Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File:                     mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier:          Ccen8iV9T+bhYFeddNui3sXHm1FqXgcRpx5gEdJZYmI=
Subject key identifier:   BD:65:97:8A:3F:98:9A:E5:C5:71:74:C6:74:27:91:F5:92:F6:4E:9B
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer:       /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial:       019E2A023B6A893B41C958950527D513B1F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number:          0903
Signing time:             Fri 15 May 2026 05:00:49 +0000
Manifest this update:     Fri 15 May 2026 05:00:49 +0000
Manifest next update:     Sat 16 May 2026 05:00:49 +0000
Files and hashes:         1: BR_BUevx2sg_8tyRkbQkeVhjNsQ.roa (hash: DcW4cVxJuDUK3IKLW2cbHxN+qa5e/QUPCI24FuVBujI=)
                          2: NE_RBgLN-WEZ1pofTZpRWHKQLhU.roa (hash: nHBSYWCWMkjsq8eIHvyxI7K4o3nKXMreU+r6LsPFSas=)
                          3: f-WzYrTcVspbvV27XUH8n69DSig.roa (hash: dPXvzRcp3N5snJFT4/YTmjC8NO5nN1yqw4UaUWODI/0=)
                          4: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: swrh7gR2I04bYG1vfqY1iPPCfZOFe7TNhfQL6anfZ8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:3b:6a:89:3b:41:c9:58:95:05:27:d5:13:b1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
        Validity
            Not Before: May 15 05:00:49 2026 GMT
            Not After : May 16 05:00:49 2026 GMT
        Subject: CN=bd65978a3f989ae5c57174c6742791f592f64e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:79:18:05:30:ce:bd:bf:61:49:0c:42:bf:
                    b3:85:16:f9:62:87:a9:81:29:79:99:75:9d:5a:41:
                    3e:51:c5:b4:8d:45:ee:77:0c:be:c9:22:a6:a5:11:
                    d7:40:26:74:a5:de:2d:75:eb:18:61:f6:02:c1:80:
                    e6:58:cc:1d:23:b3:ab:88:5a:5d:34:37:e6:62:3a:
                    62:a1:db:1d:7c:db:7d:37:5b:00:f7:69:ae:12:41:
                    ae:88:c6:1e:14:48:12:f7:b9:ca:8d:71:8e:60:20:
                    8e:a5:36:24:77:22:2a:bf:c2:2a:96:63:37:56:57:
                    27:2a:74:57:d0:65:91:fe:06:e5:47:e7:28:e3:8b:
                    05:32:3f:95:16:b3:79:d5:b5:7a:70:ee:18:f4:16:
                    36:bb:7e:9f:de:06:7d:90:0c:da:8c:f2:4e:71:c4:
                    6a:76:af:88:2d:40:98:3b:81:2b:c0:75:07:d7:88:
                    68:95:12:ac:b9:df:6c:5f:19:39:3c:c0:cd:10:a6:
                    ce:84:02:33:ff:07:1d:e9:ed:76:14:95:d4:a3:43:
                    f2:54:ad:13:c6:4a:02:b8:cb:c4:7c:13:32:18:2e:
                    fe:78:c5:e4:5d:45:17:32:a3:f1:b2:aa:d2:fc:19:
                    fb:94:de:43:10:bc:6f:0e:4a:b2:ae:94:fa:5e:ee:
                    9c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:65:97:8A:3F:98:9A:E5:C5:71:74:C6:74:27:91:F5:92:F6:4E:9B
            X509v3 Authority Key Identifier:
                keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:17:f3:b0:11:ea:c9:ad:65:ce:b0:9a:bb:86:61:a6:16:ec:
         45:20:56:5b:20:23:35:f2:53:24:85:2e:96:9f:70:da:31:fb:
         b4:ea:8e:30:5e:23:0b:7d:c5:49:ac:46:3b:4b:8b:6c:33:0e:
         c8:0b:76:78:2d:c2:f1:80:ea:ac:33:e6:a1:4b:f5:08:13:04:
         50:94:79:f8:1e:2c:4a:7c:3b:5d:93:dc:ad:90:68:f1:95:66:
         95:79:f1:b0:d9:f8:5a:1a:f7:6a:0f:91:1a:f8:2a:85:46:c5:
         75:7d:e8:53:96:c5:ed:94:77:e8:6b:a5:02:97:77:07:ca:f9:
         62:f7:e2:4e:fb:b1:b4:26:b2:8e:69:dc:7b:4d:6c:45:f1:87:
         b0:5e:92:ed:37:25:03:9f:26:b0:51:80:2a:fe:2f:28:f3:6d:
         dd:4c:c5:0b:fb:03:c0:19:0b:5c:c4:0a:08:e8:62:aa:ce:96:
         3e:df:8a:19:15:75:74:5a:e0:79:f8:32:89:70:98:0e:ee:25:
         2e:72:c3:ee:3c:29:36:bd:44:1b:ec:fb:e9:5b:4f:b6:d7:81:
         05:8e:32:ba:63:9a:f5:77:71:e2:ca:81:37:d4:fe:26:9b:84:
         b7:67:48:02:6d:2f:9e:2b:e7:61:ce:a8:ff:02:f2:29:92:7b:
         e9:33:92:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qAjtqiTtByViVBSfVE7HxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjM4MTJhMTU5N2U5NjA1ZTJhOWJmNDlhY2Y4ZDYzODk4
MWE1ZjQwHhcNMjYwNTE1MDUwMDQ5WhcNMjYwNTE2MDUwMDQ5WjAzMTEwLwYDVQQD
EyhiZDY1OTc4YTNmOTg5YWU1YzU3MTc0YzY3NDI3OTFmNTkyZjY0ZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZF5GAUwzr2/YUkMQr+zhRb5Yoep
gSl5mXWdWkE+UcW0jUXudwy+ySKmpRHXQCZ0pd4tdesYYfYCwYDmWMwdI7OriFpd
NDfmYjpiodsdfNt9N1sA92muEkGuiMYeFEgS97nKjXGOYCCOpTYkdyIqv8IqlmM3
VlcnKnRX0GWR/gblR+co44sFMj+VFrN51bV6cO4Y9BY2u36f3gZ9kAzajPJOccRq
dq+ILUCYO4ErwHUH14holRKsud9sXxk5PMDNEKbOhAIz/wcd6e12FJXUo0PyVK0T
xkoCuMvEfBMyGC7+eMXkXUUXMqPxsqrS/Bn7lN5DELxvDkqyrpT6Xu6cDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1ll4o/mJrlxXF0xnQnkfWS9k6bMB8GA1UdIwQY
MBaAFJkjgSoVl+lgXiqb9JrPjWOJgaX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jM2NlZWYtZDc1NS00MzU1LTkzMDQt
NmIxNmM3ODhhOTBmLzEvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9jM2NlZWYtZDc1NS00MzU1LTkzMDQtNmIxNmM3ODhhOTBm
LzEvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBfzsBHq
ya1lzrCau4ZhphbsRSBWWyAjNfJTJIUulp9w2jH7tOqOMF4jC33FSaxGO0uLbDMO
yAt2eC3C8YDqrDPmoUv1CBMEUJR5+B4sSnw7XZPcrZBo8ZVmlXnxsNn4Whr3ag+R
GvgqhUbFdX3oU5bF7ZR36GulApd3B8r5YvfiTvuxtCayjmnce01sRfGHsF6S7Tcl
A58msFGAKv4vKPNt3UzFC/sDwBkLXMQKCOhiqs6WPt+KGRV1dFrgefgyiXCYDu4l
LnLD7jwpNr1EG+z76VtPtteBBY4yumOa9Xdx4sqBN9T+JpuEt2dIAm0vnivnYc6o
/wLyKZJ76TOS4Q==
-----END CERTIFICATE-----
Generated at Fri May 15 13:28:22 2026 by rpki-client