Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
File:                     9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json)
Hash identifier:          awymYCqsx/2GN7IDBLdeS3yrYbNp/adjFsys2RQYGRs=
Subject key identifier:   6C:08:BB:30:67:0C:B5:4C:F5:C1:EA:91:A2:91:67:19:1A:76:65:52
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Certificate issuer:       /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial:       019E1D904880B3CCA6DDCD979B089C659F64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
Manifest number:          15F4
Signing time:             Tue 12 May 2026 19:00:55 +0000
Manifest this update:     Tue 12 May 2026 19:00:55 +0000
Manifest next update:     Wed 13 May 2026 19:00:55 +0000
Files and hashes:         1: 3I73d1fm-asEDdpF_Iaed-Rn4iU.roa (hash: JVQe5Bz0aKgNMVzD3MTnR/M1jsbAbCwUE1ywEqxkXqI=)
                          2: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: G+fi7sCCbRdt/LxIB1TdaTIC37cRlNEJfxuPm0CqsTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:48:80:b3:cc:a6:dd:cd:97:9b:08:9c:65:9f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
        Validity
            Not Before: May 12 19:00:55 2026 GMT
            Not After : May 13 19:00:55 2026 GMT
        Subject: CN=6c08bb30670cb54cf5c1ea91a29167191a766552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a9:28:45:06:25:02:91:7e:dd:ac:83:12:55:
                    92:21:c9:12:d0:57:64:56:a6:86:6f:31:4a:e4:d1:
                    20:dd:e6:9d:44:e1:5d:f4:57:a8:23:63:ca:2d:2b:
                    09:77:c4:59:56:37:ac:ca:90:71:42:fe:e6:d0:e0:
                    bf:ff:b9:a3:fd:90:c8:ae:e8:5a:4f:43:64:48:d0:
                    b4:16:02:ac:27:65:35:62:1a:d5:95:28:27:67:a7:
                    58:de:64:4d:b7:c9:eb:ea:49:f4:36:72:cb:95:3c:
                    68:e3:ef:c2:47:ef:76:bf:51:35:3f:48:44:d0:0b:
                    ea:39:d3:06:89:ef:ed:85:38:4d:2c:8a:6f:3f:c9:
                    cc:dd:26:1c:d4:ee:bb:23:29:69:6f:89:db:1b:8a:
                    6a:28:e6:0b:6c:e3:32:df:0b:2e:b8:c4:81:99:15:
                    88:84:d1:1f:c8:0b:e2:44:50:cc:0f:0a:6f:72:da:
                    86:d9:5b:2d:df:e7:fa:26:a8:04:d3:67:0c:b0:9e:
                    ed:88:24:a2:36:7a:80:10:24:32:b7:f0:2a:5e:ce:
                    85:9d:27:d0:e0:c3:51:55:07:b6:15:72:39:9e:fb:
                    62:b6:b3:31:5b:cd:91:49:4f:fd:69:89:76:6f:c3:
                    fc:34:46:8b:78:a9:b0:a1:13:7c:7a:76:d0:0a:43:
                    1b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:08:BB:30:67:0C:B5:4C:F5:C1:EA:91:A2:91:67:19:1A:76:65:52
            X509v3 Authority Key Identifier:
                keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:3d:59:58:99:93:88:fd:94:fc:16:51:4a:38:60:11:f8:02:
         50:37:ed:75:53:e9:c6:99:1f:a9:a6:fa:ff:74:ea:12:a8:cc:
         4d:29:70:91:bf:bb:05:97:e1:30:b2:ca:7b:07:83:26:34:c5:
         ee:12:f2:53:7f:47:8e:43:d6:e1:65:ea:83:4a:ad:f4:74:39:
         05:d9:f2:32:a8:c6:a9:68:ef:a1:ed:1b:30:e5:80:92:70:1a:
         2b:cb:17:25:e3:49:a0:aa:63:76:ba:9c:28:40:76:2a:12:68:
         60:e7:7a:bb:6c:20:11:fa:d4:92:c1:d6:8a:d4:3e:32:f1:fb:
         76:98:3d:40:ed:a5:16:57:82:01:02:7b:48:92:ff:dc:65:4f:
         11:cb:1d:ac:b3:e6:6a:00:f4:bc:36:41:67:b0:a0:a5:0b:c6:
         41:60:03:7d:f1:61:ba:d6:bf:17:1f:df:06:72:8f:c4:83:98:
         7b:2b:40:dc:1f:98:dd:92:6c:00:d9:7f:b2:bb:21:b2:ae:7c:
         64:3a:33:28:48:67:a7:f9:68:a4:ec:09:bb:8f:bc:7b:f2:11:
         26:f6:eb:39:20:a0:41:a5:49:71:c5:9c:58:ed:53:e0:ed:03:
         d5:aa:60:35:e2:43:d7:65:d8:50:d4:72:72:06:32:1c:f3:f0:
         55:10:f5:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkEiAs8ym3c2XmwicZZ9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzliYWE0NDI5ZGE3ODY1OTFiNzI1MjU4NTJlNmQ5N2Iz
MmMxZTgwHhcNMjYwNTEyMTkwMDU1WhcNMjYwNTEzMTkwMDU1WjAzMTEwLwYDVQQD
Eyg2YzA4YmIzMDY3MGNiNTRjZjVjMWVhOTFhMjkxNjcxOTFhNzY2NTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66koRQYlApF+3ayDElWSIckS0Fdk
VqaGbzFK5NEg3eadROFd9FeoI2PKLSsJd8RZVjesypBxQv7m0OC//7mj/ZDIruha
T0NkSNC0FgKsJ2U1YhrVlSgnZ6dY3mRNt8nr6kn0NnLLlTxo4+/CR+92v1E1P0hE
0AvqOdMGie/thThNLIpvP8nM3SYc1O67Iylpb4nbG4pqKOYLbOMy3wsuuMSBmRWI
hNEfyAviRFDMDwpvctqG2Vst3+f6JqgE02cMsJ7tiCSiNnqAECQyt/AqXs6FnSfQ
4MNRVQe2FXI5nvtitrMxW82RSU/9aYl2b8P8NEaLeKmwoRN8enbQCkMbAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwIuzBnDLVM9cHqkaKRZxkadmVSMB8GA1UdIwQY
MBaAFPTJuqRCnaeGWRtyUlhS5tl7MsHoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzIt
YWY3ZGEyYjZlZGM1LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzItYWY3ZGEyYjZlZGM1
LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArj1ZWJmT
iP2U/BZRSjhgEfgCUDftdVPpxpkfqab6/3TqEqjMTSlwkb+7BZfhMLLKeweDJjTF
7hLyU39HjkPW4WXqg0qt9HQ5BdnyMqjGqWjvoe0bMOWAknAaK8sXJeNJoKpjdrqc
KEB2KhJoYOd6u2wgEfrUksHWitQ+MvH7dpg9QO2lFleCAQJ7SJL/3GVPEcsdrLPm
agD0vDZBZ7CgpQvGQWADffFhuta/Fx/fBnKPxIOYeytA3B+Y3ZJsANl/srshsq58
ZDozKEhnp/lopOwJu4+8e/IRJvbrOSCgQaVJccWcWO1T4O0D1apgNeJD12XYUNRy
cgYyHPPwVRD1rQ==
-----END CERTIFICATE-----
Generated at Tue May 12 22:09:09 2026 by rpki-client