Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File:                     ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier:          ynF52CKg/wS8RsG/YiIXXrw4dLD0aNq2QGLMsUUjGKU=
Subject key identifier:   74:06:1C:B0:73:27:CC:2E:76:0A:25:52:68:56:A1:33:C7:9D:68:23
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer:       /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial:       019E2B4C770DD773C839088FEC8BE7317547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number:          190F
Signing time:             Fri 15 May 2026 11:01:31 +0000
Manifest this update:     Fri 15 May 2026 11:01:31 +0000
Manifest next update:     Sat 16 May 2026 11:01:31 +0000
Files and hashes:         1: KImIqYFb29b3KU70kYQGUgTjwXY.roa (hash: OkLquITh6UHZc59jyD3mteFTooB7+Z7+DnhjU4+WM/A=)
                          2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: eaJo62oVbwR5hIB4mzhrVLMe/SdVAEohhn6DquLaxE8=)
                          3: wJhrCbB9HaKVaJIOdovc6nXak8I.roa (hash: DNB7tfiEdhadZKuh5CRqn/FIXhNGqeMKaW1BhhcXm8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:4c:77:0d:d7:73:c8:39:08:8f:ec:8b:e7:31:75:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
        Validity
            Not Before: May 15 11:01:31 2026 GMT
            Not After : May 16 11:01:31 2026 GMT
        Subject: CN=74061cb07327cc2e760a25526856a133c79d6823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:c6:97:dc:27:05:e8:ec:4e:fd:4f:74:d5:
                    fe:30:9f:18:11:08:12:65:e9:02:3c:07:a1:f2:da:
                    c8:99:97:a7:74:35:19:4d:2b:6a:08:5a:5c:3c:e3:
                    62:87:66:0a:2a:8f:00:35:5b:8e:49:e8:89:ef:51:
                    c0:77:4e:e8:43:b3:1b:fd:e7:f2:28:e2:13:34:ba:
                    e2:12:59:c1:15:2c:22:4c:75:4e:76:43:5a:64:01:
                    ac:f2:c4:b3:bf:b4:8c:71:f4:b5:29:b5:b7:4f:2c:
                    37:4f:59:3a:bd:6e:14:a7:02:c2:a0:18:4e:2d:d2:
                    fa:19:08:46:e1:9c:84:e6:b1:1a:05:33:49:2a:15:
                    c9:2c:5f:5b:52:bb:24:6b:7e:52:f0:30:68:bd:b4:
                    cf:4b:74:87:46:f9:76:1c:ab:8c:e2:04:1a:34:e8:
                    44:c4:6e:a7:45:6b:68:7b:4b:c0:bb:98:5d:ee:13:
                    d5:1c:f7:00:0f:90:a8:0a:91:31:22:49:ab:a0:87:
                    ed:cf:9e:ad:e8:30:50:df:f0:54:c8:3a:7c:27:5c:
                    ab:2c:02:da:4c:5f:60:f7:37:93:4d:70:6f:70:64:
                    6b:09:05:6d:ff:78:f7:2d:c3:5e:7e:40:22:44:e2:
                    a5:9a:10:96:d3:e8:46:e4:cf:5c:e6:0b:97:3d:e6:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:06:1C:B0:73:27:CC:2E:76:0A:25:52:68:56:A1:33:C7:9D:68:23
            X509v3 Authority Key Identifier:
                keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f4:df:2f:a9:91:03:a0:f5:72:9a:e3:d7:8a:88:71:6c:8a:
         a1:41:2e:28:87:59:80:69:3f:82:89:b2:97:aa:1a:47:58:77:
         aa:d8:10:91:7c:05:9f:6d:d4:ee:6b:31:4e:5e:d2:38:b0:8f:
         03:7d:98:21:08:32:2e:7b:35:9f:ea:1e:b7:6d:3f:44:6c:ca:
         c9:26:de:41:40:9b:c2:8f:e8:e1:94:f0:9b:f6:d3:98:42:09:
         d9:45:49:8e:e2:31:1a:19:48:f5:d3:27:f5:19:c6:f6:a6:93:
         0a:04:d7:85:df:ad:ed:7e:da:92:7c:12:7d:fc:91:32:2b:7b:
         f1:8f:6d:79:4e:e0:43:15:f0:9a:69:6a:ce:50:66:e9:96:c9:
         70:58:96:c4:73:a8:a4:45:15:7f:5e:5d:82:ed:42:f9:a9:76:
         3e:9d:f1:01:7d:e4:83:ff:42:1f:e6:0a:16:91:7b:61:ca:d0:
         8d:80:42:98:02:c2:87:fb:2b:af:7b:4b:0c:2b:96:84:87:7c:
         f7:82:ef:ae:98:32:b9:45:25:35:95:43:eb:03:0e:a9:e9:5a:
         57:78:7d:c9:f6:40:d6:9f:58:47:80:c1:37:29:c6:ec:42:9a:
         be:98:aa:8d:69:c3:af:c2:2e:5f:4a:ee:f2:9c:4d:bc:bb:ef:
         53:4d:ff:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4rTHcN13PIOQiP7IvnMXVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTQ3NjgxZGEwZGI3ZmU3OTMxNWVjNmRiZGEyOGJmOGQ2
NjBmYzAwHhcNMjYwNTE1MTEwMTMxWhcNMjYwNTE2MTEwMTMxWjAzMTEwLwYDVQQD
Eyg3NDA2MWNiMDczMjdjYzJlNzYwYTI1NTI2ODU2YTEzM2M3OWQ2ODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQzGl9wnBejsTv1PdNX+MJ8YEQgS
ZekCPAeh8trImZendDUZTStqCFpcPONih2YKKo8ANVuOSeiJ71HAd07oQ7Mb/efy
KOITNLriElnBFSwiTHVOdkNaZAGs8sSzv7SMcfS1KbW3Tyw3T1k6vW4UpwLCoBhO
LdL6GQhG4ZyE5rEaBTNJKhXJLF9bUrska35S8DBovbTPS3SHRvl2HKuM4gQaNOhE
xG6nRWtoe0vAu5hd7hPVHPcAD5CoCpExIkmroIftz56t6DBQ3/BUyDp8J1yrLALa
TF9g9zeTTXBvcGRrCQVt/3j3LcNefkAiROKlmhCW0+hG5M9c5guXPebMlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQGHLBzJ8wudgolUmhWoTPHnWgjMB8GA1UdIwQY
MBaAFKaUdoHaDbf+eTFextvaKL+NZg/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTct
MjNjM2RmODJjMjMwLzEvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTctMjNjM2RmODJjMjMw
LzEvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvTfL6mR
A6D1cprj14qIcWyKoUEuKIdZgGk/gomyl6oaR1h3qtgQkXwFn23U7msxTl7SOLCP
A32YIQgyLns1n+oet20/RGzKySbeQUCbwo/o4ZTwm/bTmEIJ2UVJjuIxGhlI9dMn
9RnG9qaTCgTXhd+t7X7aknwSffyRMit78Y9teU7gQxXwmmlqzlBm6ZbJcFiWxHOo
pEUVf15dgu1C+al2Pp3xAX3kg/9CH+YKFpF7YcrQjYBCmALCh/srr3tLDCuWhId8
94LvrpgyuUUlNZVD6wMOqelaV3h9yfZA1p9YR4DBNynG7EKavpiqjWnDr8IuX0ru
8pxNvLvvU03/Qw==
-----END CERTIFICATE-----
Generated at Fri May 15 17:54:14 2026 by rpki-client