Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File:                     itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier:          M/5PhQ9fJcXxayo9A0DTzsdv+ioOz+fuWL+uuPOolXg=
Subject key identifier:   30:CE:D8:42:91:45:77:84:80:96:87:00:9A:F9:C4:A9:F3:32:81:56
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer:       /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial:       019E1F1188999E662CDD44155585B7AE1A4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number:          190C
Signing time:             Wed 13 May 2026 02:01:43 +0000
Manifest this update:     Wed 13 May 2026 02:01:43 +0000
Manifest next update:     Thu 14 May 2026 02:01:43 +0000
Files and hashes:         1: KpyePpi0BQOtPpSVVikAIl2skgo.roa (hash: Ukwdvn9MeAWiIbUvrqdNT9WEFPzcoAHZi8Gv9MxSNAs=)
                          2: _OkMfangRHHR3pkyqVAWkqY7mag.roa (hash: 4q+Nhgpids6AoAL8lqsvtN3qpgNozHDLR3s1mrSSncQ=)
                          3: a3zHXiytnxR6C7Yya8cqACPMcyc.roa (hash: T1Jty2//hchc0LCzlubxKMABR/tRMsPUV0k73TQ7gFM=)
                          4: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: tv22Ms59HbnAUDcYHOPOCOGBkSqOtM040Tur3lNoCwI=)
                          5: m3UYalXj1FlItkx4Rfdvy-zoe3E.roa (hash: fRgZKtug12cWuESnK4ZE4YhyfFuUNO2BSLzpL2F6bjY=)
                          6: qwWdo-9lTcBvLCHf4H2oZNKYs8g.roa (hash: molpqRNT26EZTf8c40L3ZxZs9DbMAoqcJ+gd6HHZ1w4=)
                          7: x-EfdPPH41fBBpjZ7XVWx9BVt_s.roa (hash: GJIuPJGUowMmXdPxeaXLT8tgyWA+GgGHmT3ek3XlWMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:88:99:9e:66:2c:dd:44:15:55:85:b7:ae:1a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
        Validity
            Not Before: May 13 02:01:43 2026 GMT
            Not After : May 14 02:01:43 2026 GMT
        Subject: CN=30ced84291457784809687009af9c4a9f3328156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:d0:1e:1c:2e:6f:c9:79:68:15:10:c1:26:
                    0b:b0:cc:8d:a3:89:1b:2e:3a:3a:3a:6e:d3:da:03:
                    9b:e0:38:68:dd:3a:8e:a3:88:ca:37:0d:80:7c:60:
                    8e:63:5a:7a:ab:9b:da:34:f4:13:c6:93:b5:bd:18:
                    f5:a4:7e:02:6c:82:ca:80:a0:1f:bb:3d:3c:0b:c3:
                    a2:b7:77:6e:bd:d5:3e:c1:0f:3a:07:58:97:53:b0:
                    b4:38:5f:69:a1:6a:b7:78:b6:ec:5b:90:81:b4:0b:
                    02:c9:af:4d:26:9f:16:9b:2a:56:f1:40:8e:5b:a2:
                    ed:82:8f:49:88:64:ed:5c:2d:6b:82:03:fd:5d:dd:
                    45:71:39:fc:fd:30:4d:f7:28:7b:b6:2a:fb:12:20:
                    2e:4e:38:a0:25:16:51:00:dd:b7:26:29:99:84:5c:
                    f4:2a:5e:3a:b0:8a:88:4e:04:57:c1:29:85:6d:a6:
                    90:dd:ac:46:17:6c:90:ac:3a:dc:a3:94:3b:d3:d9:
                    45:fc:75:b0:ab:ac:a8:1a:bc:9a:ca:61:f1:01:a8:
                    1d:6f:e0:83:cd:00:8f:53:50:66:70:15:ef:e3:88:
                    51:3e:f8:2f:69:fc:f1:a0:32:a6:06:70:ed:20:69:
                    38:bc:68:35:8c:0f:d5:10:d8:d3:7b:b1:21:df:7c:
                    24:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CE:D8:42:91:45:77:84:80:96:87:00:9A:F9:C4:A9:F3:32:81:56
            X509v3 Authority Key Identifier:
                keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:fd:91:f0:c1:17:8d:66:18:a8:09:63:fe:c8:85:2d:7b:b9:
         8c:5b:d3:36:4d:dc:a5:a8:dd:c9:62:3d:03:1b:d8:51:78:7e:
         c1:28:08:0b:62:73:c1:e1:7b:24:b6:26:aa:16:b7:ed:fc:91:
         ae:6c:49:2e:ee:31:66:2e:c5:dc:1a:66:e9:4e:36:f0:e1:a9:
         c8:69:84:2d:1b:3d:b8:d7:e9:c7:38:ad:f5:29:92:36:06:dd:
         1b:52:ba:b6:ee:52:b6:02:81:42:54:e7:13:d3:5f:7f:c6:a1:
         62:09:76:d8:05:c1:64:a7:7c:21:2c:86:70:2a:c7:56:e9:a5:
         09:99:83:2c:f5:1a:63:25:ce:9d:c1:9e:35:9b:39:99:e2:7e:
         9e:59:57:b8:d8:ca:26:57:0d:b9:90:5c:f7:7d:8f:0c:e0:78:
         ff:3b:f5:5b:7d:d8:94:bf:35:7d:c5:0f:6b:c2:17:e8:46:08:
         e7:74:1f:6c:f1:a5:71:62:00:c8:06:59:61:3d:ad:e1:ea:4b:
         0c:87:38:3e:d0:d9:14:98:47:1c:50:40:cc:ac:a2:5a:13:4d:
         3b:a1:30:5d:e7:a4:80:4f:3a:d6:0e:b4:0d:25:57:c0:16:2e:
         04:6f:8e:8e:14:bc:5d:13:1b:37:2b:9b:1e:a8:fa:ad:ad:5d:
         df:41:92:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEYiZnmYs3UQVVYW3rhpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDI0MDYwM2VjNmViY2Q2MmY3MmQ0NmYxZGMwMGNiN2Ux
ZjBiMmUwHhcNMjYwNTEzMDIwMTQzWhcNMjYwNTE0MDIwMTQzWjAzMTEwLwYDVQQD
EygzMGNlZDg0MjkxNDU3Nzg0ODA5Njg3MDA5YWY5YzRhOWYzMzI4MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEjQHhwub8l5aBUQwSYLsMyNo4kb
Ljo6Om7T2gOb4Dho3TqOo4jKNw2AfGCOY1p6q5vaNPQTxpO1vRj1pH4CbILKgKAf
uz08C8Oit3duvdU+wQ86B1iXU7C0OF9poWq3eLbsW5CBtAsCya9NJp8WmypW8UCO
W6Ltgo9JiGTtXC1rggP9Xd1FcTn8/TBN9yh7tir7EiAuTjigJRZRAN23JimZhFz0
Kl46sIqITgRXwSmFbaaQ3axGF2yQrDrco5Q709lF/HWwq6yoGryaymHxAagdb+CD
zQCPU1BmcBXv44hRPvgvafzxoDKmBnDtIGk4vGg1jA/VENjTe7Eh33wkdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDO2EKRRXeEgJaHAJr5xKnzMoFWMB8GA1UdIwQY
MBaAFIrSQGA+xuvNYvctRvHcAMt+HwsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUt
ZDc2YzhjNzM5ODYxLzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUtZDc2YzhjNzM5ODYx
LzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhf2R8MEX
jWYYqAlj/siFLXu5jFvTNk3cpajdyWI9AxvYUXh+wSgIC2JzweF7JLYmqha37fyR
rmxJLu4xZi7F3Bpm6U428OGpyGmELRs9uNfpxzit9SmSNgbdG1K6tu5StgKBQlTn
E9Nff8ahYgl22AXBZKd8ISyGcCrHVumlCZmDLPUaYyXOncGeNZs5meJ+nllXuNjK
JlcNuZBc932PDOB4/zv1W33YlL81fcUPa8IX6EYI53QfbPGlcWIAyAZZYT2t4epL
DIc4PtDZFJhHHFBAzKyiWhNNO6EwXeekgE861g60DSVXwBYuBG+OjhS8XRMbNyub
Hqj6ra1d30GSNA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:30:40 2026 by rpki-client