Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File:                     deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier:          sJLw8sP9DbygX0l+ORHqzG5z/ma6KFrVa5JQIJhnVAI=
Subject key identifier:   66:5A:36:E4:F8:79:6E:44:D3:20:10:AA:48:27:0D:C5:D9:CE:BD:A8
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer:       /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial:       019E1DC7AAC8A7BB912C2E009752FFB9027F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number:          1911
Signing time:             Tue 12 May 2026 20:01:24 +0000
Manifest this update:     Tue 12 May 2026 20:01:24 +0000
Manifest next update:     Wed 13 May 2026 20:01:24 +0000
Files and hashes:         1: IKecYpJsyQoCMXhzFQm8qwezc6Q.roa (hash: AyBWoAIIW8QVXSZmJhv+7IehUMdxfXtLu4x8wnOD+Zo=)
                          2: Niz0xaF_UJO5sK6yvy3cMVF07nA.roa (hash: l65DOQXiJc/vw8R7nLx1kl+6tdgkTZuIaNzOHJm95Zo=)
                          3: WFTfI5tspGo4Ss0OCZAL-JGWw3k.roa (hash: ygHs+fWVxGVJnQRLr2/Xp2LQTIWtPolhwTvnQdcJhwg=)
                          4: Wrrx-J8255kGZZQo2Z_lshL_g94.roa (hash: RJwUNDcFiRkR23EOeiZYpldoRJTn3DHSqOqjyT0fbkQ=)
                          5: _RQQ5tVF2eFgG4W622rODRsfodw.roa (hash: tBfa8G6tBLKfwxInkvbCwg+hxTDjAv00awjpszqTn38=)
                          6: cKp2OZnMQ6gfuVdFBIpAAe-tLzE.roa (hash: mbO9zdERKtIWiDiD8x4e0EjpaANpcC71gfDZ39R7GH8=)
                          7: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: BzRjU57Hak6Pcno5GLoAjKKC4KlslUrhOQ1ghnclaEo=)
                          8: p6DmQaVdSnpO0418vCwa-3h5IyU.roa (hash: oLcwvSqddOQ2Ul0V7nGknSGHPS/F0P9Nc73tzvsSSQ4=)
                          9: r2Y6Npuwz2fSFJGlB1IqT0Y2GL8.roa (hash: lnldbd2L1Ux8PYgmjwCpHbxAbqqtYXmXImm+n59vkVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:aa:c8:a7:bb:91:2c:2e:00:97:52:ff:b9:02:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
        Validity
            Not Before: May 12 20:01:24 2026 GMT
            Not After : May 13 20:01:24 2026 GMT
        Subject: CN=665a36e4f8796e44d32010aa48270dc5d9cebda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:56:22:2b:01:0f:db:fc:32:9a:3f:82:53:
                    14:93:18:d8:5c:4a:95:c7:d6:d9:43:e1:42:21:d0:
                    c2:f9:58:ae:71:4e:b1:34:56:94:67:ab:45:2f:81:
                    98:ac:fc:e1:25:56:da:b4:58:48:46:da:de:42:ee:
                    13:4b:95:7a:c0:bb:d0:6a:e0:36:5c:3d:3a:91:71:
                    95:c1:aa:e4:82:bd:e3:89:46:5a:81:31:95:37:64:
                    43:b3:87:06:23:4b:96:d9:75:95:c0:be:c8:2d:31:
                    4c:fd:ef:1f:37:1e:7e:0a:49:c6:97:f5:77:d6:3f:
                    dd:b2:f3:ab:51:c9:2b:35:df:93:d2:85:2b:74:61:
                    0a:25:ed:17:c3:e8:ea:9c:3f:6f:1a:a6:7a:7c:e8:
                    39:00:2e:92:92:c3:bd:a2:a7:8a:05:2b:6c:36:82:
                    f7:c8:c4:f9:e6:ba:dd:17:96:e8:f9:e0:e0:a7:85:
                    46:04:87:e3:26:ec:19:19:02:71:57:ac:a7:aa:8c:
                    5d:47:70:72:e6:b9:1e:fe:51:f1:cc:ac:10:6f:1f:
                    ae:ea:1b:2d:c4:2b:d8:4f:7c:23:35:cc:8f:63:39:
                    7d:9f:10:06:68:74:b1:fe:48:f8:25:7e:b3:a5:86:
                    c9:a4:d2:8c:e2:a1:de:a5:a6:92:5a:7f:11:30:ef:
                    38:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5A:36:E4:F8:79:6E:44:D3:20:10:AA:48:27:0D:C5:D9:CE:BD:A8
            X509v3 Authority Key Identifier:
                keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:94:72:c8:22:53:78:64:6c:76:12:d8:42:a8:8b:2e:f3:59:
         90:85:b6:77:8d:51:99:03:e6:1b:d8:19:6a:5e:38:8f:d0:8f:
         70:1b:d2:d9:de:c3:4b:41:4a:c9:b3:52:02:bb:67:6e:82:b2:
         55:65:fc:80:5b:38:b5:7c:02:87:78:7e:7f:c0:34:1e:71:de:
         b6:84:5e:fb:92:2b:19:8c:d1:54:ce:fe:03:bb:e5:0c:fd:28:
         82:14:a9:4b:00:81:60:a2:c9:77:70:d4:7f:3f:04:17:42:57:
         8f:86:72:ba:04:f1:a1:fa:c5:99:24:bb:d9:eb:87:3e:6c:16:
         fa:9c:cb:09:e0:bb:7d:63:29:cf:99:e3:0c:bf:73:b3:e9:1f:
         26:2d:27:21:2f:9e:b1:ae:68:24:ea:8d:3e:08:8a:87:f3:ed:
         f5:1c:69:8b:0a:d1:56:f6:55:53:b7:e6:a8:7e:bc:ff:c6:3d:
         80:ef:9e:97:e3:eb:2a:a1:c1:73:d9:d8:78:25:3b:0b:e5:c9:
         17:bc:32:88:97:87:4b:00:6f:79:99:11:1d:d5:4b:d1:ae:84:
         17:ea:25:03:c2:a9:31:23:fe:12:bc:20:2f:6f:28:07:3f:a5:
         ad:7e:92:f7:25:a2:8c:fd:4f:dd:74:44:64:85:17:cd:05:18:
         34:b0:86:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx6rIp7uRLC4Al1L/uQJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZTA1YmMyMWIyYTZmMTAzMzcxMWZmY2E2NDkxYzZjMzBj
ZTVhNGEwHhcNMjYwNTEyMjAwMTI0WhcNMjYwNTEzMjAwMTI0WjAzMTEwLwYDVQQD
Eyg2NjVhMzZlNGY4Nzk2ZTQ0ZDMyMDEwYWE0ODI3MGRjNWQ5Y2ViZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl65WIisBD9v8Mpo/glMUkxjYXEqV
x9bZQ+FCIdDC+ViucU6xNFaUZ6tFL4GYrPzhJVbatFhIRtreQu4TS5V6wLvQauA2
XD06kXGVwarkgr3jiUZagTGVN2RDs4cGI0uW2XWVwL7ILTFM/e8fNx5+CknGl/V3
1j/dsvOrUckrNd+T0oUrdGEKJe0Xw+jqnD9vGqZ6fOg5AC6SksO9oqeKBStsNoL3
yMT55rrdF5bo+eDgp4VGBIfjJuwZGQJxV6ynqoxdR3By5rke/lHxzKwQbx+u6hst
xCvYT3wjNcyPYzl9nxAGaHSx/kj4JX6zpYbJpNKM4qHepaaSWn8RMO84FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZaNuT4eW5E0yAQqkgnDcXZzr2oMB8GA1UdIwQY
MBaAFHXgW8IbKm8QM3Ef/KZJHGwwzlpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDct
ZDQ1YWI3ZGYyZGUxLzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDctZDQ1YWI3ZGYyZGUx
LzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5RyyCJT
eGRsdhLYQqiLLvNZkIW2d41RmQPmG9gZal44j9CPcBvS2d7DS0FKybNSArtnboKy
VWX8gFs4tXwCh3h+f8A0HnHetoRe+5IrGYzRVM7+A7vlDP0oghSpSwCBYKLJd3DU
fz8EF0JXj4ZyugTxofrFmSS72euHPmwW+pzLCeC7fWMpz5njDL9zs+kfJi0nIS+e
sa5oJOqNPgiKh/Pt9RxpiwrRVvZVU7fmqH68/8Y9gO+el+PrKqHBc9nYeCU7C+XJ
F7wyiJeHSwBveZkRHdVL0a6EF+olA8KpMSP+ErwgL28oBz+lrX6S9yWijP1P3XRE
ZIUXzQUYNLCGWg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:09:57 2026 by rpki-client