Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File:                     lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier:          OHtht0mY2gk939OUXFGeUNlpX+jc2eb3ZNRxLLMeI4o=
Subject key identifier:   54:18:CF:09:E4:CD:43:46:9D:47:AB:F5:DB:06:4C:E5:23:53:81:2F
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer:       /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial:       019E1CEBA8468465F6C91DE909769B8858EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number:          1916
Signing time:             Tue 12 May 2026 16:01:06 +0000
Manifest this update:     Tue 12 May 2026 16:01:06 +0000
Manifest next update:     Wed 13 May 2026 16:01:06 +0000
Files and hashes:         1: 3rInZjWK_OrArZZOM2bV6e4iorQ.roa (hash: zuQXjoQYRWkqfCz+15TulpJjZN3HgFJdjfwCUHW+tCo=)
                          2: Iy-fgALALz7shq-7VeACuB3oDEw.roa (hash: /ZLR7Dr5uoDlsEeoz+iCL0uuXTI/ziU5PN5IasP3K4Y=)
                          3: JFsH7hJEf4fR68_Rwwa85U3cMZU.roa (hash: zN27rSTTGBjpRviupdHHxSulEg0HbXzHmYCyhdHFOcw=)
                          4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: ngjNpSxTStUzH5b/BRbSHxysyKQ3ELkwB+GYaG3l5gI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:a8:46:84:65:f6:c9:1d:e9:09:76:9b:88:58:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
        Validity
            Not Before: May 12 16:01:06 2026 GMT
            Not After : May 13 16:01:06 2026 GMT
        Subject: CN=5418cf09e4cd43469d47abf5db064ce52353812f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:10:54:85:43:08:aa:8f:37:85:6c:0a:b3:
                    9b:90:c3:4c:02:9d:d5:81:7f:0b:35:94:bd:ea:5a:
                    44:c8:19:50:22:16:bd:d1:b1:e3:c5:c4:93:84:f0:
                    d2:f4:19:d3:71:d6:ea:dd:a9:80:40:ef:a9:86:a8:
                    66:a4:10:50:ed:8f:c4:c2:c7:24:33:5d:2c:72:ae:
                    5c:34:17:92:f1:09:f1:7c:be:8f:08:eb:07:c2:a7:
                    78:01:67:6b:25:fe:2f:eb:20:09:9d:f3:e0:d1:ed:
                    56:0f:ac:cf:87:35:bd:4f:d8:f0:a4:11:62:62:a8:
                    7d:71:be:0b:5d:89:9a:e1:a3:85:01:f0:8f:79:76:
                    49:44:3e:03:10:77:df:6f:2e:be:c2:4a:a0:f1:64:
                    2f:78:0b:72:4f:71:ae:62:ad:00:ec:53:a0:50:de:
                    d3:04:0e:9b:7e:a7:04:da:2a:b1:4d:5a:a0:42:54:
                    de:65:2e:bb:a5:4c:06:87:07:4d:15:60:ca:11:a8:
                    f8:de:8e:b3:4a:31:b2:4a:d2:c0:25:40:78:5d:08:
                    c5:a9:8c:3c:52:08:7d:d1:f9:15:a1:9c:79:48:4f:
                    37:52:ae:32:2f:64:49:66:e8:c2:53:37:e9:bc:8b:
                    23:d7:66:ff:b4:f4:cf:cb:19:03:1d:76:3b:56:32:
