Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File:                     WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier:          uybsQ94aWKs6dwelSGWNuu0imxJp7agNqmOOPQvESlw=
Subject key identifier:   12:04:C7:02:EF:73:13:6B:69:4F:23:4D:BC:6C:6F:E5:D3:98:D4:17
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer:       /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial:       019E1ED9E415400CEC8A0170B22592B9EC1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 01:00:56 +0000
Manifest this update:     Wed 13 May 2026 01:00:56 +0000
Manifest next update:     Thu 14 May 2026 01:00:56 +0000
Files and hashes:         1: MbmOe617Beb8ehTTf8MQ_smqn_o.roa (hash: 1oDwnPrpmz2JYgXg/Xbn/cWn31YRvP1U3oEbkfTev+U=)
                          2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: 88OhDopLmbLN6AYZFVl/gJ9Gb/Rjgp1nvKk/5jlrfDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:e4:15:40:0c:ec:8a:01:70:b2:25:92:b9:ec:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
        Validity
            Not Before: May 13 01:00:56 2026 GMT
            Not After : May 14 01:00:56 2026 GMT
        Subject: CN=1204c702ef73136b694f234dbc6c6fe5d398d417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:af:f7:f2:7b:33:b6:1a:76:49:fa:f1:cc:
                    e5:cd:0e:16:b6:b3:69:fc:ca:12:e0:08:cd:94:25:
                    1b:e3:db:0b:dd:bc:db:81:a7:cc:01:b6:8a:e8:8f:
                    8f:36:13:23:f8:d1:94:be:a5:56:80:66:8b:a3:9f:
                    77:03:6a:67:5a:70:81:b5:6b:83:86:38:c2:e4:5e:
                    37:80:60:41:c2:5c:f4:70:eb:dd:d6:77:7a:d5:99:
                    76:c6:92:86:f8:63:24:70:58:79:80:61:75:75:e8:
                    c6:27:ca:2c:ca:79:9a:54:a4:db:83:ee:4a:75:08:
                    d5:0c:69:ef:f8:07:e2:4b:0e:a8:ee:38:89:75:47:
                    d2:35:4c:91:13:e6:d3:20:57:f2:96:f7:dd:4c:03:
                    cc:c6:a7:de:ad:8b:90:9f:70:26:0c:b1:d9:57:4a:
                    6d:2a:dd:d9:ad:cf:56:14:34:3d:03:bd:77:51:1f:
                    2c:aa:c5:19:b6:e4:92:ef:dc:7d:a6:7f:18:40:96:
                    66:04:6e:fc:28:10:ba:86:b7:f3:b1:23:21:39:87:
                    41:53:e6:0d:73:ed:2b:c5:64:d4:3f:3c:83:11:e5:
                    6f:ec:aa:6d:62:64:17:73:48:80:53:5c:a0:75:95:
                    e9:07:1f:26:63:cb:ba:05:23:d2:39:73:a8:c8:bd:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:04:C7:02:EF:73:13:6B:69:4F:23:4D:BC:6C:6F:E5:D3:98:D4:17
            X509v3 Authority Key Identifier:
                keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:83:a2:d2:dd:cf:90:3d:96:64:fa:7b:63:3a:f2:7c:28:d0:
         f4:35:65:97:d1:2a:51:d5:59:fa:bc:01:3b:48:06:6a:e9:ff:
         d1:21:1e:90:c3:11:75:59:00:17:64:81:82:64:01:e8:cf:af:
         78:6d:28:21:01:ad:63:5e:fd:7f:35:84:78:3e:54:84:66:fc:
         79:21:58:46:97:be:15:13:9d:72:d4:e0:d9:38:51:73:e6:bf:
         ed:0e:a7:d3:da:4f:28:fe:39:82:fd:75:8b:11:5e:ec:4d:c7:
         bf:50:da:d5:ce:15:44:fe:93:7f:81:3a:ae:41:62:a4:89:0b:
         8e:42:25:ea:0d:98:c4:58:ef:51:7e:be:7a:c0:58:14:d7:fa:
         1b:83:99:d5:0d:f6:05:2c:36:fa:c1:5c:bd:08:69:1d:a2:4b:
         b6:bf:40:0c:a8:70:12:e5:4c:e2:49:9f:1e:35:69:ea:99:bf:
         ed:44:92:42:98:08:29:20:83:aa:2e:10:c1:7a:b5:cb:c5:f7:
         63:33:55:9c:30:03:5b:7e:40:9b:a7:8b:96:81:bf:8e:48:d8:
         d0:b3:15:ac:e7:8d:b8:e4:6c:e9:1a:db:75:c3:61:4f:58:16:
         d2:62:85:52:f6:b6:10:1c:bf:f6:ea:75:07:fb:3a:5f:3b:cf:
         98:50:1e:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2eQVQAzsigFwsiWSuewdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NzNiNTk4NTUwZGY1YmZkYmM5OWE3YTFlMzk2YzM0OTVi
ZGE4M2IwHhcNMjYwNTEzMDEwMDU2WhcNMjYwNTE0MDEwMDU2WjAzMTEwLwYDVQQD
EygxMjA0YzcwMmVmNzMxMzZiNjk0ZjIzNGRiYzZjNmZlNWQzOThkNDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumGv9/J7M7Yadkn68czlzQ4WtrNp
/MoS4AjNlCUb49sL3bzbgafMAbaK6I+PNhMj+NGUvqVWgGaLo593A2pnWnCBtWuD
hjjC5F43gGBBwlz0cOvd1nd61Zl2xpKG+GMkcFh5gGF1dejGJ8osynmaVKTbg+5K
dQjVDGnv+AfiSw6o7jiJdUfSNUyRE+bTIFfylvfdTAPMxqferYuQn3AmDLHZV0pt
Kt3Zrc9WFDQ9A713UR8sqsUZtuSS79x9pn8YQJZmBG78KBC6hrfzsSMhOYdBU+YN
c+0rxWTUPzyDEeVv7KptYmQXc0iAU1ygdZXpBx8mY8u6BSPSOXOoyL1ewQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIExwLvcxNraU8jTbxsb+XTmNQXMB8GA1UdIwQY
MBaAFFhztZhVDfW/28maeh45bDSVvag7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWIt
MTc2OWQxOTk0ZGY2LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWItMTc2OWQxOTk0ZGY2
LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYOi0t3P
kD2WZPp7YzryfCjQ9DVll9EqUdVZ+rwBO0gGaun/0SEekMMRdVkAF2SBgmQB6M+v
eG0oIQGtY179fzWEeD5UhGb8eSFYRpe+FROdctTg2ThRc+a/7Q6n09pPKP45gv11
ixFe7E3Hv1Da1c4VRP6Tf4E6rkFipIkLjkIl6g2YxFjvUX6+esBYFNf6G4OZ1Q32
BSw2+sFcvQhpHaJLtr9ADKhwEuVM4kmfHjVp6pm/7USSQpgIKSCDqi4QwXq1y8X3
YzNVnDADW35Am6eLloG/jkjY0LMVrOeNuORs6RrbdcNhT1gW0mKFUva2EBy/9up1
B/s6XzvPmFAeYg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:00:59 2026 by rpki-client