Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File:                     xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier:          g3QB3IA4dzp167g1Ez95AJwaK3hAUWMtJ4k5aMzBow0=
Subject key identifier:   FE:40:59:CC:16:4C:DA:11:05:7C:94:03:C8:52:3D:0F:B0:FE:18:3B
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer:       /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial:       019E2A0280AFE1B1E3612F52DB77D8537B81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number:          1914
Signing time:             Fri 15 May 2026 05:01:07 +0000
Manifest this update:     Fri 15 May 2026 05:01:07 +0000
Manifest next update:     Sat 16 May 2026 05:01:07 +0000
Files and hashes:         1: Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa (hash: 15BXKGLsn5CILBGoCHvyltyRe1OA4GGdr684IX7Rfck=)
                          2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: bYmmxS/sSWIlOUmCBl91bPxT5a9X478q24tK5Mbu1zE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:80:af:e1:b1:e3:61:2f:52:db:77:d8:53:7b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
        Validity
            Not Before: May 15 05:01:07 2026 GMT
            Not After : May 16 05:01:07 2026 GMT
        Subject: CN=fe4059cc164cda11057c9403c8523d0fb0fe183b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ba:52:33:81:fb:1b:2a:2b:2b:34:50:97:92:
                    21:12:28:d2:67:67:af:1e:6d:e7:93:ea:8e:5d:b7:
                    92:fc:dc:32:ba:bf:2b:e6:bd:72:fc:d8:07:b8:10:
                    10:a1:ef:64:7a:50:c0:59:32:ca:46:bc:d1:8f:97:
                    5b:31:61:59:be:3a:00:39:90:0a:57:bf:ab:3b:e5:
                    54:e0:e6:ed:b1:13:5f:01:ce:d7:9b:9c:37:48:be:
                    c0:e5:9c:ed:3f:bd:aa:dc:2a:2e:ef:a0:86:9e:0d:
                    98:d8:1f:87:24:7e:fb:d8:eb:2b:43:69:7f:90:a8:
                    d0:fb:bf:d1:66:c6:b0:c2:b9:31:e5:d5:53:aa:be:
                    07:a4:b3:1a:5e:55:6a:0a:1b:a2:32:e8:4d:36:f5:
                    fc:15:21:ab:ce:09:59:01:27:05:a3:be:7e:7d:b1:
                    8d:07:98:16:5c:e3:08:5a:24:23:34:de:4a:cf:81:
                    96:a1:54:67:23:37:27:96:de:e0:7a:36:89:95:37:
                    58:b0:4a:5b:70:ab:32:82:e1:67:67:6e:88:40:a7:
                    bb:55:05:45:16:cf:43:e2:c0:de:6d:52:b1:25:50:
                    f3:ac:bb:c6:77:82:e4:3c:5d:64:57:00:46:87:e3:
                    40:06:1c:80:f1:79:bd:81:f0:00:b5:c5:0b:bf:38:
                    c2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:40:59:CC:16:4C:DA:11:05:7C:94:03:C8:52:3D:0F:B0:FE:18:3B
            X509v3 Authority Key Identifier:
                keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1c:fd:5f:a7:33:a4:dd:d2:ec:40:90:3f:e0:41:49:11:db:
         c1:e5:3b:f3:9d:6b:8b:be:cc:6b:d9:1c:eb:b9:34:13:8b:5b:
         f8:e7:f3:f4:79:dd:e0:27:e9:27:e9:af:84:ad:25:76:e8:7e:
         48:6c:03:35:ba:f4:ec:84:b8:67:01:65:17:8d:35:94:58:84:
         58:70:38:b3:7f:e6:dc:9b:54:b1:d8:9f:7e:71:76:ba:55:97:
         7f:06:a9:ff:0c:f4:7a:bd:f6:b3:49:dc:8a:ca:d0:ae:d4:bb:
         66:13:2c:08:27:49:4a:d9:c8:1b:4a:30:ec:95:c8:b9:28:86:
         25:a1:32:ab:8c:26:4c:a5:49:b0:90:4a:b5:e6:9d:44:ff:0b:
         22:7c:8c:8c:da:02:58:f5:73:7a:74:b6:7b:b6:b9:53:e8:97:
         dc:cd:31:29:2c:03:91:3a:5b:60:1b:32:f2:a8:ed:4e:d4:0f:
         06:86:9f:bb:68:ed:7c:31:d1:a6:96:72:eb:5f:a0:b0:fe:61:
         8d:be:cc:68:f7:49:5c:c6:fc:58:15:e2:78:e9:1f:a4:c6:5a:
         23:e8:8d:86:30:c7:33:4c:71:a9:35:36:f9:87:1f:2a:06:05:
         f4:10:07:19:33:63:72:b0:d3:09:d3:21:f9:b7:4c:79:44:5a:
         44:ec:24:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qAoCv4bHjYS9S23fYU3uBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ODhhMDc5ZTRjZWI2YmIyNGMyM2M1MjcxZTQ1ODNlMWNm
MmY5YTkwHhcNMjYwNTE1MDUwMTA3WhcNMjYwNTE2MDUwMTA3WjAzMTEwLwYDVQQD
EyhmZTQwNTljYzE2NGNkYTExMDU3Yzk0MDNjODUyM2QwZmIwZmUxODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLpSM4H7GyorKzRQl5IhEijSZ2ev
Hm3nk+qOXbeS/Nwyur8r5r1y/NgHuBAQoe9kelDAWTLKRrzRj5dbMWFZvjoAOZAK
V7+rO+VU4ObtsRNfAc7Xm5w3SL7A5ZztP72q3Cou76CGng2Y2B+HJH772OsrQ2l/
kKjQ+7/RZsawwrkx5dVTqr4HpLMaXlVqChuiMuhNNvX8FSGrzglZAScFo75+fbGN
B5gWXOMIWiQjNN5Kz4GWoVRnIzcnlt7gejaJlTdYsEpbcKsyguFnZ26IQKe7VQVF
Fs9D4sDebVKxJVDzrLvGd4LkPF1kVwBGh+NABhyA8Xm9gfAAtcULvzjCtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5AWcwWTNoRBXyUA8hSPQ+w/hg7MB8GA1UdIwQY
MBaAFMWIoHnkzra7JMI8UnHkWD4c8vmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTIt
MTdlZGI5OGJiYjA4LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTItMTdlZGI5OGJiYjA4
LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRz9X6cz
pN3S7ECQP+BBSRHbweU7851ri77Ma9kc67k0E4tb+Ofz9Hnd4CfpJ+mvhK0lduh+
SGwDNbr07IS4ZwFlF401lFiEWHA4s3/m3JtUsdiffnF2ulWXfwap/wz0er32s0nc
isrQrtS7ZhMsCCdJStnIG0ow7JXIuSiGJaEyq4wmTKVJsJBKteadRP8LInyMjNoC
WPVzenS2e7a5U+iX3M0xKSwDkTpbYBsy8qjtTtQPBoafu2jtfDHRppZy61+gsP5h
jb7MaPdJXMb8WBXieOkfpMZaI+iNhjDHM0xxqTU2+YcfKgYF9BAHGTNjcrDTCdMh
+bdMeURaROwkNA==
-----END CERTIFICATE-----
Generated at Fri May 15 13:28:02 2026 by rpki-client