Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File:                     hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier:          Vdor8pVX/OwhVS5t35iZBwsF3vOENKvUMulyzMJhQgs=
Subject key identifier:   79:FA:69:2A:91:A8:6E:BF:2E:41:2D:1E:C5:47:4A:E8:2B:10:86:49
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer:       /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial:       019E322A3806B5B7C7B0CBB7F9E7F0D8A368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 19:01:28 +0000
Manifest this update:     Sat 16 May 2026 19:01:28 +0000
Manifest next update:     Sun 17 May 2026 19:01:28 +0000
Files and hashes:         1: 5MskubVdeZ399_lrBcZSvQfk1sI.roa (hash: /9t5Xb57ICUooWV+uj5d8/PMRlDCg1qArWmBVdMVEwI=)
                          2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: 0QAhnjqyzeM3Ht/D1zlqJ/nwXmR+CyKeM+D+L9Dm9K4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:2a:38:06:b5:b7:c7:b0:cb:b7:f9:e7:f0:d8:a3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
        Validity
            Not Before: May 16 19:01:28 2026 GMT
            Not After : May 17 19:01:28 2026 GMT
        Subject: CN=79fa692a91a86ebf2e412d1ec5474ae82b108649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4b:ac:8a:a1:fc:22:55:b6:7e:0c:17:c0:46:
                    2a:16:77:9d:23:f4:e4:81:35:56:ae:54:a2:44:f6:
                    e7:9d:eb:26:ba:a5:04:41:5c:00:4b:39:de:6a:d2:
                    c9:38:f0:ef:3b:66:3c:1f:a1:9a:e3:f3:9a:c1:57:
                    1f:bd:db:f4:82:35:e5:29:a4:24:85:19:e1:79:41:
                    67:33:08:a6:b9:bc:60:87:fd:0d:14:cb:a2:4f:6c:
                    a7:04:53:48:e4:10:4e:8b:33:ee:ac:52:9f:c6:31:
                    86:06:56:b7:4a:8e:52:c3:e7:ea:bb:6c:3a:7f:05:
                    be:51:9f:10:a5:cb:9b:07:08:24:43:47:ec:71:23:
                    f6:82:a5:f5:33:33:74:3a:87:0a:73:c0:c3:78:1e:
                    8c:0c:c8:7b:a6:25:64:ed:81:4a:65:2e:e2:fb:e0:
                    c9:d5:f3:98:26:e2:92:54:19:0e:5c:47:ba:84:fd:
                    f8:40:8e:66:8b:ab:c5:cd:5d:7b:b1:32:30:6a:4c:
                    52:cc:c5:d9:a0:86:f7:0a:dd:2f:fc:eb:02:fc:97:
                    78:26:6e:4e:44:cb:41:4b:b0:4f:c3:f3:a7:53:62:
                    8f:74:12:8b:90:29:43:0a:e5:81:1d:35:8b:d7:70:
                    fd:fb:51:41:80:1a:10:2f:fd:40:de:96:50:91:13:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FA:69:2A:91:A8:6E:BF:2E:41:2D:1E:C5:47:4A:E8:2B:10:86:49
            X509v3 Authority Key Identifier:
                keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:d0:98:93:ba:74:85:2f:99:46:f2:e1:2e:e3:b7:6b:9b:1b:
         8e:0f:46:12:fa:cd:76:f0:7e:cb:ba:08:a3:54:46:1f:36:99:
         46:40:ad:da:42:d0:9e:5e:ad:70:08:66:e6:ea:84:50:9e:82:
         47:f0:5b:92:f3:15:7f:e7:84:8a:e1:b7:2a:9e:39:4f:e3:d2:
         5e:b9:fa:1c:c8:02:37:a2:ce:fd:de:b2:82:67:2e:71:cd:8a:
         73:4f:21:dc:fb:98:47:80:df:0a:e0:45:de:a6:0a:da:a3:1d:
         8d:3e:85:ca:d0:4c:0f:25:51:b5:07:43:4e:4e:64:0f:43:0d:
         1c:22:33:0d:63:d8:55:d9:12:0e:98:bc:e7:ae:5f:6c:a8:c3:
         b1:7f:e7:fd:b3:27:a9:96:f7:91:8d:2b:3b:32:9b:43:02:f1:
         97:6d:6d:22:f0:e8:26:07:9d:63:3a:47:98:36:88:f2:26:bc:
         19:82:c9:98:c3:04:67:83:1b:8b:08:6a:50:56:a6:cc:52:0b:
         a8:39:c4:c9:ff:0f:30:9a:b4:81:38:2b:a9:2a:12:78:18:3b:
         37:19:d0:46:76:60:7b:a5:85:6a:d8:43:2f:62:dc:f2:b9:1d:
         2f:37:96:3d:88:82:d2:2a:6f:f6:27:be:83:47:7b:76:3b:3f:
         4b:ff:ed:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yKjgGtbfHsMu3+efw2KNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ODZhZThlNDkzNzRiYWM4NGNhYTNkZTBkMjYwNzBiNmIx
OTAwNTQwHhcNMjYwNTE2MTkwMTI4WhcNMjYwNTE3MTkwMTI4WjAzMTEwLwYDVQQD
Eyg3OWZhNjkyYTkxYTg2ZWJmMmU0MTJkMWVjNTQ3NGFlODJiMTA4NjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0usiqH8IlW2fgwXwEYqFnedI/Tk
gTVWrlSiRPbnnesmuqUEQVwASzneatLJOPDvO2Y8H6Ga4/OawVcfvdv0gjXlKaQk
hRnheUFnMwimubxgh/0NFMuiT2ynBFNI5BBOizPurFKfxjGGBla3So5Sw+fqu2w6
fwW+UZ8QpcubBwgkQ0fscSP2gqX1MzN0OocKc8DDeB6MDMh7piVk7YFKZS7i++DJ
1fOYJuKSVBkOXEe6hP34QI5mi6vFzV17sTIwakxSzMXZoIb3Ct0v/OsC/Jd4Jm5O
RMtBS7BPw/OnU2KPdBKLkClDCuWBHTWL13D9+1FBgBoQL/1A3pZQkRO+BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHn6aSqRqG6/LkEtHsVHSugrEIZJMB8GA1UdIwQY
MBaAFIaGro5JN0ushMqj3g0mBwtrGQBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYt
YTc0ZjUwZTAwZGQ1LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYtYTc0ZjUwZTAwZGQ1
LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5NCYk7p0
hS+ZRvLhLuO3a5sbjg9GEvrNdvB+y7oIo1RGHzaZRkCt2kLQnl6tcAhm5uqEUJ6C
R/BbkvMVf+eEiuG3Kp45T+PSXrn6HMgCN6LO/d6ygmcucc2Kc08h3PuYR4DfCuBF
3qYK2qMdjT6FytBMDyVRtQdDTk5kD0MNHCIzDWPYVdkSDpi8565fbKjDsX/n/bMn
qZb3kY0rOzKbQwLxl21tIvDoJgedYzpHmDaI8ia8GYLJmMMEZ4MbiwhqUFamzFIL
qDnEyf8PMJq0gTgrqSoSeBg7NxnQRnZge6WFathDL2Lc8rkdLzeWPYiC0ipv9ie+
g0d7djs/S//tdA==
-----END CERTIFICATE-----
Generated at Sat May 16 23:29:22 2026 by rpki-client