Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File:                     vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier:          9Xe907MOGE599aGugUnM1CFcZhg7RZJC8Vdt6FpLKNY=
Subject key identifier:   EA:0E:85:DE:9B:78:23:69:80:70:65:74:A3:AC:0E:BE:67:26:CA:65
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer:       /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial:       019E28B8B75A11BE0BCA2F85CABFE291F5CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number:          190E
Signing time:             Thu 14 May 2026 23:00:54 +0000
Manifest this update:     Thu 14 May 2026 23:00:54 +0000
Manifest next update:     Fri 15 May 2026 23:00:54 +0000
Files and hashes:         1: n7K--VygPD5bxJ2Nh4nbk7uTznw.roa (hash: fTr5X92PZm2YQIc6I3zwmHgOyHHHYgDg02uY9i85scE=)
                          2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: 1pn28MNHaLePUgS5eO0o6+it5Z5HcdK2nurh4i8opmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:b8:b7:5a:11:be:0b:ca:2f:85:ca:bf:e2:91:f5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
        Validity
            Not Before: May 14 23:00:54 2026 GMT
            Not After : May 15 23:00:54 2026 GMT
        Subject: CN=ea0e85de9b78236980706574a3ac0ebe6726ca65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4e:43:19:c1:23:c8:4f:6e:81:a3:d3:50:83:
                    d4:e4:c6:86:f3:d6:eb:ee:14:e3:c5:25:45:57:56:
                    6d:2c:77:67:76:7e:80:f5:98:02:dc:c4:6a:97:75:
                    3d:77:f3:2d:d3:43:fc:e8:03:ea:cb:4d:e2:33:f3:
                    c3:ca:e6:44:62:e9:40:3a:8b:64:d6:65:b0:d5:da:
                    d6:d1:50:24:85:6d:94:69:27:1b:e0:53:72:41:3a:
                    cf:ca:d4:10:0b:f2:4d:54:e4:74:2c:ec:b0:c9:08:
                    4a:07:0c:3f:d6:94:7b:14:aa:77:db:d6:45:65:07:
                    c2:c0:4a:89:ba:34:66:31:d2:a6:eb:b0:4b:f2:7c:
                    06:2b:f9:1d:ed:29:bc:f7:1d:13:12:6c:f4:c9:91:
                    76:e7:93:38:9a:db:0f:41:7a:6e:a7:d2:63:d6:30:
                    f3:8d:2b:29:01:1c:da:83:ac:3b:44:22:ff:0b:56:
                    6b:75:bc:8e:c6:81:a9:2e:95:7a:33:2f:d6:cc:75:
                    b0:c7:f1:9c:53:01:a2:76:83:19:3a:cb:18:9b:e5:
                    03:2d:24:e3:7f:9e:f0:e0:a9:0a:10:7f:b0:7d:31:
                    36:71:05:21:92:03:e0:f8:89:6d:93:75:ed:b1:cc:
                    7d:b1:2b:70:b6:e4:4a:aa:b6:eb:4f:da:d7:e6:44:
                    4c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0E:85:DE:9B:78:23:69:80:70:65:74:A3:AC:0E:BE:67:26:CA:65
            X509v3 Authority Key Identifier:
                keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:07:0a:d9:21:22:98:69:f3:8e:b2:71:a6:cd:69:f1:ab:69:
         2a:0e:52:2f:1c:d6:e5:d0:68:5d:27:5f:8f:8c:77:1b:bc:b8:
         78:8a:be:a2:d3:9f:32:0d:32:c0:ab:b5:0b:dd:4f:45:75:1e:
         57:6b:dc:4d:b5:81:ad:e7:65:cd:e4:6b:5d:37:48:f0:82:ec:
         04:aa:59:ff:e6:95:7f:e7:81:56:ef:e7:d1:17:b7:3b:ca:75:
         a7:e3:a2:98:b3:b0:98:bd:30:21:2b:ca:c3:42:cd:53:2a:36:
         10:ae:0a:1a:d7:87:7f:53:48:03:f7:5f:68:cb:61:85:b5:4e:
         ac:d0:05:ae:09:ba:1f:20:36:a4:45:36:c0:49:20:11:23:94:
         c0:0f:4d:cb:db:bb:a4:53:a4:6e:6d:87:e9:ac:a9:8f:62:33:
         9a:3a:84:99:8e:3f:5f:46:38:26:56:f9:04:8c:a8:23:67:27:
         d1:a0:fc:da:0e:b9:bb:a9:21:8e:60:ad:87:83:24:30:6d:af:
         48:3d:6d:fb:44:0d:47:db:37:95:36:c2:14:15:13:4a:03:c5:
         7b:31:46:48:53:54:35:70:ac:34:ff:6a:90:1f:09:c2:77:b0:
         cc:f2:a5:05:df:25:ef:83:45:56:9b:cf:2a:47:82:d9:96:91:
         26:b2:12:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ouLdaEb4Lyi+Fyr/ikfXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMmVlZmE3YzYwNDhlNmEwYTVhNjVjMDdlM2UyNTUzNDFl
MTQzYmIwHhcNMjYwNTE0MjMwMDU0WhcNMjYwNTE1MjMwMDU0WjAzMTEwLwYDVQQD
EyhlYTBlODVkZTliNzgyMzY5ODA3MDY1NzRhM2FjMGViZTY3MjZjYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk5DGcEjyE9ugaPTUIPU5MaG89br
7hTjxSVFV1ZtLHdndn6A9ZgC3MRql3U9d/Mt00P86APqy03iM/PDyuZEYulAOotk
1mWw1drW0VAkhW2UaScb4FNyQTrPytQQC/JNVOR0LOywyQhKBww/1pR7FKp329ZF
ZQfCwEqJujRmMdKm67BL8nwGK/kd7Sm89x0TEmz0yZF255M4mtsPQXpup9Jj1jDz
jSspARzag6w7RCL/C1ZrdbyOxoGpLpV6My/WzHWwx/GcUwGidoMZOssYm+UDLSTj
f57w4KkKEH+wfTE2cQUhkgPg+Iltk3Xtscx9sStwtuRKqrbrT9rX5kRM/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoOhd6beCNpgHBldKOsDr5nJsplMB8GA1UdIwQY
MBaAFL8u76fGBI5qClplwH4+JVNB4UO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgt
MjFlYzY1NjVjOWJlLzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgtMjFlYzY1NjVjOWJl
LzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAcK2SEi
mGnzjrJxps1p8atpKg5SLxzW5dBoXSdfj4x3G7y4eIq+otOfMg0ywKu1C91PRXUe
V2vcTbWBredlzeRrXTdI8ILsBKpZ/+aVf+eBVu/n0Re3O8p1p+OimLOwmL0wISvK
w0LNUyo2EK4KGteHf1NIA/dfaMthhbVOrNAFrgm6HyA2pEU2wEkgESOUwA9Ny9u7
pFOkbm2H6aypj2IzmjqEmY4/X0Y4Jlb5BIyoI2cn0aD82g65u6khjmCth4MkMG2v
SD1t+0QNR9s3lTbCFBUTSgPFezFGSFNUNXCsNP9qkB8JwnewzPKlBd8l74NFVpvP
KkeC2ZaRJrISbg==
-----END CERTIFICATE-----
Generated at Fri May 15 07:03:42 2026 by rpki-client