Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File:                     gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier:          drsQeQQMOP3UJBU3r5LLv2GTaKUAWiV3aI1it04r20c=
Subject key identifier:   80:B8:FC:61:A9:D5:DC:B5:55:70:9B:86:6A:94:46:0C:C7:B2:13:CC
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer:       /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial:       019E3184F5F4FCF6C393A10ED297F5C4523B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number:          0E39
Signing time:             Sat 16 May 2026 16:00:57 +0000
Manifest this update:     Sat 16 May 2026 16:00:57 +0000
Manifest next update:     Sun 17 May 2026 16:00:57 +0000
Files and hashes:         1: fMNCB8rD0Ip8fbF1LvyhEJtg6Gg.roa (hash: LXNlsf10QtsQkHE8Tm9n4uZsh/ON6f1nhNppQ718O5s=)
                          2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: LHMPcjdW6RxdP5teQUJcwQJhoMSNeyLEAQgMN0K/bM4=)
                          3: xG0VUDOknHsZasT5TDaZxzA4pvE.roa (hash: Xzghi2lIosJPiXM8pVY4mOf1fz9gQv7/1SCn9lu4mdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:84:f5:f4:fc:f6:c3:93:a1:0e:d2:97:f5:c4:52:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
        Validity
            Not Before: May 16 16:00:57 2026 GMT
            Not After : May 17 16:00:57 2026 GMT
        Subject: CN=80b8fc61a9d5dcb555709b866a94460cc7b213cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:10:d6:c3:d1:21:8a:fa:c3:df:00:66:f1:b2:
                    7f:b4:af:de:7e:05:b3:45:d5:77:cc:e4:7c:37:a5:
                    71:76:24:39:b5:f8:4e:51:3c:04:1a:5a:7e:43:0f:
                    26:bc:d2:ca:91:a7:b9:c0:5d:49:fb:54:e2:32:8a:
                    fd:8b:44:4b:ee:14:de:97:a3:c0:5f:db:3b:04:d7:
                    aa:bc:3e:a6:bc:11:9f:e4:f1:26:0c:46:86:c8:db:
                    d4:a8:6f:c2:ee:dc:fa:21:bd:cb:66:e6:8b:7e:c2:
                    88:73:d4:ed:5c:a1:d3:2a:bd:0c:b9:b0:4a:e3:5d:
                    f2:90:ad:50:73:be:44:23:48:0c:0b:8b:24:2b:95:
                    dd:cc:24:b6:94:80:76:fd:3b:70:cf:45:8b:77:9d:
                    da:07:c0:c3:bc:5f:00:72:bc:56:03:74:07:c8:93:
                    16:70:a4:bf:53:7b:dd:50:eb:1d:fe:cd:fa:f4:3d:
                    f5:46:11:19:1d:b3:d5:6a:0b:80:b7:8e:12:76:2c:
                    2a:22:85:5e:2c:29:cf:3e:08:8a:54:dc:c8:a3:cb:
                    bc:52:19:dd:8b:10:a5:1d:fb:03:00:92:95:34:de:
                    f0:57:b1:d4:fa:cf:08:5a:b7:6a:b9:e5:82:ae:56:
                    06:a7:c1:27:17:5e:41:82:39:9a:1a:eb:bd:69:0d:
                    89:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B8:FC:61:A9:D5:DC:B5:55:70:9B:86:6A:94:46:0C:C7:B2:13:CC
