e:
         7d:ca:2f:5b:b9:2f:6f:13:47:26:ac:dc:8f:53:a0:26:05:88:
         3c:1a:b3:81:32:37:d6:ad:db:f9:c9:d5:48:12:a4:f7:31:b0:
         d3:ca:d0:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI15dtgf0KcTU/tqfb3mAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NmQxOGI3YTVhODM3ZTY3MTRmYmFiMjUyNDAwYTNiZWFi
YzIyMGEwHhcNMjYwNTEzMDcwMDQ5WhcNMjYwNTE0MDcwMDQ5WjAzMTEwLwYDVQQD
EygxNDkyZjg0OTY1MmM1ZjI5NzhiNGQxNGIyZDRmNmNlMTEyZjBjZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKo4zXejK+UCKO4nDqSjauCo71+t
rxyXadXOelWuUfX4zdYwMR60GHDrgvY30hnHG8T3rVnIqJBjOU7YFTCXL0FDX3SZ
8jHed9NcHZ2yxPrmZzU0hpA54omO/ChYncuomFXwgOMcVHUeYQQhVA4cxMtPST3o
1L05U84UoOckSujKcQaCiFVdHcLGJh4BQ8sgfQ/GWjKhXc5Fu6jvSfIEnH7O9yGO
QJe4H8rKP8Xa+vYzjOkKcRl8YqE98syzSdyG8myG/PpSLkUWRfT0OLTi/mA1fEQi
8VH2leq1LWoRmALGf3WISSlZDi0jsV7dGbnbCvX/bsOX0AoAoqqb4/IWxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSS+EllLF8peLTRSy1PbOES8M9gMB8GA1UdIwQY
MBaAFHZtGLelqDfmcU+6slJACjvqvCIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG0wWXQ2V29OLVp4VDdxeVVrQUtPLXE4SWdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYTc2NmItODg3Ny00MTVlLWFkYWMt
YWZmMzE5NTRlN2E3LzEvZG0wWXQ2V29OLVp4VDdxeVVrQUtPLXE4SWdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hYTc2NmItODg3Ny00MTVlLWFkYWMtYWZmMzE5NTRlN2E3
LzEvZG0wWXQ2V29OLVp4VDdxeVVrQUtPLXE4SWdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLU2XUX6
EJRgVoBTKFXPFs+OGhyDzrvTbaM72/QAGWV+icahcjjIHe6bNfuyF2QGdhZagUiq
/yPpzy/IBklmX4zQiJuRNJ/4aor1t9TA0pDE688iVxtUdChUfa5pAOGAKrYIy5zN
mM9+vYS6cgPgp4oIqvj4tR1RrbISSw7KubJpF0woYjytLv/XEjEuXf4TWbhTNc3O
pzjwisIMeEGl1sapAsrKR1sWXKt2EBa83Ntt8x0IxT0spod72SYDKjq/DE5zSw3K
SybIeENUpYKSwDsr0RWtEbJOfcovW7kvbxNHJqzcj1OgJgWIPBqzgTI31q3b+cnV
SBKk9zGw08rQDA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:33:10 2026 by rpki-client