                    6e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:18:CF:09:E4:CD:43:46:9D:47:AB:F5:DB:06:4C:E5:23:53:81:2F
            X509v3 Authority Key Identifier:
                keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:fb:29:82:4b:90:74:77:08:2f:8e:f7:76:bd:13:11:34:
         51:d0:9b:b2:a9:bc:ce:ec:2b:55:d0:19:ab:b5:df:96:da:10:
         cb:41:9d:1c:f6:71:a7:d7:48:40:ac:6f:d1:c7:2b:7b:d2:d5:
         7d:6d:3d:bf:2e:4e:c3:ca:21:ac:0b:55:23:43:a0:f6:fe:9e:
         43:0d:15:b5:01:6a:50:48:3e:75:fe:81:8f:f1:ca:38:bf:aa:
         2d:91:cc:50:05:12:c4:ab:05:b4:25:98:f7:46:3f:ed:e2:84:
         e0:7f:33:2e:61:7b:7e:23:fe:71:03:74:7b:b0:58:d2:2a:a3:
         04:aa:02:23:58:19:1c:a1:8d:35:e4:3e:42:d9:2b:42:14:a1:
         c8:97:cc:44:19:ff:f0:de:22:b9:ef:f6:e5:82:ef:78:54:6c:
         e1:76:7c:6f:ab:9d:85:5b:0b:6d:29:0d:cd:53:0d:1a:d4:95:
         35:ee:63:82:be:65:b6:c3:e2:60:60:02:a8:9b:79:bf:73:45:
         3d:aa:44:e0:6c:c4:61:25:61:aa:cf:54:e1:37:2d:6c:04:be:
         ef:ae:77:27:8c:8e:55:ea:8d:f9:8f:de:1e:1b:15:df:b6:c8:
         79:58:48:f6:36:37:1f:45:6a:63:f8:be:89:ea:74:71:03:74:
         7b:cb:9c:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c66hGhGX2yR3pCXabiFjrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTQ4ZTVmMmZhMDRiMjIyYTZlOTY4ODNiODQwZjcxMjQ1
MzE1NTYwHhcNMjYwNTEyMTYwMTA2WhcNMjYwNTEzMTYwMTA2WjAzMTEwLwYDVQQD
Eyg1NDE4Y2YwOWU0Y2Q0MzQ2OWQ0N2FiZjVkYjA2NGNlNTIzNTM4MTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGcQVIVDCKqPN4VsCrObkMNMAp3V
gX8LNZS96lpEyBlQIha90bHjxcSThPDS9BnTcdbq3amAQO+phqhmpBBQ7Y/Ewsck
M10scq5cNBeS8QnxfL6PCOsHwqd4AWdrJf4v6yAJnfPg0e1WD6zPhzW9T9jwpBFi
Yqh9cb4LXYma4aOFAfCPeXZJRD4DEHffby6+wkqg8WQveAtyT3GuYq0A7FOgUN7T
BA6bfqcE2iqxTVqgQlTeZS67pUwGhwdNFWDKEaj43o6zSjGyStLAJUB4XQjFqYw8
Ugh90fkVoZx5SE83Uq4yL2RJZujCUzfpvIsj12b/tPTPyxkDHXY7VjJu6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQYzwnkzUNGnUer9dsGTOUjU4EvMB8GA1UdIwQY
MBaAFJSUjl8voEsiKm6WiDuED3EkUxVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODct
NjQxYjhlNjBkM2UyLzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODctNjQxYjhlNjBkM2Uy
LzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcj7KYJL
kHR3CC+O93a9ExE0UdCbsqm8zuwrVdAZq7XfltoQy0GdHPZxp9dIQKxv0ccre9LV
fW09vy5Ow8ohrAtVI0Og9v6eQw0VtQFqUEg+df6Bj/HKOL+qLZHMUAUSxKsFtCWY
90Y/7eKE4H8zLmF7fiP+cQN0e7BY0iqjBKoCI1gZHKGNNeQ+QtkrQhShyJfMRBn/
8N4iue/25YLveFRs4XZ8b6udhVsLbSkNzVMNGtSVNe5jgr5ltsPiYGACqJt5v3NF
PapE4GzEYSVhqs9U4TctbAS+7653J4yOVeqN+Y/eHhsV37bIeVhI9jY3H0VqY/i+
iep0cQN0e8uc4w==
-----END CERTIFICATE-----
Generated at Wed May 13 03:25:35 2026 by rpki-client