Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File:                     irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier:          +z2ZIkrinSCSz9AqVXHgOBzIYaRg5gqbw3PYIx9fapI=
Subject key identifier:   21:FD:18:AE:EC:5B:D7:55:94:07:41:9A:74:59:04:88:DE:E4:F2:D3
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer:       /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial:       019E1D911C53D319CC1D5A7B1F0523A84F8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number:          189A
Signing time:             Tue 12 May 2026 19:01:49 +0000
Manifest this update:     Tue 12 May 2026 19:01:49 +0000
Manifest next update:     Wed 13 May 2026 19:01:49 +0000
Files and hashes:         1: 9JA9nwwgveuhbehf1dbMMMd0pbA.roa (hash: K4544NSAPZx14RkA7PqqI9Lc4q1KFc9amOrIQYgacIo=)
                          2: A8c1PBpIFSLztF75JZ-1ZvSJ42c.roa (hash: S0wvsX3ezkojN9v+ptRSu6L3oxr6C1sg4BZfv0cK4DY=)
                          3: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: 7xe4O6zEcvrmsCnlG8AaGDbsqP+zRtTG+hW8drLnS7A=)
                          4: rh3h4DSUZf09eS3PD7_xT0pSUtw.roa (hash: AOUMEPrwbSgS3JJ+7BtVEwM9p+VQ+160OntQ7q3cUso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:1c:53:d3:19:cc:1d:5a:7b:1f:05:23:a8:4f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
        Validity
            Not Before: May 12 19:01:49 2026 GMT
            Not After : May 13 19:01:49 2026 GMT
        Subject: CN=21fd18aeec5bd7559407419a74590488dee4f2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:41:3f:9b:7b:55:64:58:18:d1:b6:ad:c5:
                    a9:2b:d7:45:53:cf:e5:9c:da:c0:e6:35:b6:ae:7a:
                    08:50:6a:14:bb:89:bf:0b:30:7b:45:8f:b7:fc:4b:
                    9f:43:b3:9d:5e:44:50:e2:61:8f:62:70:4a:b3:fa:
                    e8:d3:8e:32:aa:89:35:ef:5a:3c:89:25:fe:15:ea:
                    5d:3d:c3:04:5e:0f:ee:51:42:5f:49:48:0a:e3:8d:
                    ff:20:9d:b9:ee:96:b8:ff:70:da:fa:69:17:28:32:
                    77:75:75:d9:d7:04:a8:a7:8a:f7:83:55:15:20:2c:
                    3d:90:c5:15:56:a7:28:47:2a:41:4b:c9:ac:77:9f:
                    82:86:79:59:2a:54:bf:65:fe:63:b6:5e:19:5c:54:
                    f3:9e:7a:7b:f5:a6:94:8b:a6:a9:0d:89:0c:92:5f:
                    bf:ec:f1:ef:a2:59:b8:73:23:5d:90:56:71:6e:28:
                    09:ed:45:7b:53:5c:a9:92:d1:76:d1:a4:b9:58:79:
                    7c:d7:66:21:89:40:4d:c7:7a:b2:c7:41:f7:03:8f:
                    72:f4:b1:40:e6:2d:d8:89:95:28:c0:c6:f8:bb:1a:
                    b2:48:bd:b8:03:1f:ed:2f:51:93:80:73:e4:2b:bb:
                    4c:2d:a8:4f:6e:4a:59:4b:b0:ef:c7:7f:a8:9a:bc:
