Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File:                     mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier:          5TyhzJg27tG+WZNqXMhXSrZPFUDHR4Y1vbzNlysiUtw=
Subject key identifier:   66:F8:3C:A3:C0:48:FF:4A:1C:AA:42:AC:5C:1B:9C:55:57:F5:BF:AD
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer:       /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial:       019E1E35A30A11EF352E7401E1FD6965B4EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number:          191D
Signing time:             Tue 12 May 2026 22:01:31 +0000
Manifest this update:     Tue 12 May 2026 22:01:31 +0000
Manifest next update:     Wed 13 May 2026 22:01:31 +0000
Files and hashes:         1: I4TuqjOm1C2zDBl84QYwRusdbW4.roa (hash: 6Cy0hcq0lmTjssRip5hhqeI88aZGCGL9orwx2vFNpm0=)
                          2: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: lwGAM8hbS/dv8w5f9qxE0gS9mXtMLPqH2YNTz5inKw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:a3:0a:11:ef:35:2e:74:01:e1:fd:69:65:b4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
        Validity
            Not Before: May 12 22:01:31 2026 GMT
            Not After : May 13 22:01:31 2026 GMT
        Subject: CN=66f83ca3c048ff4a1caa42ac5c1b9c5557f5bfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:d1:dd:5f:84:f1:40:9d:35:3e:26:50:07:
                    60:af:c4:6c:8d:71:81:48:eb:49:85:0d:27:bc:6b:
                    04:89:0e:a6:c0:b4:32:6a:6d:0b:08:16:0d:4e:6b:
                    2f:bd:f8:e2:9d:ba:c0:76:4b:36:6e:e2:85:b5:57:
                    0a:9b:62:d2:59:83:e9:0d:8c:c3:3b:c2:85:9b:a4:
                    22:d8:bf:f5:ec:21:8d:f5:77:b0:a7:82:1b:21:30:
                    22:6e:8a:3f:9d:a1:ab:98:94:a6:c7:ed:0a:cb:ef:
                    a7:ba:23:22:b3:90:1d:f9:dd:8c:1a:18:71:6d:29:
                    8c:5b:c3:5c:e5:a8:60:7f:42:2d:44:a8:6d:4e:07:
                    2f:59:5f:c3:03:5d:ca:db:4b:a1:2c:dd:4a:9c:9f:
                    7c:e9:da:78:2c:cd:ae:3e:37:0a:e5:3b:49:a2:ca:
                    8f:10:7d:40:16:f8:dd:a0:fe:c2:47:a8:9d:7f:27:
                    3f:8e:cb:f8:6b:b0:5f:44:b0:2a:4c:48:14:79:40:
                    09:76:00:1e:95:e2:98:c4:d6:51:d0:35:8b:fe:77:
                    9a:56:30:05:88:91:56:b3:10:28:57:8b:73:cc:86:
                    61:04:90:0e:2e:88:ac:8a:7b:79:7b:af:c3:e2:6f:
                    41:b6:a0:59:14:5b:a7:46:db:8a:b0:a9:30:de:bb:
                    90:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F8:3C:A3:C0:48:FF:4A:1C:AA:42:AC:5C:1B:9C:55:57:F5:BF:AD
            X509v3 Authority Key Identifier:
                keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:b2:8f:23:8f:88:ef:46:c4:40:06:4a:b8:09:f5:b2:f4:28:
         90:4e:e1:6d:7f:5e:fe:b7:7e:07:b5:a2:ba:ed:a1:29:6e:d0:
         b5:65:09:9f:70:5c:db:39:21:c0:b9:b2:d3:c2:95:ca:9c:d8:
         e9:a2:da:bf:ed:99:54:8e:01:d1:1b:77:c0:c1:c7:5e:bd:c7:
         a5:d4:0d:79:58:fa:bd:49:22:b6:41:06:81:8c:14:b1:42:cf:
         69:95:c9:ed:ca:18:5f:18:c5:69:e6:4f:0a:53:2d:fe:94:60:
         2b:56:04:2e:1a:aa:f8:ba:3f:f7:02:b6:ea:76:ec:25:ac:03:
         33:6c:8b:0a:8b:c2:d4:8e:80:d3:ea:c5:6e:ee:46:a5:d7:14:
         7d:5a:6d:49:95:f0:c2:a5:4b:00:63:25:83:1f:f1:de:98:7b:
         a9:3d:ca:de:db:22:ba:37:67:4c:9d:ce:97:b0:a6:f4:de:c9:
         68:c1:9e:a4:9d:72:e6:d9:79:95:37:85:69:0d:29:e8:cc:a1:
         a9:ad:2a:a3:2c:9a:fd:da:35:d4:94:fa:1b:34:e8:e5:20:8b:
         1d:b2:f4:cd:b0:8b:5e:68:41:c5:98:a5:04:14:39:36:94:a6:
         5f:a6:a1:6b:2b:fb:4d:76:49:d6:9f:f0:bd:8a:1a:1a:fa:7a:
         5b:f8:14:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:28:44 2026 by rpki-client