Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
File:                     yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft (raw, json)
Hash identifier:          dE4IyBFiv8BJt1oIUWgoWU1MnGj+mbq/87Z027IzhZU=
Subject key identifier:   B8:0E:F2:51:44:20:14:1C:9F:36:6F:18:B3:EB:4A:EA:4D:FB:C5:D9
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Certificate issuer:       /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial:       019E2C2796E2E7CB3B6A426B7D060CA1DDF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
Manifest number:          165E
Signing time:             Fri 15 May 2026 15:00:52 +0000
Manifest this update:     Fri 15 May 2026 15:00:52 +0000
Manifest next update:     Sat 16 May 2026 15:00:52 +0000
Files and hashes:         1: 2Rt9Gwr4sjkr8DA_k8J0_h0v0S4.roa (hash: tqZC3K8qhKl5fCuSFTCvvWh/uoUIwg2YeD8aanIXDKI=)
                          2: G6JvpqCYvPpC7VM1ZZPSfJgdNhc.roa (hash: D1iE+lUItdHWGUL+J972PCDTzMoGyX6bUifXJiUpjwY=)
                          3: MZnpTOGHw-wHvXLJ4-WOx0LKjB4.roa (hash: SKidAnJDVBAcAfGPFaWD0xoE5cVEU3877tCR9noWWBg=)
                          4: kPQ4CKW-h0DeOxWl-K_-W4akhCU.roa (hash: FziCTKXI5Ou+Jvc7ecEfNovJelpNbcObghxJuzVXBKc=)
                          5: lUtDTycr7tmHl8som-NIOGSL4hQ.roa (hash: bob91L00C+zBJmnNvfIjHOpV1SfQVQs/iVPuHdwEzf0=)
                          6: yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl (hash: F6NSSXuPxw6OH1WaYEFstqwB5atZOx+yfgOJnlZsSzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2c:27:96:e2:e7:cb:3b:6a:42:6b:7d:06:0c:a1:dd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
        Validity
            Not Before: May 15 15:00:52 2026 GMT
            Not After : May 16 15:00:52 2026 GMT
        Subject: CN=b80ef2514420141c9f366f18b3eb4aea4dfbc5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:a3:ad:fb:82:9d:99:38:1c:35:73:6e:96:
                    a8:77:ac:d2:97:30:2a:41:97:f1:21:e1:89:b9:be:
                    90:66:ac:34:e2:07:b9:ec:e7:41:11:4c:43:3c:d6:
                    d4:1f:9b:fe:6b:3a:82:60:c0:5b:4c:dd:1f:29:6b:
                    9c:6c:0a:30:3a:53:0d:8c:a9:3c:65:90:b0:f8:6d:
                    53:e2:64:53:0b:d2:23:40:c0:06:00:3f:8e:dd:d2:
                    36:d9:b2:f9:8d:21:52:ba:d5:03:4b:28:14:6e:ff:
                    3f:99:8b:25:e2:01:3c:65:d7:fd:e1:86:d5:68:d9:
                    f4:12:63:b5:ac:0f:6a:ce:67:1d:66:fa:87:a1:e2:
                    ed:11:ad:5c:fa:ec:f5:ad:dc:7d:57:c3:86:54:b2:
                    b5:d7:8f:9b:21:72:b7:14:54:35:0b:e4:da:35:66:
                    e5:39:f8:fd:7a:3c:e3:6a:af:ce:90:cc:e6:21:85:
                    5e:b5:fe:5f:aa:ae:ed:eb:0c:7e:f1:7d:4a:b1:f8:
                    57:02:5a:1f:cf:ca:d0:58:81:89:1e:b1:3f:94:88:
                    f2:85:1e:9b:b9:88:22:3f:34:bd:3c:bd:2b:4f:00:
                    ad:70:20:f9:0c:79:72:ad:1d:1d:fd:f6:57:5a:f6:
                    0b:6f:05:30:14:c8:f7:91:2d:c7:53:41:e8:35:fa:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0E:F2:51:44:20:14:1C:9F:36:6F:18:B3:EB:4A:EA:4D:FB:C5:D9
            X509v3 Authority Key Identifier:
                keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:51:d2:51:dd:9f:90:c8:1f:aa:fe:50:b1:45:21:ac:1e:4b:
         21:1b:82:10:b6:09:db:f6:79:99:bb:33:06:67:29:5b:ed:b5:
         17:ea:01:48:36:26:d0:eb:b8:26:28:43:f7:80:05:3d:a8:89:
         9a:31:39:ce:2d:2f:03:90:cd:d7:84:11:52:55:8a:3e:3f:44:
         d3:54:c1:a9:3f:54:af:7a:c5:91:c1:11:68:5b:2c:5c:1b:76:
         c2:38:ec:de:3f:e1:b1:16:b8:cf:7f:e3:c9:f6:dc:46:00:ed:
         08:49:93:76:b1:84:77:1e:2c:f4:c3:4c:86:52:87:87:e0:e1:
         7d:56:c3:c6:29:52:1f:74:c3:da:63:4c:c4:fd:6c:ff:47:2b:
         34:15:9d:48:ef:6c:ba:e7:bf:a3:d8:c0:02:ee:24:5f:1d:7c:
         f9:41:92:f9:77:da:f6:7b:61:2e:6a:01:45:01:7d:3a:08:59:
         89:1c:45:01:a8:26:d3:1d:67:60:a8:46:0c:89:58:04:21:15:
         ab:ec:a5:41:91:8b:32:e2:ee:d3:56:08:e9:1b:7e:fb:be:30:
         bb:d1:42:40:f4:b5:8d:54:93:54:0b:1e:77:b8:27:5f:a9:26:
         35:45:77:9e:a3:cd:5c:d9:d0:54:73:99:27:20:fc:5d:b6:a1:
         3a:ce:f7:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4sJ5bi58s7akJrfQYMod33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1
ODY2MjIwHhcNMjYwNTE1MTUwMDUyWhcNMjYwNTE2MTUwMDUyWjAzMTEwLwYDVQQD
EyhiODBlZjI1MTQ0MjAxNDFjOWYzNjZmMThiM2ViNGFlYTRkZmJjNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/+jrfuCnZk4HDVzbpaod6zSlzAq
QZfxIeGJub6QZqw04ge57OdBEUxDPNbUH5v+azqCYMBbTN0fKWucbAowOlMNjKk8
ZZCw+G1T4mRTC9IjQMAGAD+O3dI22bL5jSFSutUDSygUbv8/mYsl4gE8Zdf94YbV
aNn0EmO1rA9qzmcdZvqHoeLtEa1c+uz1rdx9V8OGVLK114+bIXK3FFQ1C+TaNWbl
Ofj9ejzjaq/OkMzmIYVetf5fqq7t6wx+8X1KsfhXAlofz8rQWIGJHrE/lIjyhR6b
uYgiPzS9PL0rTwCtcCD5DHlyrR0d/fZXWvYLbwUwFMj3kS3HU0HoNfqvvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgO8lFEIBQcnzZvGLPrSupN+8XZMB8GA1UdIwQY
MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt
OWUwYWVkMmZiOGVjLzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj
LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVHSUd2f
kMgfqv5QsUUhrB5LIRuCELYJ2/Z5mbszBmcpW+21F+oBSDYm0Ou4JihD94AFPaiJ
mjE5zi0vA5DN14QRUlWKPj9E01TBqT9Ur3rFkcERaFssXBt2wjjs3j/hsRa4z3/j
yfbcRgDtCEmTdrGEdx4s9MNMhlKHh+DhfVbDxilSH3TD2mNMxP1s/0crNBWdSO9s
uue/o9jAAu4kXx18+UGS+Xfa9nthLmoBRQF9OghZiRxFAagm0x1nYKhGDIlYBCEV
q+ylQZGLMuLu01YI6Rt++74wu9FCQPS1jVSTVAsed7gnX6kmNUV3nqPNXNnQVHOZ
JyD8XbahOs739A==
-----END CERTIFICATE-----
Generated at Fri May 15 22:51:24 2026 by rpki-client