Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File:                     t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier:          KWna2l+bGnv5KfzAiCfd8U6jTKK9rcecRpLVdp+50PM=
Subject key identifier:   95:44:25:72:4D:60:61:C8:BF:4E:B3:5E:E8:BF:5D:69:A7:E3:01:89
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer:       /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial:       019E2003229461A19F77209B4B615A683D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number:          118C
Signing time:             Wed 13 May 2026 06:25:36 +0000
Manifest this update:     Wed 13 May 2026 06:25:36 +0000
Manifest next update:     Thu 14 May 2026 06:25:36 +0000
Files and hashes:         1: BPWonk1YJrq5k0grAOFs28a78ys.roa (hash: vH3GEq/JyMlXOt+FXRkIPXcscRxAUxYgLT+/b2jWLHo=)
                          2: kZq33BHakZDY4YJudXNmheZzloo.roa (hash: KtUW+9Vb1TNUqTSbu6bQAx1rz4MVZIFaAepB6yKKaic=)
                          3: lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa (hash: Dg4GJqlJxEyMu+sRyXwo6uu0nTdiNWkD77joS0KB4X8=)
                          4: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: 3NAAwFeV1YpRvDypOdhm2O1AsLOvboN3I4E1RFoQ9pM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:03:22:94:61:a1:9f:77:20:9b:4b:61:5a:68:3d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
        Validity
            Not Before: May 13 06:25:36 2026 GMT
            Not After : May 14 06:25:36 2026 GMT
        Subject: CN=954425724d6061c8bf4eb35ee8bf5d69a7e30189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:d3:10:8f:ed:70:82:a8:a8:a6:81:c7:cf:
                    36:f9:2c:6b:8c:a2:c8:bd:87:fc:36:d3:94:c0:83:
                    c8:68:e7:ec:11:9f:0a:76:d9:1b:3c:e4:f6:5f:02:
                    fb:64:2a:41:58:dc:94:c7:ee:6c:4e:27:70:fe:9b:
                    c9:18:b8:dd:c5:a5:04:74:b1:26:31:91:a0:7e:1e:
                    d1:13:41:28:e6:a1:e8:47:2f:3f:da:10:58:52:99:
                    b4:0a:13:e7:80:dd:d1:5a:24:a0:6d:5e:69:22:3e:
                    d7:10:8d:45:43:12:12:d4:af:1b:2c:09:d2:bc:5e:
                    10:fc:ea:93:76:05:7b:18:95:02:89:4a:fd:1c:7c:
                    26:ea:72:86:9e:0e:e2:a3:59:8d:fb:d3:ae:27:c2:
                    af:18:c6:07:f9:19:25:c3:fc:ef:ec:99:0a:39:c9:
                    5d:f1:e7:c3:a5:5a:b5:0f:e3:12:9d:0b:b1:54:40:
                    73:e8:70:5a:d2:9a:d4:68:30:94:75:f7:32:53:64:
                    62:e8:40:0e:22:cb:2a:c3:98:2d:2f:ff:2e:a2:68:
                    4d:5d:e0:2d:87:37:3d:7c:31:e5:6a:72:09:ce:a3:
                    5e:50:a6:2f:cf:12:b7:51:23:b7:54:53:14:59:46:
                    b3:8f:74:b0:b1:1f:f6:64:7f:15:8e:f0:0c:2c:ac:
                    8e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:44:25:72:4D:60:61:C8:BF:4E:B3:5E:E8:BF:5D:69:A7:E3:01:89
