Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File:                     Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier:          ITeAnNahz9PjqX/V22iXasGA/MZHu5sq8okofr0Uyg4=
Subject key identifier:   C2:FB:DE:3A:5F:C4:81:73:0D:2C:05:D6:52:6F:A7:C5:B9:46:60:92
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer:       /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial:       019E1ED9C6EF6118D041105ABCF8658452FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 01:00:49 +0000
Manifest this update:     Wed 13 May 2026 01:00:49 +0000
Manifest next update:     Thu 14 May 2026 01:00:49 +0000
Files and hashes:         1: 6MvEEf7_I3zO3ShtqYd8LKtfRq8.roa (hash: lIgvAYq1Ass4AfPtbYog1dJL/68LEdNig8uh3pGw9vM=)
                          2: EKgYi5uwmdQ3SbZogfsfQT2cobM.roa (hash: Y3gYmZwUht9JEwQTGH6EyDKQhtm/rC13n1867BeBzvQ=)
                          3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: QL6IG3BnfdX1gkr9pbwK0YMjWVlQTWWkRuEtQN4fHgk=)
                          4: Jqk7oDaY0GyweY_m1dLexacLzPE.roa (hash: prybAkap/ary1cwam/oMqauOzBkuf1YCV2giq0/4yoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:c6:ef:61:18:d0:41:10:5a:bc:f8:65:84:52:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
        Validity
            Not Before: May 13 01:00:49 2026 GMT
            Not After : May 14 01:00:49 2026 GMT
        Subject: CN=c2fbde3a5fc481730d2c05d6526fa7c5b9466092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7a:ac:d3:cc:bd:10:91:01:62:1d:8d:07:b9:
                    82:6e:ca:59:17:4f:60:37:90:f1:4d:d3:a7:f2:2c:
                    fd:cd:c4:6c:4e:61:91:19:42:28:69:97:ef:c2:30:
                    a2:cf:0b:8a:1d:3d:d0:5e:fe:47:9b:c2:eb:b0:44:
                    f7:7c:0b:ee:0d:ed:f7:7d:07:0d:4f:7c:0c:b0:1b:
                    bb:d9:cd:d0:86:99:49:23:3d:0c:74:b2:6e:dc:f1:
                    0d:70:d0:82:66:60:3c:46:f5:71:0c:65:0a:ee:76:
                    00:d2:50:4c:f3:c9:b2:1f:89:c7:3e:73:ff:d4:e7:
                    3d:34:d0:68:73:42:26:3b:cb:dc:15:74:07:67:8e:
                    39:7e:08:42:75:cc:82:ac:5c:ab:e0:2e:f2:c6:fa:
                    e7:eb:f5:46:f2:e2:26:01:6e:65:8c:bc:83:a2:bc:
                    2a:d4:c7:a2:1b:da:35:ca:32:65:26:9c:8d:10:b5:
                    bd:1d:fd:a0:e7:e7:70:29:10:92:1d:65:71:2e:76:
                    e2:27:3d:3b:88:b9:75:32:5d:34:6c:69:36:90:56:
                    df:19:61:75:a7:4a:c4:72:cd:1f:e7:41:0f:53:18:
                    a9:11:22:c9:94:c8:f1:7b:7e:05:29:95:84:f6:d7:
                    ac:8f:e4:43:14:09:33:18:a1:1c:d3:b8:f6:36:41:
