Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File:                     mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier:          rvrh+c/Dt+OZDa+NYKCWqeuL7qQ/LtoAIPTR0ehdaUY=
Subject key identifier:   9E:B4:79:47:A8:2A:EE:04:83:D4:E6:73:AD:F3:15:21:32:69:15:4A
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer:       /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial:       019E51EB995B73F4E8C53C91DC9F409CEB20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number:          191F
Signing time:             Fri 22 May 2026 23:00:55 +0000
Manifest this update:     Fri 22 May 2026 23:00:55 +0000
Manifest next update:     Sat 23 May 2026 23:00:55 +0000
Files and hashes:         1: iFAn1u3EcEzNKFFEGLpbIFooV4w.roa (hash: QNlIF2jmeLo4oV4a+RaHCBWLuy9tqbGyVZgSq0+yZ+A=)
                          2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: q/vhPR6O0QwEC8WRp1Bb5sitZtjHEJ6jjTH/AKUSk7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:51:eb:99:5b:73:f4:e8:c5:3c:91:dc:9f:40:9c:eb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
        Validity
            Not Before: May 22 23:00:55 2026 GMT
            Not After : May 23 23:00:55 2026 GMT
        Subject: CN=9eb47947a82aee0483d4e673adf315213269154a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:34:5f:96:2f:6c:d1:bd:1f:28:bb:d0:95:
                    db:d3:b8:6e:07:3c:5e:2f:2c:64:29:5b:bd:de:8b:
                    24:15:26:d7:12:ef:ed:fc:d3:33:35:2f:47:f8:91:
                    2b:f7:ea:c0:bf:03:35:a2:30:c8:32:b8:71:bd:0e:
                    b8:ec:e1:f1:bc:ec:66:62:57:36:f8:02:01:f7:3f:
                    dd:a4:63:da:fd:ab:e8:b3:cb:cd:84:3b:fe:e2:0e:
                    f4:94:d3:44:2f:26:7e:db:ee:08:d5:3b:8b:6c:cf:
                    9d:9c:28:48:63:04:f4:0c:a5:f9:84:26:8b:7f:e3:
                    54:00:52:37:d7:01:ab:68:ab:4e:b3:fe:c8:b2:49:
                    36:59:a8:ef:23:dc:a0:9d:cd:69:52:77:26:3e:b3:
                    6c:db:b5:82:66:87:a9:a2:f3:8b:b1:aa:23:a9:d0:
                    34:b5:92:6f:04:86:6e:7e:67:df:b2:0f:21:a6:25:
                    34:b9:1c:4e:ef:09:d4:a1:5e:bb:8e:5f:09:d8:b1:
                    b9:5d:62:d6:71:19:80:76:14:c4:c3:bc:c0:b4:bc:
                    e7:2f:92:8f:d6:c2:4e:59:96:50:d9:e6:fd:43:e0:
                    9f:96:73:c5:f1:48:54:5a:00:ad:9e:20:a9:ab:0d:
                    47:c5:ec:3a:4e:0f:f1:e1:4a:03:60:ff:77:7a:bb:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B4:79:47:A8:2A:EE:04:83:D4:E6:73:AD:F3:15:21:32:69:15:4A
            X509v3 Authority Key Identifier:
                keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fb:1d:76:6c:4a:d2:32:56:e7:f6:3e:4a:2b:54:8b:15:a4:
         69:3f:cc:4e:03:69:f4:55:d9:2c:a4:dd:c3:45:a1:bb:18:61:
         3c:b5:b8:0c:2f:b2:56:ea:aa:8e:c8:fd:13:39:af:6d:c5:78:
         22:cb:2c:f5:19:5f:02:5d:29:54:39:df:7f:12:ff:34:8c:a0:
         aa:2b:e0:17:10:f2:b1:e1:bf:eb:c2:25:4b:bc:9b:2d:aa:96:
         64:27:a3:14:59:86:77:a0:ab:0c:5d:c9:2c:c2:05:c7:5f:0a:
         98:b1:fa:7f:6b:32:1f:09:09:98:b6:4f:77:26:6d:36:92:0e:
         f9:d5:8b:92:3b:b4:32:00:78:be:05:87:05:ff:81:a7:1f:d4:
         bb:72:00:5a:5d:e4:de:df:5c:42:5b:ac:83:c9:9d:93:88:9c:
         54:4f:b1:82:b8:ab:73:35:7e:22:7b:cc:e6:c7:68:f6:51:e8:
         ed:9a:c8:41:a5:fe:92:da:4b:d4:5e:6a:5a:4a:29:e9:31:49:
         b7:38:7f:60:98:2b:22:c3:48:fb:16:4f:44:9e:20:4e:a0:09:
         9e:0e:2c:12:80:3c:77:cd:64:9d:7e:ba:9d:10:f0:1b:18:8a:
         29:39:c8:38:bf:46:fc:16:26:2e:8c:31:02:53:67:fa:8f:6e:
         fe:c0:ba:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5R65lbc/ToxTyR3J9AnOsgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZjE4OGEwNGJiNDVkNGVlNzRjNDRkYzc2ZDcxZmZmYmRj
MDRmNjAwHhcNMjYwNTIyMjMwMDU1WhcNMjYwNTIzMjMwMDU1WjAzMTEwLwYDVQQD
Eyg5ZWI0Nzk0N2E4MmFlZTA0ODNkNGU2NzNhZGYzMTUyMTMyNjkxNTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYw0X5YvbNG9Hyi70JXb07huBzxe
LyxkKVu93oskFSbXEu/t/NMzNS9H+JEr9+rAvwM1ojDIMrhxvQ647OHxvOxmYlc2
+AIB9z/dpGPa/avos8vNhDv+4g70lNNELyZ+2+4I1TuLbM+dnChIYwT0DKX5hCaL
f+NUAFI31wGraKtOs/7Iskk2WajvI9ygnc1pUncmPrNs27WCZoepovOLsaojqdA0
tZJvBIZufmffsg8hpiU0uRxO7wnUoV67jl8J2LG5XWLWcRmAdhTEw7zAtLznL5KP
1sJOWZZQ2eb9Q+CflnPF8UhUWgCtniCpqw1Hxew6Tg/x4UoDYP93eruXLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ60eUeoKu4Eg9Tmc63zFSEyaRVKMB8GA1UdIwQY
MBaAFJrxiKBLtF1O50xE3HbXH/+9wE9gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEt
NjU5YjRjY2Q3ZjRhLzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEtNjU5YjRjY2Q3ZjRh
LzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPsddmxK
0jJW5/Y+SitUixWkaT/MTgNp9FXZLKTdw0WhuxhhPLW4DC+yVuqqjsj9EzmvbcV4
Isss9RlfAl0pVDnffxL/NIygqivgFxDyseG/68IlS7ybLaqWZCejFFmGd6CrDF3J
LMIFx18KmLH6f2syHwkJmLZPdyZtNpIO+dWLkju0MgB4vgWHBf+Bpx/Uu3IAWl3k
3t9cQlusg8mdk4icVE+xgrirczV+InvM5sdo9lHo7ZrIQaX+ktpL1F5qWkop6TFJ
tzh/YJgrIsNI+xZPRJ4gTqAJng4sEoA8d81knX66nRDwGxiKKTnIOL9G/BYmLowx
AlNn+o9u/sC6rA==
-----END CERTIFICATE-----
Generated at Sat May 23 03:47:35 2026 by rpki-client