Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File:                     3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier:          u6cXLYIEZ8vtWuOQdwl5wy+toLfi+bOEFXI3x6iHAAY=
Subject key identifier:   0E:DE:46:F2:DB:94:DC:0C:DF:7E:74:D0:8F:58:E0:DA:28:DA:F1:F7
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer:       /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial:       019E3184C9A1C3C7736B34575A5A7B4FE8EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 16:00:46 +0000
Manifest this update:     Sat 16 May 2026 16:00:46 +0000
Manifest next update:     Sun 17 May 2026 16:00:46 +0000
Files and hashes:         1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: HeC7i5Y/7xgxmsEJsxhK1hHtf6sAr6kgWotFQOAkz0c=)
                          2: 8J_-hWHGPWEYN0vjZgr-eCklQg4.roa (hash: qBQWLHkgusN1QQCqlJvTYnenuo1KralG8LLl2synFhs=)
                          3: elKDEgk9yKtQtzq3PdJ4l_cpSZQ.roa (hash: 8uKk6fr9oWkQeVcBDQrXHD0Zpv9/C37D7zWtE6D01OI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:84:c9:a1:c3:c7:73:6b:34:57:5a:5a:7b:4f:e8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
        Validity
            Not Before: May 16 16:00:46 2026 GMT
            Not After : May 17 16:00:46 2026 GMT
        Subject: CN=0ede46f2db94dc0cdf7e74d08f58e0da28daf1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:ed:bc:14:a4:2e:d6:8f:b8:a4:27:d0:dd:
                    08:06:60:d9:48:a0:ee:a8:8c:f8:9a:59:31:b3:b2:
                    34:41:b7:81:56:36:81:8f:13:fd:1b:a6:64:bb:6f:
                    e5:66:7f:50:20:5a:0f:50:bb:8c:e2:fd:ad:d5:7a:
                    6d:83:08:e1:08:0e:43:ad:23:f7:d0:87:a5:59:2d:
                    5c:f3:e6:ae:c8:00:38:83:a2:87:42:42:22:b1:54:
                    91:c3:99:ef:04:95:bb:3f:68:81:0c:8e:16:89:f4:
                    2d:06:42:9d:d9:8f:6e:8c:4e:4b:a0:44:81:c5:db:
                    f4:bf:e9:bc:76:1f:77:11:2a:72:b4:b2:ab:0b:ae:
                    2a:c0:fb:45:3d:ff:33:fb:45:ff:ed:9d:2f:96:e3:
                    cd:38:53:fb:8a:83:cd:7b:f9:ad:0d:a7:c3:05:93:
                    eb:44:1a:6b:56:a5:5b:b8:4d:91:3a:45:98:55:8b:
                    cd:24:f9:f2:7a:b2:da:a9:71:3b:dc:d2:60:8c:b6:
                    92:4c:aa:7f:cf:df:ef:47:38:0e:c4:e6:d7:66:3d:
                    8e:57:86:50:53:d5:21:e0:0f:5e:2a:c9:59:f7:d8:
                    b9:92:92:1c:dd:d9:6d:98:8b:58:b6:1a:41:30:62:
                    21:ae:6a:3a:be:df:ff:c8:7c:e5:10:69:1b:aa:8c:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DE:46:F2:DB:94:DC:0C:DF:7E:74:D0:8F:58:E0:DA:28:DA:F1:F7
            X509v3 Authority Key Identifier:
                keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b9:5b:92:1c:fb:d1:f3:07:59:3b:d6:aa:19:a0:2b:f0:0a:
         0e:24:9a:cd:9b:84:09:e3:83:c0:15:ce:63:0d:eb:3b:48:be:
         c7:1a:3d:fa:36:93:9d:ea:41:72:cf:14:22:00:68:78:e5:e3:
         eb:23:f7:f3:d9:b8:f7:32:26:84:72:bc:be:f6:3c:af:ba:c1:
         93:88:e6:8f:17:a6:2c:9d:50:b0:ad:e4:b0:8a:63:29:3c:00:
         0a:17:19:9a:cb:33:3d:54:20:5d:6a:ee:5d:2d:59:51:b0:21:
         f6:22:3b:2a:6f:cd:40:91:aa:2b:f7:74:83:c2:10:67:71:64:
         5c:76:b2:1c:b0:91:f8:e3:bf:fe:50:e4:ea:cb:38:e8:50:91:
         6d:22:76:42:f7:f1:42:ef:26:5d:76:03:00:95:f1:75:c8:16:
         19:01:8b:7a:1f:55:d6:c1:13:51:2e:c2:4c:70:50:97:f0:b1:
         18:58:a1:a5:96:db:51:fc:91:32:5c:51:9a:45:44:df:88:cd:
         8a:12:39:97:eb:86:8e:00:d4:42:b7:1f:e4:1e:bf:4b:85:54:
         bc:15:ca:7c:0f:83:37:6e:4e:f7:b1:0a:e7:3a:b1:86:3e:2b:
         0e:15:11:cc:16:dd:62:c6:b3:eb:3c:2e:6a:c2:3a:d6:e0:67:
         09:30:05:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhMmhw8dzazRXWlp7T+juMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTFkYTMyNzYyYTZmOWMxMjZkNjNiYTcwNWQ2MmMwNTBi
ODQ4NGUwHhcNMjYwNTE2MTYwMDQ2WhcNMjYwNTE3MTYwMDQ2WjAzMTEwLwYDVQQD
EygwZWRlNDZmMmRiOTRkYzBjZGY3ZTc0ZDA4ZjU4ZTBkYTI4ZGFmMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdXtvBSkLtaPuKQn0N0IBmDZSKDu
qIz4mlkxs7I0QbeBVjaBjxP9G6Zku2/lZn9QIFoPULuM4v2t1XptgwjhCA5DrSP3
0IelWS1c8+auyAA4g6KHQkIisVSRw5nvBJW7P2iBDI4WifQtBkKd2Y9ujE5LoESB
xdv0v+m8dh93ESpytLKrC64qwPtFPf8z+0X/7Z0vluPNOFP7ioPNe/mtDafDBZPr
RBprVqVbuE2ROkWYVYvNJPnyerLaqXE73NJgjLaSTKp/z9/vRzgOxObXZj2OV4ZQ
U9Uh4A9eKslZ99i5kpIc3dltmItYthpBMGIhrmo6vt//yHzlEGkbqozoVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7eRvLblNwM33500I9Y4Noo2vH3MB8GA1UdIwQY
MBaAFN5R2jJ2Km+cEm1junBdYsBQuEhOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTkt
Y2RmYTYwMTIyNjkwLzEvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTktY2RmYTYwMTIyNjkw
LzEvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLlbkhz7
0fMHWTvWqhmgK/AKDiSazZuECeODwBXOYw3rO0i+xxo9+jaTnepBcs8UIgBoeOXj
6yP389m49zImhHK8vvY8r7rBk4jmjxemLJ1QsK3ksIpjKTwAChcZmsszPVQgXWru
XS1ZUbAh9iI7Km/NQJGqK/d0g8IQZ3FkXHayHLCR+OO//lDk6ss46FCRbSJ2Qvfx
Qu8mXXYDAJXxdcgWGQGLeh9V1sETUS7CTHBQl/CxGFihpZbbUfyRMlxRmkVE34jN
ihI5l+uGjgDUQrcf5B6/S4VUvBXKfA+DN25O97EK5zqxhj4rDhURzBbdYsaz6zwu
asI61uBnCTAF9g==
-----END CERTIFICATE-----
Generated at Sat May 16 18:39:34 2026 by rpki-client