Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File:                     9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier:          rhJ+AjJ0j4iOw3uc2Gba6SYX50yLExJdHNzAwW5oZy0=
Subject key identifier:   A2:3C:B0:86:24:A0:18:E5:B4:11:36:DA:42:F9:76:AE:73:FB:01:94
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer:       /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial:       019E314E02873D27D123B42804BD78D2E4AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number:          1919
Signing time:             Sat 16 May 2026 15:00:56 +0000
Manifest this update:     Sat 16 May 2026 15:00:56 +0000
Manifest next update:     Sun 17 May 2026 15:00:56 +0000
Files and hashes:         1: 14LKfzEcyprlucXZUzPgqnyuaSo.roa (hash: owEZKmUqoURhemkZHaPKsDWoCPoanQn9LH86MqhDwCI=)
                          2: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: pIEp4z/VuwXS2DijyknS3q6RB3m511kkdqSwwpxFLvc=)
                          3: G5qi4rCJoI8AUX8isP7b0ojIn7g.roa (hash: FS/t0aq2LUO9zTLCRQWanvLuxo6AAzEoo01kqAkUXDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:02:87:3d:27:d1:23:b4:28:04:bd:78:d2:e4:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
        Validity
            Not Before: May 16 15:00:56 2026 GMT
            Not After : May 17 15:00:56 2026 GMT
        Subject: CN=a23cb08624a018e5b41136da42f976ae73fb0194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e9:8e:5c:f7:75:54:88:78:33:1d:d2:1b:cd:
                    a4:86:b9:57:95:22:a7:39:26:f7:f2:b8:5d:c3:af:
                    83:ed:29:80:62:c6:72:25:7c:b4:8d:bc:bd:3a:66:
                    76:de:25:83:a5:83:5f:c5:8e:47:4a:ac:ca:23:ae:
                    24:3d:e7:b9:62:59:11:9c:4a:45:d7:59:93:f9:77:
                    b5:7e:b6:95:5c:7b:b2:ee:21:c9:30:f2:e7:3c:ea:
                    49:db:61:4b:4e:98:1a:55:69:94:b4:c3:e1:89:3b:
                    3b:78:4f:21:ea:cb:a8:ea:e2:80:69:3b:db:c3:22:
                    92:df:bb:6d:7f:e2:ae:1a:56:03:0e:dc:27:58:fd:
                    d1:7e:a8:5a:75:a7:3b:9b:8c:32:66:52:e1:ed:09:
                    60:ec:94:ad:cf:a4:07:f7:5d:08:fa:4a:ec:44:6a:
                    24:9b:6f:92:25:cc:76:17:4c:0b:b0:49:43:1c:f9:
                    89:4b:1f:d7:b2:7f:81:35:40:bc:60:01:fc:87:4d:
                    f6:03:af:b9:f7:48:55:27:15:e2:b2:e0:b5:d1:7c:
                    b9:ee:2d:64:01:5a:d9:dc:4c:a2:e4:03:b6:be:74:
                    36:e5:29:da:58:2e:16:ff:29:6f:35:69:a9:bb:a1:
                    53:8f:f6:a4:cf:a3:2a:f6:3e:4b:cf:5c:9f:5c:aa:
                    3f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3C:B0:86:24:A0:18:E5:B4:11:36:DA:42:F9:76:AE:73:FB:01:94
            X509v3 Authority Key Identifier:
                keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:13:e7:fb:c4:bd:a0:e6:1b:21:14:d5:1b:fd:2c:21:a4:c4:
         8b:fd:4d:6a:3c:f3:d0:cc:c3:e2:33:de:c8:b2:f2:cd:4c:ad:
         f6:4e:70:88:97:75:9d:89:e0:32:69:55:b0:bb:c2:81:0e:46:
         bb:fd:6b:9a:36:fe:ea:ca:56:de:5e:27:90:79:c2:f5:22:93:
         52:07:b1:d2:58:cf:16:10:4f:e3:30:bd:07:29:e6:49:ae:54:
         c7:49:38:cb:4c:a8:9a:81:56:b5:a1:c4:5d:62:c3:da:73:e9:
         c0:d2:0e:f8:72:7b:78:bd:f1:5a:c0:09:7c:7d:14:da:5f:c8:
         5b:31:fd:af:be:b3:36:88:17:dd:53:1e:c4:f2:a3:3b:55:0a:
         35:df:6b:25:77:fc:6e:f9:4e:5b:26:aa:a9:df:72:23:ca:ae:
         e0:16:03:f8:2b:3b:b8:18:8d:1d:a2:0e:75:cd:9a:11:99:26:
         a0:93:30:c1:28:37:bf:3f:13:f1:be:12:df:1c:bc:bf:88:fb:
         56:ec:f0:af:2b:43:35:cd:7c:d9:47:de:66:e1:47:14:5b:e0:
         47:c0:90:47:60:1b:ec:8a:80:ce:cf:1d:a3:ad:a5:2f:54:ab:
         8d:46:5e:a4:8d:34:74:9b:20:96:d3:12:4c:28:08:16:44:3e:
         9a:2a:a4:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTgKHPSfRI7QoBL140uSsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjdhYjQ1ODdlNjkwMjJlNWUyYmMyNDEwN2I1MDFkMDMx
YzM3MjAwHhcNMjYwNTE2MTUwMDU2WhcNMjYwNTE3MTUwMDU2WjAzMTEwLwYDVQQD
EyhhMjNjYjA4NjI0YTAxOGU1YjQxMTM2ZGE0MmY5NzZhZTczZmIwMTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjemOXPd1VIh4Mx3SG82khrlXlSKn
OSb38rhdw6+D7SmAYsZyJXy0jby9OmZ23iWDpYNfxY5HSqzKI64kPee5YlkRnEpF
11mT+Xe1fraVXHuy7iHJMPLnPOpJ22FLTpgaVWmUtMPhiTs7eE8h6suo6uKAaTvb
wyKS37ttf+KuGlYDDtwnWP3Rfqhadac7m4wyZlLh7Qlg7JStz6QH910I+krsRGok
m2+SJcx2F0wLsElDHPmJSx/Xsn+BNUC8YAH8h032A6+590hVJxXisuC10Xy57i1k
AVrZ3Eyi5AO2vnQ25SnaWC4W/ylvNWmpu6FTj/akz6Mq9j5Lz1yfXKo/1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKI8sIYkoBjltBE22kL5dq5z+wGUMB8GA1UdIwQY
MBaAFPT3q0WH5pAi5eK8JBB7UB0DHDcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzct
ZWY3MTBlYzdiMmZlLzEvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzctZWY3MTBlYzdiMmZl
LzEvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBPn+8S9
oOYbIRTVG/0sIaTEi/1Najzz0MzD4jPeyLLyzUyt9k5wiJd1nYngMmlVsLvCgQ5G
u/1rmjb+6spW3l4nkHnC9SKTUgex0ljPFhBP4zC9BynmSa5Ux0k4y0yomoFWtaHE
XWLD2nPpwNIO+HJ7eL3xWsAJfH0U2l/IWzH9r76zNogX3VMexPKjO1UKNd9rJXf8
bvlOWyaqqd9yI8qu4BYD+Cs7uBiNHaIOdc2aEZkmoJMwwSg3vz8T8b4S3xy8v4j7
VuzwrytDNc182UfeZuFHFFvgR8CQR2Ab7IqAzs8do62lL1SrjUZepI00dJsgltMS
TCgIFkQ+miqkdA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:55:09 2026 by rpki-client