Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
File:                     JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft (raw, json)
Hash identifier:          87WIPoBBMKCRGOWJUurWgRbk+64KZMilMHRrvehB9lg=
Subject key identifier:   93:5E:64:DE:6F:26:9C:58:C9:6D:96:29:B2:98:14:0B:00:1C:8D:EF
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Certificate issuer:       /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial:       019E1F7E7BD132F4D5F787FC101FD7CDC897
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
Manifest number:          1969
Signing time:             Wed 13 May 2026 04:00:43 +0000
Manifest this update:     Wed 13 May 2026 04:00:43 +0000
Manifest next update:     Thu 14 May 2026 04:00:43 +0000
Files and hashes:         1: 9AbUngTypkaoNALibGKyeTkaz4o.roa (hash: 8et21MYSocigMDejcXNZOBoqIIUukvEWNLqIqh49CVQ=)
                          2: If-4jw8504k0DpzNI8J-eTjth_I.roa (hash: +7hlM1fpCVGHtefaNr3Hcn1BgELFnn/j/b88Js0gOWM=)
                          3: JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl (hash: Dpy7Q7bUHvVDCNb5RgBEWxI19UgQIbSQJFM7K8pokFU=)
                          4: RyBPSWBAyvgzI58JUex72WdudTY.roa (hash: dlQYrNWmjCNno8rPfDE7ZKBncib9oiUvaLSq8gqa3/M=)
                          5: UT5KF9vV1JL4qQULVX8xBydW-Ws.roa (hash: CZXMjETLne5/ANsavo0h/DI6L9lViMMTJK0r4r9Tp+I=)
                          6: YJKWmoUnloWqQAavfXfWWxqnJ5M.roa (hash: Ka2Kdw/WOaN1bcBViqXyM0PUv8ChNL0LTlaKVsUXAN4=)
                          7: ob6pDJB_JE3UJu9H-9gufeyselQ.roa (hash: xbSbO7r3hHkWAEnbnrsxUE2H3xriXhgsX8DyAPUq47c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:7b:d1:32:f4:d5:f7:87:fc:10:1f:d7:cd:c8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
        Validity
            Not Before: May 13 04:00:43 2026 GMT
            Not After : May 14 04:00:43 2026 GMT
        Subject: CN=935e64de6f269c58c96d9629b298140b001c8def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:f2:b6:47:f0:ac:f0:bb:0a:c8:f6:c2:6e:11:
                    0d:cb:dd:5f:65:b6:f9:51:40:80:17:7c:1b:2d:6c:
                    4e:fc:66:38:b6:98:76:99:83:14:3a:47:bc:e8:61:
                    db:fc:2b:3c:db:bf:a0:d4:4e:b6:3e:27:1d:f7:f2:
                    9a:34:4f:57:f7:aa:f4:45:e8:6c:66:12:65:7d:22:
                    5d:b5:03:53:1f:99:ea:71:3b:e8:d3:55:5e:94:a4:
                    1d:d1:c8:a1:a2:76:28:22:61:53:d1:23:ee:96:ce:
                    2e:f6:22:ba:4f:cb:f7:e3:98:a2:d9:9c:e0:55:9b:
                    a5:d8:a0:08:c8:35:fe:40:7c:53:c0:52:bd:90:da:
                    9e:1f:f7:95:08:94:fd:bd:c5:39:a8:bc:49:8b:dc:
                    22:b1:9e:96:f7:f5:a2:c8:5a:23:5f:3b:07:e6:d3:
                    ce:94:d9:81:58:90:28:99:eb:1a:5f:04:24:d0:f6:
                    6b:99:9e:50:6a:f3:08:ff:1d:9d:fd:e1:2c:e2:bb:
                    1f:5a:23:41:8c:67:84:8b:ae:ae:59:5b:1e:5b:a4:
                    56:a4:b5:df:36:19:6a:b8:64:0a:70:d6:51:8d:94:
                    07:db:3a:ce:52:b3:68:54:d7:08:e7:34:d2:8c:f9:
                    be:c5:6d:15:63:33:62:6d:9b:84:dc:5a:5b:0d:c8:
                    23:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5E:64:DE:6F:26:9C:58:C9:6D:96:29:B2:98:14:0B:00:1C:8D:EF
            X509v3 Authority Key Identifier:
                keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:71:dd:3d:34:1d:da:04:25:d1:85:f9:39:8e:e1:ad:f7:4b:
         80:c8:ee:14:85:6a:e0:19:07:9a:36:19:de:dd:4d:7f:5c:59:
         00:6d:68:ae:8e:b7:54:3b:43:da:c6:62:6b:60:48:58:93:69:
         47:f9:8a:0e:2e:5d:4a:48:87:78:91:52:5b:6e:ab:d4:62:86:
         58:2f:cb:67:fe:5e:8f:52:a2:94:7f:78:38:63:72:e9:ce:96:
         2f:65:1c:b9:81:62:12:46:47:51:a2:1a:b4:c5:0f:32:4b:77:
         6f:8d:78:d6:94:80:37:93:1d:db:6e:90:04:73:a6:80:8e:a2:
         39:af:74:27:ab:d6:05:be:6b:c6:8e:4e:d6:c7:50:22:2d:d4:
         df:e7:13:27:60:50:dc:85:b1:75:5b:da:f4:52:4e:67:2f:18:
         77:5b:1e:82:b0:da:95:d1:4a:c0:44:85:69:ba:41:e9:75:64:
         7c:77:80:c3:c7:9d:3e:be:4f:36:a9:f3:4d:2a:a0:05:6d:b8:
         c7:8b:91:61:2e:cb:25:10:0f:fb:ee:d9:10:a9:fa:05:13:59:
         8c:52:53:52:50:58:73:09:82:f4:da:0f:b7:a2:e9:69:e1:31:
         31:c5:0a:6a:98:e0:41:84:c9:c0:db:09:ae:8d:23:9f:b0:54:
         24:ce:ec:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:40:35 2026 by rpki-client