Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File:                     K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier:          ACNDDQwPlOAUwmYwinSWEMXXTgEHdnVPNhYRnbWn0DE=
Subject key identifier:   C0:19:EE:AB:30:66:A5:DC:B1:26:41:00:65:14:2B:1B:4A:AC:57:84
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer:       /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial:       019E1E6C27871C0A7D1C46E7F53AB8399731
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number:          1911
Signing time:             Tue 12 May 2026 23:01:04 +0000
Manifest this update:     Tue 12 May 2026 23:01:04 +0000
Manifest next update:     Wed 13 May 2026 23:01:04 +0000
Files and hashes:         1: 3jD0YcizeH8Q1qV2NEPg7xq78Tc.roa (hash: 52GkghurYXZlBw/P3re6oL3xnNmHYgWQ/XfBpyrLrd0=)
                          2: Ecy3CFSnUwOKhmhjKk6r9oZmrgU.roa (hash: XtcTVzHETxkCw8mwBAqZHbUKLVnvKh4s/PETyzl7Dqc=)
                          3: H8kw6Sg_EEFlV4WiqGHQYPzK8jI.roa (hash: vA9KgFsuau17xYabkQq0t4vvihSWAC35OyURHBxCae8=)
                          4: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: wbDftDgZyX4nRwFr9bNAdKOFlRb5JkFg5CwCS2Wz5rI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:27:87:1c:0a:7d:1c:46:e7:f5:3a:b8:39:97:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
        Validity
            Not Before: May 12 23:01:04 2026 GMT
            Not After : May 13 23:01:04 2026 GMT
        Subject: CN=c019eeab3066a5dcb126410065142b1b4aac5784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:53:0a:36:43:85:81:db:a5:77:7f:4b:19:6f:
                    c8:03:28:9d:7d:1e:eb:4d:61:c8:0b:a1:51:82:6b:
                    d1:0f:2b:ba:29:c6:34:14:ac:b7:cb:21:e3:8e:3f:
                    a2:ee:4a:7d:05:ba:74:c1:e6:83:91:78:ce:45:14:
                    73:9b:b9:a9:ed:a5:83:ea:7d:d2:26:57:76:4e:5d:
                    5e:25:83:66:5a:55:4f:85:ab:e0:91:c9:2a:d9:34:
                    7e:75:bc:3d:e2:c0:2c:3f:1b:50:29:6e:49:7c:21:
                    22:f4:d0:61:8a:dd:cc:55:bf:88:29:ef:90:22:0b:
                    d9:06:5f:8e:0c:b9:14:0e:56:10:70:a7:72:01:66:
                    8a:9e:35:95:f3:32:da:4a:cf:f0:7c:92:f4:09:19:
                    b5:67:5b:29:45:f6:eb:fb:01:b7:59:9b:76:51:48:
                    08:97:dc:be:c5:15:af:b7:aa:09:99:fd:b1:e4:2f:
                    e9:1c:d2:57:e5:3d:59:12:f7:c0:99:3c:35:29:6c:
                    4b:20:e6:b9:a5:01:20:a9:ed:73:2f:52:66:91:7c:
                    64:74:b6:c7:be:26:c5:e9:86:dc:89:3b:b2:2c:99:
                    7b:1a:da:c8:8b:77:42:b8:bd:c1:fe:30:6b:6d:f0:
                    51:55:83:1d:9e:f4:c0:43:ba:53:64:9d:bc:82:e7:
                    fd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:19:EE:AB:30:66:A5:DC:B1:26:41:00:65:14:2B:1B:4A:AC:57:84
            X509v3 Authority Key Identifier:
                keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:2b:35:73:40:e9:b4:e0:a7:1d:fa:37:e2:7e:ea:73:1d:
         f1:57:8b:0c:e6:a4:e1:a8:d2:35:79:2e:46:2a:72:09:1c:3e:
         45:b1:98:a3:b5:00:cd:71:1a:98:ed:d9:b0:aa:6c:8b:f1:1f:
         0b:ab:b6:c0:25:72:e4:7e:11:95:af:10:42:c2:fb:7e:f7:29:
         c2:49:ab:5a:76:ec:f8:b1:8e:26:42:3e:1c:ec:65:6a:c0:b0:
         77:c0:64:fd:89:1d:3b:1a:2d:b3:51:48:2b:0f:67:fb:54:c7:
         53:9e:42:3c:05:a2:86:bc:df:88:05:14:c3:78:58:82:bd:7c:
         38:bd:77:93:0a:26:be:58:4f:de:a6:4a:5d:db:f7:f2:69:57:
         36:d6:25:e1:d6:9f:15:02:24:38:95:9c:8b:76:7b:f0:fb:6f:
         ce:26:ef:27:c2:e5:a8:d7:ae:5c:82:71:bb:5a:2b:37:a7:83:
         c8:e1:95:86:38:af:fa:d3:2d:e9:10:95:d5:fd:a7:12:a8:c6:
         55:18:55:8f:46:70:91:29:74:c8:f0:91:9b:df:ae:bc:09:c0:
         ea:4f:25:12:3c:fc:42:b0:bf:33:46:6e:63:cc:e5:ed:7a:7c:
         7d:9e:1a:28:87:d6:4d:ab:39:98:ac:f2:85:46:8f:90:42:a0:
         ba:a8:67:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebCeHHAp9HEbn9Tq4OZcxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTI4MDk3ZGM5Zjg5YTdhM2E4YTI5NmE3OGE0ZjlkMGNi
Y2UxN2YwHhcNMjYwNTEyMjMwMTA0WhcNMjYwNTEzMjMwMTA0WjAzMTEwLwYDVQQD
EyhjMDE5ZWVhYjMwNjZhNWRjYjEyNjQxMDA2NTE0MmIxYjRhYWM1Nzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVMKNkOFgduld39LGW/IAyidfR7r
TWHIC6FRgmvRDyu6KcY0FKy3yyHjjj+i7kp9Bbp0weaDkXjORRRzm7mp7aWD6n3S
Jld2Tl1eJYNmWlVPhavgkckq2TR+dbw94sAsPxtQKW5JfCEi9NBhit3MVb+IKe+Q
IgvZBl+ODLkUDlYQcKdyAWaKnjWV8zLaSs/wfJL0CRm1Z1spRfbr+wG3WZt2UUgI
l9y+xRWvt6oJmf2x5C/pHNJX5T1ZEvfAmTw1KWxLIOa5pQEgqe1zL1JmkXxkdLbH
vibF6YbciTuyLJl7GtrIi3dCuL3B/jBrbfBRVYMdnvTAQ7pTZJ28guf9XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAZ7qswZqXcsSZBAGUUKxtKrFeEMB8GA1UdIwQY
MBaAFCuSgJfcn4mno6iilqeKT50MvOF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYt
NDVjYWE2ZWY2NzAwLzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYtNDVjYWE2ZWY2NzAw
LzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtYrNXNA
6bTgpx36N+J+6nMd8VeLDOak4ajSNXkuRipyCRw+RbGYo7UAzXEamO3ZsKpsi/Ef
C6u2wCVy5H4Rla8QQsL7fvcpwkmrWnbs+LGOJkI+HOxlasCwd8Bk/YkdOxots1FI
Kw9n+1THU55CPAWihrzfiAUUw3hYgr18OL13kwomvlhP3qZKXdv38mlXNtYl4daf
FQIkOJWci3Z78PtvzibvJ8LlqNeuXIJxu1orN6eDyOGVhjiv+tMt6RCV1f2nEqjG
VRhVj0ZwkSl0yPCRm9+uvAnA6k8lEjz8QrC/M0ZuY8zl7Xp8fZ4aKIfWTas5mKzy
hUaPkEKguqhngw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:28:59 2026 by rpki-client