Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File:                     E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier:          ZF3NE746F1aJXDI/y+P0nM10BW5FWKy7sdlqT/5miRk=
Subject key identifier:   A2:3C:CA:DC:95:10:0F:8A:D4:05:C3:79:0A:20:99:7C:6C:A3:D6:E0
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer:       /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial:       019E31174BC0DD6C2621E963FCE10E3290E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 14:01:10 +0000
Manifest this update:     Sat 16 May 2026 14:01:10 +0000
Manifest next update:     Sun 17 May 2026 14:01:10 +0000
Files and hashes:         1: 8eoml7dYa0eoM9KDK5sW1rlposY.roa (hash: VOm0DAbeHrJJa6zbFFsa/wwwKrik//M4U5w54aGoMoQ=)
                          2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: VUb/5pwSgh7csr3WSwaL0fXClSScou4NwiRyLl+DosM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:4b:c0:dd:6c:26:21:e9:63:fc:e1:0e:32:90:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
        Validity
            Not Before: May 16 14:01:10 2026 GMT
            Not After : May 17 14:01:10 2026 GMT
        Subject: CN=a23ccadc95100f8ad405c3790a20997c6ca3d6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:f3:1d:4e:40:1e:45:80:c9:ff:db:69:f8:
                    af:f2:30:d2:f6:c0:35:98:16:e3:3b:fa:5e:20:8c:
                    22:7c:8a:12:5b:11:11:d9:2e:bf:c2:e2:0e:b3:0c:
                    6b:fa:c4:88:f7:34:1c:b3:2d:d7:11:36:73:cb:f8:
                    e8:ba:3a:33:ac:f1:d2:c0:1f:4f:79:79:29:e1:bd:
                    b7:a1:b0:77:b4:40:70:6b:90:a0:c1:ea:0f:4e:75:
                    4d:81:c9:d3:29:bf:09:27:0e:5c:d3:d9:87:a5:21:
                    87:ef:91:af:93:e5:ef:9d:96:a1:2d:7c:d7:d1:de:
                    58:56:42:cb:4f:c6:3f:77:5c:64:42:6d:2a:9d:20:
                    cb:1b:ac:85:1d:c4:c9:89:f8:c5:48:9a:7b:2c:92:
                    30:f2:27:14:69:07:ad:70:8b:75:df:7d:8c:61:65:
                    2f:87:68:86:e4:80:63:9b:1a:90:d4:74:0f:e1:29:
                    33:95:0d:4b:55:11:fc:63:ee:3b:f2:92:10:23:3a:
                    e0:38:e8:28:b9:40:9c:44:c2:f6:c7:fb:34:04:fd:
                    54:55:9c:ec:c4:d9:e5:04:e2:c5:39:77:40:50:9b:
                    83:18:f6:70:86:6c:18:ac:08:51:6e:25:76:1a:7c:
                    7d:f9:6b:8c:90:ff:b3:67:b0:d5:58:4b:65:2f:19:
                    9a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3C:CA:DC:95:10:0F:8A:D4:05:C3:79:0A:20:99:7C:6C:A3:D6:E0
            X509v3 Authority Key Identifier:
                keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:15:b6:a4:8d:b3:f4:53:4e:f2:0a:d1:4d:82:9c:df:f0:54:
         58:56:50:30:65:e2:da:16:ba:c2:2d:3c:64:24:56:c1:1d:0a:
         61:40:c8:d4:c6:db:8e:3c:cb:78:92:d7:1d:90:52:25:01:01:
         8e:59:ba:6e:9f:97:20:80:a4:b8:ed:31:aa:27:d1:5a:af:da:
         c2:f4:fa:51:70:5c:f8:2d:e0:3a:11:0a:df:4f:2f:38:69:2a:
         a2:1f:7b:b4:be:52:b1:4a:3d:20:37:3d:6f:06:a1:0f:76:74:
         96:85:53:dd:ec:25:82:8c:1c:d3:60:b2:7b:ea:21:fa:76:90:
         16:2b:77:02:0f:18:62:cc:1e:cf:36:c1:36:01:85:e9:30:27:
         d3:4f:77:7c:75:70:e6:64:9f:0d:0b:a1:6b:1c:76:a1:bb:60:
         b3:b6:ee:97:5a:9d:6f:34:f5:f4:c5:c0:6b:ce:7d:c1:df:39:
         ab:24:de:1d:8e:3d:06:dd:d3:6e:8f:b2:85:f5:d0:22:5e:f1:
         0a:2f:b1:e8:66:1a:c4:fe:ba:4d:64:3d:ee:02:e7:4b:bf:38:
         9c:f3:79:55:cd:0a:9c:7f:9d:9b:b1:3d:2d:67:ef:d3:c6:b9:
         79:7c:90:e9:b4:46:73:71:6c:08:57:03:6b:d4:29:7e:7b:89:
         4e:e9:21:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF0vA3WwmIelj/OEOMpDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDYyMjIwNjQ4ZDZlZWU0MmFjOTJjMzk2YmYyZDFlODFh
ZTY1ZjcwHhcNMjYwNTE2MTQwMTEwWhcNMjYwNTE3MTQwMTEwWjAzMTEwLwYDVQQD
EyhhMjNjY2FkYzk1MTAwZjhhZDQwNWMzNzkwYTIwOTk3YzZjYTNkNmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscjzHU5AHkWAyf/bafiv8jDS9sA1
mBbjO/peIIwifIoSWxER2S6/wuIOswxr+sSI9zQcsy3XETZzy/joujozrPHSwB9P
eXkp4b23obB3tEBwa5CgweoPTnVNgcnTKb8JJw5c09mHpSGH75Gvk+XvnZahLXzX
0d5YVkLLT8Y/d1xkQm0qnSDLG6yFHcTJifjFSJp7LJIw8icUaQetcIt1332MYWUv
h2iG5IBjmxqQ1HQP4SkzlQ1LVRH8Y+478pIQIzrgOOgouUCcRML2x/s0BP1UVZzs
xNnlBOLFOXdAUJuDGPZwhmwYrAhRbiV2Gnx9+WuMkP+zZ7DVWEtlLxma4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKI8ytyVEA+K1AXDeQogmXxso9bgMB8GA1UdIwQY
MBaAFBPWIiBkjW7uQqySw5a/LR6BrmX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wYzI1OGEtNTIwMy00M2U2LTk2NzIt
ZmQ5Yzc0OTA2YmFhLzEvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wYzI1OGEtNTIwMy00M2U2LTk2NzItZmQ5Yzc0OTA2YmFh
LzEvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRW2pI2z
9FNO8grRTYKc3/BUWFZQMGXi2ha6wi08ZCRWwR0KYUDI1MbbjjzLeJLXHZBSJQEB
jlm6bp+XIICkuO0xqifRWq/awvT6UXBc+C3gOhEK308vOGkqoh97tL5SsUo9IDc9
bwahD3Z0loVT3ewlgowc02Cye+oh+naQFit3Ag8YYswezzbBNgGF6TAn0093fHVw
5mSfDQuhaxx2obtgs7bul1qdbzT19MXAa859wd85qyTeHY49Bt3Tbo+yhfXQIl7x
Ci+x6GYaxP66TWQ97gLnS784nPN5Vc0KnH+dm7E9LWfv08a5eXyQ6bRGc3FsCFcD
a9QpfnuJTukhHw==
-----END CERTIFICATE-----
Generated at Sat May 16 17:13:28 2026 by rpki-client