Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File:                     xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier:          xYbhMPghdeCWRXL3HwjLs6+ZwbAGh/7lHK9weyzSje8=
Subject key identifier:   FF:5D:F6:F9:1E:3C:5F:84:F5:56:10:59:D8:5C:87:00:C7:40:E2:A7
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       019E1ED9DF1E86C57BF5E6C6FD833BDC887B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number:          198F
Signing time:             Wed 13 May 2026 01:00:55 +0000
Manifest this update:     Wed 13 May 2026 01:00:55 +0000
Manifest next update:     Thu 14 May 2026 01:00:55 +0000
Files and hashes:         1: 2c-E5BZdiwqZ2Q-DnytRU90rLWI.roa (hash: +KiT1wYNU4xT/dbPCwls8LNvm2nJx4GyHtaKqzRjkQI=)
                          2: 2g3YqagtveoXivlimUOijGK4Sw4.roa (hash: ygC6oN+dOsYHf4Cjh6O/E1qqcFKMCRFPzFyAC5l12yw=)
                          3: 5B28Ei4KPuBfMPCYz_CdjunmzfA.roa (hash: Fh0fY9vBoWA1h/GgmdDXwKoDcv0YIku/VzyUipmtScY=)
                          4: 65v9LHi_MDiJFfxsRpTQKZGQtKQ.roa (hash: AD4zC7meiWbh1Y7ei46GISC0uTS4fKqWlAroEgp7qMg=)
                          5: AT7FQLG2UUjyo3d4e6IRvENj5-w.roa (hash: gZF293cO6fOokcvSru3HZunk3gWSY7f3PELfdlKOb8E=)
                          6: CFADAv46sEn0msMDLeVnp_GSKac.roa (hash: nhjd/2M6IGYSiqZoYsBxTLKlKrhaVySqjqbStVsFev8=)
                          7: DeLLhmnL8UGopy5KKmx7aJEcegM.roa (hash: MiHnbQkuo0f/Ih4buFqhTcosJDlqA6PQQ++HZPqmd5w=)
                          8: ElfbXSGIDiSMTPPlbo6V-o0SRuY.roa (hash: lKK5rdzCjZE0+7rICMxRWAfKpw9HWxpCs96nQPbHzso=)
                          9: F3V6NHBiFLHYH9kCeJ_cphI6VuI.roa (hash: S7WFcWfal2pVRy/GM+kUJ9lEuF9xQr0ct0tz3YBvyhU=)
                          10: GzFILLIkAaT9aB9CvnWDZTFwbdY.roa (hash: Wm6rCP0d9sgkyPeTHrd7psMD7wjPvGW5jHpasqKACzk=)
                          11: Hzswp8TTjFLBLtq_0yz3CxRyH5I.roa (hash: MP4gqKAVDOE83sn9DN5h59teDQEElcryGm3TvZLWgnM=)
                          12: JKIHwL24wYeRbIQkMf1HZ6STLiI.roa (hash: sDMrJ8+x30BMRZ/quC856/uc/e00xr9A8ozSxWzFDVw=)
                          13: Oznd7O4v0fl0yKCvpuYhUuQ7204.roa (hash: ldWUtJPO/Fk5ou2pZE7B4or/0nqqkTNzZKegpBoxYyE=)
                          14: PS9MTZzdBifx0im1Vrq3VgjsS5s.roa (hash: 0ux5UJNrhxWM198AZ/GNCpoKgSg8gWm9eiQUOhAki7I=)
                          15: TpP8go9gxjsA4n1kC2kuJQbokBE.roa (hash: 7lExTFrNOgtfm66T9jsBGx9Cjl+c6H6zYjBrnH5qrXg=)
                          16: Vrmk2bULiTNAA5JeOQZ33ec3wXc.roa (hash: l2T4AkC8bheD2TY5DDvz9/5pBIbrm/A780nuw41Lr6Y=)
                          17: dANCF-_ELvUXZe_N9iPSiuIBUYs.roa (hash: L7tV/7qxxRlCHwy6Cmc9dl/HlJ9PPDTVkduSLInAUZ0=)
                          18: gMYRXePhXBj5QEchP90fA4n6PTI.roa (hash: n3t3ay/80ZRLXPkmrmKkNg7PYGv+vXmzByKb6p1QvZ8=)
                          19: hbdbuaRvg2tTLKp10GziAeSgyRU.roa (hash: H+cM7/5ALMd58f/dYxV/Q5+dv/fO2eB8PR2xGdT8ZXc=)
                          20: iE31HcpgdKKrdPMldO0jIS93Go4.roa (hash: q2vi84j7Hjeqqy/+pd9xsj/QdQIOk9oRPO1utxPcNqU=)
                          21: llmpvsJp6iJllq8aPzCHiXy7pDI.roa (hash: DANl4OSIWpehyMk+CpY4YG/h/rDOrMDg4VQVT2cFg7g=)
                          22: mccO93c7K5NtlXGtNCpYDCBgqEo.roa (hash: DZ0UFzP9xfuYksTTPV2SFmxQJ2jKhIpRMqx1kEHoKiQ=)
                          23: ms0wuT7v6-h1UgnL6n_jgWkOkVU.roa (hash: QBEq8rCcXKzWf4ULJs+y+Nad4kF1AXFNATRKBuEGesA=)
                          24: nM_lAxFoR90GHzDm3k-Xe4dLJMM.roa (hash: QGtQ/k+x9xZlRdE8IXNS7Iy65YO7T/MroiRK01JihRA=)
