Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File:                     Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier:          FNZed7IIqmyXiePfLVP1pPX+umXmlsBojsSpKydmraQ=
Subject key identifier:   8E:E5:9C:F2:AE:61:2F:9B:2B:8A:18:AD:78:15:09:78:7F:FB:9F:CF
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer:       /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial:       019E2B4CC1C4A6A76AA7058045FA8053809A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number:          191D
Signing time:             Fri 15 May 2026 11:01:50 +0000
Manifest this update:     Fri 15 May 2026 11:01:50 +0000
Manifest next update:     Sat 16 May 2026 11:01:50 +0000
Files and hashes:         1: 6-VbzQgi8XA2TJAq8RgMaysx0X8.roa (hash: nwaIi9ebrKp/Q5R4ShMm9TiJvoby9UkF3818QuosS1w=)
                          2: ByAZZvD6ZO4dFVGZCOox_IHwdzo.roa (hash: wGFO7OyD3Pn5gOzCEOeYwv/8FCnWxDnlJBKiFmfnr/k=)
                          3: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: 2keN399cCTDMfjqhiT9XJ9QiRglpc6OenY4YMzdF+CQ=)
                          4: KM6PkAFxCJgnCXLELW5hiOAKjus.roa (hash: DuJVolLG90aax0OKvLaTyX/VTpILvcyZxRZVQhnBPeY=)
                          5: YoJZ9epoonqwiI5Cz_IYJxFC0KQ.roa (hash: rcBdfpWe95Pbv9jR1rFIiVQgv2ItDDK2rcgQtFQdM3o=)
                          6: kZOcgE-yQiEGZ59-58kZODUnVtk.roa (hash: NpX21ZAdgdJK8Ql3JOW4Xo/GtwmqnfCpzM6EirlUM7w=)
                          7: odPvkDMmAxjrc3ZPhrKtHv1Pl_Q.roa (hash: WbetbahmmvNLGyGKWf2niABo2rq9cUlLwj18Yb3Jj3M=)
                          8: ps2vvRE8em2BhpWugO8HL3Oy4sw.roa (hash: UVRw/RrZWURZppeHPUhCU3KyC7ib1pGilFd5giOzN0U=)
                          9: sT5NvgSrjzuwTioYpNTeZgud1ao.roa (hash: eCoPPFfnRnkLIs6eZVD/zHitzMoyIccre5mcG4E3t34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:4c:c1:c4:a6:a7:6a:a7:05:80:45:fa:80:53:80:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
        Validity
            Not Before: May 15 11:01:50 2026 GMT
            Not After : May 16 11:01:50 2026 GMT
        Subject: CN=8ee59cf2ae612f9b2b8a18ad781509787ffb9fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d2:f6:88:8e:22:dd:15:52:3f:2c:37:80:49:
                    26:d6:41:11:07:52:a2:fd:a6:50:e1:9e:e0:05:de:
                    b8:e2:3d:b7:26:99:7e:33:51:ee:42:75:1b:cc:2e:
                    3e:57:30:d9:30:9a:96:28:8a:b8:0c:7b:44:7c:c7:
                    73:bf:19:98:8c:dd:94:e1:4b:71:63:fe:af:19:e1:
                    fe:0c:a2:7d:f6:c6:9b:82:78:26:d8:4c:a2:58:4e:
                    5d:96:56:98:95:98:21:ae:18:c6:cf:8c:67:8e:38:
                    96:b3:94:ff:f4:04:ae:ee:7e:c3:d2:17:8f:db:95:
                    9b:fe:43:df:3d:b6:2e:8d:e1:cb:7a:96:3c:48:84:
                    19:d1:e3:e6:de:3a:0b:2d:19:93:42:81:d3:50:6f:
                    69:c3:77:41:e0:d7:65:e7:6a:d7:cc:e6:2b:60:d5:
                    68:a7:7c:79:e3:96:e0:de:48:99:16:fe:c5:61:ad:
                    ee:35:59:6a:91:4d:af:eb:f9:5d:04:05:1c:62:36:
                    5d:67:c6:28:5d:54:5c:85:76:95:bb:06:ce:6a:f8:
                    cb:61:12:91:c1:fc:a0:94:55:f2:2d:79:3b:d0:5b:
                    ee:d9:e8:3a:23:d3:5f:61:0a:5b:63:ad:16:a4:ec:
                    3b:a4:87:fc:e6:60:56:7c:a9:47:df:55:df:6f:6b:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E5:9C:F2:AE:61:2F:9B:2B:8A:18:AD:78:15:09:78:7F:FB:9F:CF
            X509v3 Authority Key Identifier:
                keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6b:68:fa:ba:b2:81:18:b8:17:c6:b1:89:39:5f:d4:01:3c:
         e0:d6:26:e8:e5:a8:3d:a2:03:19:88:fe:ec:e7:d0:2c:7a:80:
         69:06:93:71:09:14:a5:58:d1:16:bb:61:8d:db:72:65:49:55:
         81:3f:41:42:58:a1:71:d2:d0:10:ca:25:47:bd:1c:87:ce:e7:
         01:46:77:64:9f:b6:4f:d8:c0:a8:3e:2f:8a:64:40:11:8c:82:
         33:73:84:95:9d:dd:8d:3d:dd:ca:89:45:3e:de:1a:51:7f:19:
         93:a7:db:3c:33:08:bd:04:eb:b5:de:49:91:b0:05:90:eb:b5:
         a7:9f:59:a0:ed:3a:80:27:4b:2b:d9:47:dc:f3:1a:ee:1e:2f:
         0f:92:37:68:17:9b:62:1d:2d:4e:b5:11:76:72:db:6c:39:21:
         6f:94:71:8c:3f:23:37:55:33:68:c7:a7:be:53:e6:3c:26:7a:
         64:06:ae:48:46:9f:dd:1b:ac:d8:66:c9:10:cd:0f:3f:97:d8:
         a1:6f:63:d0:a6:ab:02:d4:54:6c:94:91:75:c8:5c:3b:ca:a3:
         bc:54:e6:e7:54:21:1c:f5:99:33:5e:05:6b:8b:ea:7f:92:87:
         52:02:ad:d9:0a:10:a0:88:9f:b2:c3:c2:a2:42:6b:e0:f1:39:
         0f:c1:5d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 15:59:36 2026 by rpki-client