Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
File:                     2yOWhUCfZLocOlSo7xQckk5x2JI.mft (raw, json)
Hash identifier:          bcS8xPuFROlPcM4vKJGtLf5PRx11iXbgYX22hTtVM2g=
Subject key identifier:   19:5F:26:DE:30:74:22:6C:10:6F:B9:3D:14:04:D9:D8:40:C7:7F:F1
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Certificate issuer:       /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial:       019E1D9098C4D1D8C3E385A4DDC3FE2D481F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
Manifest number:          1913
Signing time:             Tue 12 May 2026 19:01:15 +0000
Manifest this update:     Tue 12 May 2026 19:01:15 +0000
Manifest next update:     Wed 13 May 2026 19:01:15 +0000
Files and hashes:         1: 2yOWhUCfZLocOlSo7xQckk5x2JI.crl (hash: UJMeR5PaZ95dbJdHihKvCeKabdQo2Ny0c9FiCeSYAzc=)
                          2: NCNcQSJc0TGzJY4u8AfMXCbg0RE.roa (hash: olrbYNRVZ37d5DGlOqhZmdOWpkC0qMK5uUX2T/dHnwk=)
                          3: NWPNhzQpbb1pWfOR8Do4Rk33ISE.roa (hash: zQ014lIcxxnh0W92J1yApdSlVAvsQefsim3FPRGCxsw=)
                          4: S-F0eq4A_ozaGKmyidwMC5Jy5Ro.roa (hash: x3y+oF+ZdUAZ9Uf6wr7xaiGLxbD/kDc2LpvrGJEYeAM=)
                          5: oDRJrLEWIwB2bQIN3VSRFVmzPEs.roa (hash: g0N6pLY+sNIqbqq3i2xctEc69tyHJmh/CSOpC4j0mH4=)
                          6: wet2iRU-DIcI7ecq9nOLNfx3URM.roa (hash: ukbv/ID6Q3IjhclCaom/PoiMdbvmxstujbtE/kfKRtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:98:c4:d1:d8:c3:e3:85:a4:dd:c3:fe:2d:48:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
        Validity
            Not Before: May 12 19:01:15 2026 GMT
            Not After : May 13 19:01:15 2026 GMT
        Subject: CN=195f26de3074226c106fb93d1404d9d840c77ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:78:94:61:69:7a:0e:51:c3:b9:94:fa:ad:04:
                    21:d3:d6:19:e9:76:06:b2:3e:76:9f:f9:0d:3f:55:
                    d2:b1:78:c2:a6:6d:90:78:77:b0:fc:72:e6:31:07:
                    d8:cb:e5:be:4d:44:d1:2e:7d:d6:93:30:a3:ba:a2:
                    93:0b:fb:ff:64:c3:06:b6:b5:05:1d:e6:dc:8d:f8:
                    35:d6:0d:67:76:0e:b7:31:f0:d2:83:9e:f6:cc:12:
                    e9:34:19:f4:be:61:94:b5:b1:c2:51:c6:af:8c:e7:
                    a1:51:0d:e4:b7:65:63:8d:63:73:00:9f:00:35:11:
                    60:b5:81:fd:0e:93:80:a0:92:90:e9:fb:b5:08:37:
                    c2:8c:c7:86:2b:f8:52:ed:78:a5:de:55:fe:e4:8b:
                    b1:30:cc:70:1a:a6:d7:62:99:23:82:1f:f2:1b:c0:
                    d9:a2:15:85:72:c4:c6:93:41:15:ae:8c:12:c2:81:
                    2b:57:9c:cc:55:33:54:97:65:b3:be:fc:b4:f9:fa:
                    71:85:e5:10:cd:eb:d2:f6:c3:d5:1c:07:dd:f6:79:
                    fd:5a:0c:12:1c:44:45:f9:4d:cb:3f:6d:ea:76:e9:
                    af:d3:3f:00:1d:99:05:f7:d7:a1:60:14:34:4c:31:
                    c6:6d:4d:60:5f:fd:a3:32:1b:bb:0f:7d:74:1f:75:
                    e6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5F:26:DE:30:74:22:6C:10:6F:B9:3D:14:04:D9:D8:40:C7:7F:F1
            X509v3 Authority Key Identifier:
                keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:74:95:10:2c:9d:30:c7:ca:4c:fc:c8:7b:ad:ed:65:41:49:
         ad:6b:d8:dd:06:97:55:59:65:c5:c0:1c:fa:7c:d2:b7:23:c1:
         b6:4c:92:b9:5a:35:88:6b:f8:9e:f4:7d:3e:4b:14:a5:8e:66:
         65:6e:91:b6:45:4f:0e:b1:fe:72:02:44:7d:c2:aa:a0:32:01:
         4f:da:e6:8a:5c:22:a2:4c:38:e9:43:9d:cd:a8:f1:2c:05:36:
         5a:f0:7c:b6:a5:4c:e1:de:98:07:34:eb:f1:63:ca:ec:49:c1:
         dc:d8:93:ae:f1:57:f7:9a:0d:26:91:77:82:bb:c8:40:74:31:
         40:1a:06:af:72:e6:04:cc:01:0c:37:5b:31:fe:84:cb:e5:99:
         22:12:25:c2:56:9c:98:9d:bf:b5:d3:09:4d:4f:0f:83:12:af:
         0d:f2:3b:7a:66:a5:7d:bf:df:1d:2a:9d:a5:b5:5e:cc:68:c9:
         30:55:ff:8c:38:08:f0:4c:f7:3d:0f:97:6f:3f:67:35:a4:60:
         9e:22:83:0a:1f:19:48:cf:fa:29:5b:d1:64:a0:67:ec:6f:73:
         55:4a:66:ce:96:4a:b3:12:d5:6d:12:58:00:ae:63:de:b5:8f:
         08:8a:bb:a5:c4:07:13:01:d2:a8:53:0b:80:3b:b3:12:92:4b:
         7b:0b:da:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkJjE0djD44Wk3cP+LUgfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMjM5Njg1NDA5ZjY0YmExYzNhNTRhOGVmMTQxYzkyNGU3
MWQ4OTIwHhcNMjYwNTEyMTkwMTE1WhcNMjYwNTEzMTkwMTE1WjAzMTEwLwYDVQQD
EygxOTVmMjZkZTMwNzQyMjZjMTA2ZmI5M2QxNDA0ZDlkODQwYzc3ZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHiUYWl6DlHDuZT6rQQh09YZ6XYG
sj52n/kNP1XSsXjCpm2QeHew/HLmMQfYy+W+TUTRLn3WkzCjuqKTC/v/ZMMGtrUF
Hebcjfg11g1ndg63MfDSg572zBLpNBn0vmGUtbHCUcavjOehUQ3kt2VjjWNzAJ8A
NRFgtYH9DpOAoJKQ6fu1CDfCjMeGK/hS7Xil3lX+5IuxMMxwGqbXYpkjgh/yG8DZ
ohWFcsTGk0EVrowSwoErV5zMVTNUl2Wzvvy0+fpxheUQzevS9sPVHAfd9nn9WgwS
HERF+U3LP23qdumv0z8AHZkF99ehYBQ0TDHGbU1gX/2jMhu7D310H3Xm5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlfJt4wdCJsEG+5PRQE2dhAx3/xMB8GA1UdIwQY
MBaAFNsjloVAn2S6HDpUqO8UHJJOcdiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmIt
MmVmNDQ3ZTFiMDhjLzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmItMmVmNDQ3ZTFiMDhj
LzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHSVECyd
MMfKTPzIe63tZUFJrWvY3QaXVVllxcAc+nzStyPBtkySuVo1iGv4nvR9PksUpY5m
ZW6RtkVPDrH+cgJEfcKqoDIBT9rmilwiokw46UOdzajxLAU2WvB8tqVM4d6YBzTr
8WPK7EnB3NiTrvFX95oNJpF3grvIQHQxQBoGr3LmBMwBDDdbMf6Ey+WZIhIlwlac
mJ2/tdMJTU8PgxKvDfI7emalfb/fHSqdpbVezGjJMFX/jDgI8Ez3PQ+Xbz9nNaRg
niKDCh8ZSM/6KVvRZKBn7G9zVUpmzpZKsxLVbRJYAK5j3rWPCIq7pcQHEwHSqFML
gDuzEpJLewvajw==
-----END CERTIFICATE-----
Generated at Wed May 13 00:35:55 2026 by rpki-client