Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File:                     sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier:          D1CjZjmeu7eIJuefZzSteHi9sDvhiKVQgOSaAuAh24I=
Subject key identifier:   0D:E5:F3:20:36:6E:C2:B3:09:8D:24:A5:CD:9A:EB:FE:B4:81:35:CE
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer:       /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial:       019E3117173C0F59720465BDFE87B8696FC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number:          164D
Signing time:             Sat 16 May 2026 14:00:57 +0000
Manifest this update:     Sat 16 May 2026 14:00:57 +0000
Manifest next update:     Sun 17 May 2026 14:00:57 +0000
Files and hashes:         1: 0WZc2xB5hVDGIEXjZ-HhqIhObPU.roa (hash: yv7agGUqeUNNQCncCwHxi4NpbbYoTQ6AYByrG78CfM4=)
                          2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: jLk2qDBm3NenUuFyE1lGdiDKfRu8J9ubYu8KAAiCjt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:17:3c:0f:59:72:04:65:bd:fe:87:b8:69:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
        Validity
            Not Before: May 16 14:00:57 2026 GMT
            Not After : May 17 14:00:57 2026 GMT
        Subject: CN=0de5f320366ec2b3098d24a5cd9aebfeb48135ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d0:fa:2a:72:65:88:41:d2:4e:bb:a4:85:00:
                    2b:7f:2d:a4:3e:9c:6b:7c:1a:ca:d4:9b:cf:a8:a3:
                    e3:f8:ab:9e:74:fd:bb:7d:ac:07:54:7b:09:fe:3e:
                    ef:3b:d7:23:f1:17:c3:74:cc:f8:c9:9e:10:45:5b:
                    46:19:01:8e:93:68:72:3e:54:e7:ab:ff:a8:15:2e:
                    0e:01:6d:ae:e9:79:60:ae:c4:b2:c0:9e:d8:a1:ed:
                    d9:77:11:78:c7:e9:11:e8:69:0c:d3:80:5c:43:54:
                    07:6f:3f:c5:f9:b7:f2:1d:23:9a:0f:86:61:38:d2:
                    de:3d:53:f7:32:0f:ee:bd:96:64:d0:b7:dd:0e:16:
                    1b:cc:d8:e8:8e:54:c0:9e:b1:dc:d0:9e:f2:aa:af:
                    89:96:1d:c8:c1:dd:7d:eb:de:eb:1d:53:53:01:56:
                    ef:bf:f1:c5:ce:de:7b:00:e2:99:a4:6e:81:62:fe:
                    7f:59:69:73:62:b0:1d:e0:86:6a:2a:d4:9c:09:8e:
                    4a:ea:16:a4:4f:1d:06:a0:40:9f:d3:c3:64:00:db:
                    5b:07:b5:4c:62:21:4b:eb:e0:78:8e:d0:f4:39:7a:
                    2c:61:48:a8:c1:3e:5c:fd:47:61:c5:9d:b6:0c:1f:
                    a7:d3:27:1f:85:5a:44:0a:21:59:ee:8d:a6:78:b8:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E5:F3:20:36:6E:C2:B3:09:8D:24:A5:CD:9A:EB:FE:B4:81:35:CE
            X509v3 Authority Key Identifier:
                keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fb:78:c3:b4:2d:09:6b:1d:ee:fb:07:dc:6f:c5:a6:e2:e7:
         6a:56:ea:01:43:b4:b5:83:98:b6:37:6f:04:25:20:14:31:6e:
         fe:a4:55:6f:2b:90:1d:f4:1c:fc:37:50:70:c3:ad:30:67:44:
         07:be:da:04:a2:14:18:f4:85:b6:d6:b9:60:9e:0d:77:a2:58:
         88:2b:7f:74:4d:a1:e7:23:8a:9e:22:08:ef:d8:9a:10:c1:ce:
         cc:ae:fa:33:c5:41:86:5d:d3:fe:f2:8e:f5:f6:60:0e:89:c6:
         47:89:00:0a:5e:10:92:a1:c3:0e:d2:cc:25:93:ff:13:01:47:
         b8:89:ac:87:2f:0e:ee:8f:27:96:2b:02:69:71:d2:10:98:4a:
         22:c4:77:a0:7c:b1:5f:ad:9a:fb:c8:cb:ab:90:16:46:ef:a9:
         a4:71:79:ba:50:70:e0:44:45:9c:c8:55:a6:08:66:a7:72:5e:
         12:5c:28:86:f5:ad:7f:1d:6c:0e:3a:06:fa:1a:ac:12:18:8d:
         93:25:05:dd:8d:63:98:c0:e7:7a:5f:42:63:02:a8:35:48:5b:
         82:bd:a3:70:7f:2f:be:a0:01:f0:b9:09:68:e3:87:cd:ec:85:
         2b:f5:ac:64:5b:be:7a:92:fd:a1:9c:bb:fc:ca:91:97:e7:04:
         56:d4:f0:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xFxc8D1lyBGW9/oe4aW/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNmFiZGQ5NDIwZjA0YmE5YzFjZDJjMzRkYzdiMzUyOTg4
YWY4ZDkwHhcNMjYwNTE2MTQwMDU3WhcNMjYwNTE3MTQwMDU3WjAzMTEwLwYDVQQD
EygwZGU1ZjMyMDM2NmVjMmIzMDk4ZDI0YTVjZDlhZWJmZWI0ODEzNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ND6KnJliEHSTrukhQArfy2kPpxr
fBrK1JvPqKPj+KuedP27fawHVHsJ/j7vO9cj8RfDdMz4yZ4QRVtGGQGOk2hyPlTn
q/+oFS4OAW2u6XlgrsSywJ7Yoe3ZdxF4x+kR6GkM04BcQ1QHbz/F+bfyHSOaD4Zh
ONLePVP3Mg/uvZZk0LfdDhYbzNjojlTAnrHc0J7yqq+Jlh3Iwd19697rHVNTAVbv
v/HFzt57AOKZpG6BYv5/WWlzYrAd4IZqKtScCY5K6hakTx0GoECf08NkANtbB7VM
YiFL6+B4jtD0OXosYUiowT5c/UdhxZ22DB+n0ycfhVpECiFZ7o2meLh5ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3l8yA2bsKzCY0kpc2a6/60gTXOMB8GA1UdIwQY
MBaAFLFqvdlCDwS6nBzSw03Hs1KYivjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjkt
ZmJiMGQzYzEwNDIzLzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjktZmJiMGQzYzEwNDIz
LzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/t4w7Qt
CWsd7vsH3G/FpuLnalbqAUO0tYOYtjdvBCUgFDFu/qRVbyuQHfQc/DdQcMOtMGdE
B77aBKIUGPSFtta5YJ4Nd6JYiCt/dE2h5yOKniII79iaEMHOzK76M8VBhl3T/vKO
9fZgDonGR4kACl4QkqHDDtLMJZP/EwFHuImshy8O7o8nlisCaXHSEJhKIsR3oHyx
X62a+8jLq5AWRu+ppHF5ulBw4ERFnMhVpghmp3JeElwohvWtfx1sDjoG+hqsEhiN
kyUF3Y1jmMDnel9CYwKoNUhbgr2jcH8vvqAB8LkJaOOHzeyFK/WsZFu+epL9oZy7
/MqRl+cEVtTw4Q==
-----END CERTIFICATE-----
Generated at Sat May 16 22:42:24 2026 by rpki-client