            X509v3 Authority Key Identifier:
                keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:4f:87:da:69:3b:6a:35:72:9e:c7:b0:e3:f6:f0:a9:4c:65:
         62:27:82:59:55:1c:fb:75:e6:0c:9b:15:be:dc:c0:fb:ad:9e:
         f2:46:5b:b5:27:4c:dc:22:9e:ac:0d:62:de:d5:85:2f:e3:39:
         a5:ef:66:70:78:81:36:03:3d:dc:f4:dc:f8:85:d5:d5:9a:e3:
         eb:64:d5:a5:80:a3:1e:f6:15:f0:cd:b5:4a:8b:0b:3d:c7:f2:
         59:d0:86:50:67:ed:e5:d3:5f:cf:4c:55:ce:cc:bc:63:64:be:
         30:36:17:9a:91:e6:11:e2:d3:2b:f6:71:4d:14:61:9d:93:3c:
         aa:10:4f:64:44:6c:d4:29:ac:f2:4e:b6:9a:28:02:7a:a0:b6:
         b2:21:cd:16:b5:93:2c:46:b6:c0:1e:a4:87:a1:94:73:63:61:
         fc:95:ff:b6:f7:94:31:8b:40:10:e9:00:4f:c2:7b:09:57:18:
         cf:21:55:6a:59:c4:9b:ca:ba:09:75:c9:b7:37:e3:bf:40:b7:
         4b:af:37:1e:d4:fd:ed:d7:44:61:b5:39:18:5f:8a:d9:d8:d4:
         07:fb:e1:9c:e1:0e:49:53:87:92:18:29:62:20:fa:51:ec:01:
         a1:a1:7b:05:e6:7d:83:aa:53:29:f1:38:8d:08:0a:f6:93:48:
         75:6f:01:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gAyKUYaGfdyCbS2FaaD1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTNhNTQ3YmYwYmUyZGVlZDdjODRmZTkwMmUzMzY2NTc3
YTIzMTQwHhcNMjYwNTEzMDYyNTM2WhcNMjYwNTE0MDYyNTM2WjAzMTEwLwYDVQQD
Eyg5NTQ0MjU3MjRkNjA2MWM4YmY0ZWIzNWVlOGJmNWQ2OWE3ZTMwMTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsPTEI/tcIKoqKaBx882+SxrjKLI
vYf8NtOUwIPIaOfsEZ8KdtkbPOT2XwL7ZCpBWNyUx+5sTidw/pvJGLjdxaUEdLEm
MZGgfh7RE0Eo5qHoRy8/2hBYUpm0ChPngN3RWiSgbV5pIj7XEI1FQxIS1K8bLAnS
vF4Q/OqTdgV7GJUCiUr9HHwm6nKGng7io1mN+9OuJ8KvGMYH+Rklw/zv7JkKOcld
8efDpVq1D+MSnQuxVEBz6HBa0prUaDCUdfcyU2Ri6EAOIssqw5gtL/8uomhNXeAt
hzc9fDHlanIJzqNeUKYvzxK3USO3VFMUWUazj3SwsR/2ZH8VjvAMLKyOnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVEJXJNYGHIv06zXui/XWmn4wGJMB8GA1UdIwQY
MBaAFLeTpUe/C+Le7XyE/pAuM2ZXeiMUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVPbFI3OEw0dDd0ZklULWtDNHpabGQ2SXhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xNGY0MjktMDNiNC00NDIzLWJiNGMt
ZjBjMzMyNTZmYjIyLzEvdDVPbFI3OEw0dDd0ZklULWtDNHpabGQ2SXhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8xNGY0MjktMDNiNC00NDIzLWJiNGMtZjBjMzMyNTZmYjIy
LzEvdDVPbFI3OEw0dDd0ZklULWtDNHpabGQ2SXhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPk+H2mk7
ajVynsew4/bwqUxlYieCWVUc+3XmDJsVvtzA+62e8kZbtSdM3CKerA1i3tWFL+M5
pe9mcHiBNgM93PTc+IXV1Zrj62TVpYCjHvYV8M21SosLPcfyWdCGUGft5dNfz0xV
zsy8Y2S+MDYXmpHmEeLTK/ZxTRRhnZM8qhBPZERs1Cms8k62migCeqC2siHNFrWT
LEa2wB6kh6GUc2Nh/JX/tveUMYtAEOkAT8J7CVcYzyFValnEm8q6CXXJtzfjv0C3
S683HtT97ddEYbU5GF+K2djUB/vhnOEOSVOHkhgpYiD6UewBoaF7BeZ9g6pTKfE4
jQgK9pNIdW8Bcw==
-----END CERTIFICATE-----
Generated at Wed May 13 13:10:18 2026 by rpki-client