Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
File:                     94ItRZflST0VF4v7EOaEHdF-WJc.mft (raw, json)
Hash identifier:          HJbE3bnD88Hc3keOjPvTx9fSmnYFj1PxYly8JCLNcGM=
Subject key identifier:   91:49:AF:26:CC:DB:37:D0:C3:B2:78:34:5B:AD:49:4C:C4:57:BA:E4
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Certificate issuer:       /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial:       019E1D232FCA5AE156485DD56D164B5E5251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
Manifest number:          190B
Signing time:             Tue 12 May 2026 17:01:45 +0000
Manifest this update:     Tue 12 May 2026 17:01:45 +0000
Manifest next update:     Wed 13 May 2026 17:01:45 +0000
Files and hashes:         1: 94ItRZflST0VF4v7EOaEHdF-WJc.crl (hash: vpT/yfGc9QET/uhE03kg7rWJK8iuW/tMH1F5x08fkRk=)
                          2: Ooaqx-AaUuIu05bcvjpYwUT3gg0.roa (hash: WYWgX4Kkm4uSctkElEdv5T7C0cdbRdRsvjVMLWI0Es0=)
                          3: ccNKaJaHrf3w7WRgXmlLGSGlh3g.roa (hash: GNXHKw8JOl4x62WkohXxkLR6V3oFi4zgRDQxr+0jQ1k=)
                          4: eM23ZnD8jpZVPByDqpueUzr7VuM.roa (hash: XpFVafOc5evuKnLSP6z1Ow2v+VF3PM8B+n8NEsUA1rw=)
                          5: tcsP5brAEAunOOZmw7uzUCdknZY.roa (hash: 2QWWwqVUcIdmiuZeMh2Xyt6tD8Eiy3oPwgkIaE2T/X0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:2f:ca:5a:e1:56:48:5d:d5:6d:16:4b:5e:52:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
        Validity
            Not Before: May 12 17:01:45 2026 GMT
            Not After : May 13 17:01:45 2026 GMT
        Subject: CN=9149af26ccdb37d0c3b278345bad494cc457bae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cd:94:e1:80:80:7b:8a:ba:ee:44:f8:e6:f8:
                    96:01:44:2a:fd:7b:85:62:21:1c:00:70:bb:3f:a3:
                    12:cb:25:5a:ba:03:3c:4b:46:46:c5:27:0a:03:d9:
                    51:e8:ed:ef:ab:fc:b7:bb:52:98:cb:d1:f3:ec:5f:
                    fe:8b:c0:96:34:c4:42:85:c5:6b:1c:b8:84:6d:7d:
                    1e:0f:83:8c:21:1e:a7:c5:0d:88:bc:94:f4:13:c8:
                    82:e1:67:cb:b9:dc:9c:91:ab:5a:80:5a:4e:3b:c5:
                    cf:8f:65:4c:3b:86:b7:48:6b:51:6f:8c:d0:26:0e:
                    8a:ab:b1:f2:6f:7e:fd:6e:20:5b:d0:62:36:eb:ee:
                    7c:b2:6f:f0:e5:5c:48:4a:81:83:38:38:e2:59:9a:
                    dd:37:35:d8:e4:db:8e:4c:67:2e:b9:65:5e:cb:6d:
                    45:dd:0d:c2:f7:5a:27:56:f2:02:f2:ca:d1:b7:c3:
                    92:45:bf:08:0a:72:23:00:77:2f:47:b3:6f:85:13:
                    7d:64:8c:64:cd:9b:f5:3b:aa:e9:25:2d:24:5a:5f:
                    08:33:33:51:fc:c5:c6:b7:fd:0a:9b:ce:63:0e:db:
                    9e:4c:d6:55:af:bd:0a:c9:20:7e:1d:32:f2:91:5a:
                    76:2d:9f:02:0e:81:c3:14:15:27:9b:ac:0b:a5:11:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:49:AF:26:CC:DB:37:D0:C3:B2:78:34:5B:AD:49:4C:C4:57:BA:E4
            X509v3 Authority Key Identifier:
                keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2e:d7:01:8a:25:35:35:21:55:17:09:02:02:12:81:93:ea:
         a5:46:11:2e:ae:03:de:44:e8:3b:7a:41:de:fd:9c:0c:68:67:
         73:7f:12:78:16:85:29:3b:40:82:12:eb:bf:f9:e5:23:74:bc:
         62:95:26:d4:5f:9f:72:39:c0:0d:f8:14:fd:69:48:1a:92:0e:
         0f:29:15:a1:31:22:2a:10:0e:e3:fe:74:90:9a:db:d0:0e:b2:
         a8:5b:9e:dc:98:84:4e:b6:be:60:ff:43:89:a3:1a:67:ee:0a:
         9e:4c:e6:c9:bd:91:03:61:29:81:bb:9b:22:ff:44:c4:7b:07:
         9d:48:ce:e7:96:31:0c:88:0d:77:69:2f:4b:46:4a:31:73:6c:
         e5:46:7f:34:18:b4:5f:a3:dc:bf:df:a7:1f:72:f4:95:a7:1a:
         96:d7:92:c5:1f:d5:92:c4:35:b2:e4:4a:09:10:62:a9:9e:4f:
         76:e5:55:99:1e:cd:18:08:91:20:80:2e:c0:d0:27:0a:41:bc:
         25:ce:1b:98:e5:f8:62:16:49:32:a9:7b:8c:ba:6d:8b:8a:41:
         5f:83:bd:30:5f:e2:1a:4c:5f:30:18:35:59:1f:ad:2b:00:fa:
         86:64:ae:04:fb:d8:20:ac:ba:a2:1b:31:5d:30:ca:9c:7e:cd:
         e1:1b:0f:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIy/KWuFWSF3VbRZLXlJRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODIyZDQ1OTdlNTQ5M2QxNTE3OGJmYjEwZTY4NDFkZDE3
ZTU4OTcwHhcNMjYwNTEyMTcwMTQ1WhcNMjYwNTEzMTcwMTQ1WjAzMTEwLwYDVQQD
Eyg5MTQ5YWYyNmNjZGIzN2QwYzNiMjc4MzQ1YmFkNDk0Y2M0NTdiYWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s2U4YCAe4q67kT45viWAUQq/XuF
YiEcAHC7P6MSyyVaugM8S0ZGxScKA9lR6O3vq/y3u1KYy9Hz7F/+i8CWNMRChcVr
HLiEbX0eD4OMIR6nxQ2IvJT0E8iC4WfLudyckatagFpOO8XPj2VMO4a3SGtRb4zQ
Jg6Kq7Hyb379biBb0GI26+58sm/w5VxISoGDODjiWZrdNzXY5NuOTGcuuWVey21F
3Q3C91onVvIC8srRt8OSRb8ICnIjAHcvR7NvhRN9ZIxkzZv1O6rpJS0kWl8IMzNR
/MXGt/0Km85jDtueTNZVr70KySB+HTLykVp2LZ8CDoHDFBUnm6wLpRHLKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFJrybM2zfQw7J4NFutSUzEV7rkMB8GA1UdIwQY
MBaAFPeCLUWX5Uk9FReL+xDmhB3RfliXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zMTA4MWEtOGI1YS00OWVjLTkwMzYt
ODYyZTk5OTczZmMzLzEvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zMTA4MWEtOGI1YS00OWVjLTkwMzYtODYyZTk5OTczZmMz
LzEvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlC7XAYol
NTUhVRcJAgISgZPqpUYRLq4D3kToO3pB3v2cDGhnc38SeBaFKTtAghLrv/nlI3S8
YpUm1F+fcjnADfgU/WlIGpIODykVoTEiKhAO4/50kJrb0A6yqFue3JiETra+YP9D
iaMaZ+4Knkzmyb2RA2EpgbubIv9ExHsHnUjO55YxDIgNd2kvS0ZKMXNs5UZ/NBi0
X6Pcv9+nH3L0lacalteSxR/VksQ1suRKCRBiqZ5PduVVmR7NGAiRIIAuwNAnCkG8
Jc4bmOX4YhZJMql7jLpti4pBX4O9MF/iGkxfMBg1WR+tKwD6hmSuBPvYIKy6ohsx
XTDKnH7N4RsPaA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:59:11 2026 by rpki-client