Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
File:                     uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft (raw, json)
Hash identifier:          sWsrXg4WwLqwtTfsA0akXp9SQSdtgyvfp8dihrBk24I=
Subject key identifier:   16:08:F6:6F:2E:FE:AB:5A:93:3B:DF:C9:E5:D8:83:68:1D:72:CB:F6
Authority key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
Certificate issuer:       /CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Certificate serial:       019E31BC014A985B224226A80AE34E936CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 17:01:05 +0000
Manifest this update:     Sat 16 May 2026 17:01:05 +0000
Manifest next update:     Sun 17 May 2026 17:01:05 +0000
Files and hashes:         1: PCvW1ckpHe2_MAKD0cVtAdNspsk.roa (hash: rrfhDBw/DD8F8L7MgUiMSbLyWY2JkGV4u6Ic+Ucoask=)
                          2: uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl (hash: RtPPdhKaSLalNplR8WhyTffq6lpGHW9JMYRJdws2HEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bc:01:4a:98:5b:22:42:26:a8:0a:e3:4e:93:6c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
        Validity
            Not Before: May 16 17:01:05 2026 GMT
            Not After : May 17 17:01:05 2026 GMT
        Subject: CN=1608f66f2efeab5a933bdfc9e5d883681d72cbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ce:e7:52:6e:ec:40:51:bc:ed:d3:3f:83:d1:
                    22:d4:75:98:db:98:0a:9c:d2:87:e8:a1:31:5a:df:
                    c7:33:93:99:bd:dd:ef:b2:45:ef:da:32:b5:0f:55:
                    a0:5e:80:c6:b6:43:84:ee:da:9b:e6:37:6e:a2:68:
                    56:9e:f9:33:d2:7f:46:be:e1:28:91:cc:15:a6:ef:
                    10:ee:d9:20:85:58:66:4a:a1:56:94:7e:49:a9:8f:
                    b0:ee:82:4b:c8:ea:51:0f:aa:21:c4:ce:56:f5:a7:
                    c6:fe:94:9a:27:15:1c:50:ab:cd:ce:20:30:18:3c:
                    56:5e:5e:1b:70:5b:74:6d:84:d1:7b:28:a1:95:70:
                    8c:5d:42:1d:94:aa:29:83:3c:16:dd:ac:e1:49:84:
                    7e:ac:fc:87:a4:3b:81:8a:db:ef:28:3b:10:b0:36:
                    c5:27:2f:33:db:5b:53:b4:08:0f:7c:92:8f:23:10:
                    62:7a:25:1d:a5:31:b5:c6:f2:1b:9d:68:bc:a5:bd:
                    d3:f8:08:be:64:91:7a:90:29:9e:d2:4f:c5:18:fc:
                    92:ee:92:25:db:51:9d:02:89:13:69:6b:a4:2e:5e:
                    58:86:db:35:18:f1:25:eb:5f:14:eb:90:3b:29:73:
                    6d:76:6d:d0:6b:c8:de:31:f3:42:52:96:ef:93:1b:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:08:F6:6F:2E:FE:AB:5A:93:3B:DF:C9:E5:D8:83:68:1D:72:CB:F6
            X509v3 Authority Key Identifier:
                keyid:B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e1:8a:e3:03:01:91:5c:89:20:7d:e1:a5:d6:d7:ce:40:d2:
         6f:d7:9a:aa:c6:c9:00:4c:b1:3a:c6:2e:16:97:5c:0c:b1:db:
         5a:92:c9:cb:fe:09:bf:7c:7f:8a:b0:54:29:78:12:01:55:c0:
         99:64:a0:63:d5:84:cb:87:d6:4a:86:b3:f4:1f:f2:ca:fc:15:
         54:c2:92:0a:e7:88:c9:2c:89:1f:e2:a1:f6:c0:c1:6c:e0:fa:
         6e:37:ed:a8:41:aa:61:0b:cb:24:0c:2b:07:8c:ea:63:c2:93:
         55:6a:9e:02:17:da:81:59:b3:30:93:5b:a4:c9:30:ab:9e:cf:
         ee:5f:7c:38:1e:9d:7e:1f:25:14:68:ef:13:30:0c:21:ee:1c:
         a4:6d:36:a7:46:33:47:10:19:fc:4c:3e:b6:d4:3a:05:2e:39:
         0f:21:d0:22:df:84:93:18:8d:63:c1:20:e3:7c:0e:11:03:8e:
         04:d8:ca:72:df:21:1c:6a:e8:95:64:f1:12:6a:e3:7a:8f:56:
         e6:bb:b9:ad:6b:4c:c7:9c:35:5d:9d:50:65:8b:c7:ff:4c:62:
         69:9f:11:2b:e1:ce:33:c0:00:70:af:0f:87:de:8f:2b:c9:8b:
         88:da:a3:13:ca:6b:67:07:16:cd:e5:e0:16:5d:7d:73:1d:33:
         9c:17:f9:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xvAFKmFsiQiaoCuNOk2zeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTVhZjU5ZDI0ZjU5YTYwZDk3YzFjODhhYjk3OWExNGM1
ODBmZjQwHhcNMjYwNTE2MTcwMTA1WhcNMjYwNTE3MTcwMTA1WjAzMTEwLwYDVQQD
EygxNjA4ZjY2ZjJlZmVhYjVhOTMzYmRmYzllNWQ4ODM2ODFkNzJjYmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA687nUm7sQFG87dM/g9Ei1HWY25gK
nNKH6KExWt/HM5OZvd3vskXv2jK1D1WgXoDGtkOE7tqb5jduomhWnvkz0n9GvuEo
kcwVpu8Q7tkghVhmSqFWlH5JqY+w7oJLyOpRD6ohxM5W9afG/pSaJxUcUKvNziAw
GDxWXl4bcFt0bYTReyihlXCMXUIdlKopgzwW3azhSYR+rPyHpDuBitvvKDsQsDbF
Jy8z21tTtAgPfJKPIxBieiUdpTG1xvIbnWi8pb3T+Ai+ZJF6kCme0k/FGPyS7pIl
21GdAokTaWukLl5Yhts1GPEl618U65A7KXNtdm3Qa8jeMfNCUpbvkxsAEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYI9m8u/qtakzvfyeXYg2gdcsv2MB8GA1UdIwQY
MBaAFLkVr1nST1mmDZfByIq5eaFMWA/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJXdldkSlBXYVlObDhISWlybDVvVXhZRF9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80NDk4YWEtY2MyNy00MzE2LWFlODct
ZDQ3MmQ5YWZlMTM0LzEvdVJXdldkSlBXYVlObDhISWlybDVvVXhZRF9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80NDk4YWEtY2MyNy00MzE2LWFlODctZDQ3MmQ5YWZlMTM0
LzEvdVJXdldkSlBXYVlObDhISWlybDVvVXhZRF9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuGK4wMB
kVyJIH3hpdbXzkDSb9eaqsbJAEyxOsYuFpdcDLHbWpLJy/4Jv3x/irBUKXgSAVXA
mWSgY9WEy4fWSoaz9B/yyvwVVMKSCueIySyJH+Kh9sDBbOD6bjftqEGqYQvLJAwr
B4zqY8KTVWqeAhfagVmzMJNbpMkwq57P7l98OB6dfh8lFGjvEzAMIe4cpG02p0Yz
RxAZ/Ew+ttQ6BS45DyHQIt+EkxiNY8Eg43wOEQOOBNjKct8hHGrolWTxEmrjeo9W
5ru5rWtMx5w1XZ1QZYvH/0xiaZ8RK+HOM8AAcK8Ph96PK8mLiNqjE8prZwcWzeXg
Fl19cx0znBf5zg==
-----END CERTIFICATE-----
Generated at Sat May 16 22:02:57 2026 by rpki-client