                    51:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FB:DE:3A:5F:C4:81:73:0D:2C:05:D6:52:6F:A7:C5:B9:46:60:92
            X509v3 Authority Key Identifier:
                keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e6:83:4b:fc:b3:a0:7f:45:12:cf:a1:64:31:d2:03:bc:57:
         de:02:2b:4a:5f:6c:36:b1:be:13:d5:f5:24:bd:36:09:68:86:
         c1:d4:82:39:3c:93:b5:68:2e:2b:64:61:c6:9a:04:8f:4c:2d:
         97:ee:7b:d1:0d:71:ae:ce:db:b0:d6:e0:95:f2:ae:63:b9:48:
         71:ae:78:ba:fc:60:dc:ba:ab:07:64:57:d9:05:53:58:b8:f2:
         17:6d:89:fc:46:ff:19:e4:a3:da:57:b6:05:54:71:e1:a7:97:
         e9:69:a3:cf:e5:c0:2e:d1:da:b7:92:18:74:3a:82:14:86:a0:
         3f:76:dd:f8:35:c9:aa:6a:9f:bb:0d:44:8f:9a:c7:cd:ab:61:
         34:b4:07:ed:af:1c:63:14:5c:41:a6:78:ff:20:e6:89:92:0b:
         ad:d3:0e:9d:70:bc:86:bb:73:8c:fc:b6:c3:b4:48:44:ab:4a:
         59:fb:b1:9c:19:1a:95:1c:1f:29:cd:cf:4d:c8:a9:77:30:2b:
         fb:60:25:9f:54:71:21:47:f3:63:bd:c3:18:b3:fd:22:ae:42:
         cf:3a:cb:ce:e0:0b:f2:11:6c:52:a5:87:34:80:34:be:68:2f:
         50:79:79:a4:1e:eb:10:e1:fa:8d:41:6c:83:46:f3:78:41:56:
         7d:1f:82:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2cbvYRjQQRBavPhlhFL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTg3OWQ2MjhmZTVlYzhhNzYxYzQ3NDg2Nzk5OTNmOWM2
OWY4YjQwHhcNMjYwNTEzMDEwMDQ5WhcNMjYwNTE0MDEwMDQ5WjAzMTEwLwYDVQQD
EyhjMmZiZGUzYTVmYzQ4MTczMGQyYzA1ZDY1MjZmYTdjNWI5NDY2MDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonqs08y9EJEBYh2NB7mCbspZF09g
N5DxTdOn8iz9zcRsTmGRGUIoaZfvwjCizwuKHT3QXv5Hm8LrsET3fAvuDe33fQcN
T3wMsBu72c3QhplJIz0MdLJu3PENcNCCZmA8RvVxDGUK7nYA0lBM88myH4nHPnP/
1Oc9NNBoc0ImO8vcFXQHZ445fghCdcyCrFyr4C7yxvrn6/VG8uImAW5ljLyDorwq
1MeiG9o1yjJlJpyNELW9Hf2g5+dwKRCSHWVxLnbiJz07iLl1Ml00bGk2kFbfGWF1
p0rEcs0f50EPUxipESLJlMjxe34FKZWE9tesj+RDFAkzGKEc07j2NkFRdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFML73jpfxIFzDSwF1lJvp8W5RmCSMB8GA1UdIwQY
MBaAFCWoedYo/l7Ip2HEdIZ5mT+cafi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMt
ZDg2YjRjYWVkMTFkLzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMtZDg2YjRjYWVkMTFk
LzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeaDS/yz
oH9FEs+hZDHSA7xX3gIrSl9sNrG+E9X1JL02CWiGwdSCOTyTtWguK2RhxpoEj0wt
l+570Q1xrs7bsNbglfKuY7lIca54uvxg3LqrB2RX2QVTWLjyF22J/Eb/GeSj2le2
BVRx4aeX6Wmjz+XALtHat5IYdDqCFIagP3bd+DXJqmqfuw1Ej5rHzathNLQH7a8c
YxRcQaZ4/yDmiZILrdMOnXC8hrtzjPy2w7RIRKtKWfuxnBkalRwfKc3PTcipdzAr
+2Aln1RxIUfzY73DGLP9Iq5CzzrLzuAL8hFsUqWHNIA0vmgvUHl5pB7rEOH6jUFs
g0bzeEFWfR+C3g==
-----END CERTIFICATE-----
Generated at Wed May 13 04:32:59 2026 by rpki-client