Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
File:                     i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json)
Hash identifier:          qiOyj+IkgHw7jtQpsxGhz6ZLWqCGHQM58GW0VQr5PIw=
Subject key identifier:   8E:D0:C7:96:00:E2:89:5B:71:06:C3:2F:1E:BA:A4:4E:25:2F:A9:91
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Certificate issuer:       /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial:       019E517E12E199365FCCE3B7F7693250F943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
Manifest number:          1923
Signing time:             Fri 22 May 2026 21:01:17 +0000
Manifest this update:     Fri 22 May 2026 21:01:17 +0000
Manifest next update:     Sat 23 May 2026 21:01:17 +0000
Files and hashes:         1: 3fmRvkperMmvyU4KqpsUtOxTyt4.roa (hash: 7eZzl4W/3A8ZztuV2lmxwvx6VP7+Qvs+/fsXhTjc0rc=)
                          2: 7Tcz0pE1-IDNMp7AQ99DVCGrgjI.roa (hash: IYa4nqDQg0w4fOWwfwmQezvrBABwOK7SbfWTarCYxSQ=)
                          3: 7W1NXgkMSkIdBVSG746iQwH_IUI.roa (hash: 8/Z+GxzPEApZfT9MVxqAMLn34ihqPk9rP7wFg/FqfLU=)
                          4: EdFWUcc8IVOoO0eCHGrnGkFmsGg.roa (hash: hRMzKjUqKk1WuOs7kzmRaFOXrwrTn6B37s4zIKdomao=)
                          5: Ljk83VCvMFaaB88IfYzmXG7UKBY.roa (hash: f8wXBBWZbB++s5ojWl86XJPa1ZQ8YeSsSho2itzHWeE=)
                          6: MVvq6Rgk9g4xb6udrHASJS9rhUU.roa (hash: M5I2tbJMcYnMo8jDDImO8+z5cJdQDV2EBlWZ+aqbq4Q=)
                          7: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: Ip0TCYopGyIg+jAIk19qMC0TeX8+OtwT+uwEcOXud/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:51:7e:12:e1:99:36:5f:cc:e3:b7:f7:69:32:50:f9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
        Validity
            Not Before: May 22 21:01:17 2026 GMT
            Not After : May 23 21:01:17 2026 GMT
        Subject: CN=8ed0c79600e2895b7106c32f1ebaa44e252fa991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:55:02:c2:85:d5:07:21:88:d1:cd:e9:d0:61:
                    6d:1c:a9:31:63:63:8e:6c:57:b9:f8:53:f5:fa:b3:
                    2a:b4:6e:e7:ad:59:6a:50:df:7e:06:42:95:ab:3f:
                    32:7d:a3:3d:0d:c3:a4:f0:9e:d1:d3:c5:4f:be:a1:
                    1d:ec:a5:14:2f:05:cb:85:df:7e:c3:ac:4d:7a:3d:
                    b6:a6:b4:cb:7d:e3:d6:3c:6b:a7:24:76:f7:56:c6:
                    51:48:53:78:f9:05:47:de:53:fa:28:2d:05:b9:db:
                    04:bf:d9:5c:da:09:05:5c:86:04:84:4f:c7:ef:4a:
                    6f:19:55:1d:49:0b:c0:ff:15:a9:8b:5a:0f:02:cc:
                    bb:8b:7f:b7:bf:65:0c:a8:81:6d:6f:30:1f:30:35:
                    18:72:c0:87:d0:3c:c5:f3:17:62:f0:4f:27:96:b3:
                    3a:3c:21:be:e7:7e:77:e5:e3:bc:43:60:85:ee:c4:
                    24:b8:18:75:0d:77:4f:be:ec:04:2c:91:84:15:41:
