Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File:                     CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier:          Pcp/CJuGqtbtPCvqnDbupxNjITxNdtbZRiSZz1Yx/tQ=
Subject key identifier:   B3:62:2F:89:8D:28:51:1B:48:14:72:77:53:F2:7E:20:E8:39:34:77
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer:       /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial:       019E1FEC40FDB2E8B9E05F75EE94748F626A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number:          18A4
Signing time:             Wed 13 May 2026 06:00:37 +0000
Manifest this update:     Wed 13 May 2026 06:00:37 +0000
Manifest next update:     Thu 14 May 2026 06:00:37 +0000
Files and hashes:         1: 0vUi9Ds7lR5ez_iB-H5z8Ibu_oU.roa (hash: odBVQf5CTONo7ECDi0W2aiY2l10V9TC9k1dYuEgLfXs=)
                          2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: oeN/i/6d2+FMsk9vsQ9XfnH8/hd+0wJY86yDN4I8jFY=)
                          3: RGc5fLjcJNmYdApzBeBRT1sTX8U.roa (hash: uNISFL+Bf976cPDti8VfFL3EbAdAai6udEnq+KK5wTU=)
                          4: sd_bm3gEOw7-0JVpKG8yK2OptLc.roa (hash: vdK8pGyhUzW2rMUKQmqHoaPCdID9Elq/G9yRotJFgFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:40:fd:b2:e8:b9:e0:5f:75:ee:94:74:8f:62:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
        Validity
            Not Before: May 13 06:00:37 2026 GMT
            Not After : May 14 06:00:37 2026 GMT
        Subject: CN=b3622f898d28511b4814727753f27e20e8393477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:2b:e2:05:d9:97:6c:9d:b5:b3:fb:c0:12:
                    32:9d:11:09:36:ae:6a:16:7e:e1:ef:3a:64:17:7c:
                    b7:7d:51:e8:1f:02:1c:f5:78:4f:ef:dd:59:98:7a:
                    87:7e:ed:8a:8e:e3:e9:02:e1:91:97:a3:5e:2f:06:
                    3e:77:7c:f4:a0:82:c9:6d:6e:a7:4f:c8:6f:82:5b:
                    aa:bc:83:cd:c9:3a:12:35:8a:e7:47:4b:05:9e:67:
                    3d:4e:4b:a7:8d:13:74:fd:9b:ed:7b:79:6c:d0:47:
                    85:a2:6b:51:8a:18:82:ac:53:48:6e:b3:8c:cc:1c:
                    8a:29:fe:e6:bd:2b:43:78:8e:38:22:15:8f:96:30:
                    f3:50:91:2c:54:7b:24:ee:f7:b3:da:91:5d:eb:67:
                    cd:ca:ba:c4:0e:0d:cb:f8:dc:a5:02:f3:cb:2b:d6:
                    55:75:89:2b:0d:b4:d7:4d:bf:64:c4:44:d0:3d:d5:
                    ac:31:fd:5a:c1:40:a2:1a:74:a3:d6:91:6e:a5:62:
                    2c:fb:7e:9e:25:03:46:0f:27:7f:b7:1d:de:a6:fa:
                    be:4b:ae:2a:2a:1e:58:aa:e6:dd:99:e2:96:c6:ec:
                    4d:00:f3:cf:df:0f:4e:22:a7:05:17:82:7d:87:e6:
