Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
File:                     52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json)
Hash identifier:          Bke3w2nf1a0vIVUhpVBMHKLiUHQhHYLpcEj5jHATMIs=
Subject key identifier:   33:6E:7E:C9:5C:8A:45:D7:9D:A4:BD:B3:41:2D:83:5C:50:17:14:20
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       019E1CEC0DF18D00385110F03062B698DDF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
Manifest number:          1953
Signing time:             Tue 12 May 2026 16:01:32 +0000
Manifest this update:     Tue 12 May 2026 16:01:32 +0000
Manifest next update:     Wed 13 May 2026 16:01:32 +0000
Files and hashes:         1: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (hash: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=)
                          2: 13WTNIS6A0dihpmd1UZATvnV9K4.roa (hash: KHlhyO/RASQzL4I4VsavXB94t3yBZq5r1Q6M/Qi/yyE=)
                          3: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (hash: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I=)
                          4: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (hash: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=)
                          5: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: 4CqXZ5KH1Wf9RDXKnXbxFgaWoCzhG1bUSRouEzwICg8=)
                          6: 53LrOjzoo4E_JjsRePn1B73fFtc.roa (hash: NrghBBUU3a/THjQg3AhmUAWYpxF5cPsuE6iPec4zb/o=)
                          7: 6VTW_McNM2gKUiEd9Bc3Gfwm0AE.roa (hash: K0b0iJpVzmEPNcexIYjgjDjmiNKN28rNQZIz8nCu1GU=)
                          8: BAXXlSV06uuaY8KhG2sNC8heH1s.roa (hash: ajZgoDJ8e9hLXYtp4Hn5DX0X8/kHLIPyvG3eppF2AQs=)
                          9: E6Wekcit-EQ3TZTNVUcjRu1lw6U.roa (hash: 2zO8BVKL4MFsWKURY5zzeGF0sEV2VJqOByilAEcD1Z0=)
                          10: G_gkubCq_7tYxAJOgwxm9_sjOcc.roa (hash: HTO/NujLkueszrKTl1jypitd1221vQx4YiPnzs/pQes=)
                          11: ODKfzqsOm3GYnHVgYihmwo3Lqyg.roa (hash: 3rOjqBfIhvTmF0AbgtiUHguUfUPEBFg5H4WMtyl2b1I=)
                          12: SqJOIStSbkS_sk9tOgXlq4DG9kU.roa (hash: ewVntvl+465lh5V5DV4NxkandQKCa7/BAmKlR+Vmpqw=)
                          13: X1Gmpx7ELtfrrjtvBfMJbDc_PDU.roa (hash: 3UVhYg8pgXN07FqWkvVyaQiJdCXbQoNnU+1Ji0Fdl18=)
                          14: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (hash: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU=)
                          15: lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (hash: Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=)
                          16: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (hash: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:ec:0d:f1:8d:00:38:51:10:f0:30:62:b6:98:dd:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: May 12 16:01:32 2026 GMT
            Not After : May 13 16:01:32 2026 GMT
        Subject: CN=336e7ec95c8a45d79da4bdb3412d835c50171420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f3:9e:90:31:4f:df:eb:7b:bd:26:3c:3f:a4:
                    40:94:45:87:53:10:6a:45:f0:33:a0:e8:f6:eb:fa:
                    7b:19:4d:69:4f:24:1c:4e:7d:5a:f6:c4:79:50:16:
                    c1:96:e8:5a:63:5f:a2:db:ff:ec:2b:a5:3a:6f:34:
                    8f:e6:fe:f7:56:17:98:15:52:fa:f4:8f:af:bb:2f:
                    c8:71:71:d8:1e:b4:3c:14:4e:ef:57:cb:4a:72:7e:
                    a5:34:eb:82:e1:98:81:1e:d2:0e:7d:db:99:35:a2:
                    a8:97:f5:b1:14:3e:9a:bd:e0:a4:48:49:7e:ab:57:
                    00:8d:54:8e:46:27:48:53:a4:1b:28:d5:f0:c1:ac:
                    aa:23:95:66:35:62:9d:97:2a:d1:97:9d:19:f9:41:
                    7d:b4:66:52:e7:85:d7:34:9d:f0:d8:74:9c:93:2d:
                    72:e6:16:1d:04:b0:aa:9f:b6:31:f1:97:ee:70:dc:
                    85:b4:03:99:43:59:b0:2e:fb:7d:e5:fc:6a:e6:cd:
                    11:30:4b:7f:15:e6:b4:97:50:bc:5c:a0:6d:4b:3f:
                    2b:92:87:32:53:6e:0e:68:b8:eb:46:49:72:80:a0:
                    0f:cc:8d:03:2b:ef:7a:80:88:5d:78:83:09:62:c7:
                    b7:46:77:a1:d5:27:d4:52:46:47:bb:c6:d6:57:14:
                    3e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6E:7E:C9:5C:8A:45:D7:9D:A4:BD:B3:41:2D:83:5C:50:17:14:20
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:62:12:5d:0a:d0:93:7b:0f:f5:72:9c:54:23:df:4a:bb:eb:
         1e:33:b7:42:e1:9c:f6:1b:23:71:d8:89:2d:5c:fd:96:73:02:
         64:b0:c6:ef:fe:5e:a9:13:1b:e7:36:78:f5:07:b4:41:5e:9b:
         1f:38:1a:9f:67:b0:1d:fd:da:94:1a:da:5c:52:c5:a7:d0:aa:
         80:89:e3:15:de:8f:0a:7a:fd:d6:cc:95:4f:38:63:91:7d:f3:
         e7:b0:96:db:5e:a6:e8:1e:18:4b:e1:a9:00:76:01:53:11:61:
         22:43:df:2d:13:c5:8e:41:f4:52:3e:02:b6:84:0f:e6:cf:a1:
         82:b5:82:82:81:43:18:af:f7:21:31:7f:b4:b3:4b:af:3b:db:
         b8:ee:d3:41:91:1e:ea:3b:f7:5a:9d:27:50:0b:03:fa:5f:d1:
         d2:e8:52:6c:d1:ce:52:9f:d0:1e:6b:d1:34:44:4b:fa:d5:8c:
         6d:4c:0f:c8:fc:9b:84:7a:26:fd:4c:e9:e9:b8:ae:86:c9:fc:
         cf:ac:da:fa:8e:74:34:f7:2c:f1:05:07:d6:1d:fc:1a:f2:36:
         0b:b7:88:b0:97:6e:c3:56:8e:0c:af:2c:b2:32:f1:65:6b:b9:
         6e:19:0c:bf:5d:26:6f:44:39:e3:b4:ad:68:fb:6e:fa:eb:2f:
         97:26:19:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c7A3xjQA4URDwMGK2mN31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjYwNTEyMTYwMTMyWhcNMjYwNTEzMTYwMTMyWjAzMTEwLwYDVQQD
EygzMzZlN2VjOTVjOGE0NWQ3OWRhNGJkYjM0MTJkODM1YzUwMTcxNDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/OekDFP3+t7vSY8P6RAlEWHUxBq
RfAzoOj26/p7GU1pTyQcTn1a9sR5UBbBluhaY1+i2//sK6U6bzSP5v73VheYFVL6
9I+vuy/IcXHYHrQ8FE7vV8tKcn6lNOuC4ZiBHtIOfduZNaKol/WxFD6aveCkSEl+
q1cAjVSORidIU6QbKNXwwayqI5VmNWKdlyrRl50Z+UF9tGZS54XXNJ3w2HScky1y
5hYdBLCqn7Yx8ZfucNyFtAOZQ1mwLvt95fxq5s0RMEt/Fea0l1C8XKBtSz8rkocy
U24OaLjrRklygKAPzI0DK+96gIhdeIMJYse3Rneh1SfUUkZHu8bWVxQ+GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNufslcikXXnaS9s0Etg1xQFxQgMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmISXQrQ
k3sP9XKcVCPfSrvrHjO3QuGc9hsjcdiJLVz9lnMCZLDG7/5eqRMb5zZ49Qe0QV6b
Hzgan2ewHf3alBraXFLFp9CqgInjFd6PCnr91syVTzhjkX3z57CW216m6B4YS+Gp
AHYBUxFhIkPfLRPFjkH0Uj4CtoQP5s+hgrWCgoFDGK/3ITF/tLNLrzvbuO7TQZEe
6jv3Wp0nUAsD+l/R0uhSbNHOUp/QHmvRNERL+tWMbUwPyPybhHom/Uzp6biuhsn8
z6za+o50NPcs8QUH1h38GvI2C7eIsJduw1aODK8ssjLxZWu5bhkMv10mb0Q547St
aPtu+usvlyYZQg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:17:12 2026 by rpki-client