Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
File:                     Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json)
Hash identifier:          8H36cMaPFQj6E26177EKuYLYf7XxP5W2V8lmWqlrdcI=
Subject key identifier:   9D:71:DE:25:E4:94:01:1B:CC:CA:72:0D:1F:E0:19:80:37:DB:D5:99
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Certificate issuer:       /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial:       019E1E6C0E855572AECDB2B0B492D01BBB2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
Manifest number:          1957
Signing time:             Tue 12 May 2026 23:00:58 +0000
Manifest this update:     Tue 12 May 2026 23:00:58 +0000
Manifest next update:     Wed 13 May 2026 23:00:58 +0000
Files and hashes:         1: 2X2Ba8rgbouM32gnizEyTUGgONU.roa (hash: /S0uaILIP04CzsCMDO3CxuQ/dGQk0LoPnR9uswe+Dno=)
                          2: 9wt7egiytAgLV-HJ724fAGnBwJ8.roa (hash: d70abRYgmHlQi84Lm85nWTT0qKD3prT4KcDMh8RLD9s=)
                          3: BgYgNXUiTeu31n67bX2V90cAvTI.roa (hash: 0v54WM21W+/w7a0Su0L6xDmLThFZAOM3uY/lMR5ZoI4=)
                          4: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: X9olKaW3US+/W84MD+sG908B11Zuc3kkzWeOyV7dMRE=)
                          5: eqjRIQl2tcvdRn0WGpqecEf39BE.roa (hash: wo1ZcMLEQzOlMVuGPZQ1qvLlzhW3e3KGV8eqOLVncZU=)
                          6: r4LSjefpPXh2NBWzmzML-YHCiVQ.roa (hash: 4cwAGYLXFcCvXhQaffPoqSeBEp85Obiw6bTDloA68I0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:0e:85:55:72:ae:cd:b2:b0:b4:92:d0:1b:bb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
        Validity
            Not Before: May 12 23:00:58 2026 GMT
            Not After : May 13 23:00:58 2026 GMT
        Subject: CN=9d71de25e494011bccca720d1fe0198037dbd599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:96:e5:72:93:ff:7e:0d:d3:f0:8f:b9:8e:
                    ac:e5:df:80:10:fa:b8:38:9d:af:10:0a:82:dc:46:
                    69:4d:00:a2:c1:08:41:92:00:b9:77:40:0c:86:71:
                    42:d8:84:e9:a6:fc:96:56:7d:a5:c2:27:d5:00:b2:
                    8b:97:bc:1a:64:62:71:64:af:3e:ed:6d:c0:ed:bd:
                    09:84:ba:db:aa:57:80:ba:a4:39:bf:4e:69:20:f0:
                    35:6d:bb:1b:b9:73:84:43:27:3c:41:a3:31:75:09:
                    f2:63:73:bf:34:d9:ca:f7:33:1c:f1:6d:3a:8e:ed:
                    1d:60:72:ea:d3:78:41:8f:7a:91:61:4f:b0:3e:0b:
                    fb:23:76:f3:ce:5a:ae:85:21:ab:2e:6c:f2:42:7f:
                    bf:ce:47:de:92:49:1c:6a:fb:80:ac:8e:23:58:a3:
                    06:86:ee:59:35:a9:be:b1:0c:0d:d3:47:40:75:67:
                    e3:ef:de:84:05:64:4f:f5:42:28:68:2e:63:6c:e8:
                    64:a9:b4:d5:65:d5:82:76:a9:7f:84:cd:38:25:56:
