Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File:                     2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier:          WSh3HU8gRz32oPcD8eT28iI+KH94/wgIGg12hblTEs8=
Subject key identifier:   FC:AD:00:82:D9:F7:C5:CE:62:2C:26:C7:84:73:A1:E0:0B:B2:3A:C5
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer:       /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial:       019E30A937456A8A30EE35DDCF40A13C1583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number:          191A
Signing time:             Sat 16 May 2026 12:00:56 +0000
Manifest this update:     Sat 16 May 2026 12:00:56 +0000
Manifest next update:     Sun 17 May 2026 12:00:56 +0000
Files and hashes:         1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: WvCoq43JmqUMUCuDDPVC5wyIMZ0PYnzT5xjzn/g/4NE=)
                          2: 4dJRxczuyNN9FNJF4v_Rx4xIMUU.roa (hash: UBgzb7hUFLCBP2y3aJjQr5Lt8UM6zM4uZ5rsYMA9dHY=)
                          3: GsIUpdelbYjW9He0Trh2nn-nCJo.roa (hash: W1f0OAwWbcszk++2k0xC55ekezko1dir/Xe9czNGlw0=)
                          4: mcac8XdaQu5k9ijr9gPdrLY_Eb0.roa (hash: hp3NcmZWHvHpXJbSqSb5HyI3zQ72qSQa7SF+rskCSvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:37:45:6a:8a:30:ee:35:dd:cf:40:a1:3c:15:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
        Validity
            Not Before: May 16 12:00:56 2026 GMT
            Not After : May 17 12:00:56 2026 GMT
        Subject: CN=fcad0082d9f7c5ce622c26c78473a1e00bb23ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:34:59:2b:25:51:50:cb:6c:25:9a:52:c2:
                    e5:70:97:18:9a:9e:bd:6f:e1:4e:78:9c:c0:0a:23:
                    96:dc:d5:1c:7c:9e:f3:a7:03:d9:7b:4a:5f:6e:8c:
                    6b:60:6c:ef:7b:0f:a4:d6:89:f6:5f:f8:bc:6d:2c:
                    f1:3a:16:6c:a1:70:af:27:82:6d:dc:b5:ed:8a:36:
                    c3:8f:c4:48:2f:a5:1b:29:07:b1:a5:7f:6a:c2:94:
                    7a:57:32:d4:2d:c9:c9:8f:9d:b1:5a:74:77:9e:39:
                    b0:21:40:2a:5e:f0:4d:c8:87:cc:34:45:f3:23:b0:
                    51:6a:7a:86:08:2a:de:fc:8d:c4:a1:be:46:d4:b2:
                    95:63:96:c2:ef:99:40:73:42:a6:28:1c:38:54:04:
                    fd:ab:38:cd:65:23:96:8f:4d:8a:77:26:5a:5d:19:
                    be:00:23:64:b2:9d:56:36:b0:50:27:53:dd:c0:1a:
                    de:9c:52:07:e5:17:1f:d2:a4:c8:b6:67:d0:c7:96:
                    b5:f1:7d:56:53:1d:3c:ab:fc:5a:fd:72:d3:76:7b:
                    13:20:e2:ed:d4:cd:2b:2b:70:fa:01:67:3d:8c:19:
                    5e:e3:79:b7:57:96:da:85:15:a9:08:29:73:5c:5a:
                    e3:05:84:43:bc:cb:e7:f4:d5:32:af:a9:85:db:39:
                    c8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AD:00:82:D9:F7:C5:CE:62:2C:26:C7:84:73:A1:E0:0B:B2:3A:C5
            X509v3 Authority Key Identifier:
                keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:28:8e:e5:42:c4:ce:b9:40:dc:85:71:28:79:15:a3:87:e5:
         0e:a2:41:4b:47:e6:90:1e:30:e2:cc:d3:ab:0e:c9:59:ee:60:
         9a:cc:80:e9:03:8b:34:67:8e:83:30:e8:71:bc:b3:89:b5:e8:
         c8:fb:aa:55:d0:e4:74:9d:1c:bd:7c:62:f8:4e:04:78:7c:61:
         a0:4b:3e:44:3c:57:e6:8d:5c:08:7e:55:aa:77:36:1f:1e:ca:
         1a:74:b1:5f:3f:a7:82:80:3c:d7:c6:b8:34:63:d0:a4:48:f4:
         52:aa:06:e3:bf:b0:72:17:e7:c3:29:8b:11:2a:4c:fe:93:9e:
         39:7f:66:30:5e:d0:d1:f9:c5:51:c4:9a:2e:b2:ff:30:cb:58:
         54:71:70:28:74:04:00:0c:b0:7e:89:1b:ee:03:c0:90:e0:70:
         c8:d2:09:2a:c5:95:32:c5:20:40:34:6f:59:ea:3c:bc:cf:b9:
         e5:fd:c5:bf:ec:a4:14:9a:12:de:bf:0d:2c:64:1d:11:b6:a2:
         de:65:62:6f:87:3d:d3:17:4c:ca:a4:0d:8a:24:dc:75:d9:e6:
         34:b5:1b:2f:03:fa:01:83:57:fa:01:86:c5:8f:10:79:c7:e6:
         5c:c5:cb:67:74:f3:c2:c4:29:67:29:a8:ab:eb:a0:c7:5c:00:
         cc:64:d7:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqTdFaoow7jXdz0ChPBWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTBjYTdjMWUwZThhMWM3YWQwMmQwYmI4MjhiNDExODhh
ZTUyNDMwHhcNMjYwNTE2MTIwMDU2WhcNMjYwNTE3MTIwMDU2WjAzMTEwLwYDVQQD
EyhmY2FkMDA4MmQ5ZjdjNWNlNjIyYzI2Yzc4NDczYTFlMDBiYjIzYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3g0WSslUVDLbCWaUsLlcJcYmp69
b+FOeJzACiOW3NUcfJ7zpwPZe0pfboxrYGzvew+k1on2X/i8bSzxOhZsoXCvJ4Jt
3LXtijbDj8RIL6UbKQexpX9qwpR6VzLULcnJj52xWnR3njmwIUAqXvBNyIfMNEXz
I7BRanqGCCre/I3Eob5G1LKVY5bC75lAc0KmKBw4VAT9qzjNZSOWj02KdyZaXRm+
ACNksp1WNrBQJ1PdwBrenFIH5Rcf0qTItmfQx5a18X1WUx08q/xa/XLTdnsTIOLt
1M0rK3D6AWc9jBle43m3V5bahRWpCClzXFrjBYRDvMvn9NUyr6mF2znIYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPytAILZ98XOYiwmx4RzoeALsjrFMB8GA1UdIwQY
MBaAFNvgynweDoocetAtC7gotBGIrlJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMt
NGY5MTEyZWRlOTY4LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMtNGY5MTEyZWRlOTY4
LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyiO5ULE
zrlA3IVxKHkVo4flDqJBS0fmkB4w4szTqw7JWe5gmsyA6QOLNGeOgzDocbyzibXo
yPuqVdDkdJ0cvXxi+E4EeHxhoEs+RDxX5o1cCH5Vqnc2Hx7KGnSxXz+ngoA818a4
NGPQpEj0UqoG47+wchfnwymLESpM/pOeOX9mMF7Q0fnFUcSaLrL/MMtYVHFwKHQE
AAywfokb7gPAkOBwyNIJKsWVMsUgQDRvWeo8vM+55f3Fv+ykFJoS3r8NLGQdEbai
3mVib4c90xdMyqQNiiTcddnmNLUbLwP6AYNX+gGGxY8QecfmXMXLZ3TzwsQpZymo
q+ugx1wAzGTXQA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:51 2026 by rpki-client