                    d4:56:88:55:dd:b9:95:53:eb:96:f4:a8:5f:ff:0d:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:62:2F:89:8D:28:51:1B:48:14:72:77:53:F2:7E:20:E8:39:34:77
            X509v3 Authority Key Identifier:
                keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:91:aa:e5:e1:93:9c:4c:92:fb:c3:8d:ef:f8:0e:51:9f:98:
         b4:25:50:8d:fc:0f:d3:6c:1a:09:e6:b4:88:87:40:6c:01:9d:
         e7:65:c8:4a:fa:cf:74:4d:e0:85:38:49:d0:0b:d9:9e:a0:3c:
         ad:83:7b:6b:0a:60:50:ff:e6:91:24:44:a7:47:43:e3:c8:10:
         18:f7:e9:69:44:51:10:52:2a:5e:18:f2:88:1d:c4:44:e4:df:
         cd:f4:0a:fc:b6:e8:21:a4:d0:8d:9c:ad:49:70:b9:04:d3:7f:
         42:e7:a4:c3:1e:8e:df:bd:35:c6:b0:4b:c2:2d:11:05:6a:aa:
         18:a2:5c:95:b0:7f:cf:e6:05:de:df:73:28:c9:e1:59:a7:79:
         cd:f4:19:17:5c:d9:a4:a2:86:89:83:e2:ca:e0:bf:44:98:b9:
         73:94:5e:d1:c3:3e:03:7a:e0:e9:59:18:30:da:3e:60:d9:55:
         47:f0:a0:6e:db:6b:da:bd:aa:8c:8f:0a:3b:ee:3c:4f:08:90:
         40:e9:63:09:ab:37:dc:17:60:15:b2:a7:f6:30:f9:a3:96:9e:
         b8:11:a8:8f:b0:32:37:a3:15:3f:3f:55:fb:14:ef:4a:d5:31:
         4c:12:b4:22:51:a3:3b:2c:e7:f1:8d:ee:cf:48:77:77:a8:b6:
         49:77:8e:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7ED9sui54F917pR0j2JqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYjM2NjY4ODkzYTgyNDRkNTUzZWZjYTQ2ODhkMGYxMDE5
ZTRlMjUwHhcNMjYwNTEzMDYwMDM3WhcNMjYwNTE0MDYwMDM3WjAzMTEwLwYDVQQD
EyhiMzYyMmY4OThkMjg1MTFiNDgxNDcyNzc1M2YyN2UyMGU4MzkzNDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpYr4gXZl2ydtbP7wBIynREJNq5q
Fn7h7zpkF3y3fVHoHwIc9XhP791ZmHqHfu2KjuPpAuGRl6NeLwY+d3z0oILJbW6n
T8hvgluqvIPNyToSNYrnR0sFnmc9TkunjRN0/Zvte3ls0EeFomtRihiCrFNIbrOM
zByKKf7mvStDeI44IhWPljDzUJEsVHsk7vez2pFd62fNyrrEDg3L+NylAvPLK9ZV
dYkrDbTXTb9kxETQPdWsMf1awUCiGnSj1pFupWIs+36eJQNGDyd/tx3epvq+S64q
Kh5YqubdmeKWxuxNAPPP3w9OIqcFF4J9h+bUVohV3bmVU+uW9Khf/w2uXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNiL4mNKFEbSBRyd1PyfiDoOTR3MB8GA1UdIwQY
MBaAFAqzZmiJOoJE1VPvykaI0PEBnk4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTkt
MmFmMDY3YTEzMGFhLzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTktMmFmMDY3YTEzMGFh
LzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJGq5eGT
nEyS+8ON7/gOUZ+YtCVQjfwP02waCea0iIdAbAGd52XISvrPdE3ghThJ0AvZnqA8
rYN7awpgUP/mkSREp0dD48gQGPfpaURREFIqXhjyiB3EROTfzfQK/LboIaTQjZyt
SXC5BNN/Quekwx6O3701xrBLwi0RBWqqGKJclbB/z+YF3t9zKMnhWad5zfQZF1zZ
pKKGiYPiyuC/RJi5c5Re0cM+A3rg6VkYMNo+YNlVR/Cgbttr2r2qjI8KO+48TwiQ
QOljCas33BdgFbKn9jD5o5aeuBGoj7AyN6MVPz9V+xTvStUxTBK0IlGjOyzn8Y3u
z0h3d6i2SXeO1g==
-----END CERTIFICATE-----
Generated at Wed May 13 17:54:16 2026 by rpki-client