Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File:                     JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier:          W7hjvp8l2h1BtzGjasxTDV3m5zAJpMLPsWG+bhQmOpY=
Subject key identifier:   8F:9C:1B:EC:94:DC:02:B3:B2:A8:98:3C:B5:6D:CF:30:83:56:90:77
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer:       /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial:       019E1ED9DAD43B150E34C6A950C009F460DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 01:00:54 +0000
Manifest this update:     Wed 13 May 2026 01:00:54 +0000
Manifest next update:     Thu 14 May 2026 01:00:54 +0000
Files and hashes:         1: 3pF8IhqwUxmlbr6s48L9oPema6M.roa (hash: dwMpIPqTUrQBexVcKq3XaTovbIKuATLe+PvFHdYURt8=)
                          2: 8MhUGiidi2m0HnQqAR9gajVbxRM.roa (hash: H33xML5R5o+4GB2XWvGYGH7H4gss4OnrQcVOqELCXeI=)
                          3: BsDV5gEChvqJlOEUL1parquidSQ.roa (hash: 66XQpURFVhssGT5jkMQej1bzbdrps7y8gPjFudVSOts=)
                          4: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: zCp3lhAkcUfYoLnDbxrmqfxKt7yqmWqYmFZYsyrLY2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:da:d4:3b:15:0e:34:c6:a9:50:c0:09:f4:60:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
        Validity
            Not Before: May 13 01:00:54 2026 GMT
            Not After : May 14 01:00:54 2026 GMT
        Subject: CN=8f9c1bec94dc02b3b2a8983cb56dcf3083569077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2c:71:f8:10:53:99:19:61:f2:65:9d:5d:b5:
                    58:32:2e:41:b4:52:89:ee:44:71:70:7e:30:f6:66:
                    d0:c3:da:15:8a:a4:60:48:d3:97:23:33:29:19:37:
                    be:0d:e5:3f:2d:73:95:b1:e8:7c:47:6d:7a:27:99:
                    8a:dc:a9:33:c6:28:34:cf:bb:c3:c0:69:41:25:8d:
                    17:f3:8e:8e:2e:42:62:ee:dc:95:3b:77:ae:db:a9:
                    a7:36:39:2a:90:91:d7:1b:4d:df:e5:0c:d1:ee:28:
                    50:e0:a4:26:3e:2e:d5:48:b1:bd:f7:59:68:f6:39:
                    c9:5f:3b:cb:27:79:13:f8:d7:5c:63:52:19:82:34:
                    c1:9c:4f:98:95:ca:0c:80:d6:9d:c5:33:2f:38:24:
                    ae:75:c8:03:fa:a1:36:fc:36:e5:10:e8:f6:5c:11:
                    25:e0:25:7f:de:0e:11:fa:7a:33:c4:5a:2d:8c:96:
                    0b:cb:d1:64:c9:11:6a:43:3d:82:7c:58:cf:8b:10:
                    e7:42:df:7c:f8:ea:a0:9e:3e:9b:4b:34:0d:b5:49:
                    59:05:d0:53:f0:1e:f3:41:80:af:0b:b1:3f:a2:2b:
                    1b:b7:2e:81:7c:23:a3:56:49:aa:75:fa:be:52:17:
                    88:d9:db:9e:62:e9:57:0c:14:e8:6c:58:ba:e4:8c:
                    de:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9C:1B:EC:94:DC:02:B3:B2:A8:98:3C:B5:6D:CF:30:83:56:90:77
            X509v3 Authority Key Identifier:
                keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f1:7d:8d:fc:b1:a1:6f:5f:ba:0d:66:6f:b8:b7:50:e1:e2:9d:
         d7:59:1d:1c:ed:30:0d:b8:ac:f0:21:cd:a2:88:76:4c:49:aa:
         4a:f3:80:d5:47:2b:41:d5:c8:b1:8a:37:49:46:3b:cd:eb:87:
         16:7c:84:cf:5a:29:55:8c:6b:88:c7:2c:e0:43:92:7e:3b:9f:
         98:b8:df:e2:d1:07:ed:95:c3:3d:c0:d7:2c:33:e1:a8:db:04:
         15:04:c0:02:a7:c6:1b:bf:84:bb:de:b9:12:9d:6c:16:38:fa:
         44:50:ea:20:41:02:95:ef:51:77:4a:d4:aa:c8:e4:e0:32:8e:
         df:e6:3a:ff:50:27:92:c4:75:60:3c:45:6a:19:44:f1:a8:18:
         85:17:33:1c:e8:61:08:96:b3:27:0c:ae:2c:db:d6:51:a2:08:
         51:3a:19:96:40:dd:b5:17:c3:e8:aa:08:7a:6c:d8:0a:90:2f:
         56:8d:3e:1c:27:61:c0:81:4f:01:a0:aa:d4:8a:e9:f0:3f:0a:
         2e:f0:00:b3:74:37:bc:f0:df:3e:20:cd:f3:14:47:71:12:d8:
         4d:9e:29:b7:6f:19:79:fc:8c:9a:08:4e:5b:51:f2:b7:c8:c7:
         fe:08:28:d0:4b:46:45:c8:cf:79:37:5c:d0:da:7b:2b:02:de:
         24:31:a8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:49:50 2026 by rpki-client