Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
File:                     wFIM7LolHNN83zxNWrA2JVIruqw.mft (raw, json)
Hash identifier:          4g97MisYmbxgSGP+Ub+qo0r8nZ/B2FXA3UGvr6DBO10=
Subject key identifier:   11:41:CA:C9:C8:56:3B:19:E7:45:58:5F:79:F5:14:AA:BE:85:8D:6F
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Certificate issuer:       /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial:       019E51B4D5EBBB70642E43C1F6A68488063A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
Manifest number:          1925
Signing time:             Fri 22 May 2026 22:01:05 +0000
Manifest this update:     Fri 22 May 2026 22:01:05 +0000
Manifest next update:     Sat 23 May 2026 22:01:05 +0000
Files and hashes:         1: 36T8Tn4Sup8fmQcjWCy26dR6re0.roa (hash: SG3LgOxnqBUaF6P4Vt2PLcBh7paYsvxM9iIaS6ERJJ0=)
                          2: 5QI4fVyPMm0-K60PBKXaZ8ZbhYY.roa (hash: PJ8hWL8fv95vnL+98n7N2nc5zp7ZDQ14+kWYLI42xqM=)
                          3: D3Scbfl6fBr15c-mbPSi-zu0HHY.roa (hash: GocWeJMCxjrHRiAM5S4dU7oou7wP+fPBVESKdHPj5Io=)
                          4: wFIM7LolHNN83zxNWrA2JVIruqw.crl (hash: ymavax2wgvLdkETFrgWdsYy585A89XT82kTVaa6aaRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:51:b4:d5:eb:bb:70:64:2e:43:c1:f6:a6:84:88:06:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
        Validity
            Not Before: May 22 22:01:05 2026 GMT
            Not After : May 23 22:01:05 2026 GMT
        Subject: CN=1141cac9c8563b19e745585f79f514aabe858d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:32:36:4c:3a:0d:42:19:40:dd:f7:ec:1b:3b:
                    91:84:00:73:11:cb:0d:5a:da:5c:cf:33:d1:d1:2c:
                    97:10:d7:cd:04:74:22:b2:05:24:53:8d:31:7a:bd:
                    16:50:81:2a:1f:ad:a7:37:27:fe:25:16:0a:22:6d:
                    1d:f0:68:80:cf:ae:0f:8e:28:0c:db:15:65:ba:f4:
                    aa:57:12:8b:68:d2:e4:8a:ee:38:68:48:ef:06:75:
                    0b:3b:50:31:9a:28:ad:9a:a0:5b:08:ef:d9:48:5a:
                    5c:d1:60:b4:9b:03:36:db:79:e6:09:53:48:6a:f9:
                    cc:9a:79:d8:c5:42:53:21:13:cc:8a:38:28:46:dd:
                    f3:e4:38:67:9f:fb:a9:e1:2f:8a:c3:00:44:ec:c8:
                    f5:e2:16:28:f3:7e:dd:85:56:e9:a8:01:08:ba:f4:
                    01:e8:e4:19:e5:da:73:9a:8b:80:6d:f2:ee:a3:30:
                    3d:de:bc:60:6a:e4:69:63:3e:88:ad:db:c6:aa:4c:
                    8a:48:8a:b6:71:be:c7:56:7f:ea:99:35:b6:0a:1c:
                    d5:89:92:25:b3:56:eb:82:5f:f6:f7:8f:e0:2e:4f:
                    60:f7:a0:b0:f3:18:bf:7b:0a:9b:62:9c:3b:ad:9f:
                    38:23:29:8f:b0:95:48:c3:fa:aa:27:cc:bf:28:8a:
                    44:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:41:CA:C9:C8:56:3B:19:E7:45:58:5F:79:F5:14:AA:BE:85:8D:6F
