Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft
File:                     V5ren-rtxAbfXhG87wOTzV6f0N0.mft (raw, json)
Hash identifier:          ZHgKpYuwjjaPgmSc7rC2b2OQW2/o6OkHVr3dudxTG00=
Subject key identifier:   D0:2B:6D:73:A3:C2:D3:F2:88:30:A6:E4:27:E2:81:C1:7A:F4:C6:89
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Certificate issuer:       /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial:       019D389C3FBB0E4A3F7EEB838DC1DC78CD7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft
Manifest number:          13BF
Signing time:             Sun 29 Mar 2026 08:00:57 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:57 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:57 +0000
Files and hashes:         1: 1MbFx2hYgLEKAUIjFCjMUUah6nY.roa (hash: irNw6BMjZ8MiMdNaeEroKRt7R7y7F1x4LJIElSoSeO0=)
                          2: GiGVJdmKecTDzES4xuGNepN-ljA.roa (hash: 2LeON6ht+y6rThTLAC5r6s9XniJIT+LKa/sbIZg3WNg=)
                          3: OYPW_l3yAydu5ep_JRGTwUuB3Vc.roa (hash: fFBI748XuqQjDYkYpH3bQJg6Oe0pApO3G7mDoyKGRHc=)
                          4: QmWpJaxbO_SHkQxUwZmamhcrVKY.roa (hash: 0q2ZYGyV0Xng7B8aHuirCBZlNawhDeyTvFsuxUUM9v0=)
                          5: RzhwJ3g4O2jriznGS1cnePL9_FI.roa (hash: SoM1BvGJwbSsSWVNydRJHc+qJc9sNKoCfkVgPWfSV30=)
                          6: V5ren-rtxAbfXhG87wOTzV6f0N0.crl (hash: jM25raCzRTCFB4Ta3xJrBMkAWETW1iqF5r4H5qsrGi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:3f:bb:0e:4a:3f:7e:eb:83:8d:c1:dc:78:cd:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
        Validity
            Not Before: Mar 29 08:00:57 2026 GMT
            Not After : Mar 30 08:00:57 2026 GMT
        Subject: CN=d02b6d73a3c2d3f28830a6e427e281c17af4c689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:1a:c1:e9:cb:cb:41:f7:04:db:65:87:82:
                    ea:77:b9:90:7a:7b:f0:10:6d:04:7f:61:ec:ee:3b:
                    89:98:23:b1:db:3f:20:60:f9:91:f2:b0:0c:f7:fb:
                    24:74:01:b4:89:5e:12:da:76:7d:6a:40:29:b7:c0:
                    aa:5c:fa:00:14:e3:38:1f:29:4b:ee:2d:ef:22:51:
                    ab:2a:2a:b5:3e:f1:67:41:ea:ac:85:1e:0d:76:38:
                    02:24:a3:d0:a9:60:5e:76:6f:73:c0:c8:9e:77:20:
                    48:b5:97:a3:7b:b9:74:37:25:85:a5:c9:bb:30:fd:
                    8a:c2:ef:17:f4:94:c2:4c:23:09:e7:c5:7e:74:69:
                    64:ce:cc:66:b7:47:e8:f4:0a:0b:62:25:56:ed:55:
                    6c:b4:d8:36:8c:5b:44:ff:03:a2:f5:20:3b:44:46:
                    7d:71:84:85:f9:16:df:9c:bf:37:16:49:e8:8b:ed:
                    f6:3a:d9:74:b6:cf:34:c7:d4:98:7a:58:6e:f1:0d:
                    d6:50:2d:44:27:83:8f:5e:17:e3:a6:54:b6:ab:5a:
                    a6:af:5a:f2:c5:3c:68:33:cf:1e:4b:81:13:5d:c7:
                    89:a0:7d:19:b9:94:16:1e:5f:59:b0:82:ab:c4:1e:
                    52:37:04:8b:7a:41:f6:55:dc:70:bf:27:50:cc:3c:
                    ab:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2B:6D:73:A3:C2:D3:F2:88:30:A6:E4:27:E2:81:C1:7A:F4:C6:89
            X509v3 Authority Key Identifier:
                keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a4:b4:48:c6:a8:f3:b8:00:fb:8a:3f:77:1c:f3:d5:80:8f:
         d6:b7:12:7d:e7:90:93:13:8c:41:c1:10:b4:c9:9e:c8:b3:4d:
         28:33:88:af:05:60:6c:f0:ac:71:14:01:2c:4c:38:6d:54:44:
         ca:45:b4:37:d8:98:1f:ac:89:36:86:2f:61:97:ab:e8:9d:46:
         18:a5:c3:d6:d9:e1:6d:a1:dd:63:60:85:ab:40:93:77:77:d0:
         46:cf:9d:23:78:46:cc:28:67:56:4d:5b:10:7d:9f:50:14:2e:
         26:be:54:2d:ca:44:66:5c:62:1f:33:35:17:d7:61:9d:8b:8d:
         9a:5c:a2:5b:23:31:d7:8f:16:7e:1f:16:3e:d2:03:c4:2e:fa:
         2f:8d:a3:3b:cb:fb:14:be:89:7b:f9:8f:35:e5:cc:d2:b1:c5:
         55:95:50:18:2d:e9:55:d5:28:77:9e:90:cc:69:02:d3:97:60:
         a1:27:89:99:c4:f4:08:c1:97:f3:41:36:d2:ec:2b:63:43:59:
         13:ff:a7:ae:39:fc:cf:f0:5a:87:aa:0f:fc:da:df:7f:2a:8b:
         89:bd:6b:09:66:c6:be:2e:67:52:22:79:c3:cd:30:87:21:3e:
         43:cb:75:b9:1f:63:54:c3:21:d6:25:62:b2:d7:7a:b6:9e:03:
         53:14:ea:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nD+7Dko/fuuDjcHceM1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OWFkZTlmZWFlZGM0MDZkZjVlMTFiY2VmMDM5M2NkNWU5
ZmQwZGQwHhcNMjYwMzI5MDgwMDU3WhcNMjYwMzMwMDgwMDU3WjAzMTEwLwYDVQQD
EyhkMDJiNmQ3M2EzYzJkM2YyODgzMGE2ZTQyN2UyODFjMTdhZjRjNjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWQawenLy0H3BNtlh4Lqd7mQenvw
EG0Ef2Hs7juJmCOx2z8gYPmR8rAM9/skdAG0iV4S2nZ9akApt8CqXPoAFOM4HylL
7i3vIlGrKiq1PvFnQeqshR4NdjgCJKPQqWBedm9zwMiedyBItZeje7l0NyWFpcm7
MP2Kwu8X9JTCTCMJ58V+dGlkzsxmt0fo9AoLYiVW7VVstNg2jFtE/wOi9SA7REZ9
cYSF+RbfnL83Fknoi+32Otl0ts80x9SYelhu8Q3WUC1EJ4OPXhfjplS2q1qmr1ry
xTxoM88eS4ETXceJoH0ZuZQWHl9ZsIKrxB5SNwSLekH2VdxwvydQzDyr9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNArbXOjwtPyiDCm5CfigcF69MaJMB8GA1UdIwQY
MBaAFFea3p/q7cQG314RvO8Dk81en9DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmIt
MjA4ZWYzMmMwMjAyLzEvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmItMjA4ZWYzMmMwMjAy
LzEvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaS0SMao
87gA+4o/dxzz1YCP1rcSfeeQkxOMQcEQtMmeyLNNKDOIrwVgbPCscRQBLEw4bVRE
ykW0N9iYH6yJNoYvYZer6J1GGKXD1tnhbaHdY2CFq0CTd3fQRs+dI3hGzChnVk1b
EH2fUBQuJr5ULcpEZlxiHzM1F9dhnYuNmlyiWyMx148Wfh8WPtIDxC76L42jO8v7
FL6Je/mPNeXM0rHFVZVQGC3pVdUod56QzGkC05dgoSeJmcT0CMGX80E20uwrY0NZ
E/+nrjn8z/Bah6oP/NrffyqLib1rCWbGvi5nUiJ5w80whyE+Q8t1uR9jVMMh1iVi
std6tp4DUxTqzw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:13 2026 by rpki-client