Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File:                     acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier:          fu6tmvTtR1fQomXBZSebJd2J0QhctiLorDCDoLarwRc=
Subject key identifier:   CF:A7:C8:0C:8F:C5:B2:05:7A:43:B0:45:8D:7D:BB:00:04:63:89:8D
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer:       /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial:       019E31177618DF37A8BFC004C30E7959A232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number:          1913
Signing time:             Sat 16 May 2026 14:01:21 +0000
Manifest this update:     Sat 16 May 2026 14:01:21 +0000
Manifest next update:     Sun 17 May 2026 14:01:21 +0000
Files and hashes:         1: 8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa (hash: hTQqJteeaF5ZjxlYrkjPbZjafNKCCRD7RpYTaq51+Q4=)
                          2: WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa (hash: WNLKDaJxOe6Uz6jgAOWxAF+kTRgHf8gZjh0RxUla/9E=)
                          3: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: Lm+4Ihd+IqweHb1mROQ+aj8Xkt6saGBCr1ay9eVKxrE=)
                          4: gKFSZ12cdmISn4h5sbRx_f8ayV0.roa (hash: EtpOpvk7x1JOKFPhiQBQKjgaBtJnr2gJBSccIdWGROA=)
                          5: yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa (hash: TjYy4/mDVjYziy+CeletARV0PQ6H5KzIho/639xxwbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:76:18:df:37:a8:bf:c0:04:c3:0e:79:59:a2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
        Validity
            Not Before: May 16 14:01:21 2026 GMT
            Not After : May 17 14:01:21 2026 GMT
        Subject: CN=cfa7c80c8fc5b2057a43b0458d7dbb000463898d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:a6:63:88:5b:c6:59:ac:bd:e7:46:c6:12:
                    4c:d8:2d:61:c8:95:79:72:d4:44:b6:f9:6e:69:52:
                    3c:69:92:88:46:41:b8:d6:98:58:8a:ca:77:f2:88:
                    48:98:e6:03:4d:7a:d0:58:b2:bb:63:7a:67:8d:b3:
                    69:ce:89:0f:5c:64:7c:0b:07:55:16:c3:af:eb:ab:
                    9b:57:7b:6c:f7:68:e9:6d:7a:17:5c:4b:5a:79:69:
                    47:87:cf:84:03:64:a0:cb:3c:16:c0:a1:54:8e:2a:
                    85:78:eb:36:1b:1a:c3:b6:c8:d4:d0:98:72:6f:36:
                    36:a7:ea:09:12:35:08:f2:e4:61:1d:83:fa:9e:d9:
                    ac:4a:78:9c:6f:4f:90:55:07:2b:0c:63:c6:bf:52:
                    14:e2:e3:23:bf:98:77:32:d9:39:38:bf:81:b2:4c:
                    5f:5b:7e:a6:d9:f1:95:0b:21:e7:a9:fa:0c:dd:49:
                    ea:29:d4:7c:b3:2f:11:1c:8a:98:9b:18:17:9b:a4:
                    26:05:38:ae:44:35:2b:c3:d3:b1:43:36:dc:a7:c4:
                    87:1f:d6:f6:4a:dc:a6:32:67:61:ff:46:ff:19:0c:
                    dc:7f:c7:6e:05:c8:2f:35:82:5f:4f:4f:9c:50:aa:
                    e4:92:ef:85:0f:21:92:f3:59:c4:01:c4:b6:c3:6d:
                    11:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A7:C8:0C:8F:C5:B2:05:7A:43:B0:45:8D:7D:BB:00:04:63:89:8D
            X509v3 Authority Key Identifier:
                keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e3:72:cb:33:8f:52:04:67:3a:df:8f:1e:e0:77:10:08:3e:
         e3:69:44:6c:4a:8e:64:67:3b:e5:d3:e2:65:f7:33:f2:1b:e7:
         3b:16:e6:b7:cd:e6:ae:77:6a:b7:75:d5:97:b6:33:62:85:a0:
         24:59:8d:87:29:fb:ad:5a:25:42:4e:a5:92:f1:17:ac:16:fe:
         f2:3a:f3:cb:33:39:8a:17:0a:4b:69:35:6d:22:8e:fb:e3:97:
         a1:8c:0b:33:9d:62:7b:e6:11:54:f8:4c:a8:e6:95:6a:56:55:
         c4:79:48:e8:6d:b7:51:d7:13:b4:d3:0b:ed:8c:e3:f4:ac:94:
         23:dd:37:99:ac:48:ca:5c:4e:b3:f7:41:06:d8:a1:a4:4d:57:
         54:cf:84:42:37:11:d4:a5:46:8b:26:0e:c4:76:d4:23:d2:ce:
         9b:77:53:94:16:94:f1:f6:d5:a4:bc:19:25:5a:17:bc:07:5b:
         f2:b1:18:89:e9:bf:58:46:4d:69:6c:81:3a:d8:2a:a2:68:79:
         8e:e7:02:b0:9b:91:bb:e1:77:f5:07:73:4b:46:3c:cf:09:58:
         71:a0:13:33:02:6c:f1:ea:e7:60:4e:bd:23:d9:75:d4:fb:a2:
         62:7f:42:1f:8c:73:e8:48:bf:35:61:7b:7a:61:40:0e:4a:40:
         99:a0:cd:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF3YY3zeov8AEww55WaIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl
Yjc2ZWQwHhcNMjYwNTE2MTQwMTIxWhcNMjYwNTE3MTQwMTIxWjAzMTEwLwYDVQQD
EyhjZmE3YzgwYzhmYzViMjA1N2E0M2IwNDU4ZDdkYmIwMDA0NjM4OThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZWmY4hbxlmsvedGxhJM2C1hyJV5
ctREtvluaVI8aZKIRkG41phYisp38ohImOYDTXrQWLK7Y3pnjbNpzokPXGR8CwdV
FsOv66ubV3ts92jpbXoXXEtaeWlHh8+EA2SgyzwWwKFUjiqFeOs2GxrDtsjU0Jhy
bzY2p+oJEjUI8uRhHYP6ntmsSnicb0+QVQcrDGPGv1IU4uMjv5h3Mtk5OL+Bskxf
W36m2fGVCyHnqfoM3UnqKdR8sy8RHIqYmxgXm6QmBTiuRDUrw9OxQzbcp8SHH9b2
StymMmdh/0b/GQzcf8duBcgvNYJfT0+cUKrkku+FDyGS81nEAcS2w20R8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+nyAyPxbIFekOwRY19uwAEY4mNMB8GA1UdIwQY
MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt
ZjQ3YWU3ZGRhZWMwLzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw
LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+NyyzOP
UgRnOt+PHuB3EAg+42lEbEqOZGc75dPiZfcz8hvnOxbmt83mrndqt3XVl7YzYoWg
JFmNhyn7rVolQk6lkvEXrBb+8jrzyzM5ihcKS2k1bSKO++OXoYwLM51ie+YRVPhM
qOaValZVxHlI6G23UdcTtNML7Yzj9KyUI903maxIylxOs/dBBtihpE1XVM+EQjcR
1KVGiyYOxHbUI9LOm3dTlBaU8fbVpLwZJVoXvAdb8rEYiem/WEZNaWyBOtgqomh5
jucCsJuRu+F39QdzS0Y8zwlYcaATMwJs8ernYE69I9l11PuiYn9CH4xz6Ei/NWF7
emFADkpAmaDNrw==
-----END CERTIFICATE-----
Generated at Sat May 16 23:30:04 2026 by rpki-client