Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
File:                     Mwe9udWFUeFJKsQ6I7m2KWac624.mft (raw, json)
Hash identifier:          sj1IT8xFfPZss30lFiSk+Ywbw4tmRvUYtEYrMG1EmLk=
Subject key identifier:   25:3F:A5:F1:EB:34:34:EF:B8:05:AF:92:E9:FC:23:C7:B7:D6:7D:AC
Authority key identifier: 33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E
Certificate issuer:       /CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e
Certificate serial:       019E1F477D5CA2D0AD4B924747FB025A702E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
Manifest number:          03E5
Signing time:             Wed 13 May 2026 03:00:39 +0000
Manifest this update:     Wed 13 May 2026 03:00:39 +0000
Manifest next update:     Thu 14 May 2026 03:00:39 +0000
Files and hashes:         1: 5CsJQbk37xiXoy3hwH8D-YG-5Ks.roa (hash: gMzNQr0CHei7E1lRV/ytteIthIW9m0i5qgAObYiInOc=)
                          2: Mwe9udWFUeFJKsQ6I7m2KWac624.crl (hash: YpIjTEYMKZhBAHaQEaUt+livnUtIea+nDZhdqvYEmU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:7d:5c:a2:d0:ad:4b:92:47:47:fb:02:5a:70:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e
        Validity
            Not Before: May 13 03:00:39 2026 GMT
            Not After : May 14 03:00:39 2026 GMT
        Subject: CN=253fa5f1eb3434efb805af92e9fc23c7b7d67dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d0:94:d8:da:9a:e4:c7:3c:52:de:0c:4e:6f:
                    2d:86:0f:07:1e:b2:a5:25:9a:24:44:24:a0:59:eb:
                    5c:b1:ba:71:a6:cb:c2:af:e6:61:a4:d8:23:e1:e1:
                    bc:e8:07:72:ff:91:10:17:55:2e:60:e0:e8:b7:41:
                    9d:5d:5b:fc:8a:83:8c:c2:1d:9e:4c:91:0f:2e:6d:
                    23:b5:9a:f6:9e:81:8c:2e:96:14:c6:6b:04:0f:40:
                    1f:65:1b:b7:fb:3d:b2:1b:db:2b:5d:da:a0:b1:49:
                    f9:7e:78:96:a0:4d:52:43:46:c1:48:cb:ae:d1:8d:
                    be:74:6e:df:b4:7f:36:7a:77:a4:12:6a:d0:59:5b:
                    d9:6f:c5:d6:c5:3b:b1:13:a2:bc:75:25:76:0b:76:
                    fe:b6:89:7c:df:5c:95:0e:ab:74:87:2e:b4:80:43:
                    67:cb:b7:a9:f4:ab:e7:26:4d:c8:16:2d:8c:62:e4:
                    6f:f5:81:21:82:df:cf:5b:2d:b5:84:5c:01:0a:64:
                    04:0a:54:92:98:39:22:a9:a1:4e:ae:40:e2:39:cb:
                    6d:42:0f:aa:aa:48:7c:51:54:8d:69:05:07:9e:1c:
                    25:77:c1:6e:ae:fa:1d:05:70:56:03:15:69:fc:d3:
                    bb:cb:77:91:28:ef:fd:92:6a:2e:dc:fb:21:17:75:
                    9f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3F:A5:F1:EB:34:34:EF:B8:05:AF:92:E9:FC:23:C7:B7:D6:7D:AC
            X509v3 Authority Key Identifier:
                keyid:33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:8a:0f:ed:59:f2:1f:55:fe:a5:26:7d:af:b4:ad:d1:74:da:
         b6:8d:50:f9:ef:3f:0b:37:7b:b9:03:e6:18:4a:14:30:1f:0c:
         69:e4:fd:61:00:90:8d:a2:9c:d7:a4:12:e2:65:5d:e8:ea:44:
         f5:ca:44:56:46:7d:05:82:7b:80:34:31:3e:8e:c7:f2:d1:86:
         de:1c:fc:f0:9b:65:1f:c3:de:cd:6e:14:e4:b6:6f:ff:6f:df:
         24:c5:45:0d:74:61:49:a7:71:cb:f2:44:33:a8:6a:7f:83:fa:
         9c:9d:e1:54:de:9d:f2:61:68:16:79:af:35:22:df:b9:7c:c9:
         cb:89:f8:4a:67:98:70:ce:40:d0:30:88:bb:92:b2:7b:8a:8b:
         83:cf:16:a3:3b:8f:b1:fc:72:9e:d0:89:12:b4:c3:2b:80:38:
         fe:75:16:65:56:ba:64:5c:db:e7:41:4b:06:dd:96:31:b7:e6:
         14:2b:69:8d:62:3c:ce:15:84:cd:c6:5b:f5:d5:46:5a:0d:ed:
         6a:30:aa:18:ea:8d:3c:de:7e:7b:aa:c2:17:5b:8d:8d:37:b3:
         62:a6:fe:99:99:33:b1:ae:9e:0c:de:a5:a6:f2:bc:70:43:b0:
         7f:2c:a4:61:f6:30:6e:01:33:c0:ab:fb:be:9e:77:4e:60:c6:
         65:bc:38:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR31cotCtS5JHR/sCWnAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMDdiZGI5ZDU4NTUxZTE0OTJhYzQzYTIzYjliNjI5NjY5
Y2ViNmUwHhcNMjYwNTEzMDMwMDM5WhcNMjYwNTE0MDMwMDM5WjAzMTEwLwYDVQQD
EygyNTNmYTVmMWViMzQzNGVmYjgwNWFmOTJlOWZjMjNjN2I3ZDY3ZGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltCU2Nqa5Mc8Ut4MTm8thg8HHrKl
JZokRCSgWetcsbpxpsvCr+ZhpNgj4eG86Ady/5EQF1UuYODot0GdXVv8ioOMwh2e
TJEPLm0jtZr2noGMLpYUxmsED0AfZRu3+z2yG9srXdqgsUn5fniWoE1SQ0bBSMuu
0Y2+dG7ftH82enekEmrQWVvZb8XWxTuxE6K8dSV2C3b+tol831yVDqt0hy60gENn
y7ep9KvnJk3IFi2MYuRv9YEhgt/PWy21hFwBCmQEClSSmDkiqaFOrkDiOcttQg+q
qkh8UVSNaQUHnhwld8FurvodBXBWAxVp/NO7y3eRKO/9kmou3PshF3WfMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU/pfHrNDTvuAWvkun8I8e31n2sMB8GA1UdIwQY
MBaAFDMHvbnVhVHhSSrEOiO5tilmnOtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAt
MWIxYzgyNmU3YjhlLzEvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAtMWIxYzgyNmU3Yjhl
LzEvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIoP7Vny
H1X+pSZ9r7St0XTato1Q+e8/Czd7uQPmGEoUMB8MaeT9YQCQjaKc16QS4mVd6OpE
9cpEVkZ9BYJ7gDQxPo7H8tGG3hz88JtlH8PezW4U5LZv/2/fJMVFDXRhSadxy/JE
M6hqf4P6nJ3hVN6d8mFoFnmvNSLfuXzJy4n4SmeYcM5A0DCIu5Kye4qLg88WozuP
sfxyntCJErTDK4A4/nUWZVa6ZFzb50FLBt2WMbfmFCtpjWI8zhWEzcZb9dVGWg3t
ajCqGOqNPN5+e6rCF1uNjTezYqb+mZkzsa6eDN6lpvK8cEOwfyykYfYwbgEzwKv7
vp53TmDGZbw4nQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:18:44 2026 by rpki-client