Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          R10rDuR1XncBjodx3PWGxnMneluVjGMVcZ/tse9w/V8=
Subject key identifier:   12:61:62:5E:A1:75:D1:A7:DF:82:11:0E:58:87:C2:05:28:B0:72:88
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       019E1D22566EDE15431356F55DD19D5D36FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          19EE
Signing time:             Tue 12 May 2026 17:00:49 +0000
Manifest this update:     Tue 12 May 2026 17:00:49 +0000
Manifest next update:     Wed 13 May 2026 17:00:49 +0000
Files and hashes:         1: 0AZvivRyYF50IkEBIyepECAE2jg.roa (hash: NHL6zV+TwZnzL3xEUx+Gn97YTD4tGPxMGpJnsuHL5oQ=)
                          2: 0tjMx9RMD3HiVUOJNj2O3zJUOec.roa (hash: mv/1iB50iXR90GwHouWFnvkEvKegSx0mHsky5a8Dbac=)
                          3: 1b8pXJj7x0TOWFRoeZjRnOReobM.roa (hash: XrB9mwl96CQ4ZJuMI/6y0WXMFuDor7G7Y6ifr6Zhj3k=)
                          4: 1bmj8GONQQBKMf3s4Oxc-ZlfsBM.roa (hash: wkPtMNp/SGcXYDsb9VbL+hkba8hGwB+mm04x9jIVPQo=)
                          5: 3aSHn_j8RtFjPkxGx5eiI0L5zXY.roa (hash: nBPyAA0DKhBkjVysZ8vABPe+cEvgn6LLEUpiFGRroy0=)
                          6: 41CnWU7PjEAFuw792t5A517Sn7Y.roa (hash: zvVh+bIH1zp58GW8FaRNQSHYWUI+hp/KhdCSLTbP6t8=)
                          7: 5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa (hash: Lo/UXlhLKvZlPcUxfDE7Px5J4XOqSoIVcTDtq/WURk8=)
                          8: By-u2rKRmt7gEchpRigpU_HEpeU.roa (hash: PwTmgiljgdSXpUOnjew7qW3hadK2pKJ5WoDlzffASYE=)
                          9: Ckbmwdo69uWZLFdhnIqi1EVx-As.roa (hash: 0See61yjqZJwFH53PpcLw3mYiFIVA0D2E4nf89wyg+A=)
                          10: DBdmcuzJA5EDAtOoACaSFGmDW9c.roa (hash: u5C0lrPpVUxYr5UektHNiniMSvjMcYM6DlOSyRv5xcQ=)
                          11: Guoxwahp0mrpH83oscuF3StmgL4.roa (hash: b9u9ODGvV7E1dMwdtXwMfxsCLt+neWPY0Xa0Njg/95g=)
                          12: LzMoFpwq1xtr399Q2O-eh1qOgKY.roa (hash: VssinASuDA5vdl3dqNLJWGOh/DQjAfjboGvEqrLgXeI=)
                          13: QnL2C3-KGaekq-1q87fzI7-f6vg.roa (hash: g47Y6ZOFMFnPYe8Q7Dl4VLnyKH5AOEhgtWJJzN6BsaY=)
                          14: Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa (hash: GUP9CAOD/lZ7zRDp3tb1cccBeuujTmIae2sSdpt219A=)
                          15: Rsd9tmeGIhGuC32RRTqMOhvYKbQ.roa (hash: PMC54QUfoznlYL5Dx4xudhJ86P6zIvFtq6pV3rKVTWg=)
                          16: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: QWMZOEYUh9a5Yt5LJ8IctJT6EHayLEVORqzZnvQHEkc=)
                          17: VQxPIf61tYrF4PpboF_ivCID26A.roa (hash: KTMviLnc+JWqNZxaJvafJ0HSG1Yb0F9ogTifEhrwNrk=)
                          18: WLae_R3RQNj8B--SbAlTHFukpXk.roa (hash: DT6H8JWn6252+tmb/cUyHZOfNt1cDEBr1dNmS2MckP0=)
                          19: X_ZY7bhlCimk4A4rT1m_7ox1lpA.roa (hash: Te4JGy7suNJwGqJ4fGrVMOQc/VeF1iQInhbVnodspgc=)
                          20: bW4fZtzKzqdebS9mwab0I7h9ocA.roa (hash: JJXH2qpBItLk/3pyTLi7Av3TAC4RCYzc+Kn3MqETFkk=)
                          21: brIJhXE127mnZSH-sgVgPTdMriQ.roa (hash: OPHDQPDKv2sbNbcG8M/if1+Q1GQUEy9nOuk2NkDBWwk=)
                          22: e0Vr9Cnimt0BB1kf2VAWoyGA2ww.roa (hash: Gg20gx0Zl93rBkAVxklCgwkS7jTSu0rjxkvOvn5J2KI=)
                          23: eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa (hash: KqnBx9Z7NrcBEhqssBHFNIjBHPFvdg987eaQWuWEZFQ=)
                          24: lXi2CpWk0uX1PD09wOxdn3LPCk8.roa (hash: A6e1oKqDntw3FBNRZExtqdaDdknBbCGaGLLQW8KzQ/s=)
                          25: mGU_ZM8C_67y-U_MSCItqM-7NVs.roa (hash: /prGVdEgBVD01uVKzuuRhV754d4P2Vo6sa25WVn4UwQ=)
                          26: mR2VgpUeIkByOi-FP_fIKjS95bg.roa (hash: gSSQQUWvAuuJj9LKju1G38u/ekMfsk5jiPCrwLLkZ7I=)
                          27: oMbkLubRHpA6QKVm4O5LMWLQtSY.roa (hash: E8qozcbC+2Ne/l2gvjBAhkNeL30d9qDBiZcSfFbFzUk=)
