Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File:                     qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier:          DCfYJBmuFC862DvQjgJl1vyy8aU/9kf4QybQn5Hm5EA=
Subject key identifier:   C1:67:27:46:D2:A0:2F:EE:CA:A0:AE:F9:52:BC:5C:64:07:FD:FD:F8
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer:       /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial:       019E2ADDE5C8DA08A552A6C042C400B28604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number:          190B
Signing time:             Fri 15 May 2026 09:00:45 +0000
Manifest this update:     Fri 15 May 2026 09:00:45 +0000
Manifest next update:     Sat 16 May 2026 09:00:45 +0000
Files and hashes:         1: fG6maQIYPuiZbXuoPZY5KDKmziI.roa (hash: 86O5JcN57k2/HbjQtBdb8xSuus/b5Khba3p8Ebd34wc=)
                          2: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: dwOeZJ+e2zVXsUinEAdw7th2SE5AmAYnnWdr6dqGcGs=)
                          3: upo56Z93ZuxfUzsBXT8Mop0ljfI.roa (hash: YhDFF8pQFZdnO5Ubp8t393cVmTF+JmT/Dc4jBewkDSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:dd:e5:c8:da:08:a5:52:a6:c0:42:c4:00:b2:86:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
        Validity
            Not Before: May 15 09:00:45 2026 GMT
            Not After : May 16 09:00:45 2026 GMT
        Subject: CN=c1672746d2a02feecaa0aef952bc5c6407fdfdf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:65:69:0b:16:3a:77:c0:1d:f0:65:37:d1:
                    17:65:af:0c:36:c8:e1:5d:40:24:a0:b8:e7:88:42:
                    bd:df:17:5f:4e:2e:34:1a:61:9a:ff:71:ed:11:fb:
                    9c:af:30:a4:b1:55:1e:f8:d8:ae:57:e9:91:d6:e1:
                    2c:42:d3:b0:ec:06:dc:1c:ef:20:d0:b1:e1:46:8d:
                    83:c2:7d:18:6a:0a:e3:3c:b3:f7:24:a8:2c:09:a1:
                    8d:1a:d7:bf:cd:4c:20:17:e3:ba:2f:4e:66:ae:91:
                    0d:b4:4f:0a:bb:c8:6f:f3:ec:fb:40:14:c1:d6:11:
                    f4:f3:02:d2:3b:db:c3:e0:17:c0:1d:bf:bf:b8:4f:
                    53:ce:28:c7:1c:d6:b5:7e:47:e1:b7:a3:23:a6:aa:
                    cd:5c:e3:a5:21:32:bf:e7:09:f1:b2:ca:4a:c6:6d:
                    96:83:65:30:87:ed:db:20:2b:b5:45:f0:87:de:cc:
                    7f:94:c7:07:8e:92:14:84:c1:74:4d:8f:38:34:6d:
                    57:4e:21:c6:d8:ed:59:65:b9:69:c8:18:0c:e4:a1:
                    38:35:8c:60:4e:f7:6e:d8:d8:05:5c:e6:97:23:4e:
                    e8:57:d8:36:28:9d:2a:93:7d:0b:e8:fa:93:b7:fa:
                    38:15:e9:d6:97:3d:2a:f1:aa:c5:e7:40:28:cb:51:
