Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
File:                     yLbqU9hyUXDrX0KqUN241gXFOB8.mft (raw, json)
Hash identifier:          Easja/RHczpuDSrTvop/vmNC69ZnZIe3OwjkAWd3L6Q=
Subject key identifier:   4A:AA:96:C8:F0:AC:3D:E0:90:0F:06:B3:42:20:22:1D:FF:9F:8E:DE
Authority key identifier: C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
Certificate issuer:       /CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Certificate serial:       019E401C6DC8BFDF25BF9D6456D4DF1A2B53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
Manifest number:          038D
Signing time:             Tue 19 May 2026 12:01:05 +0000
Manifest this update:     Tue 19 May 2026 12:01:05 +0000
Manifest next update:     Wed 20 May 2026 12:01:05 +0000
Files and hashes:         1: 0KsnzuH-A_zXm2XLJt2nHb0im0Y.roa (hash: Ja/jRY18A5eip3z5tPS25Gs+cDPzHWqAalXTdxK4240=)
                          2: yLbqU9hyUXDrX0KqUN241gXFOB8.crl (hash: PNhTb4AwebrqMY3xHReWS9+8s1XGmKywNy4Vb5XLwbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 20 May 2026 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:40:1c:6d:c8:bf:df:25:bf:9d:64:56:d4:df:1a:2b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
        Validity
            Not Before: May 19 12:01:05 2026 GMT
            Not After : May 20 12:01:05 2026 GMT
        Subject: CN=4aaa96c8f0ac3de0900f06b34220221dff9f8ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:c9:f3:8c:da:c1:a7:e4:85:cb:85:80:42:
                    5b:fb:40:89:b3:3b:da:b9:52:c5:cb:d2:79:3c:95:
                    d7:14:b0:ff:ec:f4:23:ee:04:d7:04:f7:52:e1:11:
                    12:5a:98:74:e8:0d:af:b8:57:67:e6:ff:77:0c:d2:
                    7a:49:83:02:d6:2f:63:cd:10:e2:dc:df:29:6d:e6:
                    9f:03:2c:19:4f:50:48:da:07:6d:5c:43:b3:73:60:
                    77:01:02:de:b9:73:ed:bc:b0:fc:5f:03:eb:6f:83:
                    d3:a2:49:e8:fb:33:ab:77:f0:c8:f2:65:79:e0:7b:
                    bf:f6:f5:ed:4d:e9:c5:a9:5d:f8:41:f8:3e:8c:41:
                    de:3b:ec:8a:30:16:d1:6f:bb:08:58:7b:89:8f:19:
                    ac:b6:af:bc:5b:b2:c7:a1:c7:ad:fd:22:3e:bb:5e:
                    ca:00:70:9d:ca:30:68:7c:48:74:08:e6:be:c3:6c:
                    3e:00:25:65:76:e4:e2:c7:e4:31:6c:7f:0c:aa:26:
                    7b:08:d1:4a:95:80:ef:a4:b3:e2:f5:6c:58:46:e8:
                    0a:40:f9:f1:57:a0:7e:99:a3:fb:07:a0:79:4e:4d:
                    58:ba:89:f1:65:bd:78:2d:34:cd:1e:b3:a4:7a:6b:
                    f7:17:46:15:60:59:2d:a0:dc:6e:7f:1f:2e:c9:79:
                    62:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AA:96:C8:F0:AC:3D:E0:90:0F:06:B3:42:20:22:1D:FF:9F:8E:DE
            X509v3 Authority Key Identifier:
                keyid:C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:bd:27:e3:d8:b9:c4:5a:db:9f:d0:13:68:2e:26:06:29:54:
         a0:6d:75:dc:3d:1b:91:55:35:0a:1a:cc:d1:93:9e:37:e1:15:
         ad:bf:98:6f:9a:12:dc:6c:da:c5:7c:4d:c3:80:98:28:08:45:
         60:94:df:aa:c4:17:a2:95:0b:87:02:3c:ee:75:07:69:a7:3b:
         9d:6d:e4:ad:3a:a0:03:56:6d:66:80:0b:8f:e8:42:3d:26:f7:
         1e:60:ee:72:68:a5:f4:4e:31:b4:e1:a6:a0:e8:ad:6b:ce:25:
         69:44:3b:39:58:d4:df:df:0f:57:92:5c:19:65:12:65:df:95:
         ec:91:c7:9c:77:8d:63:2a:a7:4e:e8:7b:4e:9e:94:f8:d2:a8:
         1a:b2:b1:c9:ab:e0:ab:63:88:4d:42:23:f6:4e:0e:6b:0a:82:
         7b:b3:d4:8f:9f:a4:8d:b2:d3:2f:6d:88:6b:c9:99:36:80:1f:
         fc:d6:46:ad:9b:b4:34:9e:0c:75:87:8d:63:94:1e:cf:d0:83:
         61:4d:13:cc:52:06:03:f1:40:ae:2b:35:fe:6c:31:f8:5f:25:
         43:be:a1:98:10:4b:71:0f:63:cd:8f:fe:81:64:80:2c:e9:db:
         f5:1a:e8:3c:96:ce:e2:a3:c6:e0:87:a4:51:32:d1:e4:ba:08:
         ed:55:6b:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5AHG3Iv98lv51kVtTfGitTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YjZlYTUzZDg3MjUxNzBlYjVmNDJhYTUwZGRiOGQ2MDVj
NTM4MWYwHhcNMjYwNTE5MTIwMTA1WhcNMjYwNTIwMTIwMTA1WjAzMTEwLwYDVQQD
Eyg0YWFhOTZjOGYwYWMzZGUwOTAwZjA2YjM0MjIwMjIxZGZmOWY4ZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhfJ84zawafkhcuFgEJb+0CJszva
uVLFy9J5PJXXFLD/7PQj7gTXBPdS4RESWph06A2vuFdn5v93DNJ6SYMC1i9jzRDi
3N8pbeafAywZT1BI2gdtXEOzc2B3AQLeuXPtvLD8XwPrb4PTokno+zOrd/DI8mV5
4Hu/9vXtTenFqV34Qfg+jEHeO+yKMBbRb7sIWHuJjxmstq+8W7LHocet/SI+u17K
AHCdyjBofEh0COa+w2w+ACVlduTix+QxbH8MqiZ7CNFKlYDvpLPi9WxYRugKQPnx
V6B+maP7B6B5Tk1YuonxZb14LTTNHrOkemv3F0YVYFktoNxufx8uyXli0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqqlsjwrD3gkA8Gs0IgIh3/n47eMB8GA1UdIwQY
MBaAFMi26lPYclFw619CqlDduNYFxTgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgt
OTM5YWMzZmU0Yjg5LzEveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgtOTM5YWMzZmU0Yjg5
LzEveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVb0n49i5
xFrbn9ATaC4mBilUoG113D0bkVU1ChrM0ZOeN+EVrb+Yb5oS3GzaxXxNw4CYKAhF
YJTfqsQXopULhwI87nUHaac7nW3krTqgA1ZtZoALj+hCPSb3HmDucmil9E4xtOGm
oOita84laUQ7OVjU398PV5JcGWUSZd+V7JHHnHeNYyqnTuh7Tp6U+NKoGrKxyavg
q2OITUIj9k4OawqCe7PUj5+kjbLTL22Ia8mZNoAf/NZGrZu0NJ4MdYeNY5Qez9CD
YU0TzFIGA/FAris1/mwx+F8lQ76hmBBLcQ9jzY/+gWSALOnb9RroPJbO4qPG4Iek
UTLR5LoI7VVrvw==
-----END CERTIFICATE-----
Generated at Tue May 19 16:02:41 2026 by rpki-client