Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File:                     MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier:          knd4smlbkGDwXBJcUDXWWevGvKpNGPpQSW3FPrFY19c=
Subject key identifier:   E0:8D:9C:B1:6D:69:2E:F4:D6:2A:46:73:95:E9:BA:D6:6E:15:C2:B2
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer:       /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial:       019E28818E10DF7F8DEEE88096C612DDBEC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number:          1637
Signing time:             Thu 14 May 2026 22:00:39 +0000
Manifest this update:     Thu 14 May 2026 22:00:39 +0000
Manifest next update:     Fri 15 May 2026 22:00:39 +0000
Files and hashes:         1: 3-jw2Mn4GAjthDEPkukJUUAA8ms.asa (hash: OVjmmAruwPeNeXIeJ+cgYwQWAPOrHRgmi+6ExlA9DiQ=)
                          2: AAeB0P11BLo-0wFOSgELqWi6J00.roa (hash: ne5zZYzC8PT1Zd7TFJmCajzK/4fC4/JAvjpEfVor37I=)
                          3: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: rtM6gvAryjsQYOPoRqP/kHNVDan5+EvUtqCdi3MZbOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:81:8e:10:df:7f:8d:ee:e8:80:96:c6:12:dd:be:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
        Validity
            Not Before: May 14 22:00:39 2026 GMT
            Not After : May 15 22:00:39 2026 GMT
        Subject: CN=e08d9cb16d692ef4d62a467395e9bad66e15c2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:c1:b7:9c:11:79:16:4d:97:34:18:59:a3:
                    ad:36:ff:84:83:a4:07:93:86:12:c7:5f:90:a0:d4:
                    67:13:82:01:c7:14:70:0b:ac:b0:a7:a4:09:94:3e:
                    f7:6c:fe:e9:14:23:b7:cf:eb:1c:5a:12:e9:d2:9e:
                    69:76:cf:b5:e9:e8:9c:3b:b7:eb:f0:e3:e0:98:6a:
                    91:a6:2b:0a:ae:88:7e:3d:7f:b1:11:01:fd:f0:8a:
                    b7:3a:02:41:6a:3f:ed:73:7d:60:37:ec:79:63:8a:
                    04:b7:53:5e:93:c4:c9:58:7d:63:3b:9d:ed:1c:f5:
                    1e:31:e3:4c:0e:52:64:45:5a:0b:ce:5f:42:bf:a8:
                    6f:ef:92:7a:be:32:5a:92:2d:7e:43:9e:ec:6a:b4:
                    00:ab:22:1c:7a:12:1e:ef:08:77:fd:7c:a0:99:77:
                    4c:e2:b9:2e:90:67:a0:4f:0a:c4:ec:80:0c:b8:d6:
                    70:31:3e:c2:21:b4:8c:a3:58:a3:0d:ef:5c:2e:3e:
                    35:ae:08:bc:42:6e:9a:5b:13:97:24:aa:4f:29:3a:
                    00:9f:a1:36:65:9d:4c:6b:0a:47:ef:c1:a3:b2:f3:
                    b1:43:80:d8:d2:3c:33:8a:87:81:16:6e:5d:31:00:
                    6c:3c:88:95:1f:2a:c8:72:42:8d:f6:50:14:b8:3b:
                    95:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8D:9C:B1:6D:69:2E:F4:D6:2A:46:73:95:E9:BA:D6:6E:15:C2:B2
            X509v3 Authority Key Identifier:
                keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1d:81:34:34:52:67:85:61:0e:c8:54:28:5b:29:44:27:fa:
         25:8f:58:e4:55:01:01:18:8f:0f:ff:53:60:f9:e4:e1:9c:6a:
         74:97:30:60:1c:00:4b:a0:50:bf:0a:94:06:7a:e1:39:50:fe:
         ff:7a:67:0d:a9:de:d0:e5:14:1b:c2:8c:41:df:b3:ff:bd:de:
         a9:6d:d8:cb:0f:cd:4a:85:21:35:8c:19:75:60:c5:32:42:6f:
         23:00:b1:8c:f4:d6:e8:0c:fc:8d:58:56:b4:49:0b:39:25:ae:
         4b:2c:c6:43:13:ac:94:69:6a:48:55:15:48:43:ba:fd:e9:8e:
         43:0c:c1:e9:ce:3e:c6:af:0c:94:f8:a7:51:d0:95:94:dd:85:
         42:97:9f:49:c3:20:8f:36:3f:e4:1b:f4:af:37:e6:dc:f3:21:
         c6:c6:ed:6b:5e:d1:ad:db:d5:b1:4f:d3:c4:3d:c3:41:ec:9c:
         3e:b5:cf:2d:e5:ff:87:f0:85:dc:cc:01:6f:bd:9e:6d:a3:f1:
         88:08:9f:14:27:f9:cb:cb:29:ce:41:87:ad:a2:62:77:40:a1:
         43:14:91:6d:b4:dd:8b:b4:d9:02:c9:f3:d3:0d:48:bc:4b:f4:
         2d:16:75:66:19:73:3f:ae:f6:fe:2f:df:1f:08:8a:ea:ec:46:
         f9:66:12:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ogY4Q33+N7uiAlsYS3b7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxN2E5Mjc0MjYwODlmM2I4YzUwMDA4MzIyMWE3OThhOWQy
ZTg0NjYwHhcNMjYwNTE0MjIwMDM5WhcNMjYwNTE1MjIwMDM5WjAzMTEwLwYDVQQD
EyhlMDhkOWNiMTZkNjkyZWY0ZDYyYTQ2NzM5NWU5YmFkNjZlMTVjMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom3Bt5wReRZNlzQYWaOtNv+Eg6QH
k4YSx1+QoNRnE4IBxxRwC6ywp6QJlD73bP7pFCO3z+scWhLp0p5pds+16eicO7fr
8OPgmGqRpisKroh+PX+xEQH98Iq3OgJBaj/tc31gN+x5Y4oEt1Nek8TJWH1jO53t
HPUeMeNMDlJkRVoLzl9Cv6hv75J6vjJaki1+Q57sarQAqyIcehIe7wh3/XygmXdM
4rkukGegTwrE7IAMuNZwMT7CIbSMo1ijDe9cLj41rgi8Qm6aWxOXJKpPKToAn6E2
ZZ1MawpH78GjsvOxQ4DY0jwzioeBFm5dMQBsPIiVHyrIckKN9lAUuDuV8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCNnLFtaS701ipGc5XputZuFcKyMB8GA1UdIwQY
MBaAFDF6knQmCJ87jFAAgyIaeYqdLoRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5Njgt
NDY0YjhmM2I4MzYzLzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5NjgtNDY0YjhmM2I4MzYz
LzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQh2BNDRS
Z4VhDshUKFspRCf6JY9Y5FUBARiPD/9TYPnk4ZxqdJcwYBwAS6BQvwqUBnrhOVD+
/3pnDane0OUUG8KMQd+z/73eqW3Yyw/NSoUhNYwZdWDFMkJvIwCxjPTW6Az8jVhW
tEkLOSWuSyzGQxOslGlqSFUVSEO6/emOQwzB6c4+xq8MlPinUdCVlN2FQpefScMg
jzY/5Bv0rzfm3PMhxsbta17RrdvVsU/TxD3DQeycPrXPLeX/h/CF3MwBb72ebaPx
iAifFCf5y8spzkGHraJid0ChQxSRbbTdi7TZAsnz0w1IvEv0LRZ1ZhlzP672/i/f
HwiK6uxG+WYSEA==
-----END CERTIFICATE-----
Generated at Fri May 15 06:19:51 2026 by rpki-client