Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File:                     maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier:          agU47XFw8LDGHZH+5dntJG6Bj6F3rstSl8lHoFJzaHo=
Subject key identifier:   07:39:99:54:13:F9:3E:D0:66:97:5B:51:04:36:4F:70:B2:AB:5E:44
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer:       /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial:       019E299451594D49B235183A6166FD891102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number:          0721
Signing time:             Fri 15 May 2026 03:00:46 +0000
Manifest this update:     Fri 15 May 2026 03:00:46 +0000
Manifest next update:     Sat 16 May 2026 03:00:46 +0000
Files and hashes:         1: WXXJ5075ZAff04RmS5smR110RVw.roa (hash: uErB5MACpy/J873DH0P3yHm3DQt+fz1WVOuw3Q44104=)
                          2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: SdgaOYYgT3sUsAh9SRbYS0nn8RWRWJvD177wcuaXcQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:94:51:59:4d:49:b2:35:18:3a:61:66:fd:89:11:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
        Validity
            Not Before: May 15 03:00:46 2026 GMT
            Not After : May 16 03:00:46 2026 GMT
        Subject: CN=0739995413f93ed066975b5104364f70b2ab5e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:61:29:e6:15:e0:78:0f:46:b3:d6:71:f1:a4:
                    25:28:6a:dc:f6:59:24:26:82:c2:3c:22:06:45:a8:
                    3d:be:e8:7d:2c:28:28:5e:07:61:5b:ca:a0:8b:e9:
                    15:c5:20:91:b6:dd:d3:c1:62:23:b9:32:d1:d2:ca:
                    3b:e9:ba:ba:7a:a6:45:78:cf:4d:66:41:df:9f:d4:
                    dc:57:95:dd:bc:17:ae:86:8a:b8:4b:e9:b1:ab:af:
                    80:2f:c6:82:29:4a:a0:47:35:6c:b3:6a:5a:84:e9:
                    bd:e8:54:12:1b:d5:c0:24:12:c7:e6:5d:3e:a4:07:
                    12:f1:9b:a0:8a:b8:14:7f:0a:24:98:09:2f:56:3e:
                    02:12:4b:bd:af:c6:f4:ce:ac:82:e0:6c:7c:7c:96:
                    37:af:6c:c3:96:27:9d:83:48:d8:7f:8d:75:93:b3:
                    a1:f8:92:ad:ce:47:12:00:88:9c:d0:da:6d:39:1f:
                    28:b5:87:12:e8:1a:bf:18:d8:7a:8a:41:90:10:8e:
                    b8:fc:ee:7c:16:28:02:1c:99:a8:89:8e:79:bf:b7:
                    93:4b:74:b5:04:56:fb:d0:89:b3:78:34:85:32:67:
                    e0:32:35:53:5a:d0:f1:bb:34:49:a5:03:48:1f:f6:
                    9e:2f:1f:d6:ad:d7:5f:19:79:d2:1c:c0:22:87:b1:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:39:99:54:13:F9:3E:D0:66:97:5B:51:04:36:4F:70:B2:AB:5E:44
            X509v3 Authority Key Identifier:
                keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:81:c9:fc:5f:e4:ef:68:7d:c5:d1:a3:cc:a4:a0:24:e1:9f:
         f1:cd:fc:07:25:df:bd:eb:d7:82:7c:41:2e:80:2b:98:7b:1f:
         76:49:2d:a5:d5:e6:45:5b:83:87:29:91:87:6b:5f:c5:ea:d0:
         31:32:7a:d7:25:4b:4b:1b:12:75:44:7f:55:6c:45:b0:30:5c:
         0e:0d:48:02:58:14:c2:93:4a:22:68:e5:30:bd:01:99:4d:56:
         46:b5:19:ba:d8:9a:ea:b0:c6:68:0b:d8:8b:f2:a3:40:37:c6:
         8c:6f:a1:67:04:2c:80:f6:6c:ea:69:a1:6d:3d:01:9c:56:20:
         4c:95:08:88:f7:6f:4f:90:3a:0a:d7:d3:5b:83:16:0b:64:5a:
         df:de:89:c2:26:b5:03:8f:a5:b2:6d:43:37:3c:02:c0:75:34:
         c2:4c:5e:fe:fc:b7:d6:e9:60:65:91:c6:fb:c9:00:71:32:7e:
         b4:9d:46:2e:98:89:dc:eb:6f:42:06:3a:c7:a8:68:7e:1f:eb:
         20:7e:b6:d9:69:a6:d6:fc:ec:53:fd:42:32:ba:c6:8b:cd:ab:
         8b:54:f1:f5:19:90:61:78:91:98:71:07:18:85:b9:f7:64:e3:
         31:94:4b:78:52:46:f4:de:c3:77:08:ff:dc:86:80:85:55:5a:
         3c:d4:a3:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4plFFZTUmyNRg6YWb9iRECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YWNhNDAxNmFmODVkNTk2OTU0ODRjZDYxM2NmMTg5NmRm
ZDU5YTEwHhcNMjYwNTE1MDMwMDQ2WhcNMjYwNTE2MDMwMDQ2WjAzMTEwLwYDVQQD
EygwNzM5OTk1NDEzZjkzZWQwNjY5NzViNTEwNDM2NGY3MGIyYWI1ZTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GEp5hXgeA9Gs9Zx8aQlKGrc9lkk
JoLCPCIGRag9vuh9LCgoXgdhW8qgi+kVxSCRtt3TwWIjuTLR0so76bq6eqZFeM9N
ZkHfn9TcV5XdvBeuhoq4S+mxq6+AL8aCKUqgRzVss2pahOm96FQSG9XAJBLH5l0+
pAcS8ZugirgUfwokmAkvVj4CEku9r8b0zqyC4Gx8fJY3r2zDliedg0jYf411k7Oh
+JKtzkcSAIic0NptOR8otYcS6Bq/GNh6ikGQEI64/O58FigCHJmoiY55v7eTS3S1
BFb70ImzeDSFMmfgMjVTWtDxuzRJpQNIH/aeLx/WrddfGXnSHMAih7HDlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAc5mVQT+T7QZpdbUQQ2T3Cyq15EMB8GA1UdIwQY
MBaAFJmspAFq+F1ZaVSEzWE88Ylt/VmhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWF5a0FXcjRYVmxwVklUTllUenhpVzM5V2FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lMGMxZDQtOGIzMy00MzYwLTlmNTAt
Y2JiYWM2ZTRhZDcxLzEvbWF5a0FXcjRYVmxwVklUTllUenhpVzM5V2FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lMGMxZDQtOGIzMy00MzYwLTlmNTAtY2JiYWM2ZTRhZDcx
LzEvbWF5a0FXcjRYVmxwVklUTllUenhpVzM5V2FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoHJ/F/k
72h9xdGjzKSgJOGf8c38ByXfvevXgnxBLoArmHsfdkktpdXmRVuDhymRh2tfxerQ
MTJ61yVLSxsSdUR/VWxFsDBcDg1IAlgUwpNKImjlML0BmU1WRrUZutia6rDGaAvY
i/KjQDfGjG+hZwQsgPZs6mmhbT0BnFYgTJUIiPdvT5A6CtfTW4MWC2Ra396Jwia1
A4+lsm1DNzwCwHU0wkxe/vy31ulgZZHG+8kAcTJ+tJ1GLpiJ3OtvQgY6x6hofh/r
IH622Wmm1vzsU/1CMrrGi82ri1Tx9RmQYXiRmHEHGIW592TjMZRLeFJG9N7Ddwj/
3IaAhVVaPNSjEw==
-----END CERTIFICATE-----
Generated at Fri May 15 07:02:16 2026 by rpki-client