Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
File:                     9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft (raw, json)
Hash identifier:          97k22EXmToX4/DVqKE3cdRciJo0/kC2Oss5/coRw7YU=
Subject key identifier:   EA:88:BB:E4:57:5C:D0:2C:C5:7C:AD:ED:92:9C:C7:2F:97:AE:78:D7
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Certificate issuer:       /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial:       019E30E02D0E6BB18D9403E7C9E59D85FEB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
Manifest number:          191C
Signing time:             Sat 16 May 2026 13:00:58 +0000
Manifest this update:     Sat 16 May 2026 13:00:58 +0000
Manifest next update:     Sun 17 May 2026 13:00:58 +0000
Files and hashes:         1: 3hmmFfAkaIr3Xc9gq50WV7B77zQ.roa (hash: TgVTzYdGFCqlHMqgg6AtuqEuLwbjRjyy8jaNrkkXEao=)
                          2: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl (hash: BCecNZ3UVd+eudU+pgtUFxh0YP0XAgllKkjYEUPAqUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:2d:0e:6b:b1:8d:94:03:e7:c9:e5:9d:85:fe:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
        Validity
            Not Before: May 16 13:00:58 2026 GMT
            Not After : May 17 13:00:58 2026 GMT
        Subject: CN=ea88bbe4575cd02cc57caded929cc72f97ae78d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f3:32:43:3e:97:b2:40:db:54:a6:2b:4f:cd:
                    69:8d:0b:2d:91:7b:45:77:9f:97:dd:cd:2d:b7:db:
                    47:76:bd:b8:80:46:e4:16:74:7c:11:cf:98:be:6f:
                    2b:55:dc:98:14:d6:ce:ec:6f:9c:98:bd:7c:da:dd:
                    f9:bc:46:6b:78:c2:13:27:16:b6:25:bf:4c:5a:57:
                    7d:17:3a:72:4f:45:6c:c5:b2:3d:17:5e:ca:4e:c4:
                    e2:80:75:c4:45:1a:6f:39:02:25:aa:0d:dc:64:58:
                    0d:f5:63:c8:ab:a1:6b:cc:a1:dd:8c:ca:8d:34:07:
                    be:08:99:66:2b:e4:85:94:01:bf:31:16:83:f0:0a:
                    f6:8a:62:99:8a:7f:d9:6b:83:c9:51:cb:8c:d5:92:
                    df:f2:d6:b2:7d:83:87:8b:e7:48:2f:95:43:09:77:
                    c4:d6:d0:76:c6:30:dd:d9:03:df:92:60:b2:e9:42:
                    6c:5d:d0:c9:f6:2d:27:f5:30:f3:24:9f:a1:12:b2:
                    0c:dc:95:43:5e:76:36:43:4a:98:8f:93:28:6d:a9:
                    52:2f:f9:72:c7:23:21:d9:55:c2:c6:80:c1:93:45:
                    ed:da:ae:fb:96:42:a1:be:14:c1:94:2d:b0:68:6b:
                    87:2f:42:52:83:81:0f:38:1f:4d:0e:aa:3d:de:63:
                    f3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:88:BB:E4:57:5C:D0:2C:C5:7C:AD:ED:92:9C:C7:2F:97:AE:78:D7
            X509v3 Authority Key Identifier:
                keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:36:40:97:39:45:be:71:88:bf:96:8d:49:7d:95:c7:dc:dd:
         2f:aa:35:bd:0b:b0:aa:94:2e:76:0c:19:dd:50:28:1d:4d:11:
         11:86:89:03:60:a1:e9:a5:eb:7e:e9:a6:15:19:2e:3c:81:5f:
         f7:9e:a2:ce:db:83:61:e1:fb:12:76:29:29:8a:9d:37:85:a8:
         ab:4b:d8:ce:79:a7:9c:8f:7f:bb:ab:55:0a:63:80:78:ea:41:
         4f:37:d3:5b:3a:a2:ef:4b:59:28:58:9a:a5:9a:57:4b:e3:c7:
         65:34:b3:19:0b:15:08:79:b9:f2:77:2e:84:cb:d2:e6:c6:e5:
         61:e0:e3:31:2a:1c:f8:2e:da:44:9c:8f:84:2a:99:a4:86:d3:
         71:86:b7:8a:56:15:20:30:96:d5:19:94:b6:36:a1:cc:f8:bc:
         00:e5:40:56:a5:50:30:11:e7:8f:ba:24:50:1a:9c:b0:92:b8:
         d8:af:3c:75:ab:f4:32:5f:c6:d3:27:36:1b:06:89:23:29:99:
         2a:16:43:3a:fe:3d:96:10:3a:03:4b:28:ca:82:09:40:2c:e5:
         81:27:ce:e5:77:81:40:33:eb:e0:f6:a5:57:bb:e0:2b:17:1f:
         5b:f9:b3:43:2b:99:72:7a:d3:8a:56:25:5d:51:2e:5a:78:b6:
         da:b1:41:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4C0Oa7GNlAPnyeWdhf64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZGFmMGJhMjFlOTAyMDI1OTdlZTQ3ZTA5ZjY4NzdmZTIz
YzJhOWYwHhcNMjYwNTE2MTMwMDU4WhcNMjYwNTE3MTMwMDU4WjAzMTEwLwYDVQQD
EyhlYTg4YmJlNDU3NWNkMDJjYzU3Y2FkZWQ5MjljYzcyZjk3YWU3OGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/MyQz6XskDbVKYrT81pjQstkXtF
d5+X3c0tt9tHdr24gEbkFnR8Ec+Yvm8rVdyYFNbO7G+cmL182t35vEZreMITJxa2
Jb9MWld9FzpyT0VsxbI9F17KTsTigHXERRpvOQIlqg3cZFgN9WPIq6FrzKHdjMqN
NAe+CJlmK+SFlAG/MRaD8Ar2imKZin/Za4PJUcuM1ZLf8tayfYOHi+dIL5VDCXfE
1tB2xjDd2QPfkmCy6UJsXdDJ9i0n9TDzJJ+hErIM3JVDXnY2Q0qYj5MobalSL/ly
xyMh2VXCxoDBk0Xt2q77lkKhvhTBlC2waGuHL0JSg4EPOB9NDqo93mPzmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqIu+RXXNAsxXyt7ZKcxy+XrnjXMB8GA1UdIwQY
MBaAFPXa8Loh6QICWX7kfgn2h3/iPCqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODIt
Y2ZlMmE5NjU3YzI2LzEvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODItY2ZlMmE5NjU3YzI2
LzEvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjZAlzlF
vnGIv5aNSX2Vx9zdL6o1vQuwqpQudgwZ3VAoHU0REYaJA2Ch6aXrfummFRkuPIFf
956iztuDYeH7EnYpKYqdN4Woq0vYznmnnI9/u6tVCmOAeOpBTzfTWzqi70tZKFia
pZpXS+PHZTSzGQsVCHm58ncuhMvS5sblYeDjMSoc+C7aRJyPhCqZpIbTcYa3ilYV
IDCW1RmUtjahzPi8AOVAVqVQMBHnj7okUBqcsJK42K88dav0Ml/G0yc2GwaJIymZ
KhZDOv49lhA6A0soyoIJQCzlgSfO5XeBQDPr4PalV7vgKxcfW/mzQyuZcnrTilYl
XVEuWni22rFBMw==
-----END CERTIFICATE-----
Generated at Sat May 16 16:24:59 2026 by rpki-client