Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
File:                     RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json)
Hash identifier:          1Yfec2kJqFUkIU2emAkif1do4YKbAaPD+gzdj5y5Blg=
Subject key identifier:   5B:6C:67:42:8F:14:70:97:E1:5A:75:DD:A0:C5:BA:83:A9:6F:60:E0
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Certificate issuer:       /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial:       019E1C46CE9DD420284063FF34F1964CD792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 13:01:02 +0000
Manifest this update:     Tue 12 May 2026 13:01:02 +0000
Manifest next update:     Wed 13 May 2026 13:01:02 +0000
Files and hashes:         1: 3gIp0do7jiNRekvTGYYcxp0N4KQ.asa (hash: NdEXhwinGvt8QXFqMCRPd1EsUHvL+9wNCdKJKLs61vs=)
                          2: 99lIgCZ8a0ei-5wRBXuee2SsGpY.roa (hash: 1ppSKjyGESECn+t5RQboX3iN+5A+rZBrqwtQSTJrj4A=)
                          3: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: 8I/s2mIsjACUfwlBuuBV6Fldo0u2Z99E5D3q6ulebpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:ce:9d:d4:20:28:40:63:ff:34:f1:96:4c:d7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
        Validity
            Not Before: May 12 13:01:02 2026 GMT
            Not After : May 13 13:01:02 2026 GMT
        Subject: CN=5b6c67428f147097e15a75dda0c5ba83a96f60e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:30:8e:e1:01:21:a5:f8:15:75:4a:0d:f2:
                    bb:0f:19:9a:5e:c8:5f:eb:66:4b:20:a3:d1:36:cf:
                    28:86:47:c2:1f:27:c9:46:5e:e1:ec:4c:77:29:88:
                    97:08:fb:2c:25:7b:e0:7f:e8:9c:92:2a:47:b6:19:
                    7a:58:af:2a:35:d7:6a:d0:c3:ab:2a:69:86:9e:2b:
                    3e:22:7d:27:93:62:bc:55:98:6f:23:33:a0:52:f8:
                    57:9c:8e:cf:48:64:b8:d4:af:d1:92:78:35:48:76:
                    4b:f0:ef:30:96:97:9b:8d:17:33:8e:c2:91:f2:ea:
                    85:68:44:d9:55:f0:5d:cc:fa:76:fa:a9:b0:1d:52:
                    1f:f8:bd:e7:82:e0:a5:7c:af:ea:49:a8:93:dc:a1:
                    7e:3b:ef:90:5e:fd:9e:9f:24:45:cf:2f:00:e8:d1:
                    40:39:90:5d:b1:d2:49:e1:c9:f4:96:5d:14:4d:ad:
                    33:05:29:06:03:11:4d:a2:3f:80:8a:b6:bc:91:1f:
                    c0:8c:65:53:6b:60:2b:35:f8:92:18:fb:0a:6a:3c:
                    d8:b2:92:8d:57:06:af:ff:4d:5e:58:00:10:38:85:
                    b8:e9:72:a9:6e:f0:fc:82:c5:3e:25:75:fc:87:0e:
                    3a:fc:93:93:25:5f:70:76:00:04:b3:d5:ff:f2:49:
                    f5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6C:67:42:8F:14:70:97:E1:5A:75:DD:A0:C5:BA:83:A9:6F:60:E0
            X509v3 Authority Key Identifier:
                keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3c:ee:97:42:a3:ed:ce:c3:fb:26:12:05:09:ea:59:91:0c:
         77:26:9f:fa:67:d7:42:60:16:89:1e:4a:db:03:56:d4:df:ee:
         13:11:94:ae:45:68:1e:ff:22:3c:43:5d:47:e7:18:74:4b:cc:
         c4:d6:9a:74:6a:af:27:ca:f9:40:37:3e:e6:47:ed:ab:2a:d0:
         8a:06:8b:62:d9:a4:dd:53:04:eb:ad:80:23:2a:5b:4a:2e:21:
         57:d5:c6:cb:c4:49:1d:6a:4d:a4:44:fc:bd:4f:ef:fa:2a:98:
         7f:75:54:42:39:2c:2b:ca:fd:84:42:0e:bb:2a:79:b1:f3:92:
         94:3a:bb:6a:a0:7a:f6:37:e0:68:5e:ff:bd:b0:ed:54:a4:7a:
         bd:c1:46:55:ca:b4:c9:bd:18:c3:44:1d:86:a1:a0:93:ae:04:
         d2:70:20:24:51:70:f1:9d:58:78:83:15:ce:05:fe:e2:f1:24:
         ec:50:d9:a8:9c:cf:e8:04:83:e8:64:11:56:77:49:73:3b:75:
         a6:3a:fb:71:0e:ef:09:3e:b1:1a:f3:4f:11:17:a1:0b:3d:ad:
         6f:ba:42:2e:e3:82:47:1f:7c:40:d1:9e:19:5c:67:55:70:fd:
         ef:13:a0:02:6b:dd:11:16:d6:03:b5:45:99:87:31:fb:ec:c1:
         d2:c2:fe:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRs6d1CAoQGP/NPGWTNeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OTFiZmQzY2ZlYzVhMTEwOGYxYzg2ODU0NzY0ZTJiOTAz
ZDc4ODgwHhcNMjYwNTEyMTMwMTAyWhcNMjYwNTEzMTMwMTAyWjAzMTEwLwYDVQQD
Eyg1YjZjNjc0MjhmMTQ3MDk3ZTE1YTc1ZGRhMGM1YmE4M2E5NmY2MGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfcwjuEBIaX4FXVKDfK7DxmaXshf
62ZLIKPRNs8ohkfCHyfJRl7h7Ex3KYiXCPssJXvgf+ickipHthl6WK8qNddq0MOr
KmmGnis+In0nk2K8VZhvIzOgUvhXnI7PSGS41K/Rkng1SHZL8O8wlpebjRczjsKR
8uqFaETZVfBdzPp2+qmwHVIf+L3nguClfK/qSaiT3KF+O++QXv2enyRFzy8A6NFA
OZBdsdJJ4cn0ll0UTa0zBSkGAxFNoj+Aira8kR/AjGVTa2ArNfiSGPsKajzYspKN
Vwav/01eWAAQOIW46XKpbvD8gsU+JXX8hw46/JOTJV9wdgAEs9X/8kn1rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtsZ0KPFHCX4Vp13aDFuoOpb2DgMB8GA1UdIwQY
MBaAFEaRv9PP7FoRCPHIaFR2TiuQPXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81ZWE1ZjAtMDJkNy00YjBmLWIwYjIt
MWI4NjE3N2FmMGRkLzEvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81ZWE1ZjAtMDJkNy00YjBmLWIwYjItMWI4NjE3N2FmMGRk
LzEvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDzul0Kj
7c7D+yYSBQnqWZEMdyaf+mfXQmAWiR5K2wNW1N/uExGUrkVoHv8iPENdR+cYdEvM
xNaadGqvJ8r5QDc+5kftqyrQigaLYtmk3VME662AIypbSi4hV9XGy8RJHWpNpET8
vU/v+iqYf3VUQjksK8r9hEIOuyp5sfOSlDq7aqB69jfgaF7/vbDtVKR6vcFGVcq0
yb0Yw0QdhqGgk64E0nAgJFFw8Z1YeIMVzgX+4vEk7FDZqJzP6ASD6GQRVndJczt1
pjr7cQ7vCT6xGvNPERehCz2tb7pCLuOCRx98QNGeGVxnVXD97xOgAmvdERbWA7VF
mYcx++zB0sL+Hg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:29:33 2026 by rpki-client