Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File:                     sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier:          ourS2ZjU6994iO4hlHRROhEwwZXtaYS2bnH8Wl6JorY=
Subject key identifier:   13:FC:DC:5E:C8:33:25:2D:69:80:DA:BB:5D:4D:B8:09:F3:70:B2:60
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer:       /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial:       019E31BBFA130B23CFB3AA6C5914068CEAC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number:          0638
Signing time:             Sat 16 May 2026 17:01:03 +0000
Manifest this update:     Sat 16 May 2026 17:01:03 +0000
Manifest next update:     Sun 17 May 2026 17:01:03 +0000
Files and hashes:         1: NDmhXzZ8uEuR9tjCtcKsEKDgyyw.roa (hash: 5IZVF4mjF20orEhDUu/WVZB3xhzdmh0JCOjJNcS3hA4=)
                          2: P1pi-fzHu11nz54MgyJAbBSwILI.roa (hash: UTJfTUyPTVBn82h248K6mdRAAGmP9nekxHQ3ON0RaUA=)
                          3: oiH1aC3hd-YG_5l_iFQf6YzX1ZI.roa (hash: /ZDMc+U53FKEQ3a7RMNSx6X/as7T1UTJjmNtNBktR18=)
                          4: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: bRQX2BuYIQznwSj4Djrs0STwXoWzDAlwDuCuMiQE7Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bb:fa:13:0b:23:cf:b3:aa:6c:59:14:06:8c:ea:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
        Validity
            Not Before: May 16 17:01:03 2026 GMT
            Not After : May 17 17:01:03 2026 GMT
        Subject: CN=13fcdc5ec833252d6980dabb5d4db809f370b260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:87:21:45:f7:82:ca:4f:f6:05:a7:11:4d:2a:
                    23:ad:59:1b:e9:99:a3:d1:6e:b6:bc:a2:23:40:4f:
                    94:a1:b4:0d:25:ad:11:82:45:61:ce:a9:d9:d5:e7:
                    d3:16:6a:ff:57:c5:d9:f8:8a:cd:02:b3:5c:2b:77:
                    fa:1e:12:e9:4b:38:a4:9e:27:f0:aa:69:4c:68:ca:
                    c7:65:5b:39:dd:ee:8a:72:ff:b2:75:d0:81:61:11:
                    42:5d:d3:1b:1b:5f:a5:66:73:79:f3:d0:26:51:e4:
                    75:d2:94:26:52:1a:eb:b0:f9:65:c2:3a:23:ae:48:
                    8e:93:53:b3:8e:ca:1f:e7:8d:17:bf:81:4c:c7:fc:
                    cf:3f:1c:f5:45:72:99:fc:b0:fd:a8:45:42:56:2c:
                    7e:41:19:53:dc:c4:10:96:cc:7e:ac:57:b6:8b:f5:
                    06:4d:e5:13:3c:d4:a3:53:6b:09:a2:60:50:96:a5:
                    39:34:60:10:b2:69:35:ca:b3:1c:72:e7:60:dd:7f:
                    a7:a0:20:ca:82:ec:d4:ba:b7:ce:e9:d7:90:af:f8:
                    a2:b1:3a:aa:09:69:5a:31:8b:17:1b:71:72:89:e9:
                    86:a0:99:1d:39:34:87:90:56:ef:a6:c2:8d:c0:fb:
                    e8:72:f4:3e:be:19:0a:b6:64:b1:2d:64:4a:0e:e9:
                    7d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FC:DC:5E:C8:33:25:2D:69:80:DA:BB:5D:4D:B8:09:F3:70:B2:60
            X509v3 Authority Key Identifier:
                keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:32:7e:6e:c8:48:3e:cc:41:01:34:09:c1:ae:94:b1:5f:dc:
         8a:76:b5:06:fd:ea:cb:14:a6:58:00:5f:a6:1f:b2:5c:15:31:
         78:5b:77:a2:43:cd:16:83:51:6d:5a:fa:ca:9f:05:ae:f7:cb:
         8f:31:ed:6f:c8:29:f8:30:42:8d:45:4e:42:54:4f:b9:36:f8:
         bd:9d:9b:0f:b3:2d:2c:7d:01:1b:62:c0:b4:c9:5f:55:58:d4:
         ac:3e:1e:3b:0f:61:bc:e2:0d:45:54:81:f3:40:40:80:6d:db:
         b2:e4:24:0e:72:13:6d:3e:27:df:82:9d:b5:5c:e5:35:b2:d8:
         64:08:4a:54:1e:35:00:51:e1:06:0f:17:92:ae:a2:48:da:7b:
         80:4f:67:c5:c8:54:a4:df:3a:eb:b6:14:c7:06:dc:49:c4:35:
         55:e8:f5:68:e6:96:c3:2d:21:dd:83:a2:b2:50:b6:69:d5:94:
         2d:bc:56:ee:18:51:0a:73:d5:f9:83:12:9b:e2:40:01:a8:17:
         89:a4:7d:80:55:dd:5a:9f:11:ef:25:c4:3b:fb:47:83:8f:53:
         63:90:b4:13:6e:6d:3f:9b:36:f4:8d:21:b2:3a:91:71:8f:28:
         eb:64:5f:49:26:fb:75:4a:12:6b:1b:bc:46:66:98:f7:79:98:
         f2:56:ac:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xu/oTCyPPs6psWRQGjOrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMDkzMDg1NDBjNGRmOWI5YmI3ZDYzMjdmYTdiNWQ0OTAw
ODA2OGMwHhcNMjYwNTE2MTcwMTAzWhcNMjYwNTE3MTcwMTAzWjAzMTEwLwYDVQQD
EygxM2ZjZGM1ZWM4MzMyNTJkNjk4MGRhYmI1ZDRkYjgwOWYzNzBiMjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIchRfeCyk/2BacRTSojrVkb6Zmj
0W62vKIjQE+UobQNJa0RgkVhzqnZ1efTFmr/V8XZ+IrNArNcK3f6HhLpSziknifw
qmlMaMrHZVs53e6Kcv+yddCBYRFCXdMbG1+lZnN589AmUeR10pQmUhrrsPllwjoj
rkiOk1Ozjsof540Xv4FMx/zPPxz1RXKZ/LD9qEVCVix+QRlT3MQQlsx+rFe2i/UG
TeUTPNSjU2sJomBQlqU5NGAQsmk1yrMccudg3X+noCDKguzUurfO6deQr/iisTqq
CWlaMYsXG3FyiemGoJkdOTSHkFbvpsKNwPvocvQ+vhkKtmSxLWRKDul9AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBP83F7IMyUtaYDau11NuAnzcLJgMB8GA1UdIwQY
MBaAFLIJMIVAxN+bm7fWMn+ntdSQCAaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAt
NjQ4MGMzZDFmNGU0LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAtNjQ4MGMzZDFmNGU0
LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTJ+bshI
PsxBATQJwa6UsV/cina1Bv3qyxSmWABfph+yXBUxeFt3okPNFoNRbVr6yp8FrvfL
jzHtb8gp+DBCjUVOQlRPuTb4vZ2bD7MtLH0BG2LAtMlfVVjUrD4eOw9hvOINRVSB
80BAgG3bsuQkDnITbT4n34KdtVzlNbLYZAhKVB41AFHhBg8Xkq6iSNp7gE9nxchU
pN8667YUxwbcScQ1Vej1aOaWwy0h3YOislC2adWULbxW7hhRCnPV+YMSm+JAAagX
iaR9gFXdWp8R7yXEO/tHg49TY5C0E25tP5s29I0hsjqRcY8o62RfSSb7dUoSaxu8
RmaY93mY8las5A==
-----END CERTIFICATE-----
Generated at Sun May 17 03:01:31 2026 by rpki-client