                          28: ojsjf-NPcJu8YOAiwCABNHClj8A.roa (hash: BdxisMsqcak0dRALeB9HUtxCYiTxxK6VVobdUh42wjM=)
                          29: pGeq0B-Mzg0q4NmMgPUNvpE-lTI.roa (hash: cINCKzd3dIf/VdNxQaJ9bIeKFH1cTlbmZ9wu/VN+feI=)
                          30: q1K3mBP6tAwWbGS6T7xJBkYKSz8.roa (hash: wr5HNzjC8IUzrQZPy+nMV2gYW00yPWdfWqjJEkjh148=)
                          31: qVo3s1lf7yjqtaGK4xnzClgD40s.roa (hash: HZEMjlTJ3F4Yz+LhTaGucVY1ueQ8rTghPD0JixJp9DE=)
                          32: qqeLts1D5se3KH1bAg8P4GUfVAY.roa (hash: rNAP7UG4dj0VnYLR6ASaWaGud/Fg8fCodgzzA2jjc/w=)
                          33: roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa (hash: Nvdv7sBW68P4ZeVIAVuG7dWEQPAEIM4InjtltzOfZ3M=)
                          34: suovzHsoDlN0Hb2AdeewhUysXlk.roa (hash: DecZNdwPz60RPQKYYm+RGNe+i+BUh+N2BaGtnkWEt/U=)
                          35: vfcIEd89w7RHFNMpkDPFKdiuSXU.roa (hash: ixlqDv1r7we5MxrflT22tc1tM+oGVmsMKCPwwcmUkV0=)
                          36: vjx6049Oaq-tndl18g_6Bm9j2C8.roa (hash: BVltqq8LZ1DeA64vexnQtov2krYYu5gv3DiEiBbiaVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:56:6e:de:15:43:13:56:f5:5d:d1:9d:5d:36:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: May 12 17:00:49 2026 GMT
            Not After : May 13 17:00:49 2026 GMT
        Subject: CN=1261625ea175d1a7df82110e5887c20528b07288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:57:da:9e:03:7f:8b:a6:20:d9:f1:f4:01:
                    93:48:62:dd:30:0b:29:37:0b:2e:40:29:b6:71:b1:
                    eb:1b:4c:79:49:a3:71:d7:66:f4:c3:54:a7:cb:50:
                    ab:ec:8a:2d:59:b8:ce:2f:c4:3e:7f:b8:3a:dc:03:
                    d1:ba:3c:3e:58:a2:10:fa:7b:8d:e5:ca:bf:14:c1:
                    19:c0:cd:80:d1:46:f4:de:2d:71:92:70:51:8c:fc:
                    d8:a7:51:68:11:07:1f:86:e5:1e:7c:f6:ca:c7:65:
                    23:0b:a0:f8:ad:24:d9:15:9d:3f:d6:43:0c:ee:76:
                    5c:7a:53:47:2d:a4:38:8c:d7:ce:dc:e1:6f:d2:c1:
                    ef:44:6e:0e:1e:de:f9:b4:11:3b:33:b6:84:a7:45:
                    ef:47:25:49:ed:77:21:b8:22:ec:9e:39:bf:c3:a9:
                    1b:4f:e7:2b:fd:1e:2c:5a:0a:95:c4:c4:5d:e2:9b:
                    18:b0:db:2e:29:cb:3c:cf:c9:3b:b3:91:1d:0f:55:
                    86:1f:52:6a:a9:b9:ce:8f:af:b2:59:93:57:1f:91:
                    b4:04:2b:de:8a:f8:78:e3:57:a3:dd:c6:21:82:87:
                    b0:b2:a8:59:c2:8c:f8:34:52:c5:2e:ad:23:dd:28:
                    f7:61:da:73:ce:d5:10:e5:92:3e:93:1f:0b:30:54:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:61:62:5E:A1:75:D1:A7:DF:82:11:0E:58:87:C2:05:28:B0:72:88
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:78:9c:b5:eb:b0:70:13:97:f4:2c:f4:e6:6d:f4:7a:fe:fd:
         57:b6:8e:f9:d9:f9:88:48:2f:7f:3c:f0:0b:b9:3b:de:e6:ca:
         18:b4:cc:d9:f6:37:ee:c4:4b:f5:e8:2e:f1:f1:54:1d:9f:56:
         bb:dc:3a:80:3e:bc:c3:15:5c:24:d8:9a:ea:01:cf:68:cd:32:
         6c:c0:10:dc:da:de:0a:9b:6a:5c:aa:d6:fa:93:8c:aa:cf:0d:
         68:ff:6c:4c:8c:f3:c4:cd:ad:80:46:a5:75:01:f0:cd:fd:51:
         e7:e0:f3:3a:74:65:1e:e7:ce:fd:b5:22:28:60:a8:a3:76:ca:
         92:8f:ca:3d:77:65:af:12:1d:01:13:9c:61:ab:68:db:84:fe:
         07:3f:13:d8:6d:07:3d:7d:e1:c8:58:f7:d9:f8:55:18:d0:f6:
         76:91:e8:b7:7d:10:7e:19:14:8c:20:de:6a:bc:bd:a0:be:ff:
         4a:34:a9:bc:41:d6:b0:00:3d:b0:8c:59:f3:83:67:86:52:69:
         b2:27:7f:4a:07:46:73:50:54:30:b3:c5:8e:60:99:c4:f8:0c:
         57:71:8d:ca:c8:4b:8f:cd:84:59:bd:10:e0:2a:e5:5e:b1:57:
         3e:6d:9d:7f:ba:e0:64:d0:98:a2:d4:50:70:de:d4:09:b0:29:
         6b:c9:cf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:02:15 2026 by rpki-client