                    b7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FD:18:AE:EC:5B:D7:55:94:07:41:9A:74:59:04:88:DE:E4:F2:D3
            X509v3 Authority Key Identifier:
                keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:c4:d0:6e:a0:4b:08:a0:4f:82:16:80:45:ec:10:57:f9:57:
         03:11:04:63:f7:6c:88:f0:8c:8d:7b:f6:d2:5d:03:67:3b:c2:
         41:2d:d1:e3:0e:3f:0c:21:da:94:cb:ab:d6:70:0a:1f:f8:e2:
         0b:38:a7:55:e3:d2:2e:7c:03:0b:91:6e:b5:31:ab:10:23:13:
         ea:86:4d:fa:81:da:fc:f7:10:b2:b5:a9:3f:e2:da:82:02:37:
         93:50:21:48:0b:26:9c:6b:ff:e0:8b:74:8b:de:b7:2e:0d:c6:
         29:7e:8c:01:00:cc:6a:f5:a5:0a:58:e3:50:74:a0:fe:c8:da:
         00:a7:de:fe:f3:42:ad:ae:fb:cb:08:27:2d:d9:e3:08:0e:a2:
         e2:f4:a4:a1:e3:5c:cf:b8:9c:4d:5d:78:77:6f:60:66:13:e7:
         6c:09:9e:0a:94:a9:d9:57:5e:cc:a7:2a:91:1e:86:f6:68:ca:
         ea:a6:a8:75:93:78:c2:c0:62:01:a7:91:92:eb:0f:0e:a7:e9:
         a7:37:6c:d4:71:56:f5:d7:26:06:bc:d9:6b:86:39:48:72:bd:
         29:9f:b9:fe:11:4b:6f:3e:58:d9:fa:3d:0f:f4:6f:e3:eb:10:
         d1:d0:f9:4e:da:00:73:be:11:d5:6c:da:0c:14:dc:d6:9f:da:
         38:a3:ec:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkRxT0xnMHVp7HwUjqE+PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjNlOTY1Yzg3NDdlMmZhNWRkZDEyODU3NjczZjA2MDQy
ZWZhNDMwHhcNMjYwNTEyMTkwMTQ5WhcNMjYwNTEzMTkwMTQ5WjAzMTEwLwYDVQQD
EygyMWZkMThhZWVjNWJkNzU1OTQwNzQxOWE3NDU5MDQ4OGRlZTRmMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtadBP5t7VWRYGNG2rcWpK9dFU8/l
nNrA5jW2rnoIUGoUu4m/CzB7RY+3/EufQ7OdXkRQ4mGPYnBKs/ro044yqok171o8
iSX+FepdPcMEXg/uUUJfSUgK443/IJ257pa4/3Da+mkXKDJ3dXXZ1wSop4r3g1UV
ICw9kMUVVqcoRypBS8msd5+ChnlZKlS/Zf5jtl4ZXFTznnp79aaUi6apDYkMkl+/
7PHvolm4cyNdkFZxbigJ7UV7U1ypktF20aS5WHl812YhiUBNx3qyx0H3A49y9LFA
5i3YiZUowMb4uxqySL24Ax/tL1GTgHPkK7tMLahPbkpZS7Dvx3+omry3uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCH9GK7sW9dVlAdBmnRZBIje5PLTMB8GA1UdIwQY
MBaAFIqz6WXIdH4vpd3RKFdnPwYELvpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzIt
MDQ0MjdhOTlmMWM1LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzItMDQ0MjdhOTlmMWM1
LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxsTQbqBL
CKBPghaARewQV/lXAxEEY/dsiPCMjXv20l0DZzvCQS3R4w4/DCHalMur1nAKH/ji
CzinVePSLnwDC5FutTGrECMT6oZN+oHa/PcQsrWpP+LaggI3k1AhSAsmnGv/4It0
i963Lg3GKX6MAQDMavWlCljjUHSg/sjaAKfe/vNCra77ywgnLdnjCA6i4vSkoeNc
z7icTV14d29gZhPnbAmeCpSp2VdezKcqkR6G9mjK6qaodZN4wsBiAaeRkusPDqfp
pzds1HFW9dcmBrzZa4Y5SHK9KZ+5/hFLbz5Y2fo9D/Rv4+sQ0dD5TtoAc74R1Wza
DBTc1p/aOKPs6Q==
-----END CERTIFICATE-----
Generated at Wed May 13 05:06:24 2026 by rpki-client