                    71:37:18:ef:92:08:0b:2d:f8:79:5f:9d:b8:11:15:
                    5f:26:97:9d:a7:6d:63:de:82:c0:39:c4:28:3b:f0:
                    7c:fd:cc:53:e9:67:fe:1f:62:ec:8a:70:b2:36:76:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:71:DE:25:E4:94:01:1B:CC:CA:72:0D:1F:E0:19:80:37:DB:D5:99
            X509v3 Authority Key Identifier:
                keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2b:61:d1:9f:1d:f0:fd:cf:1e:28:5a:82:f4:80:b3:20:57:
         fc:86:a7:20:56:b7:60:ae:2e:90:a3:10:2c:14:99:81:50:ef:
         75:47:0e:70:ae:b1:60:ea:d0:71:4b:81:ea:09:6e:7f:7b:05:
         c3:5b:bd:c9:61:14:ab:23:a0:5e:35:b6:73:aa:33:40:bf:b3:
         a4:f4:78:47:9c:24:f7:89:d6:cf:fd:61:cf:72:6d:85:09:01:
         22:af:53:76:45:4f:f4:a1:ac:dd:fe:9a:0d:6a:27:7d:fb:0a:
         5a:e3:f9:e9:fa:80:d5:12:20:f1:45:38:de:de:95:9f:f3:a2:
         97:54:2b:c7:74:d7:4e:55:72:3a:69:a5:8e:09:e7:50:70:b4:
         ee:a5:18:6f:74:fa:8c:7a:a6:b6:24:81:a1:30:fc:aa:87:a9:
         ec:8a:29:21:64:70:6f:22:2a:14:89:a1:ac:e6:c1:46:bc:5a:
         01:bc:7f:df:66:c6:44:8c:2d:e5:ee:10:9b:db:5d:84:0e:bc:
         34:8c:e7:05:7f:ba:fd:bb:c9:74:42:73:fb:90:25:b3:cb:23:
         1d:1b:9d:51:21:64:7e:28:12:9c:f6:76:d5:6e:5f:c0:e8:62:
         8c:df:08:97:78:23:4c:fb:0b:b2:34:5d:9f:3c:5c:58:b4:8b:
         82:32:a5:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebA6FVXKuzbKwtJLQG7svMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2
Njk0NmYwHhcNMjYwNTEyMjMwMDU4WhcNMjYwNTEzMjMwMDU4WjAzMTEwLwYDVQQD
Eyg5ZDcxZGUyNWU0OTQwMTFiY2NjYTcyMGQxZmUwMTk4MDM3ZGJkNTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPCW5XKT/34N0/CPuY6s5d+AEPq4
OJ2vEAqC3EZpTQCiwQhBkgC5d0AMhnFC2ITppvyWVn2lwifVALKLl7waZGJxZK8+
7W3A7b0JhLrbqleAuqQ5v05pIPA1bbsbuXOEQyc8QaMxdQnyY3O/NNnK9zMc8W06
ju0dYHLq03hBj3qRYU+wPgv7I3bzzlquhSGrLmzyQn+/zkfekkkcavuArI4jWKMG
hu5ZNam+sQwN00dAdWfj796EBWRP9UIoaC5jbOhkqbTVZdWCdql/hM04JVZxNxjv
kggLLfh5X524ERVfJpedp21j3oLAOcQoO/B8/cxT6Wf+H2LsinCyNnbFEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1x3iXklAEbzMpyDR/gGYA329WZMB8GA1UdIwQY
MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct
MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl
LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALyth0Z8d
8P3PHihagvSAsyBX/IanIFa3YK4ukKMQLBSZgVDvdUcOcK6xYOrQcUuB6gluf3sF
w1u9yWEUqyOgXjW2c6ozQL+zpPR4R5wk94nWz/1hz3JthQkBIq9TdkVP9KGs3f6a
DWonffsKWuP56fqA1RIg8UU43t6Vn/Oil1Qrx3TXTlVyOmmljgnnUHC07qUYb3T6
jHqmtiSBoTD8qoep7IopIWRwbyIqFImhrObBRrxaAbx/32bGRIwt5e4Qm9tdhA68
NIznBX+6/bvJdEJz+5Als8sjHRudUSFkfigSnPZ21W5fwOhijN8Il3gjTPsLsjRd
nzxcWLSLgjKlMg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:41:33 2026 by rpki-client