Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
File:                     5vqg0vXewCAfVeQJecGQm223fDs.mft (raw, json)
Hash identifier:          pSQjcsoE6f6y4OsEH04ODL02N9sPVKZkXAyO0DIVCYU=
Subject key identifier:   E7:F6:B5:91:1F:E3:35:5E:19:02:8F:AE:3D:3C:A9:32:8A:1A:3C:3C
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Certificate issuer:       /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial:       019E1D9069AF59FACC9DC338AD5A17E50D40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
Manifest number:          190F
Signing time:             Tue 12 May 2026 19:01:03 +0000
Manifest this update:     Tue 12 May 2026 19:01:03 +0000
Manifest next update:     Wed 13 May 2026 19:01:03 +0000
Files and hashes:         1: 5vqg0vXewCAfVeQJecGQm223fDs.crl (hash: sgI82DesQ42B5DGQrHA+2FFRwjSJ62nii2wjgG/dLYA=)
                          2: IK4nJYFQUmKZNbdR--FPWuUhVxU.roa (hash: 6+SF1nvClEObRj38PWV6BTQEdzViGHThkpCqyru0FWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:69:af:59:fa:cc:9d:c3:38:ad:5a:17:e5:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
        Validity
            Not Before: May 12 19:01:03 2026 GMT
            Not After : May 13 19:01:03 2026 GMT
        Subject: CN=e7f6b5911fe3355e19028fae3d3ca9328a1a3c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:ad:a6:7c:54:94:e9:1e:5b:2a:ab:50:b2:
                    26:09:c9:05:4d:60:8f:e6:03:f2:95:45:d6:ad:3a:
                    65:f4:4b:dc:81:3f:a8:23:03:eb:00:fc:53:b8:4a:
                    a0:28:e6:26:44:f6:c3:66:bf:b0:a4:1c:06:ff:67:
                    d9:2a:cf:ea:6e:a0:24:a2:ea:3c:66:eb:e9:1f:65:
                    59:43:b6:49:5a:23:2e:e9:58:60:ee:b5:7f:0c:b6:
                    7e:88:b2:6f:50:c0:fa:55:07:92:ee:4a:4b:af:05:
                    22:7e:ae:98:bc:cc:72:7a:eb:7a:e7:42:21:76:17:
                    98:4d:1e:9f:d1:b8:6b:b9:0d:3e:02:f0:80:0a:ea:
                    15:74:b2:8c:80:5e:0a:a2:86:6b:a7:93:ea:45:0b:
                    84:b4:75:81:97:a9:f9:72:c3:45:70:36:df:90:60:
                    cc:a1:78:94:36:bc:2a:82:c4:cb:e9:32:80:c7:98:
                    49:90:10:41:61:1f:af:b2:64:24:ab:e9:5a:40:d6:
                    60:31:15:34:b3:4e:b8:79:bc:fd:00:3b:18:7a:c8:
                    7c:74:5b:52:52:4b:9f:12:10:35:1e:b4:4c:f3:27:
                    92:50:f7:b4:78:de:b7:60:d9:65:b4:f5:68:bf:38:
                    5f:30:32:2f:df:da:90:e0:59:4e:bc:03:5e:d6:d4:
                    d0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F6:B5:91:1F:E3:35:5E:19:02:8F:AE:3D:3C:A9:32:8A:1A:3C:3C
            X509v3 Authority Key Identifier:
                keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:a5:fe:5c:57:6c:e2:fb:be:2c:f8:ac:8e:45:b5:d7:b5:65:
         91:0f:1a:bc:69:a0:10:8f:2f:50:bf:0d:be:fc:75:7c:00:b0:
         dc:51:2b:97:23:95:19:ed:d2:47:23:33:cf:89:e1:e5:20:22:
         78:f8:31:78:54:b2:e9:f8:8c:50:22:cf:6a:51:78:0b:27:55:
         68:6f:4b:a0:d8:2d:8b:cc:a8:bb:57:4f:2b:6a:24:4f:52:47:
         93:e2:47:0d:b2:6c:c1:51:5c:39:3e:bc:b5:3e:c1:ec:e9:16:
         34:ad:f2:65:dc:26:3a:b5:8f:27:c3:26:45:f3:74:9f:9a:4d:
         c0:75:25:50:ed:f9:37:f2:78:98:8b:08:d7:eb:22:91:f3:39:
         a6:c1:24:9c:e0:35:8f:f7:8b:aa:71:7b:d8:27:ed:2e:15:40:
         22:35:72:d7:ab:c6:35:2f:f7:ba:0e:13:6b:ef:c4:31:1a:16:
         f7:74:12:01:ee:9d:90:46:90:e7:38:c0:21:ec:68:c5:40:02:
         12:43:6f:df:01:47:6a:9d:01:f9:54:e5:10:30:c4:d9:f3:ba:
         90:4c:16:43:e2:e7:05:11:34:de:96:58:20:f1:81:b4:52:b5:
         6c:6b:22:c0:44:78:64:ab:38:c3:ca:a2:ef:6b:08:75:4e:3f:
         ed:fd:f4:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkGmvWfrMncM4rVoX5Q1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZmFhMGQyZjVkZWMwMjAxZjU1ZTQwOTc5YzE5MDliNmRi
NzdjM2IwHhcNMjYwNTEyMTkwMTAzWhcNMjYwNTEzMTkwMTAzWjAzMTEwLwYDVQQD
EyhlN2Y2YjU5MTFmZTMzNTVlMTkwMjhmYWUzZDNjYTkzMjhhMWEzYzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs16tpnxUlOkeWyqrULImCckFTWCP
5gPylUXWrTpl9EvcgT+oIwPrAPxTuEqgKOYmRPbDZr+wpBwG/2fZKs/qbqAkouo8
ZuvpH2VZQ7ZJWiMu6Vhg7rV/DLZ+iLJvUMD6VQeS7kpLrwUifq6YvMxyeut650Ih
dheYTR6f0bhruQ0+AvCACuoVdLKMgF4KooZrp5PqRQuEtHWBl6n5csNFcDbfkGDM
oXiUNrwqgsTL6TKAx5hJkBBBYR+vsmQkq+laQNZgMRU0s064ebz9ADsYesh8dFtS
UkufEhA1HrRM8yeSUPe0eN63YNlltPVovzhfMDIv39qQ4FlOvANe1tTQowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf2tZEf4zVeGQKPrj08qTKKGjw8MB8GA1UdIwQY
MBaAFOb6oNL13sAgH1XkCXnBkJttt3w7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXZxZzB2WGV3Q0FmVmVRSmVjR1FtMjIzZkRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wOTc3NDgtNWNjOC00NTBmLTlmYmIt
OGM4ZDEwZThlYWJjLzEvNXZxZzB2WGV3Q0FmVmVRSmVjR1FtMjIzZkRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8wOTc3NDgtNWNjOC00NTBmLTlmYmItOGM4ZDEwZThlYWJj
LzEvNXZxZzB2WGV3Q0FmVmVRSmVjR1FtMjIzZkRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqX+XFds
4vu+LPisjkW117VlkQ8avGmgEI8vUL8Nvvx1fACw3FErlyOVGe3SRyMzz4nh5SAi
ePgxeFSy6fiMUCLPalF4CydVaG9LoNgti8you1dPK2okT1JHk+JHDbJswVFcOT68
tT7B7OkWNK3yZdwmOrWPJ8MmRfN0n5pNwHUlUO35N/J4mIsI1+sikfM5psEknOA1
j/eLqnF72CftLhVAIjVy16vGNS/3ug4Ta+/EMRoW93QSAe6dkEaQ5zjAIexoxUAC
EkNv3wFHap0B+VTlEDDE2fO6kEwWQ+LnBRE03pZYIPGBtFK1bGsiwER4ZKs4w8qi
72sIdU4/7f30SA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:49:09 2026 by rpki-client