Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File:                     9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier:          6uRvLSyqLuwN7QsIkOt8OmUDVtPT2OdmQn5HR4aM+9Q=
Subject key identifier:   AE:24:CE:02:1E:87:13:CD:D0:B1:69:99:2D:49:EF:75:D9:C1:E3:EC
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer:       /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial:       019E2FCDFB8DCF2EE5E7CE089664E4EE69CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number:          190C
Signing time:             Sat 16 May 2026 08:01:28 +0000
Manifest this update:     Sat 16 May 2026 08:01:28 +0000
Manifest next update:     Sun 17 May 2026 08:01:28 +0000
Files and hashes:         1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: XMpe96F8HYCN35uYRWE1Annsb4rXXhtTAihOWGl9fqI=)
                          2: GNmi18wQl4vtlo-9lVpDdUD44U8.roa (hash: PX3LxFRdOujIRS22JaSLS22PgqGNSnD4VtofU70m2Ic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:fb:8d:cf:2e:e5:e7:ce:08:96:64:e4:ee:69:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
        Validity
            Not Before: May 16 08:01:28 2026 GMT
            Not After : May 17 08:01:28 2026 GMT
        Subject: CN=ae24ce021e8713cdd0b169992d49ef75d9c1e3ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:63:f1:a3:14:76:96:23:93:21:90:1f:93:44:
                    b8:67:e2:d8:7b:9a:1a:4d:c1:b8:0b:2a:49:52:4a:
                    61:b4:6c:74:f7:c8:c6:16:23:06:a7:50:e9:52:7b:
                    60:9e:7c:bd:7b:0b:da:fb:aa:d6:02:c2:cb:7e:0b:
                    50:7c:0c:98:35:a8:39:eb:7d:da:00:f7:96:a7:33:
                    6b:76:c8:e6:e2:7d:a9:55:d7:2f:2b:60:d9:2d:6c:
                    bb:56:9a:b7:11:e9:3b:a2:4b:ad:7c:bc:43:ce:63:
                    3e:db:9a:ef:31:2e:72:e2:4b:9d:fb:8d:7b:94:69:
                    5e:56:79:26:7d:26:88:bc:d2:86:09:14:69:47:f9:
                    32:24:c4:f6:da:1e:e7:12:67:47:90:1e:23:bc:84:
                    f7:e3:a4:f9:9a:fd:0d:64:1e:05:a8:64:4c:d9:95:
                    1e:6b:65:21:7e:06:12:0b:c2:42:a3:16:a4:71:06:
                    73:83:8f:5a:9d:4d:fd:a4:c0:eb:d7:08:10:70:25:
                    2a:8b:36:72:39:96:3c:61:92:5c:18:34:8a:7f:40:
                    9d:2f:5f:21:c3:65:81:75:68:48:3b:d0:37:a9:5e:
                    00:f9:10:40:ee:f2:be:d4:40:25:37:4d:a1:a8:f8:
                    b5:a6:22:05:10:2c:49:cf:5f:8b:fd:19:29:3e:8e:
                    33:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:24:CE:02:1E:87:13:CD:D0:B1:69:99:2D:49:EF:75:D9:C1:E3:EC
            X509v3 Authority Key Identifier:
                keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8c:df:d0:30:ab:59:07:b7:2a:5e:e0:88:24:13:6e:34:de:
         3d:b3:37:26:b9:a8:41:56:13:12:76:2c:12:e8:18:ee:ad:b1:
         ab:f3:13:d8:0c:c8:3c:e4:ca:f3:5c:0b:a2:4d:27:d0:b4:98:
         b6:ba:57:53:00:56:ee:98:f7:94:1e:07:fc:19:29:b3:0c:6d:
         5c:31:b3:fc:22:3d:25:41:c3:33:38:cf:02:0b:25:31:9d:5f:
         82:50:b6:7d:44:15:22:f2:f5:30:a7:67:9f:96:37:72:39:63:
         4f:62:be:2d:1e:ed:da:6c:54:94:b3:2b:16:e7:f7:f9:2a:bb:
         34:01:03:8b:13:1d:af:09:ec:2d:2a:93:ca:8d:aa:1a:55:fc:
         e7:d7:b4:a9:1a:a9:1b:77:1f:be:5d:d2:28:f3:5e:a9:df:c9:
         43:5c:50:e7:fd:f2:52:83:f0:7b:fb:58:9e:4b:c0:3b:ca:82:
         8b:be:77:38:02:2f:09:a4:45:54:45:db:e4:c9:b2:e2:3d:67:
         ac:b2:94:e2:13:35:d8:cd:6e:60:e8:11:b8:d0:38:72:96:4b:
         95:29:4a:fa:ec:76:f2:46:57:e4:e8:05:22:c2:bc:d3:5b:a2:
         56:8f:2a:a5:0a:9d:70:d8:ea:89:f9:e2:53:d8:be:9e:9b:55:
         07:73:34:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vzfuNzy7l584IlmTk7mnLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0N2QwMzM3N2NjMTA4ZjQ0MDkxMjZiOWEwYzIwMTYzMjQy
MWM2NGEwHhcNMjYwNTE2MDgwMTI4WhcNMjYwNTE3MDgwMTI4WjAzMTEwLwYDVQQD
EyhhZTI0Y2UwMjFlODcxM2NkZDBiMTY5OTkyZDQ5ZWY3NWQ5YzFlM2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GPxoxR2liOTIZAfk0S4Z+LYe5oa
TcG4CypJUkphtGx098jGFiMGp1DpUntgnny9ewva+6rWAsLLfgtQfAyYNag5633a
APeWpzNrdsjm4n2pVdcvK2DZLWy7Vpq3Eek7okutfLxDzmM+25rvMS5y4kud+417
lGleVnkmfSaIvNKGCRRpR/kyJMT22h7nEmdHkB4jvIT346T5mv0NZB4FqGRM2ZUe
a2UhfgYSC8JCoxakcQZzg49anU39pMDr1wgQcCUqizZyOZY8YZJcGDSKf0CdL18h
w2WBdWhIO9A3qV4A+RBA7vK+1EAlN02hqPi1piIFECxJz1+L/RkpPo4zVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4kzgIehxPN0LFpmS1J73XZwePsMB8GA1UdIwQY
MBaAFPR9Azd8wQj0QJEmuaDCAWMkIcZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUgwRE4zekJDUFJBa1NhNW9NSUJZeVFoeGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YmM0NjktZjdlMy00MGM0LWFmYzgt
ZTFkMGZkZDViZmY1LzEvOUgwRE4zekJDUFJBa1NhNW9NSUJZeVFoeGtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84YmM0NjktZjdlMy00MGM0LWFmYzgtZTFkMGZkZDViZmY1
LzEvOUgwRE4zekJDUFJBa1NhNW9NSUJZeVFoeGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbozf0DCr
WQe3Kl7giCQTbjTePbM3JrmoQVYTEnYsEugY7q2xq/MT2AzIPOTK81wLok0n0LSY
trpXUwBW7pj3lB4H/BkpswxtXDGz/CI9JUHDMzjPAgslMZ1fglC2fUQVIvL1MKdn
n5Y3cjljT2K+LR7t2mxUlLMrFuf3+Sq7NAEDixMdrwnsLSqTyo2qGlX859e0qRqp
G3cfvl3SKPNeqd/JQ1xQ5/3yUoPwe/tYnkvAO8qCi753OAIvCaRFVEXb5Mmy4j1n
rLKU4hM12M1uYOgRuNA4cpZLlSlK+ux28kZX5OgFIsK801uiVo8qpQqdcNjqifni
U9i+nptVB3M0mQ==
-----END CERTIFICATE-----
Generated at Sat May 16 17:13:59 2026 by rpki-client