Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File:                     XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier:          n9QK/gQtLC2atuea9vH2Im2sTW4WcengzsAPYtq7lBw=
Subject key identifier:   3B:25:2F:7A:37:7F:1F:CA:B5:14:8E:D6:5A:65:E1:85:5C:CD:52:EB
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer:       /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial:       019E284B216BB3990AFD3925F38A42907740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number:          190C
Signing time:             Thu 14 May 2026 21:01:12 +0000
Manifest this update:     Thu 14 May 2026 21:01:12 +0000
Manifest next update:     Fri 15 May 2026 21:01:12 +0000
Files and hashes:         1: 0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa (hash: d/QLJQ6M0z3RViK7W5MP6w1Y/VAa68ow0nmGzD8+98w=)
                          2: HKYjGRXbhcsbgj-zO-lhhp8iHf4.roa (hash: r0qRRb9G05Y3zjQIakuz14pzZ5PruwE51RJizxy5NMg=)
                          3: OXzsf9355x_Po1YlBAMmXxH7YfM.roa (hash: HyUx0AM/t82HDbhNTlK93mKwtwtfVGbEby4qtiM7vwI=)
                          4: SD-pJr4ttUBaZ1S20Tz4AuB6P1I.asa (hash: +ZZUrq34lcu1uY7HrOMrXNxK/Du8JITTl9RrFi410RY=)
                          5: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: 5Lpa+MUAIOzNngTkA/NpIuwB53PDeOdO0017XWlUmOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 21:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:4b:21:6b:b3:99:0a:fd:39:25:f3:8a:42:90:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
        Validity
            Not Before: May 14 21:01:12 2026 GMT
            Not After : May 15 21:01:12 2026 GMT
        Subject: CN=3b252f7a377f1fcab5148ed65a65e1855ccd52eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:62:f7:e4:ec:50:8f:f6:8b:96:56:cb:86:
                    17:d9:b7:90:ce:e4:4e:3c:31:6f:4f:f0:62:80:e2:
                    bb:14:f2:4b:a5:5a:02:ae:12:eb:f8:00:22:79:cc:
                    2d:a4:da:76:d1:07:d0:e1:71:dc:86:d0:55:c2:c5:
                    b5:ed:f7:ec:29:dd:15:46:26:71:de:8d:df:6a:cf:
                    dc:bb:a3:80:31:bf:2e:ce:34:68:f8:b9:c3:4c:13:
                    4e:2f:a1:13:06:f4:b9:f9:4c:cb:b2:77:8d:5c:e1:
                    32:a2:66:11:66:c6:3f:34:ad:44:fb:83:a1:86:7c:
                    db:a2:fd:b5:6f:59:9a:cd:41:f5:cd:9e:18:d5:88:
                    eb:76:1e:ee:7b:7a:c2:66:ba:93:43:d0:f7:1d:d3:
                    f7:1e:54:1f:70:2e:e3:ea:4e:c9:e8:4a:c2:77:36:
                    3d:89:c2:e8:d2:e8:64:5b:65:4a:fc:14:d3:37:d4:
                    95:0b:46:4d:18:5f:22:f2:b5:64:5e:bc:5c:76:7a:
                    71:5c:45:42:6c:f6:6e:18:3e:4d:03:c4:4a:84:d1:
                    ba:23:8b:c7:9d:99:82:ff:0a:09:7d:bc:ca:bf:1c:
                    34:cd:1b:ee:d0:c0:c5:04:d9:bd:10:4e:d0:81:80:
                    5c:47:ca:98:b4:7d:fd:a9:c9:cb:d8:3a:61:16:7b:
                    db:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:25:2F:7A:37:7F:1F:CA:B5:14:8E:D6:5A:65:E1:85:5C:CD:52:EB
            X509v3 Authority Key Identifier:
                keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:de:ee:ab:05:86:82:a1:d3:9d:50:0b:13:47:27:8d:af:be:
         37:71:9d:62:a8:26:43:1a:50:0b:13:cc:2b:ca:3c:a7:46:d7:
         78:da:fa:c1:26:be:74:3f:da:1e:e6:80:40:6a:72:37:02:2c:
         b3:06:fd:43:5c:bd:39:44:3d:86:80:90:b6:35:e5:e9:17:32:
         e7:24:e9:4f:e1:8d:9d:b3:ba:97:e8:e3:c3:d0:58:85:4b:18:
         9c:2d:68:d0:23:cd:8f:e7:de:01:e9:c4:7b:7a:57:15:74:d3:
         20:82:bc:0d:92:78:01:8d:ed:05:d5:50:d1:6c:10:14:0e:94:
         5e:55:70:ea:6c:5d:f7:cb:7d:97:25:2c:d3:bb:03:a8:06:4b:
         49:81:ed:bb:dc:8e:c9:7c:95:09:6a:97:26:72:8b:b2:16:a3:
         7d:be:a4:8b:62:2f:67:e7:e1:2c:b2:2f:ab:d4:42:a0:0c:61:
         d8:a4:b6:6c:91:31:bb:fb:48:5a:1c:85:35:a5:08:9e:03:f7:
         b7:97:c9:fc:2d:da:e0:30:a1:ca:61:9a:6f:fa:cc:14:f7:a9:
         7f:41:f9:a7:0d:97:0a:0a:29:07:1a:8e:65:da:c7:c8:c2:9c:
         19:d4:3d:5d:34:e7:73:4c:da:70:b3:a3:96:44:a5:1a:30:f1:
         d2:da:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:58:11 2026 by rpki-client