            X509v3 Authority Key Identifier:
                keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1c:66:99:0c:16:4a:1d:41:6d:20:ec:94:d8:2a:e6:86:df:
         2f:41:cb:b5:22:0b:c5:99:95:b4:e1:a5:c2:e6:95:d6:57:06:
         78:db:95:4d:d6:96:fc:dc:c5:d1:35:cd:11:d2:42:7e:e6:b4:
         17:95:64:53:90:1b:de:73:4b:47:56:3e:ea:d8:46:4e:69:d2:
         94:f8:24:12:ea:20:e4:34:db:46:9c:f6:9c:96:21:45:b0:f3:
         98:ef:59:0c:0c:08:a0:1f:cf:3e:4b:59:85:af:78:94:c1:13:
         aa:3c:44:a0:9d:35:84:bd:ee:4f:17:ca:c4:28:1c:dc:47:61:
         af:61:8e:e5:61:26:30:8a:fc:13:80:b9:34:a5:6c:1d:35:ab:
         56:63:94:ea:55:54:d5:06:c4:fb:dc:2d:dd:b4:62:e0:44:5f:
         00:18:28:98:71:42:42:c6:d3:fe:d3:ee:48:57:62:df:2c:37:
         88:69:c4:c7:17:42:42:44:60:3c:cc:7c:58:28:a7:f0:d8:3b:
         89:63:0f:8f:78:6b:bc:52:11:3a:0a:4e:a8:74:f8:6b:89:ea:
         d7:51:38:1b:88:3f:2e:9d:e8:13:5a:60:6a:58:76:3a:c2:fa:
         9a:a1:8f:e8:03:bb:57:67:51:33:9d:9c:5a:88:d3:90:44:f2:
         79:1b:33:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5RtNXru3BkLkPB9qaEiAY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNTIwY2VjYmEyNTFjZDM3Y2RmM2M0ZDVhYjAzNjI1NTIy
YmJhYWMwHhcNMjYwNTIyMjIwMTA1WhcNMjYwNTIzMjIwMTA1WjAzMTEwLwYDVQQD
EygxMTQxY2FjOWM4NTYzYjE5ZTc0NTU4NWY3OWY1MTRhYWJlODU4ZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjI2TDoNQhlA3ffsGzuRhABzEcsN
WtpczzPR0SyXENfNBHQisgUkU40xer0WUIEqH62nNyf+JRYKIm0d8GiAz64PjigM
2xVluvSqVxKLaNLkiu44aEjvBnULO1AxmiitmqBbCO/ZSFpc0WC0mwM223nmCVNI
avnMmnnYxUJTIRPMijgoRt3z5Dhnn/up4S+KwwBE7Mj14hYo837dhVbpqAEIuvQB
6OQZ5dpzmouAbfLuozA93rxgauRpYz6IrdvGqkyKSIq2cb7HVn/qmTW2ChzViZIl
s1brgl/294/gLk9g96Cw8xi/ewqbYpw7rZ84IymPsJVIw/qqJ8y/KIpEuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFBysnIVjsZ50VYX3n1FKq+hY1vMB8GA1UdIwQY
MBaAFMBSDOy6JRzTfN88TVqwNiVSK7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0ZJTTdMb2xITk44M3p4TldyQTJKVklydXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zNjFiYWUtYWIxNC00YWFiLWJiOGYt
NzQxOGI5MmFhMjA5LzEvd0ZJTTdMb2xITk44M3p4TldyQTJKVklydXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zNjFiYWUtYWIxNC00YWFiLWJiOGYtNzQxOGI5MmFhMjA5
LzEvd0ZJTTdMb2xITk44M3p4TldyQTJKVklydXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRxmmQwW
Sh1BbSDslNgq5obfL0HLtSILxZmVtOGlwuaV1lcGeNuVTdaW/NzF0TXNEdJCfua0
F5VkU5Ab3nNLR1Y+6thGTmnSlPgkEuog5DTbRpz2nJYhRbDzmO9ZDAwIoB/PPktZ
ha94lMETqjxEoJ01hL3uTxfKxCgc3Edhr2GO5WEmMIr8E4C5NKVsHTWrVmOU6lVU
1QbE+9wt3bRi4ERfABgomHFCQsbT/tPuSFdi3yw3iGnExxdCQkRgPMx8WCin8Ng7
iWMPj3hrvFIROgpOqHT4a4nq11E4G4g/Lp3oE1pgalh2OsL6mqGP6AO7V2dRM52c
WojTkETyeRsziQ==
-----END CERTIFICATE-----
Generated at Sat May 23 03:47:39 2026 by rpki-client