Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
File:                     CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json)
Hash identifier:          zNvChuxMz0C5u4Km8nDiXC7T/wKrn9xjX4DGmufp99s=
Subject key identifier:   73:16:80:CF:EE:A5:37:EB:82:C9:2F:21:1D:37:01:81:3C:2C:99:FD
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Certificate issuer:       /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial:       019E30E03147E56C8BFC27F20F2AE3E5CE9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
Manifest number:          0A77
Signing time:             Sat 16 May 2026 13:00:59 +0000
Manifest this update:     Sat 16 May 2026 13:00:59 +0000
Manifest next update:     Sun 17 May 2026 13:00:59 +0000
Files and hashes:         1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: iQP6/R6I2/8KN/4uke45fpuZ0/DUwPolP1xR9seb/fY=)
                          2: RsTSr-3jTnG1CeXmaL5yjIv3e7A.roa (hash: U9h7mXi2TPfXP2mWBMjzpDcUhTXc3t6ZDS7Y90GMnqI=)
                          3: V2mAUhiuLSdY43WTX18t68JU52U.roa (hash: 0HD53IzD09TTvFxGJ5/toZ8gNnKRelVvlZQJyDdwGvM=)
                          4: ZYguphbq_OVZXqnSVXPcyY-MrWU.roa (hash: YBNSr4xuGhr4HSUuVKzH8avlZXqqbx+cNVBs9dQx+pg=)
                          5: kNW-FofDRFcYyJ6jdZntLsWi_kQ.roa (hash: vsRui+TumYQf+mEKOxKsjjJTMlbNB6Ytf/Fua/xhVUM=)
                          6: ksfa6RQDM_0VxmjR64arGWZD9rM.roa (hash: eBadilkI77a4zTmLhePWsFBGmFNKACYzx+SMzHBV/40=)
                          7: yNd_DMkIMvgYnrn_7Wsari1U2DE.roa (hash: IEhZvaGq91qhQu5JNN1NRfY/8v2XmumSPV2Zm2UUU6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:31:47:e5:6c:8b:fc:27:f2:0f:2a:e3:e5:ce:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
        Validity
            Not Before: May 16 13:00:59 2026 GMT
            Not After : May 17 13:00:59 2026 GMT
        Subject: CN=731680cfeea537eb82c92f211d3701813c2c99fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b6:81:42:46:3a:f7:b8:9e:d8:7a:67:41:50:
                    36:cb:51:ff:4c:8f:0c:d5:ed:86:86:6f:1e:59:24:
                    60:8e:10:ac:c1:72:d5:9a:e3:c0:85:6d:32:20:9c:
                    40:79:38:01:fb:a9:cf:d5:a2:9f:f9:f7:e0:bc:57:
                    56:cf:f5:aa:61:36:e9:30:c9:27:34:71:5f:a9:de:
                    55:94:bb:69:5c:9c:23:18:9d:eb:e3:84:4d:d0:d8:
                    a9:a2:c0:1f:b0:9d:03:8b:83:f0:b8:22:9a:ad:ae:
                    c7:56:34:bd:97:fc:e8:0c:e9:aa:31:8b:8a:11:7d:
                    2f:e7:67:ae:10:97:8c:cd:79:6d:fb:68:7c:4e:cf:
                    58:3d:92:c4:32:64:af:4b:1a:0a:e4:9e:f8:04:27:
                    48:1f:69:52:c1:23:0f:79:bd:8d:f1:71:f8:ad:64:
                    96:c8:83:9c:75:a8:79:0d:94:b6:4e:50:19:e6:ec:
                    2f:45:73:7c:7c:b5:70:f0:0d:5e:5a:d6:57:1b:67:
                    5f:c3:b3:7c:c7:10:12:ca:0b:fe:87:af:fb:06:02:
                    1a:3a:54:4f:26:6f:7d:0c:db:b2:db:c7:8d:0e:a1:
                    a4:36:47:16:bf:d2:bc:80:02:36:70:35:fd:da:c7:
                    34:ef:01:a7:cc:9f:b7:10:1d:6d:71:28:d6:4c:0d:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:16:80:CF:EE:A5:37:EB:82:C9:2F:21:1D:37:01:81:3C:2C:99:FD
            X509v3 Authority Key Identifier:
                keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c6:b7:c6:ba:ce:da:fc:14:27:83:40:0f:b7:a8:3c:52:f4:
         c2:a8:8a:de:c9:94:7f:00:37:4d:07:ac:ed:89:ad:c1:73:72:
         80:33:55:11:10:86:41:f8:d7:b0:fc:9a:c1:41:1f:cd:c8:85:
         6f:c0:3c:49:50:9d:db:a5:26:e2:4d:24:ed:1e:c3:88:39:a6:
         35:32:c9:17:e3:9f:d1:cb:93:38:0f:32:28:3f:3a:01:61:5c:
         ab:a3:f8:f8:71:9b:44:be:7b:11:0b:89:fe:af:76:5b:4e:36:
         f7:74:b1:1e:be:8b:b5:14:f8:95:7a:62:c9:a1:5d:80:49:8d:
         68:60:75:fe:63:11:94:e3:00:47:c2:12:af:4d:58:8f:c4:19:
         4f:51:28:7e:cb:e5:0d:33:4e:36:06:da:4f:12:39:ad:7c:40:
         6d:31:20:70:f4:0c:7d:78:56:aa:f9:3f:5f:53:fd:26:57:ce:
         87:7f:2f:13:92:fa:bd:a7:ad:6c:f7:cd:b1:c8:0d:e9:ce:68:
         a7:92:7f:7d:80:5e:35:91:19:88:36:38:0f:b1:a8:a3:b1:30:
         43:38:52:22:59:dc:29:46:f7:e8:5d:d1:71:b1:18:63:4c:87:
         61:42:ee:47:7b:6b:9c:57:ad:66:c8:cf:1d:40:76:ab:de:81:
         c0:04:e9:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4DFH5WyL/CfyDyrj5c6eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjlhMmEzOTYzNWI3OTc0NzZmMWYxNjMzYWU4ZjI3YmYz
M2I1MzMwHhcNMjYwNTE2MTMwMDU5WhcNMjYwNTE3MTMwMDU5WjAzMTEwLwYDVQQD
Eyg3MzE2ODBjZmVlYTUzN2ViODJjOTJmMjExZDM3MDE4MTNjMmM5OWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzraBQkY697ie2HpnQVA2y1H/TI8M
1e2Ghm8eWSRgjhCswXLVmuPAhW0yIJxAeTgB+6nP1aKf+ffgvFdWz/WqYTbpMMkn
NHFfqd5VlLtpXJwjGJ3r44RN0NiposAfsJ0Di4PwuCKara7HVjS9l/zoDOmqMYuK
EX0v52euEJeMzXlt+2h8Ts9YPZLEMmSvSxoK5J74BCdIH2lSwSMPeb2N8XH4rWSW
yIOcdah5DZS2TlAZ5uwvRXN8fLVw8A1eWtZXG2dfw7N8xxASygv+h6/7BgIaOlRP
Jm99DNuy28eNDqGkNkcWv9K8gAI2cDX92sc07wGnzJ+3EB1tcSjWTA185wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMWgM/upTfrgskvIR03AYE8LJn9MB8GA1UdIwQY
MBaAFAlpoqOWNbeXR28fFjOujye/M7UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUt
NDE0OTA4NzJmYzRlLzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUtNDE0OTA4NzJmYzRl
LzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8a3xrrO
2vwUJ4NAD7eoPFL0wqiK3smUfwA3TQes7YmtwXNygDNVERCGQfjXsPyawUEfzciF
b8A8SVCd26Um4k0k7R7DiDmmNTLJF+Of0cuTOA8yKD86AWFcq6P4+HGbRL57EQuJ
/q92W04293SxHr6LtRT4lXpiyaFdgEmNaGB1/mMRlOMAR8ISr01Yj8QZT1Eofsvl
DTNONgbaTxI5rXxAbTEgcPQMfXhWqvk/X1P9JlfOh38vE5L6vaetbPfNscgN6c5o
p5J/fYBeNZEZiDY4D7Goo7EwQzhSIlncKUb36F3RcbEYY0yHYULuR3trnFetZsjP
HUB2q96BwATpaQ==
-----END CERTIFICATE-----
Generated at Sat May 16 20:19:54 2026 by rpki-client