Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
File:                     rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft (raw, json)
Hash identifier:          sXHS37I1wXPjDBK1qPOu5Shp+qo2qX5Ey30m4Kxysh8=
Subject key identifier:   39:C3:A4:15:A7:73:91:DD:BD:EA:7F:33:48:29:8E:F0:0D:E1:4C:72
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Certificate issuer:       /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial:       019E2926DF1DFB5098BC51984C5C9CED3C06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
Manifest number:          1929
Signing time:             Fri 15 May 2026 01:01:13 +0000
Manifest this update:     Fri 15 May 2026 01:01:13 +0000
Manifest next update:     Sat 16 May 2026 01:01:13 +0000
Files and hashes:         1: 8TXv8e4Zt8_eQ6NWirkqe9E0W_4.asa (hash: 4wwxHNIkgVcJLmHw8uy0TiaVWMubR0OMs0Q3hfAmuIk=)
                          2: Bq58wAV24LxCZfTqHikKpc1Pf90.roa (hash: Z38fRBPUaqDEJWZAtaIhWDjBuRq5J5FcYiFjJcjIdC4=)
                          3: g2mfEORB4KTxQPtrqS9KmJwGt60.roa (hash: ckCX/PTaFOHfPb57/FfMCnl07XdvXwOjflYamRZ+ttU=)
                          4: im5Fb-9w5mmPjp20JVfM6UTi9ZI.roa (hash: Lno5hcnACQyBSV8jBaTu79StES2mMHGRUyHa5ifNUXg=)
                          5: kEa8o2UnqelmH_ygtilQKIay4-U.roa (hash: wdOm+SKzMVc+6qYyPwtZWi4vySs728OYrMlkH8naows=)
                          6: o2zKTEKdkma_CEqLLr3-nWa-bTg.roa (hash: K00xY1oGfH9hHVRaGcI7b3OeCoea9X65r82JQ/DAkQ4=)
                          7: rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl (hash: uIB25yAy4vF1oagS1Qve1h7+WsUtTEOg2gpwIwCP1Xs=)
                          8: wDyGi9jWmZMB8lYHVhIMXvPFj4Q.asa (hash: x1KdrUN6ejhw/k+dP4uf7xrYb09HG6a00Ztpj8NCQt8=)
                          9: yl_8RQWT42NWgczzOlDn0gK7u0w.roa (hash: AZgf7E7lVvGrL5j+ea4NwUOdqabLA6/5isp7lMtBrHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:26:df:1d:fb:50:98:bc:51:98:4c:5c:9c:ed:3c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
        Validity
            Not Before: May 15 01:01:13 2026 GMT
            Not After : May 16 01:01:13 2026 GMT
        Subject: CN=39c3a415a77391ddbdea7f3348298ef00de14c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:26:bb:96:b5:c8:76:b1:5d:3a:21:0a:64:7e:
                    a5:0a:bc:79:ca:8a:07:95:1a:fa:d2:0d:fb:54:3e:
                    46:36:6e:3c:eb:f6:62:30:44:05:cf:ee:02:ea:c7:
                    c5:98:e9:35:2b:e7:ad:c8:93:ca:e6:bf:62:e1:e5:
                    a6:27:26:f4:2c:ed:17:98:c4:78:af:52:a7:80:b0:
                    7d:f0:23:a2:c0:4a:7e:df:12:46:81:8f:1d:ae:c8:
                    0d:b6:4d:95:44:8a:61:b7:22:70:27:5d:cd:38:60:
                    58:d5:12:a1:b5:53:71:54:2f:bc:1c:cf:3d:e4:7c:
                    1a:d7:1f:4f:58:52:af:a6:41:72:29:c5:24:7b:af:
                    03:da:f7:ab:4f:7f:ac:70:e4:9e:08:e0:70:72:83:
                    74:f4:66:58:8e:0e:d9:a3:0a:1f:57:bf:c3:7d:0a:
                    6d:6b:18:ed:48:98:99:54:22:13:12:c9:3c:15:97:
                    e3:53:ec:d5:5a:19:65:13:1f:89:60:84:8c:aa:39:
                    ee:ce:a8:6c:17:1e:32:2f:54:72:e8:08:1d:2d:75:
                    b4:cd:69:ff:6f:73:d5:dd:fd:2e:82:a0:7e:94:30:
                    d9:e1:0f:5c:a8:f5:cd:fb:33:b1:a9:1c:f2:58:2a:
                    78:17:52:6e:a5:94:b0:04:3c:35:b9:d3:48:be:8e:
                    de:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C3:A4:15:A7:73:91:DD:BD:EA:7F:33:48:29:8E:F0:0D:E1:4C:72
            X509v3 Authority Key Identifier:
                keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:de:39:13:f1:de:f2:77:09:60:bf:06:2e:00:84:3c:f5:37:
         21:e8:c0:ae:5b:24:e8:36:94:41:c5:7d:55:5d:69:50:f6:8f:
         68:81:94:1f:4b:2a:96:72:3b:9f:53:7a:de:a2:21:b0:28:ec:
         05:5a:80:ff:83:de:0d:24:bd:05:48:97:18:d9:59:f8:3d:ba:
         ca:f0:c1:aa:ce:fb:81:fd:d9:26:28:e4:91:a5:d1:ce:c2:bf:
         23:f2:46:ca:c7:fc:18:ac:71:c7:53:70:30:33:2c:f4:74:ee:
         77:db:b8:e5:de:26:73:69:33:8e:43:07:e5:da:0b:bf:b0:0c:
         2e:d2:e6:a4:bf:33:a6:be:82:8a:dd:6c:8c:0b:6c:ac:b2:d9:
         2e:e1:05:39:68:a3:af:67:3a:51:1e:cc:e6:71:a6:b8:d1:48:
         44:40:bd:94:c2:87:3f:d1:b8:ac:22:4f:29:5b:a1:8f:50:bb:
         1b:80:8c:77:12:b1:c7:10:59:13:0a:b2:a6:79:f1:d6:5f:a6:
         dc:9e:0d:6b:fa:7a:8d:d1:78:3b:26:5b:21:aa:cb:36:7a:db:
         90:19:97:9f:61:dc:96:28:2a:3e:97:bb:c5:63:c6:5b:8a:80:
         04:bb:f8:4c:ae:7e:07:56:09:9e:b1:82:9e:e2:b5:ae:7a:64:
         ff:a4:0f:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pJt8d+1CYvFGYTFyc7TwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlN2Y3NDdkZjVmMjQzNTMxNTRkYzRkNGJmNzBkMmRkY2I1
M2U5MDAwHhcNMjYwNTE1MDEwMTEzWhcNMjYwNTE2MDEwMTEzWjAzMTEwLwYDVQQD
EygzOWMzYTQxNWE3NzM5MWRkYmRlYTdmMzM0ODI5OGVmMDBkZTE0YzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Sa7lrXIdrFdOiEKZH6lCrx5yooH
lRr60g37VD5GNm486/ZiMEQFz+4C6sfFmOk1K+etyJPK5r9i4eWmJyb0LO0XmMR4
r1KngLB98COiwEp+3xJGgY8drsgNtk2VRIphtyJwJ13NOGBY1RKhtVNxVC+8HM89
5Hwa1x9PWFKvpkFyKcUke68D2verT3+scOSeCOBwcoN09GZYjg7ZowofV7/DfQpt
axjtSJiZVCITEsk8FZfjU+zVWhllEx+JYISMqjnuzqhsFx4yL1Ry6AgdLXW0zWn/
b3PV3f0ugqB+lDDZ4Q9cqPXN+zOxqRzyWCp4F1JupZSwBDw1udNIvo7eewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnDpBWnc5Hdvep/M0gpjvAN4UxyMB8GA1UdIwQY
MBaAFK5/dH318kNTFU3E1L9w0t3LU+kAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2Et
YzZmMWU2YWM5YmE5LzEvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2EtYzZmMWU2YWM5YmE5
LzEvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi945E/He
8ncJYL8GLgCEPPU3IejArlsk6DaUQcV9VV1pUPaPaIGUH0sqlnI7n1N63qIhsCjs
BVqA/4PeDSS9BUiXGNlZ+D26yvDBqs77gf3ZJijkkaXRzsK/I/JGysf8GKxxx1Nw
MDMs9HTud9u45d4mc2kzjkMH5doLv7AMLtLmpL8zpr6Cit1sjAtsrLLZLuEFOWij
r2c6UR7M5nGmuNFIREC9lMKHP9G4rCJPKVuhj1C7G4CMdxKxxxBZEwqypnnx1l+m
3J4Na/p6jdF4OyZbIarLNnrbkBmXn2HcligqPpe7xWPGW4qABLv4TK5+B1YJnrGC
nuK1rnpk/6QP2w==
-----END CERTIFICATE-----
Generated at Fri May 15 06:19:42 2026 by rpki-client