                          25: nm-KZislIGz6wosxLU6C90OgEBY.roa (hash: eiBhQ/2d82wkJoJ8lwkynR/qT2+hnESyOr9AACLRf+E=)
                          26: oiBa91T-6TshSnnJbJJgNlbw-W4.roa (hash: /fOoDD7jW7j76AriVOk5RIvTKIODzOTB/JdvoQUMItg=)
                          27: ugtI-QyWNOjJ59RgJ8WbbnFfW4U.roa (hash: aT3mMJhpwKfI0RkCBtFq/BKu85xA6+3aVTdjvSvqPZQ=)
                          28: uyP_T_ZNO5QRKpx11_xHu9AQ3vA.roa (hash: 4MPXntavfi6oMCmbe9KLHapS2+uyKRzkwiw4RYfiFvY=)
                          29: w6gmNc7f_bvjPNIJjuhS3RSIpZQ.roa (hash: GdBjwBkJ4iGW3k1Xd7AiPym4634yoaPZu5TSA3ZGyx8=)
                          30: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: TLT7HW/sq7b6X/ON4KQ7A5GAnbjEFMVtM1SnxDbQe00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:df:1e:86:c5:7b:f5:e6:c6:fd:83:3b:dc:88:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: May 13 01:00:55 2026 GMT
            Not After : May 14 01:00:55 2026 GMT
        Subject: CN=ff5df6f91e3c5f84f5561059d85c8700c740e2a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:52:cc:5a:53:9e:08:10:0a:fc:93:90:9a:
                    5e:2a:0a:db:07:e9:1d:3f:e8:2a:fc:e1:d4:e9:c7:
                    28:54:90:13:a7:44:00:5e:01:a1:e8:f9:be:57:c5:
                    76:09:35:c8:4c:7b:68:17:5a:82:de:fe:df:0d:ad:
                    48:2e:72:c1:d8:bb:74:11:75:68:78:34:ba:ad:38:
                    12:bb:b4:9e:b1:e5:ed:8a:4b:3d:25:e5:70:a5:59:
                    43:a3:5c:de:fd:91:3e:65:1c:21:d1:10:52:c4:06:
                    e3:ab:36:6b:94:49:b3:58:27:d8:4b:a7:23:c8:d9:
                    48:7f:24:dd:77:27:8f:cd:f0:b7:b8:3d:2d:dc:4f:
                    c6:ba:79:0f:9b:88:c5:fc:99:66:3a:e7:69:bf:d6:
                    39:ee:34:0a:f7:83:fb:9f:92:54:4f:5c:80:54:7e:
                    4c:33:98:dd:ee:10:90:2f:c2:dd:16:94:b6:2e:3f:
                    54:67:24:99:5c:4b:8e:a6:27:b1:61:4a:4c:02:4e:
                    76:fc:4e:07:c9:35:d8:35:dc:4b:8c:6f:2a:02:46:
                    57:6e:61:76:bf:71:75:c0:3f:29:71:c4:6b:bb:f3:
                    0b:af:7c:4f:1c:34:1e:a1:ba:56:34:14:b2:85:f7:
                    88:0c:69:0d:88:4e:2b:e8:4a:5b:da:7d:dd:71:7b:
                    69:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5D:F6:F9:1E:3C:5F:84:F5:56:10:59:D8:5C:87:00:C7:40:E2:A7
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:5a:f0:31:2b:22:7f:93:2f:7b:58:60:37:31:c3:cf:e1:c8:
         90:08:61:a7:c0:22:54:d0:57:3f:e1:11:57:39:fb:73:55:05:
         98:5c:96:9b:d3:cb:ed:ae:3b:6a:dd:3a:3f:72:64:e1:4c:f3:
         f8:c9:0c:16:66:ed:c6:aa:c7:03:40:4f:3b:9d:83:50:8c:83:
         6c:0f:d3:93:07:45:ba:98:af:a3:6e:25:39:71:cd:97:1b:c6:
         4a:c5:c3:01:d6:87:35:d7:5c:29:d0:79:7c:8d:ba:ca:14:66:
         92:61:c1:7e:dd:b5:1e:c3:39:41:95:d6:08:92:ee:e0:9e:98:
         cc:0d:f5:69:b0:95:f5:41:eb:9f:c9:25:99:cd:69:a1:99:f0:
         44:ca:de:5b:3d:8f:94:cf:70:f0:a2:69:f6:35:b6:18:71:b9:
         79:a4:ff:29:e5:56:a8:c3:28:a8:cf:e7:82:db:d1:52:9e:08:
         59:31:85:43:da:44:96:23:d5:3d:ae:ea:07:c1:7d:ed:be:c6:
         38:b2:40:69:41:70:92:10:f3:69:cd:ed:3d:14:07:d5:a0:59:
         ed:b5:e8:31:18:0c:8e:07:73:72:fb:6c:e2:d3:9e:d5:b0:69:
         d6:e9:b5:a6:8b:24:16:56:8a:df:f2:f0:bc:9d:cb:e9:b9:03:
         65:78:0c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:06:36 2026 by rpki-client