            X509v3 Authority Key Identifier:
                keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a0:70:2c:cc:a8:e1:2f:da:84:55:f5:ea:b8:8b:10:17:dc:
         31:43:04:c1:a6:2b:17:81:03:e4:82:fb:31:4b:fc:9c:c8:87:
         56:a0:23:32:db:49:6c:47:8c:19:43:6b:0e:40:47:43:e6:b6:
         08:08:03:7f:6a:6f:24:49:e8:2f:52:e6:5f:44:57:54:9c:77:
         a0:47:6f:b1:2b:e9:1b:d4:f3:f1:99:f1:ba:5c:da:f6:7a:08:
         0c:cf:ec:9f:7b:3d:20:59:f7:ea:5e:b1:0f:17:c9:75:0a:7d:
         a3:a1:7e:01:9c:d5:a4:47:39:59:f1:79:79:d5:5d:8a:b5:6e:
         d7:ba:03:18:e6:de:ea:a7:66:39:15:34:87:4d:b7:58:f3:4c:
         df:39:38:c4:ac:a9:5a:f3:a8:3f:7e:c2:29:e1:52:1f:10:3f:
         fb:5a:9f:bf:46:02:80:0b:d6:23:a8:48:c7:24:c9:70:37:c9:
         e2:ac:25:62:9b:a2:ad:5e:92:ef:44:ca:88:c8:6e:72:e3:54:
         d6:ef:5b:4e:78:ab:e5:12:bf:eb:a4:b1:8e:de:7f:70:38:12:
         56:0e:fd:45:01:7a:b5:6f:3a:e1:ea:17:44:2a:7d:13:21:97:
         b4:91:c9:3f:da:0d:68:6e:87:69:81:aa:6e:eb:30:d6:4a:44:
         59:b3:b7:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhPX0/PbDk6EO0pf1xFI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyOGJiYWQ2ZjQ5MTY4NDJiYmUzMjAyODRmYWZlMTBjYWY1
OWVkZjAwHhcNMjYwNTE2MTYwMDU3WhcNMjYwNTE3MTYwMDU3WjAzMTEwLwYDVQQD
Eyg4MGI4ZmM2MWE5ZDVkY2I1NTU3MDliODY2YTk0NDYwY2M3YjIxM2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxDWw9EhivrD3wBm8bJ/tK/efgWz
RdV3zOR8N6VxdiQ5tfhOUTwEGlp+Qw8mvNLKkae5wF1J+1TiMor9i0RL7hTel6PA
X9s7BNeqvD6mvBGf5PEmDEaGyNvUqG/C7tz6Ib3LZuaLfsKIc9TtXKHTKr0MubBK
413ykK1Qc75EI0gMC4skK5XdzCS2lIB2/Ttwz0WLd53aB8DDvF8AcrxWA3QHyJMW
cKS/U3vdUOsd/s369D31RhEZHbPVaguAt44SdiwqIoVeLCnPPgiKVNzIo8u8Uhnd
ixClHfsDAJKVNN7wV7HU+s8IWrdqueWCrlYGp8EnF15BgjmaGuu9aQ2JlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIC4/GGp1dy1VXCbhmqURgzHshPMMB8GA1UdIwQY
MBaAFIKLutb0kWhCu+MgKE+v4QyvWe3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84M2Y5NzctODJiOC00Njk1LTljMDgt
MTg5NjU1NWEyZjBlLzEvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84M2Y5NzctODJiOC00Njk1LTljMDgtMTg5NjU1NWEyZjBl
LzEvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKBwLMyo
4S/ahFX16riLEBfcMUMEwaYrF4ED5IL7MUv8nMiHVqAjMttJbEeMGUNrDkBHQ+a2
CAgDf2pvJEnoL1LmX0RXVJx3oEdvsSvpG9Tz8Znxulza9noIDM/sn3s9IFn36l6x
DxfJdQp9o6F+AZzVpEc5WfF5edVdirVu17oDGObe6qdmORU0h023WPNM3zk4xKyp
WvOoP37CKeFSHxA/+1qfv0YCgAvWI6hIxyTJcDfJ4qwlYpuirV6S70TKiMhucuNU
1u9bTnir5RK/66Sxjt5/cDgSVg79RQF6tW864eoXRCp9EyGXtJHJP9oNaG6HaYGq
busw1kpEWbO3Qg==
-----END CERTIFICATE-----
Generated at Sun May 17 00:29:38 2026 by rpki-client