Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
File:                     syycJt98zYrTjYm9XUk4C5Ox4Ak.mft (raw, json)
Hash identifier:          VRaKkGnUXVbVgh2DnhNpIlEdiVuFcEYZtDtn89a0H84=
Subject key identifier:   4D:85:CA:F1:EC:AF:07:44:2D:B4:EC:28:FB:1C:70:FF:5A:C0:4B:6A
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Certificate issuer:       /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial:       019E1DC755C86735E5C5DB81C6DDE30D736B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
Manifest number:          165D
Signing time:             Tue 12 May 2026 20:01:03 +0000
Manifest this update:     Tue 12 May 2026 20:01:03 +0000
Manifest next update:     Wed 13 May 2026 20:01:03 +0000
Files and hashes:         1: R23MhGdPnTjalWc2zIuKwc_Sr7U.roa (hash: iRmN53RumdF37AoPcECNqwBrmBrWv1ca0HhyWhpgq9k=)
                          2: TtF2-5jlTeNtomtDsnLXaVfZZQs.roa (hash: bOFctgKhUglT+7Rnoc8CMHSaJ6gExTqm2TI5PVgaKVs=)
                          3: YK_IawN261WogeBGmqdkhiTNN_I.roa (hash: 4EC+vEV7ucG4EBdmqBbe7XaUHceglhtUCKP+XHw06Nw=)
                          4: cxrYDYRve-AK30Fn1TQ9Kqrsm3M.roa (hash: omj5Dxmbd1CeguDg9OXaZDFdwZG6Smx/H+Y39YrtYK8=)
                          5: syycJt98zYrTjYm9XUk4C5Ox4Ak.crl (hash: tytV4B0gMAoClPvfMau1GLwbwuRtZhAIlDif25sEp/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:55:c8:67:35:e5:c5:db:81:c6:dd:e3:0d:73:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
        Validity
            Not Before: May 12 20:01:03 2026 GMT
            Not After : May 13 20:01:03 2026 GMT
        Subject: CN=4d85caf1ecaf07442db4ec28fb1c70ff5ac04b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:95:78:d9:d4:f2:e5:60:eb:40:05:97:d3:
                    d9:3f:99:b6:61:62:5f:c0:f4:cb:18:9c:eb:49:ef:
                    14:14:98:75:30:13:e4:e0:61:c2:97:68:b3:26:83:
                    56:73:94:7b:a5:22:16:2e:b0:2b:0b:10:06:f1:e4:
                    a9:b9:e3:c1:a8:7c:90:66:45:fb:9f:2c:e1:0c:b8:
                    8a:91:11:5f:1f:10:af:8b:40:49:8d:c4:e5:4b:96:
                    61:c9:14:48:e9:f3:3c:21:b7:35:76:10:c1:e2:f2:
                    7e:8c:ca:4f:27:0d:40:46:ee:f2:7a:65:0f:b6:a1:
                    00:6f:61:53:a7:6e:a5:7d:8b:e4:d3:c7:98:ce:8b:
                    23:8c:d9:6b:03:6f:59:2d:86:dc:86:fd:da:a6:c8:
                    e6:1e:ed:b6:c7:3a:c1:d9:64:db:c4:20:04:65:77:
                    89:50:13:a3:25:81:30:bf:24:1c:93:6b:42:dd:d6:
                    5a:ce:d6:3b:1f:40:70:31:ba:48:b2:0c:b4:ff:57:
                    09:df:bf:91:b3:dc:4c:54:52:a9:16:35:01:a9:35:
                    6c:a3:13:66:dc:f4:1e:88:85:67:df:72:91:02:bf:
                    a9:ec:54:bb:2e:ac:ba:ee:0c:8d:b2:dd:1a:d2:63:
                    8e:d9:4c:50:b0:65:e7:80:8e:ed:29:5e:4b:3c:68:
                    65:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:85:CA:F1:EC:AF:07:44:2D:B4:EC:28:FB:1C:70:FF:5A:C0:4B:6A
            X509v3 Authority Key Identifier:
                keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d0:38:81:02:b6:ec:b4:7b:79:69:ca:83:41:3c:35:c8:58:
         78:b4:87:d9:b0:69:34:54:50:8e:44:60:da:ac:c5:09:57:b5:
         ed:83:0d:0c:32:80:6c:ca:2f:80:1e:8e:73:bf:c7:c4:c1:61:
         f8:9b:38:ec:55:86:ae:1a:df:89:69:82:b2:84:fe:93:3f:08:
         4c:1a:cd:8b:ca:98:43:d2:a4:83:d7:e2:0a:de:f3:05:88:60:
         5d:1c:bd:04:f9:01:74:82:9b:4f:56:74:27:f0:77:88:e1:28:
         b8:7a:26:8a:45:b2:e1:3c:3c:25:be:a9:25:35:15:e6:e1:45:
         ac:ad:df:aa:f8:ac:64:c3:7c:60:8b:89:2f:af:0d:12:dd:91:
         0f:e2:4c:9a:9f:43:da:5a:f9:4a:07:35:3c:01:e6:fc:e8:8d:
         d1:78:1c:3b:cf:c4:bd:5f:17:d8:37:33:ce:f1:bf:90:b5:0f:
         17:72:01:44:5a:1a:32:b5:ce:74:eb:d7:26:66:ae:d9:87:55:
         de:a1:ce:b1:a3:70:7d:33:11:97:f7:16:12:f1:79:58:35:e9:
         23:c2:4f:6e:ee:4c:9f:17:86:e6:5a:61:ba:5c:c6:84:e5:b5:
         e6:50:10:7c:22:1c:3a:42:eb:39:40:6c:92:e2:3f:57:ef:4e:
         ab:00:ad:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx1XIZzXlxduBxt3jDXNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmM5YzI2ZGY3Y2NkOGFkMzhkODliZDVkNDkzODBiOTNi
MWUwMDkwHhcNMjYwNTEyMjAwMTAzWhcNMjYwNTEzMjAwMTAzWjAzMTEwLwYDVQQD
Eyg0ZDg1Y2FmMWVjYWYwNzQ0MmRiNGVjMjhmYjFjNzBmZjVhYzA0YjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/uVeNnU8uVg60AFl9PZP5m2YWJf
wPTLGJzrSe8UFJh1MBPk4GHCl2izJoNWc5R7pSIWLrArCxAG8eSpuePBqHyQZkX7
nyzhDLiKkRFfHxCvi0BJjcTlS5ZhyRRI6fM8Ibc1dhDB4vJ+jMpPJw1ARu7yemUP
tqEAb2FTp26lfYvk08eYzosjjNlrA29ZLYbchv3apsjmHu22xzrB2WTbxCAEZXeJ
UBOjJYEwvyQck2tC3dZaztY7H0BwMbpIsgy0/1cJ37+Rs9xMVFKpFjUBqTVsoxNm
3PQeiIVn33KRAr+p7FS7Lqy67gyNst0a0mOO2UxQsGXngI7tKV5LPGhlBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2FyvHsrwdELbTsKPsccP9awEtqMB8GA1UdIwQY
MBaAFLMsnCbffM2K042JvV1JOAuTseAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjIt
Y2IxMWJjNWIyZjFiLzEvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjItY2IxMWJjNWIyZjFi
LzEvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldA4gQK2
7LR7eWnKg0E8NchYeLSH2bBpNFRQjkRg2qzFCVe17YMNDDKAbMovgB6Oc7/HxMFh
+Js47FWGrhrfiWmCsoT+kz8ITBrNi8qYQ9Kkg9fiCt7zBYhgXRy9BPkBdIKbT1Z0
J/B3iOEouHomikWy4Tw8Jb6pJTUV5uFFrK3fqvisZMN8YIuJL68NEt2RD+JMmp9D
2lr5Sgc1PAHm/OiN0XgcO8/EvV8X2DczzvG/kLUPF3IBRFoaMrXOdOvXJmau2YdV
3qHOsaNwfTMRl/cWEvF5WDXpI8JPbu5MnxeG5lphulzGhOW15lAQfCIcOkLrOUBs
kuI/V+9OqwCtPg==
-----END CERTIFICATE-----
Generated at Wed May 13 01:20:42 2026 by rpki-client