Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File:                     g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier:          1m+4v9C8t5xGc2LRrN++74TMvQAPC16SGBUdVVWBOPQ=
Subject key identifier:   5F:D5:DA:A2:6E:B2:57:3E:B1:9D:3D:76:AB:2A:53:24:70:E6:5A:65
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer:       /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial:       019E5636459748802EE3591C5E253E040CD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number:          1073
Signing time:             Sat 23 May 2026 19:00:57 +0000
Manifest this update:     Sat 23 May 2026 19:00:57 +0000
Manifest next update:     Sun 24 May 2026 19:00:57 +0000
Files and hashes:         1: 3Ji8ZxtqU_lIwKa_SqT03tF5SWE.roa (hash: jTuElWfRQSD5SofMMRCQ0LeEwPmYlDKmyuYEtvYSFDY=)
                          2: W5VTroF4zcGApX3Giz89KR2_wWg.roa (hash: GNfQgd1tr7xOtZa17O8ZeusFNmCf6n9fTIUFI6Sv0mk=)
                          3: cWuGeJ6gM-3ve4HkKVmEZUSc7S8.roa (hash: P0kghOMwSQUMU4gKXJ4ASB+7Zwvt3QGVEmH46AdBNrw=)
                          4: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: L9tQkcdmd0gOLt4qcwvVB+h0FPa+1NV+Npk3O3QU6GM=)
                          5: i1BjMoSXoEWlc23if0J_xkTVNk8.roa (hash: l69kedN+dgUtEyfn899iCFRNjGmUnUexKwv+aYvezR4=)
                          6: mI1bOyES1SUvd3jXkMpsFL9UDNs.roa (hash: G8pWjV9esRmq6YgXU83pAW+6b6j1UXEhnMOTBHJgNSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:56:36:45:97:48:80:2e:e3:59:1c:5e:25:3e:04:0c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
        Validity
            Not Before: May 23 19:00:57 2026 GMT
            Not After : May 24 19:00:57 2026 GMT
        Subject: CN=5fd5daa26eb2573eb19d3d76ab2a532470e65a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9d:54:b0:d3:f8:19:aa:91:1f:7b:76:71:4e:
                    6b:6e:56:2e:bf:fa:1d:0b:92:60:64:e5:8b:71:94:
                    58:57:43:33:b5:42:fa:16:bb:88:ae:b2:7c:bd:18:
                    86:11:8e:77:38:7c:76:2d:cd:09:1d:5c:5a:2c:88:
                    fa:4e:d2:60:5c:68:57:c5:4a:54:97:cd:3b:81:01:
                    55:44:97:68:be:f1:1b:0a:52:3a:03:98:0a:b1:98:
                    3c:b2:71:bc:29:40:62:59:47:4b:74:cb:cc:a7:7c:
                    56:ce:d4:f1:f0:be:2f:c6:d6:da:f4:f5:e1:9c:c4:
                    7c:8e:30:20:c0:f4:8e:f1:9b:99:33:5f:35:74:1b:
                    8b:7b:a1:8c:cc:c2:14:1e:fd:53:6d:6b:6a:81:38:
                    00:62:cf:ad:1d:cb:53:fd:6d:81:74:33:05:ec:88:
                    bb:cb:5a:69:fb:ee:43:59:1f:3c:d6:7b:df:c1:c4:
                    05:27:cd:e9:3d:b4:02:18:55:9d:29:1f:a2:ac:60:
                    7c:aa:dd:cf:8f:95:d0:64:77:a5:56:27:c1:43:32:
                    ea:48:35:5f:e9:2a:16:75:4d:e3:0b:3e:c0:a3:06:
                    c7:46:09:42:4f:b2:b1:8e:68:9c:f9:76:a0:18:ea:
                    95:9a:46:54:d3:36:d1:7a:d8:1b:bc:87:86:3b:96:
                    d2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D5:DA:A2:6E:B2:57:3E:B1:9D:3D:76:AB:2A:53:24:70:E6:5A:65
            X509v3 Authority Key Identifier:
                keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:48:7d:56:07:1d:7a:ac:88:af:7e:da:ad:91:71:8b:0f:b0:
         93:db:61:b5:85:5b:2b:15:49:a2:c8:6b:3c:e1:06:ad:ee:fe:
         7c:92:48:18:5a:bc:9d:ce:16:1b:42:60:fe:72:47:1a:23:3d:
         a2:b0:38:7a:f5:0d:ae:7a:4b:d7:f3:6f:63:b5:bf:c1:0e:6f:
         75:6d:f4:5f:1c:28:98:49:81:1d:a4:b9:48:36:2c:fc:88:aa:
         2c:8a:ce:34:8e:25:22:f0:81:bf:94:72:16:95:ca:fb:6b:fe:
         b9:5a:65:af:a1:17:81:c4:93:ae:00:9f:ef:65:9b:35:c4:e9:
         7a:63:d8:d0:8d:7a:21:f8:cd:67:20:e1:ee:76:af:59:9d:68:
         ba:9a:20:ea:ec:05:ed:16:05:af:c6:13:94:18:1b:a4:6f:14:
         0a:99:95:14:81:5e:80:14:a0:69:34:ba:6a:ca:d8:c1:84:c2:
         38:16:14:77:85:e0:93:5d:90:c5:f2:1c:02:c9:84:7c:f6:8e:
         1b:ad:6f:d0:89:8d:50:37:aa:54:ee:56:32:f8:b9:cc:1c:1f:
         06:e5:1f:b5:57:9c:b8:3c:b9:76:43:4e:dd:03:97:0c:1b:15:
         76:50:49:2e:98:f5:6d:a3:aa:f2:37:53:fd:7f:b9:f9:47:8f:
         ac:99:fb:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5WNkWXSIAu41kcXiU+BAzXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzEwM2Q2NWE1NGQ2YWYxZWZiYTZhYzNlNjM3MjIwMjhh
ZjJiYjEwHhcNMjYwNTIzMTkwMDU3WhcNMjYwNTI0MTkwMDU3WjAzMTEwLwYDVQQD
Eyg1ZmQ1ZGFhMjZlYjI1NzNlYjE5ZDNkNzZhYjJhNTMyNDcwZTY1YTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp1UsNP4GaqRH3t2cU5rblYuv/od
C5JgZOWLcZRYV0MztUL6FruIrrJ8vRiGEY53OHx2Lc0JHVxaLIj6TtJgXGhXxUpU
l807gQFVRJdovvEbClI6A5gKsZg8snG8KUBiWUdLdMvMp3xWztTx8L4vxtba9PXh
nMR8jjAgwPSO8ZuZM181dBuLe6GMzMIUHv1TbWtqgTgAYs+tHctT/W2BdDMF7Ii7
y1pp++5DWR881nvfwcQFJ83pPbQCGFWdKR+irGB8qt3Pj5XQZHelVifBQzLqSDVf
6SoWdU3jCz7AowbHRglCT7Kxjmic+XagGOqVmkZU0zbRetgbvIeGO5bSIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/V2qJuslc+sZ09dqsqUyRw5lplMB8GA1UdIwQY
MBaAFIPBA9ZaVNavHvumrD5jciAoryuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQt
YjUwY2Y1ZjJhYTIyLzEvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQtYjUwY2Y1ZjJhYTIy
LzEvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEh9Vgcd
eqyIr37arZFxiw+wk9thtYVbKxVJoshrPOEGre7+fJJIGFq8nc4WG0Jg/nJHGiM9
orA4evUNrnpL1/NvY7W/wQ5vdW30XxwomEmBHaS5SDYs/IiqLIrONI4lIvCBv5Ry
FpXK+2v+uVplr6EXgcSTrgCf72WbNcTpemPY0I16IfjNZyDh7navWZ1oupog6uwF
7RYFr8YTlBgbpG8UCpmVFIFegBSgaTS6asrYwYTCOBYUd4Xgk12QxfIcAsmEfPaO
G61v0ImNUDeqVO5WMvi5zBwfBuUftVecuDy5dkNO3QOXDBsVdlBJLpj1baOq8jdT
/X+5+UePrJn7Iw==
-----END CERTIFICATE-----
Generated at Sun May 24 04:38:03 2026 by rpki-client