Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File:                     NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier:          Ux9XJ9hPFmL2HCA6fljSitNRZrT8XocGydpaP8OCGPg=
Subject key identifier:   15:87:14:72:B9:FB:DA:FB:77:45:14:23:12:B9:C7:AA:AC:35:87:67
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer:       /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial:       019E31F2DBF1694B10933C01903D7B5CE478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number:          118F
Signing time:             Sat 16 May 2026 18:00:59 +0000
Manifest this update:     Sat 16 May 2026 18:00:59 +0000
Manifest next update:     Sun 17 May 2026 18:00:59 +0000
Files and hashes:         1: 1dnMq6ZCcFb70edGxGmL0hiobfI.roa (hash: +vsRlNxh8n7NYthhGysqntNveXYKCA8nzfq82JjmeCw=)
                          2: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: fpuiqG62wzsg23WaRds+4bhPDvwyxgBvyn3SDsw++8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f2:db:f1:69:4b:10:93:3c:01:90:3d:7b:5c:e4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
        Validity
            Not Before: May 16 18:00:59 2026 GMT
            Not After : May 17 18:00:59 2026 GMT
        Subject: CN=15871472b9fbdafb7745142312b9c7aaac358767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:c6:04:5e:8f:8c:a8:f0:66:4b:2a:02:7e:
                    80:f4:5e:aa:7f:e1:f3:7a:c1:03:79:ff:3e:c9:5f:
                    e8:6f:e3:0b:5a:59:39:7d:34:f9:11:89:2c:00:4e:
                    df:a8:bc:fd:01:9f:9e:4c:76:5d:59:b2:5f:4c:47:
                    3b:38:ec:af:76:73:88:7f:98:44:cb:9c:31:63:d9:
                    3f:1a:59:ce:89:5d:2d:71:66:3e:5a:16:d9:7d:d8:
                    82:36:9e:2d:90:fb:86:1b:16:3b:28:f9:81:27:45:
                    2d:95:f7:82:98:94:41:fb:2c:bd:08:e7:05:bf:81:
                    53:70:cc:64:98:a7:8e:f7:31:4e:67:7b:ce:c7:84:
                    8b:63:55:70:b3:02:f9:f3:ef:46:41:b8:df:14:9c:
                    c2:81:87:5c:38:b1:3b:82:e4:61:40:7f:c0:53:ce:
                    b4:bc:27:8a:4b:d7:2b:8c:14:ca:b8:6b:9e:32:5b:
                    5c:e8:e5:30:f3:1a:a6:5e:5d:3f:e1:5c:3d:57:3f:
                    8d:c0:f1:1b:a1:83:6b:9f:09:17:14:0c:d2:97:b3:
                    89:1e:8a:b6:86:1b:08:4e:ea:28:8e:e4:d4:47:f1:
                    16:8b:16:72:9f:3c:eb:23:55:b7:3a:68:47:03:9a:
                    e8:c3:34:42:7c:1c:ef:4f:de:53:54:2f:8c:bf:3a:
                    71:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:87:14:72:B9:FB:DA:FB:77:45:14:23:12:B9:C7:AA:AC:35:87:67
            X509v3 Authority Key Identifier:
                keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f5:70:87:2b:9f:8d:3a:ea:7f:98:65:14:b2:bf:b6:d3:22:
         a8:29:98:e3:6f:e9:db:f1:62:16:9d:60:6f:24:0f:df:b2:eb:
         07:08:f1:f7:d5:ec:fd:58:fc:3a:e8:94:f5:a5:c7:e7:c9:8b:
         e9:ff:86:20:8a:f0:18:93:ff:7b:fc:f9:86:94:1f:d0:1e:f9:
         8a:e4:37:0c:36:48:5f:e5:70:eb:3f:ae:b2:38:9e:97:48:2e:
         f9:3e:18:7b:a0:21:60:a0:89:2b:2e:5e:1e:8f:c0:fa:9d:31:
         71:2b:8c:a2:e3:fe:8e:ba:09:c6:62:a1:cf:08:c4:0e:29:c0:
         e6:63:87:99:4a:a6:58:35:01:dc:e4:50:d5:89:88:ec:ac:25:
         6d:6b:b6:b8:45:59:fb:28:be:25:8a:a0:90:47:25:1c:61:57:
         d8:6e:1d:67:9b:3d:c2:3f:f1:89:fd:f7:90:dc:d8:79:7d:94:
         7a:b7:fe:16:16:00:2e:0a:ab:ab:03:84:59:66:7e:7b:3e:e2:
         10:fa:77:eb:84:ee:15:4e:fa:1b:c4:8a:71:2e:5d:dc:37:b8:
         c8:36:01:2d:7b:9e:d3:ac:70:5b:e6:06:22:18:d7:dd:2a:8f:
         71:33:62:cb:3e:c1:ef:d4:f1:a5:7f:d8:33:a9:24:6f:a1:31:
         87:58:8e:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4x8tvxaUsQkzwBkD17XOR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1M2YxN2Y0YmJiMTkzNDZkYzVhZmMwYzIzNTg3OWZiZTYz
NTdjNmQwHhcNMjYwNTE2MTgwMDU5WhcNMjYwNTE3MTgwMDU5WjAzMTEwLwYDVQQD
EygxNTg3MTQ3MmI5ZmJkYWZiNzc0NTE0MjMxMmI5YzdhYWFjMzU4NzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG7GBF6PjKjwZksqAn6A9F6qf+Hz
esEDef8+yV/ob+MLWlk5fTT5EYksAE7fqLz9AZ+eTHZdWbJfTEc7OOyvdnOIf5hE
y5wxY9k/GlnOiV0tcWY+WhbZfdiCNp4tkPuGGxY7KPmBJ0UtlfeCmJRB+yy9COcF
v4FTcMxkmKeO9zFOZ3vOx4SLY1VwswL58+9GQbjfFJzCgYdcOLE7guRhQH/AU860
vCeKS9crjBTKuGueMltc6OUw8xqmXl0/4Vw9Vz+NwPEboYNrnwkXFAzSl7OJHoq2
hhsITuoojuTUR/EWixZynzzrI1W3OmhHA5rowzRCfBzvT95TVC+MvzpxQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWHFHK5+9r7d0UUIxK5x6qsNYdnMB8GA1UdIwQY
MBaAFDU/F/S7sZNG3Fr8DCNYefvmNXxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wYTI0YjUtYjlhZC00OGE2LWFkZjct
OWZkODRjNzliMGVmLzEvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wYTI0YjUtYjlhZC00OGE2LWFkZjctOWZkODRjNzliMGVm
LzEvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvVwhyuf
jTrqf5hlFLK/ttMiqCmY42/p2/FiFp1gbyQP37LrBwjx99Xs/Vj8OuiU9aXH58mL
6f+GIIrwGJP/e/z5hpQf0B75iuQ3DDZIX+Vw6z+usjiel0gu+T4Ye6AhYKCJKy5e
Ho/A+p0xcSuMouP+jroJxmKhzwjEDinA5mOHmUqmWDUB3ORQ1YmI7KwlbWu2uEVZ
+yi+JYqgkEclHGFX2G4dZ5s9wj/xif33kNzYeX2Uerf+FhYALgqrqwOEWWZ+ez7i
EPp364TuFU76G8SKcS5d3De4yDYBLXue06xwW+YGIhjX3SqPcTNiyz7B79TxpX/Y
M6kkb6Exh1iOWA==
-----END CERTIFICATE-----
Generated at Sat May 16 22:02:00 2026 by rpki-client