Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
File:                     8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json)
Hash identifier:          sqqzrSW0QNzp5+0SpRFjEZLnzIV8U4QzZNGhBodlxXU=
Subject key identifier:   58:60:7F:08:73:1F:97:66:42:FF:7E:EC:D6:02:96:A6:6C:03:5E:60
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Certificate issuer:       /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial:       019E2F971F7840238B8215248782032750DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
Manifest number:          1093
Signing time:             Sat 16 May 2026 07:01:33 +0000
Manifest this update:     Sat 16 May 2026 07:01:33 +0000
Manifest next update:     Sun 17 May 2026 07:01:33 +0000
Files and hashes:         1: 1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa (hash: yUMOwLX6anzQEJQZ/ZLwqV3uE8drjI2D4SrjYJX1k20=)
                          2: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: fu5BR/1Glyydt3u4p5vs2E4EuE8aU6AbUzn0UiUVSnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:1f:78:40:23:8b:82:15:24:87:82:03:27:50:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
        Validity
            Not Before: May 16 07:01:33 2026 GMT
            Not After : May 17 07:01:33 2026 GMT
        Subject: CN=58607f08731f976642ff7eecd60296a66c035e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:ac:ee:1a:88:28:72:6d:74:7c:59:3f:d0:
                    ad:32:14:d0:19:e8:b6:66:55:2b:42:41:48:c1:2e:
                    db:35:38:88:23:a7:9e:1d:02:f9:f1:55:0f:81:fe:
                    37:43:3a:d9:16:69:30:15:1d:d8:90:9a:ec:5a:9e:
                    e5:fb:0a:2f:8e:f9:bb:87:a9:21:3e:dd:c4:50:24:
                    a4:68:a9:e2:a6:6e:7e:ca:35:c4:a0:b4:04:5c:91:
                    1a:c7:cf:64:03:ca:08:58:36:6a:9a:03:45:cd:d1:
                    59:a8:91:dc:6a:f0:d7:6e:6f:85:29:88:48:a8:0a:
                    e8:f9:4a:0a:fe:75:86:7e:6a:ec:15:0a:a0:44:f7:
                    26:3c:e1:ca:ab:e2:c2:1b:c4:71:f0:41:7a:53:c3:
                    3d:ca:ac:41:bb:05:1d:5e:14:12:b6:ce:31:1c:a8:
                    d7:e1:d5:f0:23:c8:54:e7:00:af:33:4a:df:0e:ca:
                    87:4e:65:d4:46:ca:aa:dc:60:85:60:37:9f:bc:d1:
                    09:04:a4:16:bf:ee:c9:48:73:33:8b:96:d1:5f:48:
                    dd:d2:b9:04:d5:da:68:df:5b:02:03:f2:da:f4:5e:
                    75:d8:7c:29:67:35:32:50:95:58:f2:db:63:2c:2c:
                    c0:e8:2d:cc:8f:ff:f1:75:c3:fa:59:7e:13:ae:83:
                    cd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:60:7F:08:73:1F:97:66:42:FF:7E:EC:D6:02:96:A6:6C:03:5E:60
            X509v3 Authority Key Identifier:
                keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:26:02:a5:9e:23:5e:05:67:98:3e:5b:a0:9e:01:ff:fa:5b:
         6a:3a:95:7e:94:fd:4b:23:9a:2b:c6:67:60:66:e1:d5:ac:f5:
         7b:92:a3:d7:36:d6:87:dc:73:53:9a:1b:49:49:66:6a:de:d4:
         3d:eb:1b:a1:a8:bb:5f:39:2e:78:b9:a1:99:72:2b:85:6c:61:
         16:80:23:60:ee:ab:54:e6:c1:b6:f9:2a:c8:f3:ad:2f:1a:e6:
         30:65:4e:f2:67:8f:c1:46:1d:0e:71:f4:60:79:0b:8c:74:8b:
         80:0e:ee:86:6c:6d:31:22:d0:b7:f6:ec:cd:6e:68:94:32:0b:
         09:d1:01:32:9e:52:0c:a3:e4:fc:c5:03:80:1b:8c:fb:26:93:
         0d:cd:61:c1:df:f4:1d:be:11:d5:2f:69:9f:41:27:a3:06:f1:
         0a:d6:64:c2:30:03:01:bf:e3:26:01:d0:f6:38:df:44:24:1f:
         5c:48:af:d7:c5:c4:4d:db:02:f1:b1:b2:f5:03:5f:53:e2:33:
         03:3b:03:d1:17:76:54:b7:19:fe:75:c7:e0:ee:f1:3e:45:65:
         0e:d2:07:d3:a5:27:26:fa:78:34:8d:07:b6:88:35:c3:49:df:
         7b:27:5e:04:f2:23:50:35:a2:08:28:a9:b0:4c:d2:1e:f3:1a:
         03:7b:ba:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vlx94QCOLghUkh4IDJ1DfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYjk4ZjU4NGJjMTIzNDc4MGEyYzQ3ZmM4ODMyNGQ0OWVl
MGU2ZjQwHhcNMjYwNTE2MDcwMTMzWhcNMjYwNTE3MDcwMTMzWjAzMTEwLwYDVQQD
Eyg1ODYwN2YwODczMWY5NzY2NDJmZjdlZWNkNjAyOTZhNjZjMDM1ZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTKs7hqIKHJtdHxZP9CtMhTQGei2
ZlUrQkFIwS7bNTiII6eeHQL58VUPgf43QzrZFmkwFR3YkJrsWp7l+wovjvm7h6kh
Pt3EUCSkaKnipm5+yjXEoLQEXJEax89kA8oIWDZqmgNFzdFZqJHcavDXbm+FKYhI
qAro+UoK/nWGfmrsFQqgRPcmPOHKq+LCG8Rx8EF6U8M9yqxBuwUdXhQSts4xHKjX
4dXwI8hU5wCvM0rfDsqHTmXURsqq3GCFYDefvNEJBKQWv+7JSHMzi5bRX0jd0rkE
1dpo31sCA/La9F512HwpZzUyUJVY8ttjLCzA6C3Mj//xdcP6WX4TroPNqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhgfwhzH5dmQv9+7NYClqZsA15gMB8GA1UdIwQY
MBaAFPK5j1hLwSNHgKLEf8iDJNSe4Ob0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYt
NGVjMWFiZTA4NWVmLzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYtNGVjMWFiZTA4NWVm
LzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyYCpZ4j
XgVnmD5boJ4B//pbajqVfpT9SyOaK8ZnYGbh1az1e5Kj1zbWh9xzU5obSUlmat7U
Pesboai7XzkueLmhmXIrhWxhFoAjYO6rVObBtvkqyPOtLxrmMGVO8mePwUYdDnH0
YHkLjHSLgA7uhmxtMSLQt/bszW5olDILCdEBMp5SDKPk/MUDgBuM+yaTDc1hwd/0
Hb4R1S9pn0EnowbxCtZkwjADAb/jJgHQ9jjfRCQfXEiv18XETdsC8bGy9QNfU+Iz
AzsD0Rd2VLcZ/nXH4O7xPkVlDtIH06UnJvp4NI0Htog1w0nfeydeBPIjUDWiCCip
sEzSHvMaA3u6lw==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:51 2026 by rpki-client