Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
File:                     jZknGRkaiU0GjbqNChAG6f6tqmg.mft (raw, json)
Hash identifier:          psO4VPIwsizkoXcBjygp+1OEfGyWqDWjsMEQ3qzXmo8=
Subject key identifier:   D8:98:06:77:9B:41:7C:4D:BA:1B:28:27:92:55:13:A2:85:AA:B1:34
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Certificate issuer:       /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial:       019E1FB5EC02D6D45145292DA3D3F154108A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
Manifest number:          0AB8
Signing time:             Wed 13 May 2026 05:01:16 +0000
Manifest this update:     Wed 13 May 2026 05:01:16 +0000
Manifest next update:     Thu 14 May 2026 05:01:16 +0000
Files and hashes:         1: aNdGm0-pJsnHGAxPQWpGS1Kv5ZU.roa (hash: 5JOSX/QZCccK/gUOeYHPT0U61k8N4LEoiccIN7jDjPo=)
                          2: jZknGRkaiU0GjbqNChAG6f6tqmg.crl (hash: Dgk1xwkzOq1xd3DKI3XeaySNT8aSadTmG7+fZmwvO+k=)
                          3: nyLvhleQEwhVmTGhN_O5OJ2dSNk.roa (hash: SjtdaWQXMJk13J5xCejsgWLSIcSxD709iSf13daT5JQ=)
                          4: yd8JpikDeAGL1RyToXLtaBhLXs0.roa (hash: WUNVyCqCAPZ5sr2QAi48VB7rmkpIF+duLJ03LhF4Vtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:ec:02:d6:d4:51:45:29:2d:a3:d3:f1:54:10:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
        Validity
            Not Before: May 13 05:01:16 2026 GMT
            Not After : May 14 05:01:16 2026 GMT
        Subject: CN=d89806779b417c4dba1b2827925513a285aab134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fa:6f:f2:15:11:b6:68:0f:8c:b9:cb:41:da:
                    15:db:1e:5b:e0:ce:03:77:21:dc:90:fe:50:bf:e6:
                    a1:29:51:4b:d3:e8:a3:21:aa:e9:7a:7f:ff:a7:4b:
                    f2:ef:b3:ba:ac:e6:b4:3e:1c:7b:b7:4e:8b:a7:85:
                    ec:29:fc:32:e3:3e:f1:85:ca:6a:4f:00:c4:44:6a:
                    85:47:d2:22:64:30:b5:0d:b1:73:c5:e7:48:bf:95:
                    46:7a:5d:98:bd:b5:94:79:70:3f:96:e8:b9:95:fe:
                    a6:76:d6:24:f0:74:dd:03:41:24:74:9e:ff:20:24:
                    21:9b:9b:db:eb:ca:16:bb:42:28:9b:ec:48:3e:2b:
                    3a:28:43:29:29:69:9e:c3:76:c3:75:e7:21:2e:58:
                    7f:a6:bf:13:99:50:6d:dc:ef:a7:d4:08:57:99:90:
                    e3:a0:0f:41:e0:3a:44:5a:ca:0d:34:34:19:cc:9e:
                    f7:fb:85:74:c4:fd:fc:ef:fe:02:3b:d3:db:f3:5a:
                    2c:ba:5b:eb:b4:cb:6a:17:3a:16:5f:c6:62:ab:ad:
                    f0:b1:4e:8b:3b:0c:00:eb:ec:a4:39:15:dc:63:0f:
                    49:27:c3:89:e4:2a:d3:f3:a4:20:e4:95:4b:58:76:
                    44:a4:de:28:27:1e:c4:55:64:b5:07:bf:0f:47:03:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:98:06:77:9B:41:7C:4D:BA:1B:28:27:92:55:13:A2:85:AA:B1:34
            X509v3 Authority Key Identifier:
                keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1a:6f:f6:a6:97:20:09:c2:55:7a:44:ad:fa:6c:b0:3f:3e:
         ba:9c:7c:c7:36:cd:5f:ff:a4:5f:28:bb:8a:68:03:60:e3:b3:
         ab:3b:35:cb:a4:86:d7:9d:d5:ab:96:11:63:2c:14:d0:7f:ac:
         2b:dd:1d:a3:d8:85:bb:62:de:71:61:e1:70:a5:97:ef:e8:94:
         35:65:33:65:a4:c7:d5:19:2f:5c:a3:75:76:8e:a5:ac:12:91:
         e7:10:ba:90:c5:a4:72:ca:03:66:58:91:56:e5:c0:3f:2f:ea:
         9f:96:23:11:58:bd:fb:58:d8:dc:5d:13:bc:22:63:68:e5:6f:
         09:15:91:f1:77:23:e3:d6:01:a5:5c:ec:73:0d:67:16:c1:a1:
         aa:5d:7b:0e:92:7b:3b:76:1c:04:94:1c:ed:7b:90:bd:be:9f:
         27:1c:ec:48:19:53:9b:16:d6:32:a9:dc:e1:d8:f5:80:02:9d:
         a9:5c:65:57:f6:00:b9:e1:1b:19:a9:ce:dd:0f:d1:ec:12:a4:
         11:cd:74:b0:36:30:98:d9:79:af:ed:48:f2:51:3f:99:aa:73:
         b4:38:83:47:e4:06:5f:e2:c9:d9:8c:a0:3c:34:58:ce:0e:10:
         9b:b9:0c:3b:a1:e0:03:7e:cf:86:bc:28:e4:3d:65:2f:f0:01:
         b9:f0:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:26 2026 by rpki-client