Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
File:                     qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json)
Hash identifier:          OaQPqvdF0vQbnrHLpAyScYA1HNS2oXbEomShVVxqe3A=
Subject key identifier:   F2:BC:9E:AC:7C:74:D4:E1:6E:E5:BF:19:A6:DB:F1:B8:31:3A:D2:D0
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Certificate issuer:       /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial:       019E27DDB8A65D7050A0D0B612A76686C65A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
Manifest number:          0CB2
Signing time:             Thu 14 May 2026 19:01:42 +0000
Manifest this update:     Thu 14 May 2026 19:01:42 +0000
Manifest next update:     Fri 15 May 2026 19:01:42 +0000
Files and hashes:         1: 1yNxCmePPnXYmANALvF6crPNDSc.roa (hash: NnbT8iaws5JgljNe+UvSj+hAMr2jidNTvDwKfdnsRJM=)
                          2: IjH8Bw6khS3HfsHRDOq7KVhCvtE.roa (hash: xqV8sj84jv/de5gXJFmozbmUfKDQmxucnoddgaBj3m4=)
                          3: cMufgoQU0L0jv10NNeCceGj__mo.roa (hash: nQdacmV+KrpQrHaTQNA9qp4TW/zHU/aMagi4CQEt/fQ=)
                          4: o4XRIYaubJYsaKle7Mq2zp2yQPU.roa (hash: /2hj0m+hPdpMrzwdZKFg60yCkkhQ3QugnRJdjSqOsJc=)
                          5: osiPIqZHFwJFJVDnL4CHHio8HdM.roa (hash: vGPA8SjpFPALGX8zEZpTARWGQMkoh1k17+6L+YmNaLY=)
                          6: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: DvcrWylcEqOg7A+Lx2DPO02owbUfXd7ays1gAegEJB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 16:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:27:dd:b8:a6:5d:70:50:a0:d0:b6:12:a7:66:86:c6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
        Validity
            Not Before: May 14 19:01:42 2026 GMT
            Not After : May 15 19:01:42 2026 GMT
        Subject: CN=f2bc9eac7c74d4e16ee5bf19a6dbf1b8313ad2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:4c:a7:0c:fc:f7:a8:3f:b4:10:ec:a8:85:
                    63:a6:65:a3:d4:38:32:2e:23:e4:77:23:a6:8e:2c:
                    c7:35:ba:af:db:b0:f1:d4:fe:1c:57:00:a7:97:b2:
                    c1:be:d9:8d:48:60:fe:df:a5:54:4b:25:0b:cf:5b:
                    d7:9b:cb:8c:ec:a2:35:07:d3:a0:ac:08:89:4c:85:
                    f9:49:f5:2f:f0:e0:d6:eb:3f:13:a0:31:1d:d3:d4:
                    c0:2d:9b:a8:4b:0e:cd:27:e3:b9:ea:a3:15:6f:9b:
                    af:4e:31:aa:43:e3:18:5f:f3:a1:be:ba:8e:26:a7:
                    4d:ab:8a:1d:9b:c2:b5:25:62:27:75:c3:fc:49:99:
                    60:c4:8a:1c:1c:31:62:fa:a3:f1:fc:b4:43:75:76:
                    94:71:d6:37:99:b3:1f:b5:d6:97:f6:0e:98:a1:b7:
                    79:8e:75:60:6f:7e:66:f0:e6:ee:ae:3a:c5:52:24:
                    e3:b1:4d:58:8b:ba:09:b8:b0:1c:6d:a5:e7:e0:3d:
                    b2:30:36:4d:1f:3e:74:f6:21:b9:80:06:48:70:0e:
                    73:5b:42:66:b2:4c:d0:b7:84:01:d7:5b:dd:bb:e1:
                    39:8a:57:cc:88:97:a6:e1:7f:c1:70:a4:d6:d5:a7:
                    9d:48:c7:05:d1:f2:e9:a9:a1:b4:81:e9:c8:01:97:
                    54:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BC:9E:AC:7C:74:D4:E1:6E:E5:BF:19:A6:DB:F1:B8:31:3A:D2:D0
            X509v3 Authority Key Identifier:
                keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:fb:0f:20:15:b7:67:50:65:69:52:ff:f5:db:85:d4:98:c6:
         43:71:79:b6:0b:4c:93:cc:64:bd:70:65:1f:f0:ba:5b:20:f4:
         ab:da:61:43:2f:76:54:fb:7d:e9:69:8e:e8:e2:d7:f3:00:6d:
         80:3b:79:ef:06:2f:22:17:67:21:a8:5e:8d:31:83:66:66:f7:
         02:2f:90:ad:27:2a:0e:a0:72:d8:35:c2:a5:79:07:38:15:62:
         f0:41:96:a5:74:28:cc:2b:5c:94:1c:12:b1:ed:13:4e:2f:6c:
         c2:89:dc:35:c8:9c:60:12:c1:4b:a8:ec:d2:4c:6a:2d:f2:48:
         b2:2d:c6:91:71:f1:69:0d:b2:a8:0b:89:d1:f3:38:e2:7e:37:
         e2:4b:66:61:56:ab:47:c8:99:df:54:fe:a8:75:ce:34:77:69:
         a9:e8:91:95:d0:ad:c9:d7:27:ee:dc:28:96:03:84:91:83:6c:
         2e:37:38:69:ae:be:b6:b3:17:b8:15:8e:62:bb:34:9a:aa:40:
         6a:a5:60:11:9a:e7:eb:31:72:c4:9f:7c:7d:ad:9f:cc:60:15:
         e4:c0:7a:96:2e:df:b4:ba:0d:50:dc:e8:22:a9:65:cb:17:74:
         ca:0c:aa:8c:f4:a3:e9:7d:45:26:94:37:7b:b3:94:6c:81:76:
         df:21:ab:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4n3bimXXBQoNC2EqdmhsZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NTJkMGQyNjY1NTczODU4MzZhYWI3YWUzZmRjZWQ0Y2E3
NGFkODkwHhcNMjYwNTE0MTkwMTQyWhcNMjYwNTE1MTkwMTQyWjAzMTEwLwYDVQQD
EyhmMmJjOWVhYzdjNzRkNGUxNmVlNWJmMTlhNmRiZjFiODMxM2FkMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVtMpwz896g/tBDsqIVjpmWj1Dgy
LiPkdyOmjizHNbqv27Dx1P4cVwCnl7LBvtmNSGD+36VUSyULz1vXm8uM7KI1B9Og
rAiJTIX5SfUv8ODW6z8ToDEd09TALZuoSw7NJ+O56qMVb5uvTjGqQ+MYX/OhvrqO
JqdNq4odm8K1JWIndcP8SZlgxIocHDFi+qPx/LRDdXaUcdY3mbMftdaX9g6Yobd5
jnVgb35m8OburjrFUiTjsU1Yi7oJuLAcbaXn4D2yMDZNHz509iG5gAZIcA5zW0Jm
skzQt4QB11vdu+E5ilfMiJem4X/BcKTW1aedSMcF0fLpqaG0genIAZdUOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPK8nqx8dNThbuW/Gabb8bgxOtLQMB8GA1UdIwQY
MBaAFKlS0NJmVXOFg2qreuP9ztTKdK2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAt
NGMyMWE1MDVmMzQ2LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAtNGMyMWE1MDVmMzQ2
LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvsPIBW3
Z1BlaVL/9duF1JjGQ3F5tgtMk8xkvXBlH/C6WyD0q9phQy92VPt96WmO6OLX8wBt
gDt57wYvIhdnIahejTGDZmb3Ai+QrScqDqBy2DXCpXkHOBVi8EGWpXQozCtclBwS
se0TTi9swoncNcicYBLBS6js0kxqLfJIsi3GkXHxaQ2yqAuJ0fM44n434ktmYVar
R8iZ31T+qHXONHdpqeiRldCtydcn7twolgOEkYNsLjc4aa6+trMXuBWOYrs0mqpA
aqVgEZrn6zFyxJ98fa2fzGAV5MB6li7ftLoNUNzoIqllyxd0ygyqjPSj6X1FJpQ3
e7OUbIF23yGrMA==
-----END CERTIFICATE-----
Generated at Thu May 14 21:38:52 2026 by rpki-client