Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File:                     inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier:          3jvJOHyh6MhT9+rgwt+Oqv+AKkMOzZdwsGR2svZLolM=
Subject key identifier:   6B:1D:12:46:47:88:52:1D:02:8E:BD:2D:27:5E:01:EC:D3:CF:DC:61
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer:       /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial:       019E2BF0B71912F1DD417C5004B36BF0659D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number:          190D
Signing time:             Fri 15 May 2026 14:00:56 +0000
Manifest this update:     Fri 15 May 2026 14:00:56 +0000
Manifest next update:     Sat 16 May 2026 14:00:56 +0000
Files and hashes:         1: b2w6O9WirtRCdzK66va1rPliDCM.roa (hash: stbRk0sxdQicjLZT3kCAibpOrHEkv6FoTLisoOLFpLg=)
                          2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: lM/LN7WIU6Nd+tPhFT8PdDuH9EcdsLCYKZbYJ5MAwEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:f0:b7:19:12:f1:dd:41:7c:50:04:b3:6b:f0:65:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
        Validity
            Not Before: May 15 14:00:56 2026 GMT
            Not After : May 16 14:00:56 2026 GMT
        Subject: CN=6b1d12464788521d028ebd2d275e01ecd3cfdc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:e3:37:33:7b:10:39:d0:00:fa:f9:92:69:
                    5f:07:f0:5a:13:96:74:38:79:0a:d9:95:bb:85:45:
                    64:31:0a:55:49:7d:0b:1d:0f:44:1a:a6:ca:e3:53:
                    33:39:11:8a:fb:7e:ee:08:bb:b3:57:a2:5a:77:89:
                    ea:b2:60:c3:8b:97:9e:95:8e:98:0a:d7:c4:07:f6:
                    1a:d8:fe:d1:d0:ca:1c:55:21:e5:55:89:13:e1:8d:
                    3b:7f:2a:13:7a:d1:19:ab:9f:48:12:e3:3c:5e:b9:
                    da:ed:1a:53:df:48:56:aa:c1:f0:3c:f9:0c:b4:e7:
                    ac:a9:63:5b:a5:64:32:5c:50:29:f4:6d:e9:e3:46:
                    9f:b4:f6:a2:7b:1c:6b:e5:c3:37:b6:5b:d3:b2:bd:
                    d0:78:19:70:2e:68:5d:6c:55:52:79:67:73:a0:7e:
                    a5:73:86:e8:65:f6:65:d5:93:0c:bb:c4:f5:c3:ef:
                    b3:49:9f:eb:8d:b5:d5:06:a8:29:58:ff:6d:c5:83:
                    a3:bf:5d:44:fb:0b:9d:d4:96:f9:98:24:81:ab:a4:
                    8b:5a:d9:f9:c5:c7:aa:94:e3:ea:3a:18:f1:53:eb:
                    39:5b:fd:bd:a8:42:f4:e9:e9:9b:f1:89:0c:be:65:
                    bf:bf:a0:90:61:b9:50:5c:98:d0:37:30:05:9f:1e:
                    d5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1D:12:46:47:88:52:1D:02:8E:BD:2D:27:5E:01:EC:D3:CF:DC:61
            X509v3 Authority Key Identifier:
                keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:cb:c0:c3:14:30:5f:89:65:27:a5:ac:c4:de:1a:14:87:ff:
         77:cc:9f:1a:71:e0:4d:13:92:cf:86:0d:37:ca:02:fa:ca:5e:
         6d:e3:b3:48:5f:bc:79:a3:63:45:9b:f7:a6:0c:2b:cf:53:2c:
         b3:fc:1a:e2:29:72:8e:06:10:9f:e9:31:46:48:46:17:64:70:
         a4:bf:2c:8f:65:6e:03:4a:11:69:08:f9:a3:35:79:3f:3c:af:
         a2:db:73:4b:18:02:6a:c1:f0:c6:d8:3e:f3:08:7a:9e:07:f5:
         ee:e9:a4:25:c8:80:02:09:99:b4:f2:f3:e7:36:19:ce:71:9e:
         d8:6a:bd:c1:1e:ec:16:37:15:89:07:9d:f8:f3:07:ca:f4:28:
         8b:05:6a:48:4f:79:8f:e3:97:44:79:ed:90:ac:59:fa:db:d5:
         48:fb:9a:09:6d:a0:35:0e:b3:31:d7:2e:c1:64:d3:11:62:d6:
         34:c4:ea:f9:61:23:a1:42:c6:8c:2d:fd:9d:a4:f5:c8:1d:95:
         b7:e9:cb:ba:e6:cc:b9:20:cd:64:17:09:42:d0:0e:85:37:33:
         eb:af:8c:88:68:a8:58:07:ab:fa:95:be:d9:38:cb:0b:25:ef:
         f6:59:ac:4b:49:66:37:18:52:0d:9a:dc:4d:bc:71:81:98:d8:
         d7:be:18:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4r8LcZEvHdQXxQBLNr8GWdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2I4NWMzMTY1ODZiMTk5ZDI2YmZjNDhmZTI1OTg5Mzlj
YjZmZGUwHhcNMjYwNTE1MTQwMDU2WhcNMjYwNTE2MTQwMDU2WjAzMTEwLwYDVQQD
Eyg2YjFkMTI0NjQ3ODg1MjFkMDI4ZWJkMmQyNzVlMDFlY2QzY2ZkYzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmjjNzN7EDnQAPr5kmlfB/BaE5Z0
OHkK2ZW7hUVkMQpVSX0LHQ9EGqbK41MzORGK+37uCLuzV6Jad4nqsmDDi5eelY6Y
CtfEB/Ya2P7R0MocVSHlVYkT4Y07fyoTetEZq59IEuM8Xrna7RpT30hWqsHwPPkM
tOesqWNbpWQyXFAp9G3p40aftPaiexxr5cM3tlvTsr3QeBlwLmhdbFVSeWdzoH6l
c4boZfZl1ZMMu8T1w++zSZ/rjbXVBqgpWP9txYOjv11E+wud1Jb5mCSBq6SLWtn5
xceqlOPqOhjxU+s5W/29qEL06emb8YkMvmW/v6CQYblQXJjQNzAFnx7V3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsdEkZHiFIdAo69LSdeAezTz9xhMB8GA1UdIwQY
MBaAFIp7hcMWWGsZnSa/xI/iWYk5y2/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2Qt
MjlmMjBkYzhlYWY0LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2QtMjlmMjBkYzhlYWY0
LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcvAwxQw
X4llJ6WsxN4aFIf/d8yfGnHgTROSz4YNN8oC+spebeOzSF+8eaNjRZv3pgwrz1Ms
s/wa4ilyjgYQn+kxRkhGF2RwpL8sj2VuA0oRaQj5ozV5PzyvottzSxgCasHwxtg+
8wh6ngf17umkJciAAgmZtPLz5zYZznGe2Gq9wR7sFjcViQed+PMHyvQoiwVqSE95
j+OXRHntkKxZ+tvVSPuaCW2gNQ6zMdcuwWTTEWLWNMTq+WEjoULGjC39naT1yB2V
t+nLuubMuSDNZBcJQtAOhTcz66+MiGioWAer+pW+2TjLCyXv9lmsS0lmNxhSDZrc
TbxxgZjY174YNQ==
-----END CERTIFICATE-----
Generated at Fri May 15 17:53:23 2026 by rpki-client