                    50:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:67:27:46:D2:A0:2F:EE:CA:A0:AE:F9:52:BC:5C:64:07:FD:FD:F8
            X509v3 Authority Key Identifier:
                keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:1e:56:15:25:c4:19:45:c1:49:18:b9:bc:35:a3:ad:fd:c8:
         62:0e:cc:e9:f0:c3:45:cf:a4:03:ac:36:6c:84:f5:84:6b:32:
         20:67:6c:b9:72:6d:6f:f5:8a:1d:ef:64:5e:b6:58:63:92:4c:
         50:bb:61:d3:26:fb:a8:b0:75:75:84:74:3a:99:78:85:3a:38:
         e2:46:50:9e:c1:28:a9:8d:a3:7b:07:eb:38:1a:28:8a:44:f5:
         3a:e5:be:15:02:57:0d:7c:41:a3:82:99:23:d4:ca:7c:22:1c:
         d8:6b:77:a3:5f:3a:ca:b8:b9:68:ed:83:93:b7:ec:c9:a6:b9:
         60:60:70:f7:ae:ab:96:1d:06:19:a2:0a:de:36:e7:0a:0b:7b:
         54:17:41:be:8a:34:ce:92:65:0b:84:5b:8d:21:0e:ca:67:3d:
         ca:fe:f3:f5:6e:73:b0:f1:c6:3f:b2:f7:b2:e7:27:97:22:8b:
         74:67:f5:2c:0f:1d:cf:a3:e0:ae:33:48:fd:37:c3:c7:db:60:
         b1:c5:96:d7:ec:71:6c:47:b5:d1:ff:64:43:b4:55:77:85:cf:
         47:1d:0a:a1:8a:03:99:48:8e:b3:6f:74:8c:a6:d1:a9:93:fc:
         df:3a:de:55:c2:1f:db:6e:01:e2:d9:cd:96:f6:ce:34:de:f5:
         f8:f3:36:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4q3eXI2gilUqbAQsQAsoYEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NDgwY2YxOGZkNzg1OWRmOWFkOTk3OTQwMDEzYTk5Yjhk
ZWUzNzQwHhcNMjYwNTE1MDkwMDQ1WhcNMjYwNTE2MDkwMDQ1WjAzMTEwLwYDVQQD
EyhjMTY3Mjc0NmQyYTAyZmVlY2FhMGFlZjk1MmJjNWM2NDA3ZmRmZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00ZlaQsWOnfAHfBlN9EXZa8MNsjh
XUAkoLjniEK93xdfTi40GmGa/3HtEfucrzCksVUe+NiuV+mR1uEsQtOw7AbcHO8g
0LHhRo2Dwn0YagrjPLP3JKgsCaGNGte/zUwgF+O6L05mrpENtE8Ku8hv8+z7QBTB
1hH08wLSO9vD4BfAHb+/uE9TzijHHNa1fkfht6MjpqrNXOOlITK/5wnxsspKxm2W
g2Uwh+3bICu1RfCH3sx/lMcHjpIUhMF0TY84NG1XTiHG2O1ZZblpyBgM5KE4NYxg
Tvdu2NgFXOaXI07oV9g2KJ0qk30L6PqTt/o4FenWlz0q8arF50Aoy1FQsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFnJ0bSoC/uyqCu+VK8XGQH/f34MB8GA1UdIwQY
MBaAFKlIDPGP14Wd+a2ZeUABOpm43uN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0Yjkt
YWNkODdjNTQ2MDQ4LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0YjktYWNkODdjNTQ2MDQ4
LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALR5WFSXE
GUXBSRi5vDWjrf3IYg7M6fDDRc+kA6w2bIT1hGsyIGdsuXJtb/WKHe9kXrZYY5JM
ULth0yb7qLB1dYR0Opl4hTo44kZQnsEoqY2jewfrOBooikT1OuW+FQJXDXxBo4KZ
I9TKfCIc2Gt3o186yri5aO2Dk7fsyaa5YGBw966rlh0GGaIK3jbnCgt7VBdBvoo0
zpJlC4RbjSEOymc9yv7z9W5zsPHGP7L3sucnlyKLdGf1LA8dz6PgrjNI/TfDx9tg
scWW1+xxbEe10f9kQ7RVd4XPRx0KoYoDmUiOs290jKbRqZP83zreVcIf224B4tnN
lvbONN71+PM2ZQ==
-----END CERTIFICATE-----
Generated at Fri May 15 15:39:42 2026 by rpki-client