Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
File:                     jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json)
Hash identifier:          Fw3VR/FNLt4sNwf8+FgT/i93ZuHj1Nl1cnUlqimjOd8=
Subject key identifier:   70:4D:16:8D:5C:A8:29:CF:75:FB:AD:4D:2F:C2:91:4F:0F:F5:C5:67
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Certificate issuer:       /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial:       019E1E35921240A4EA484D14187E2DD29D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
Manifest number:          190B
Signing time:             Tue 12 May 2026 22:01:27 +0000
Manifest this update:     Tue 12 May 2026 22:01:27 +0000
Manifest next update:     Wed 13 May 2026 22:01:27 +0000
Files and hashes:         1: 4X9bzbTjxxEC-csNdknM31iR6Vk.roa (hash: g5Y0JUJxW/m2Y8F30up7Txp8xJPm4qz4gVK4xJRO0QQ=)
                          2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: I5Nx8mb+6xvYw3rOaCkLIHig5l/UAImJE8L7QHdMy64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:92:12:40:a4:ea:48:4d:14:18:7e:2d:d2:9d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
        Validity
            Not Before: May 12 22:01:27 2026 GMT
            Not After : May 13 22:01:27 2026 GMT
        Subject: CN=704d168d5ca829cf75fbad4d2fc2914f0ff5c567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:b8:e3:e5:ba:f5:e3:3d:60:6c:e2:39:32:
                    d0:37:07:53:74:77:7b:1a:a9:ff:e8:35:93:a6:ed:
                    e0:ad:65:01:22:83:cc:64:c2:68:62:cf:8b:4b:04:
                    ff:a1:e5:79:10:c4:01:1b:5f:bb:e9:14:58:1b:2e:
                    83:85:ee:1f:56:ce:d6:10:37:e8:20:00:e4:67:87:
                    97:3a:a3:b1:6c:61:f2:46:a5:9e:4f:8e:5b:5d:b8:
                    c1:07:92:1d:2b:19:42:82:8b:0a:92:ec:ab:b2:4d:
                    be:51:23:8b:4d:6f:21:4f:ac:58:0d:ac:52:cb:8c:
                    b1:38:e7:88:b4:4c:b8:a5:b5:1c:74:e0:de:2b:32:
                    cb:52:9f:2d:b2:ec:10:70:52:db:b2:37:bb:61:04:
                    6f:36:ba:47:9c:5f:43:1a:54:a4:b3:4c:f3:50:ce:
                    94:98:7e:7e:ad:b5:af:c5:cb:c9:14:98:d0:9c:d1:
                    2c:ae:7c:0c:29:62:d3:42:4b:8e:90:09:6f:7b:cc:
                    ef:77:ee:29:a9:a0:7a:3e:62:54:a2:dc:19:4a:72:
                    63:99:6f:0d:27:99:11:e8:03:35:96:05:14:b8:66:
                    ea:b2:e2:c1:98:cb:21:df:17:00:08:26:4e:a8:a5:
                    85:92:34:21:db:4c:5b:c3:1b:a0:a4:c9:3f:04:6e:
                    59:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4D:16:8D:5C:A8:29:CF:75:FB:AD:4D:2F:C2:91:4F:0F:F5:C5:67
            X509v3 Authority Key Identifier:
                keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ed:b9:26:41:b3:9a:9f:fa:cd:03:1d:da:53:3d:66:f0:96:
         cb:77:be:45:d9:88:70:2d:d8:fc:68:92:06:bd:06:7c:cf:f1:
         25:28:44:bd:19:bd:48:83:53:2e:02:2d:15:8b:57:b9:9c:b1:
         d0:8b:08:81:c9:c9:c8:5e:c3:af:de:95:74:99:14:35:c8:7d:
         e4:f2:e1:e6:8a:26:1c:ff:43:ea:61:2b:8e:63:10:ce:9b:59:
         a6:56:87:ab:ac:59:eb:04:88:cb:fd:59:d7:bf:e6:4b:a0:02:
         f6:ed:2a:20:0e:bb:ca:3a:0a:f2:89:17:48:06:4b:47:a4:16:
         fb:0a:4f:47:4b:28:8b:e5:4d:da:cb:6e:a5:73:a6:7b:5c:a2:
         cc:34:f6:18:22:16:93:a3:65:58:cf:4e:02:59:f3:63:d3:61:
         5b:8e:62:04:eb:45:2e:78:d1:f7:8a:4d:d2:b9:6e:50:09:4a:
         d2:da:97:41:5f:b2:ca:dc:75:3c:59:36:3c:a5:28:ae:a0:a5:
         8e:9d:bd:b9:6c:5c:ce:32:ca:7c:4c:29:6c:18:96:3a:af:e4:
         47:ea:68:f0:ae:6e:02:69:03:84:2a:03:b9:18:ed:58:b3:e6:
         78:2d:31:4d:06:0a:ed:15:14:78:6b:f4:39:09:6b:33:e3:d4:
         12:46:f7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:47:53 2026 by rpki-client