                    b6:8a:20:70:b8:d6:1b:a9:29:14:57:7c:cd:e1:e7:
                    ce:68:5f:1c:a3:84:32:82:4d:f1:cd:e1:a2:ba:16:
                    74:06:74:e8:3d:68:22:58:86:cb:f1:8d:1e:6d:d4:
                    c9:db:13:d9:31:77:11:ae:de:2c:6b:95:e2:a3:62:
                    16:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D0:C7:96:00:E2:89:5B:71:06:C3:2F:1E:BA:A4:4E:25:2F:A9:91
            X509v3 Authority Key Identifier:
                keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3e:10:99:20:f3:c8:7e:98:57:98:98:a5:27:96:bd:4d:ff:
         22:6b:63:ad:e7:c5:f1:73:10:36:db:92:e9:7a:23:0a:c9:89:
         69:01:ee:95:4d:0b:d6:ea:e3:ee:56:8e:f7:69:60:a6:29:73:
         51:a5:fe:7b:32:c1:74:f6:05:09:8b:fb:ae:ef:55:00:bf:ce:
         9e:df:1b:e9:c5:a4:c8:b4:cc:11:85:0a:a3:5c:00:63:05:9b:
         9e:3b:ea:3f:17:12:81:55:95:13:55:2c:71:ab:ae:4e:19:16:
         24:b9:f3:22:50:46:c9:37:b1:73:c3:a5:02:f2:08:8b:c9:a9:
         65:f6:16:58:96:b9:1e:53:5f:0b:c6:24:2f:8f:b3:61:3d:e5:
         5c:18:4d:83:2e:8e:27:1a:27:a6:6f:6c:c0:69:c4:1d:48:1d:
         0f:05:d8:cb:99:c0:a8:9f:f7:f3:e0:97:b9:74:a8:a0:d3:84:
         98:51:56:ba:f2:ae:f1:3a:c3:6b:db:6c:1a:21:25:7e:7e:4c:
         ca:fb:0f:0a:16:10:81:4d:4f:4b:fe:0c:ca:99:65:c4:78:5c:
         d4:5c:13:ee:6f:8d:b2:0c:e0:05:8f:80:bb:52:b4:22:4c:b3:
         ee:24:19:ce:1c:07:a5:26:71:b8:ab:e6:9c:9f:54:2c:62:2f:
         3f:bc:2f:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5RfhLhmTZfzOO392kyUPlDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk
ZDM3MDIwHhcNMjYwNTIyMjEwMTE3WhcNMjYwNTIzMjEwMTE3WjAzMTEwLwYDVQQD
Eyg4ZWQwYzc5NjAwZTI4OTViNzEwNmMzMmYxZWJhYTQ0ZTI1MmZhOTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVUCwoXVByGI0c3p0GFtHKkxY2OO
bFe5+FP1+rMqtG7nrVlqUN9+BkKVqz8yfaM9DcOk8J7R08VPvqEd7KUULwXLhd9+
w6xNej22prTLfePWPGunJHb3VsZRSFN4+QVH3lP6KC0FudsEv9lc2gkFXIYEhE/H
70pvGVUdSQvA/xWpi1oPAsy7i3+3v2UMqIFtbzAfMDUYcsCH0DzF8xdi8E8nlrM6
PCG+53535eO8Q2CF7sQkuBh1DXdPvuwELJGEFUG2iiBwuNYbqSkUV3zN4efOaF8c
o4Qygk3xzeGiuhZ0BnToPWgiWIbL8Y0ebdTJ2xPZMXcRrt4sa5Xio2IWFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7Qx5YA4olbcQbDLx66pE4lL6mRMB8GA1UdIwQY
MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt
MThiMWE5MzdhNTY3LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3
LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWD4QmSDz
yH6YV5iYpSeWvU3/ImtjrefF8XMQNtuS6XojCsmJaQHulU0L1urj7laO92lgpilz
UaX+ezLBdPYFCYv7ru9VAL/Ont8b6cWkyLTMEYUKo1wAYwWbnjvqPxcSgVWVE1Us
cauuThkWJLnzIlBGyTexc8OlAvIIi8mpZfYWWJa5HlNfC8YkL4+zYT3lXBhNgy6O
Jxonpm9swGnEHUgdDwXYy5nAqJ/38+CXuXSooNOEmFFWuvKu8TrDa9tsGiElfn5M
yvsPChYQgU1PS/4MypllxHhc1FwT7m+NsgzgBY+Au1K0Ikyz7iQZzhwHpSZxuKvm
nJ9ULGIvP7wvPA==
-----END CERTIFICATE-----
Generated at Sat May 23 03:47:32 2026 by rpki-client