Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File:                     pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier:          pZXUtUtCr7KV71yS03zHpZr4pBnNEQ9G58EtDJwUiI8=
Subject key identifier:   C5:2D:9C:53:D2:9A:1E:14:45:1E:C5:22:93:10:F8:D5:32:23:AD:84
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer:       /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial:       019E1DFEBAC8CE219C694F0C269B294CBD98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 21:01:33 +0000
Manifest this update:     Tue 12 May 2026 21:01:33 +0000
Manifest next update:     Wed 13 May 2026 21:01:33 +0000
Files and hashes:         1: 8xpf1H5jnrklNTBoaVn0u85Fw00.roa (hash: xVZEKXXOjsh0YBdOeRbRNQ2rIeuGE/aopxCQhkfvBRc=)
                          2: k1f4H5R1t7ioWxpD9zQTzDGVw34.roa (hash: UazRYiujjVi7Q1FCel0edXG5MOLygjSQmvy3K0uCobk=)
                          3: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: XSMgmd9iV4xvX4zjcgDyIA7uT/q7mWyX7tD5Ezm4VKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:ba:c8:ce:21:9c:69:4f:0c:26:9b:29:4c:bd:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
        Validity
            Not Before: May 12 21:01:33 2026 GMT
            Not After : May 13 21:01:33 2026 GMT
        Subject: CN=c52d9c53d29a1e14451ec5229310f8d53223ad84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:04:a8:8d:28:ab:25:e9:4c:5b:b1:e2:65:
                    b7:cf:32:5b:d9:7a:b8:ca:98:f2:1b:98:8f:80:c2:
                    6e:00:2a:41:a5:46:5b:e5:fd:95:66:08:e9:ac:33:
                    86:55:d7:b1:0c:32:d6:44:5f:9a:79:a5:15:1f:25:
                    bc:12:e6:a6:ea:57:00:9e:64:cc:ae:b8:6c:63:9e:
                    55:d6:f4:85:e1:70:c5:33:d0:d0:5f:36:19:11:41:
                    37:63:b2:86:a0:52:5f:88:a0:fd:76:07:ba:de:f9:
                    e0:87:c9:0f:d5:c5:59:49:e2:4a:4b:db:ab:c1:8e:
                    dd:0f:80:32:a8:56:6d:87:ba:93:42:2d:f5:25:7c:
                    66:f7:9a:1d:19:ae:05:91:cd:d1:67:aa:7c:b3:10:
                    8c:bd:6b:e7:3d:eb:99:68:b4:a4:8c:1d:5b:ed:3e:
                    62:32:43:a3:5a:2c:1d:75:fe:9d:76:e1:76:b7:b0:
                    53:e5:a8:7a:f0:4a:e3:b3:11:18:d5:4b:00:8c:c0:
                    76:e9:c3:4b:34:89:0b:93:4c:4f:1e:fb:01:ab:41:
                    01:c8:e6:b7:c6:5a:c9:96:24:a8:66:77:e1:2d:4f:
                    7b:13:32:61:bc:48:ed:c8:91:b0:1a:a5:6f:1e:d3:
                    42:89:f6:55:b4:90:23:d3:25:6f:6f:eb:51:e1:f8:
                    48:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2D:9C:53:D2:9A:1E:14:45:1E:C5:22:93:10:F8:D5:32:23:AD:84
            X509v3 Authority Key Identifier:
                keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0e:c2:4b:17:28:64:6e:15:83:7b:39:1f:df:71:f7:07:a4:
         2d:52:18:52:21:31:51:8b:1e:30:18:22:df:ef:f0:1e:d0:82:
         85:2e:dd:ed:b2:3a:7a:75:57:7d:17:c6:75:5b:bf:fd:1c:5b:
         65:96:48:52:2f:75:df:13:22:7d:0d:81:03:68:a5:f2:e6:d1:
         91:ab:29:a5:b6:92:8b:8b:55:9a:93:ae:97:e4:13:b7:bb:77:
         b9:6e:2e:16:e1:72:7b:cb:11:57:16:08:1e:ff:04:8b:a2:7e:
         6c:43:96:23:84:d1:7d:86:23:e5:ad:d7:2f:ab:e0:84:c6:70:
         8d:bc:e0:ba:c5:d0:71:47:a6:74:ca:c4:7e:a7:dc:03:81:33:
         70:05:f5:89:85:da:02:85:9c:a8:2c:c7:b3:c7:49:c5:7d:db:
         c8:82:e9:19:3c:df:a2:7d:ff:cf:74:45:19:4e:ca:e8:13:32:
         c7:95:b0:cb:30:22:7a:44:ee:7c:24:c2:c8:fd:34:0d:c1:e3:
         e6:54:60:55:1a:b8:5b:af:47:59:95:7e:e4:3d:6f:bd:97:f8:
         8a:94:d1:fc:88:c0:27:24:5f:70:1e:12:fe:e1:4b:50:db:d1:
         75:b5:14:d2:6d:40:19:eb:09:f5:53:3a:1c:21:5b:eb:29:2e:
         ab:25:df:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/rrIziGcaU8MJpspTL2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ODg2MDRkMjViODdiODJmZDEyNTlkZmUyOTRjZDhmYjlm
ZjQ5YjQwHhcNMjYwNTEyMjEwMTMzWhcNMjYwNTEzMjEwMTMzWjAzMTEwLwYDVQQD
EyhjNTJkOWM1M2QyOWExZTE0NDUxZWM1MjI5MzEwZjhkNTMyMjNhZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8cEqI0oqyXpTFux4mW3zzJb2Xq4
ypjyG5iPgMJuACpBpUZb5f2VZgjprDOGVdexDDLWRF+aeaUVHyW8Euam6lcAnmTM
rrhsY55V1vSF4XDFM9DQXzYZEUE3Y7KGoFJfiKD9dge63vngh8kP1cVZSeJKS9ur
wY7dD4AyqFZth7qTQi31JXxm95odGa4Fkc3RZ6p8sxCMvWvnPeuZaLSkjB1b7T5i
MkOjWiwddf6dduF2t7BT5ah68ErjsxEY1UsAjMB26cNLNIkLk0xPHvsBq0EByOa3
xlrJliSoZnfhLU97EzJhvEjtyJGwGqVvHtNCifZVtJAj0yVvb+tR4fhIGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUtnFPSmh4URR7FIpMQ+NUyI62EMB8GA1UdIwQY
MBaAFKWIYE0luHuC/RJZ3+KUzY+5/0m0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2It
MjBkZGRiYzEyODFkLzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2ItMjBkZGRiYzEyODFk
LzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASw7CSxco
ZG4Vg3s5H99x9wekLVIYUiExUYseMBgi3+/wHtCChS7d7bI6enVXfRfGdVu//Rxb
ZZZIUi913xMifQ2BA2il8ubRkasppbaSi4tVmpOul+QTt7t3uW4uFuFye8sRVxYI
Hv8Ei6J+bEOWI4TRfYYj5a3XL6vghMZwjbzgusXQcUemdMrEfqfcA4EzcAX1iYXa
AoWcqCzHs8dJxX3byILpGTzfon3/z3RFGU7K6BMyx5WwyzAiekTufCTCyP00DcHj
5lRgVRq4W69HWZV+5D1vvZf4ipTR/IjAJyRfcB4S/uFLUNvRdbUU0m1AGesJ9VM6
HCFb6ykuqyXfmQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:18:56 2026 by rpki-client