Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
File:                     rF6twAMoUCNv7nVutY-_BeExa14.mft (raw, json)
Hash identifier:          2ZIAs+0pQMDTpiKWLihNvDBe5r+HMD6wN+HGoXQJveA=
Subject key identifier:   26:BA:DA:57:38:78:8E:2B:35:30:DE:0D:A7:D7:27:24:B1:12:D2:B7
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Certificate issuer:       /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial:       019E1E3606E5363FBFDFE5B09D4654EE7640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
Manifest number:          190B
Signing time:             Tue 12 May 2026 22:01:57 +0000
Manifest this update:     Tue 12 May 2026 22:01:57 +0000
Manifest next update:     Wed 13 May 2026 22:01:57 +0000
Files and hashes:         1: HtxMXqqhzKqnM-81Q366LSa5VRM.roa (hash: lOeWJNKuBfP6Er8Y1VwMR1oQUbvjX1dy4GlVvc3GRBU=)
                          2: SmT1BUT7BtnuZLJ6_6jIBBoQ70s.roa (hash: RYBd7FR6OZyKgfNBGxNgxiTa308oNZjB95Z8XVN3KKA=)
                          3: rF6twAMoUCNv7nVutY-_BeExa14.crl (hash: fVnCTYK7oPjpfHe6DNsf6Cq2I163B5B0tvFzPbFSbHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:36:06:e5:36:3f:bf:df:e5:b0:9d:46:54:ee:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
        Validity
            Not Before: May 12 22:01:57 2026 GMT
            Not After : May 13 22:01:57 2026 GMT
        Subject: CN=26bada5738788e2b3530de0da7d72724b112d2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ef:52:70:45:e4:48:3d:eb:d5:fb:46:b4:2d:
                    9b:78:d8:8f:16:89:d3:89:38:8f:59:37:71:bd:c1:
                    bb:f6:b3:42:9d:c8:ed:1d:3b:8e:d9:f7:9d:e8:4a:
                    92:3c:39:45:71:6c:10:11:9c:45:77:07:3f:ba:c6:
                    b4:cf:a7:be:60:71:e3:17:6a:ce:36:93:46:e2:c5:
                    a7:fc:2f:6f:e7:fe:d0:49:af:e1:cd:73:b4:ca:19:
                    83:49:9c:6a:96:15:e0:72:fb:02:4c:00:45:01:dd:
                    4b:d0:ae:ce:8e:db:df:b0:3e:bf:ee:4f:ba:e4:e2:
                    d8:7b:da:b7:20:ae:08:f6:05:b7:6b:c0:b8:c4:1e:
                    d0:32:19:d8:fc:60:4f:cf:0a:b9:5e:aa:b9:ad:04:
                    21:c5:b8:f5:8d:74:6e:7d:7f:3e:2b:ee:75:2f:35:
                    5a:14:d0:65:81:ff:6c:17:0a:24:ed:e6:bc:f2:18:
                    d3:b7:cd:58:ba:25:d8:2a:de:d2:5c:8d:09:29:1d:
                    15:0d:b3:a3:18:8e:f3:41:67:42:c5:6e:7b:b8:75:
                    6e:0d:47:30:14:38:9a:b7:28:7c:af:b0:3f:00:ad:
                    f2:7f:2c:7d:c9:dd:e8:b9:08:d7:24:d0:42:ca:6d:
                    21:fd:d1:64:dd:4f:aa:34:81:db:86:9c:b7:7b:5b:
                    71:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BA:DA:57:38:78:8E:2B:35:30:DE:0D:A7:D7:27:24:B1:12:D2:B7
