Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File:                     pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier:          6WT9LTms2I3fp6wxfEQvQwIEIkmSxI6bkCnuWUwv83M=
Subject key identifier:   40:AD:35:45:36:4C:FB:25:76:C7:6D:F1:DA:2C:11:7C:B8:66:26:F7
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer:       /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial:       019E2B829365943B65637EC78EDA5293EC3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number:          190E
Signing time:             Fri 15 May 2026 12:00:37 +0000
Manifest this update:     Fri 15 May 2026 12:00:37 +0000
Manifest next update:     Sat 16 May 2026 12:00:37 +0000
Files and hashes:         1: JPBii3Hqcq30q25CjK9-h-C44rw.roa (hash: 0nYkKiEoyllpIK9/qO7+AH5OvjbE8XnCXRin+xPio6U=)
                          2: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: 60aCufICkaeIvyLgmTaY5W/+/gk3wFY+5xz2WmVXRCM=)
                          3: qVXn2mio2xGIpazTfAYClCM2JZM.roa (hash: utP7O671cytqXjasGTBwll6HaIxFO1XJW1EluiUhDqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:82:93:65:94:3b:65:63:7e:c7:8e:da:52:93:ec:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
        Validity
            Not Before: May 15 12:00:37 2026 GMT
            Not After : May 16 12:00:37 2026 GMT
        Subject: CN=40ad3545364cfb2576c76df1da2c117cb86626f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:63:9b:b5:e5:cb:22:67:11:a4:88:e6:b2:41:
                    f8:8a:c7:b7:7f:58:2a:5f:06:29:54:17:65:15:32:
                    dd:23:a9:81:57:e7:cf:83:3a:58:0e:a1:0e:e6:43:
                    53:9f:cf:98:fa:26:c1:ef:97:00:4d:0f:40:78:43:
                    99:8d:c5:4e:c2:3c:e9:89:83:aa:6e:dd:16:ad:60:
                    eb:6f:3d:74:60:20:04:2e:97:1f:34:53:ed:86:1a:
                    5a:2d:c7:6b:60:29:fa:5b:84:e4:69:e2:3f:8e:63:
                    59:94:42:e9:25:c0:1c:af:83:ea:d7:50:e8:d0:39:
                    b3:85:67:7b:8b:12:fd:df:a5:58:78:d4:a4:9f:ae:
                    f1:67:e1:a1:53:0d:41:9e:37:1b:59:fd:18:c3:b6:
                    f2:0a:0f:b5:90:81:b8:3e:1a:e2:5a:28:4f:36:c1:
                    77:e6:7c:99:92:75:08:b6:98:be:6b:bf:62:d3:76:
                    ba:59:94:63:c9:a1:de:5b:1e:7b:e7:b1:f3:c8:c0:
                    29:4a:65:59:5e:41:d4:66:26:6c:83:fc:1a:99:91:
                    4a:e4:e3:c3:b4:a8:25:d8:7f:8b:43:3c:22:e1:ed:
                    d1:f6:e2:ca:36:13:21:5f:0b:a5:0b:54:11:8f:2b:
                    44:96:35:56:c4:7c:a3:cf:db:ce:f0:87:a7:c1:3d:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AD:35:45:36:4C:FB:25:76:C7:6D:F1:DA:2C:11:7C:B8:66:26:F7
            X509v3 Authority Key Identifier:
                keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e0:b4:7e:23:65:89:f3:fe:79:3f:0f:c9:40:3d:44:c4:bb:
         b9:ef:8e:3d:8f:a8:20:5c:48:ba:be:e1:a8:30:4f:7b:56:57:
         8f:1a:eb:30:b1:1e:fc:09:9c:63:76:25:fd:ab:0e:9a:4a:0a:
         b0:98:c2:f6:b0:c5:9b:d1:b5:37:02:5f:a0:6a:73:2c:90:1f:
         ad:3e:60:c5:15:ea:48:c2:51:63:80:b4:dd:77:b1:ce:d8:bb:
         5c:5f:80:3a:5b:ff:9d:00:6d:7a:54:d6:a9:28:d0:19:5e:93:
         2a:be:dd:43:75:3b:d2:75:f6:22:d0:ee:38:b4:55:39:15:05:
         2e:cd:75:1e:13:08:88:6b:96:53:f4:10:09:f7:5c:16:52:2f:
         9e:cc:50:a8:3d:8a:c6:70:01:e3:a5:8c:1c:0a:fc:65:33:a9:
         6a:dc:21:06:4a:9a:2d:7a:99:05:a0:05:f8:9e:60:10:13:08:
         57:ce:bf:d3:76:eb:cb:cf:11:78:2e:3f:2f:cf:b4:1a:c4:dc:
         75:b6:8d:41:3a:9c:39:0f:9d:5b:10:41:a9:cf:14:dc:9e:55:
         21:28:42:34:1b:19:e4:2a:42:5d:88:b4:56:67:6b:00:ce:18:
         08:0b:46:bc:8c:3c:29:e9:8a:b0:c8:8c:89:5e:f4:61:e6:0d:
         97:ea:1c:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4rgpNllDtlY37HjtpSk+w/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2YyOTE4MThkODcxOTczODI2OGQ4NDQ5OTRhMmUxMDgy
NGQ0YzkwHhcNMjYwNTE1MTIwMDM3WhcNMjYwNTE2MTIwMDM3WjAzMTEwLwYDVQQD
Eyg0MGFkMzU0NTM2NGNmYjI1NzZjNzZkZjFkYTJjMTE3Y2I4NjYyNmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WObteXLImcRpIjmskH4ise3f1gq
XwYpVBdlFTLdI6mBV+fPgzpYDqEO5kNTn8+Y+ibB75cATQ9AeEOZjcVOwjzpiYOq
bt0WrWDrbz10YCAELpcfNFPthhpaLcdrYCn6W4TkaeI/jmNZlELpJcAcr4Pq11Do
0DmzhWd7ixL936VYeNSkn67xZ+GhUw1BnjcbWf0Yw7byCg+1kIG4PhriWihPNsF3
5nyZknUItpi+a79i03a6WZRjyaHeWx5757HzyMApSmVZXkHUZiZsg/wamZFK5OPD
tKgl2H+LQzwi4e3R9uLKNhMhXwulC1QRjytEljVWxHyjz9vO8IenwT0vWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECtNUU2TPsldsdt8dosEXy4Zib3MB8GA1UdIwQY
MBaAFKV/KRgY2HGXOCaNhEmUouEIJNTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAt
YjFhOTc5M2VlMzI0LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAtYjFhOTc5M2VlMzI0
LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuC0fiNl
ifP+eT8PyUA9RMS7ue+OPY+oIFxIur7hqDBPe1ZXjxrrMLEe/AmcY3Yl/asOmkoK
sJjC9rDFm9G1NwJfoGpzLJAfrT5gxRXqSMJRY4C03Xexzti7XF+AOlv/nQBtelTW
qSjQGV6TKr7dQ3U70nX2ItDuOLRVORUFLs11HhMIiGuWU/QQCfdcFlIvnsxQqD2K
xnAB46WMHAr8ZTOpatwhBkqaLXqZBaAF+J5gEBMIV86/03bry88ReC4/L8+0GsTc
dbaNQTqcOQ+dWxBBqc8U3J5VIShCNBsZ5CpCXYi0VmdrAM4YCAtGvIw8KemKsMiM
iV70YeYNl+ocuA==
-----END CERTIFICATE-----
Generated at Fri May 15 16:39:54 2026 by rpki-client