            X509v3 Authority Key Identifier:
                keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:90:9d:3b:c6:ce:55:c3:b7:34:e9:ab:66:dd:da:8a:54:d9:
         5b:f4:11:11:79:07:37:0b:1e:7f:a8:98:f1:34:17:5d:4d:47:
         88:d7:4c:7b:01:ea:58:68:40:d2:e8:33:1f:d4:19:c0:39:bc:
         55:25:af:15:f0:14:de:4f:b9:a4:c2:2e:be:21:d1:e7:2d:6e:
         d2:7b:06:26:f2:d3:d6:9a:fb:b1:30:5a:e1:15:7b:85:ed:77:
         33:c0:2c:85:46:be:4f:89:ba:5f:05:5a:63:da:36:23:0e:6f:
         08:52:45:8e:c6:d1:63:1a:6b:2a:28:4f:2f:c9:8b:6f:ae:c8:
         7c:2a:73:0e:23:ad:e3:24:d1:3e:f6:01:a5:d3:82:50:f1:ba:
         b8:b4:37:41:53:39:30:89:0d:9e:b3:2b:f3:7c:36:f5:e0:d0:
         11:76:d7:d5:2c:72:bd:ff:55:8f:87:b2:b7:32:77:65:d9:69:
         f1:fa:cd:c9:45:65:72:9d:ea:8a:be:d7:0e:b6:48:42:d8:02:
         42:c7:dd:47:b7:8c:6f:bc:75:6e:f6:40:e5:69:3d:1d:d6:36:
         45:45:03:2c:bc:44:65:b2:2e:f3:15:d3:97:7f:c3:7a:2f:ba:
         23:0a:86:0a:70:fa:67:98:eb:90:8a:28:99:4e:14:8c:dd:18:
         fb:aa:8c:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNgblNj+/3+WwnUZU7nZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNWVhZGMwMDMyODUwMjM2ZmVlNzU2ZWI1OGZiZjA1ZTEz
MTZiNWUwHhcNMjYwNTEyMjIwMTU3WhcNMjYwNTEzMjIwMTU3WjAzMTEwLwYDVQQD
EygyNmJhZGE1NzM4Nzg4ZTJiMzUzMGRlMGRhN2Q3MjcyNGIxMTJkMmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO9ScEXkSD3r1ftGtC2beNiPFonT
iTiPWTdxvcG79rNCncjtHTuO2fed6EqSPDlFcWwQEZxFdwc/usa0z6e+YHHjF2rO
NpNG4sWn/C9v5/7QSa/hzXO0yhmDSZxqlhXgcvsCTABFAd1L0K7OjtvfsD6/7k+6
5OLYe9q3IK4I9gW3a8C4xB7QMhnY/GBPzwq5Xqq5rQQhxbj1jXRufX8+K+51LzVa
FNBlgf9sFwok7ea88hjTt81YuiXYKt7SXI0JKR0VDbOjGI7zQWdCxW57uHVuDUcw
FDiatyh8r7A/AK3yfyx9yd3ouQjXJNBCym0h/dFk3U+qNIHbhpy3e1txEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCa62lc4eI4rNTDeDafXJySxEtK3MB8GA1UdIwQY
MBaAFKxercADKFAjb+51brWPvwXhMWteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckY2dHdBTW9VQ052N25WdXRZLV9CZUV4YTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81Mjk3NWYtZmViMi00MzNiLWIyZGMt
YzIzOGNlNDgxN2RiLzEvckY2dHdBTW9VQ052N25WdXRZLV9CZUV4YTE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81Mjk3NWYtZmViMi00MzNiLWIyZGMtYzIzOGNlNDgxN2Ri
LzEvckY2dHdBTW9VQ052N25WdXRZLV9CZUV4YTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspCdO8bO
VcO3NOmrZt3ailTZW/QREXkHNwsef6iY8TQXXU1HiNdMewHqWGhA0ugzH9QZwDm8
VSWvFfAU3k+5pMIuviHR5y1u0nsGJvLT1pr7sTBa4RV7he13M8AshUa+T4m6XwVa
Y9o2Iw5vCFJFjsbRYxprKihPL8mLb67IfCpzDiOt4yTRPvYBpdOCUPG6uLQ3QVM5
MIkNnrMr83w29eDQEXbX1Sxyvf9Vj4eytzJ3Zdlp8frNyUVlcp3qir7XDrZIQtgC
QsfdR7eMb7x1bvZA5Wk9HdY2RUUDLLxEZbIu8xXTl3/Dei+6IwqGCnD6Z5jrkIoo
mU4UjN0Y+6qM3w==
-----END CERTIFICATE-----
Generated at Wed May 13 03:35:28 2026 by rpki-client