Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
File:                     jNgCUSzLdFsqG48xVxTr45OVQD4.mft (raw, json)
Hash identifier:          jV3ucXTJEZwSZh0I312kAK4eAGRVGQvSUgtQZk/O0yY=
Subject key identifier:   F4:A4:EA:06:9A:C8:63:C4:1E:88:37:AC:25:ED:67:84:94:8A:0A:BC
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Certificate issuer:       /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial:       019E1D904727CFEE2023279FF3A0B077A490
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
Manifest number:          7E
Signing time:             Tue 12 May 2026 19:00:55 +0000
Manifest this update:     Tue 12 May 2026 19:00:55 +0000
Manifest next update:     Wed 13 May 2026 19:00:55 +0000
Files and hashes:         1: 4inhnc0WsBAw97-SeDoXHxYvgdc.roa (hash: /iM51VLg7HJ8ztk87Lm4bDvMywJ+LPB7Mld35hoQjWE=)
                          2: RJ_8MLiQcEMQljmCDmVnOOnfQyY.roa (hash: qITG72dsAnXhR2+Wt6OI6k5v+TEp09wmHQrA/LqWJPc=)
                          3: Z5PF9klylgspdllB9sJrDtynvwU.roa (hash: qTqz8G8jL0tEsCWYC2s7WecelJJAJA5ykXR74GyOU4Q=)
                          4: ZZ4HmXsncRW4Duwlwd9BhGfdvNU.roa (hash: AltMyFS1s/HAyVQ82EJUVtjUQ8FL/MMkrFmI+rDpQvg=)
                          5: hp01qqaG6ojwTceGwUYjwpMc_FA.roa (hash: +EoDWRDS7zIW8lYYUpVakjrqTS94dDcew7HVE2+smMs=)
                          6: jNgCUSzLdFsqG48xVxTr45OVQD4.crl (hash: k1LmXxubm4AALzkJxvW575fWVfamYVttjLQfkAi0jJo=)
                          7: qbinC6Bue2GJIuNLnptWJaA-Dds.roa (hash: 6HXvSYL8Dx9Ja4sY1cHp96tpfM1YjHJq65VRixXzZSc=)
                          8: yTtSJ-72gvZbFezzjuP8atI2Y74.roa (hash: wldJRvptVpmVW5JI0I+zGNq+GzlHt2h7rIbCYaZ8Fsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:47:27:cf:ee:20:23:27:9f:f3:a0:b0:77:a4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
        Validity
            Not Before: May 12 19:00:55 2026 GMT
            Not After : May 13 19:00:55 2026 GMT
        Subject: CN=f4a4ea069ac863c41e8837ac25ed6784948a0abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:96:bf:0c:4f:59:24:fe:71:15:c4:4e:d9:3e:
                    75:63:52:26:69:bb:3c:6a:3a:3a:28:59:3f:4f:b4:
                    50:44:a9:7b:33:d2:2a:da:dd:d3:da:d0:9f:88:a4:
                    cc:ef:c8:4e:f8:77:83:97:4e:03:0e:19:1a:e7:13:
                    ea:7a:d4:29:35:04:50:b9:ee:f1:ac:9e:4c:f6:58:
                    78:ed:a9:00:34:98:14:fd:07:38:67:65:b3:b2:a8:
                    23:16:7b:b5:0c:50:a8:66:e4:d8:0a:e2:2c:7f:9d:
                    27:5d:9f:00:1f:e6:1a:04:df:e3:20:63:0e:63:3e:
                    06:96:d1:ac:ff:bb:52:8c:6f:03:8b:d0:7d:ec:06:
                    13:ff:35:b4:77:37:ed:6c:e2:16:69:83:4c:e5:6a:
                    24:61:2d:d4:5c:a1:e6:ee:e4:f2:91:df:f9:2c:b5:
                    f5:c5:06:4d:ad:ab:01:fb:5a:55:a7:ad:5b:2d:8e:
                    1c:12:8e:3f:9b:fe:83:ff:98:d4:50:f0:b7:5d:b6:
                    b3:e7:5b:bc:26:78:11:e3:35:e4:cc:4b:40:9e:27:
                    81:9d:06:9f:2d:06:1e:01:77:58:56:aa:a8:e0:2d:
                    1e:bc:53:87:33:f4:c1:a6:d1:50:06:63:47:6e:eb:
                    fc:8e:81:40:60:c1:bc:df:93:91:bd:38:3a:be:12:
                    0d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A4:EA:06:9A:C8:63:C4:1E:88:37:AC:25:ED:67:84:94:8A:0A:BC
            X509v3 Authority Key Identifier:
                keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:30:98:0c:06:92:68:0d:ca:e4:a1:1d:e6:25:f5:af:d8:ae:
         d5:d7:65:72:fd:35:18:a5:f0:e9:a2:44:d4:13:91:e2:09:6a:
         93:ac:c1:97:f2:e0:62:6b:3b:6b:24:fb:2d:8e:4a:30:ed:71:
         36:28:52:fb:c6:8a:5d:33:0c:3f:4b:16:49:b7:cb:bd:3a:e8:
         93:d3:ec:d4:69:05:6e:3c:09:c9:3f:c5:63:f5:25:99:3e:01:
         89:b4:6b:d1:5a:0a:01:c4:0e:5b:7c:61:60:e8:89:53:dd:6e:
         d3:7c:45:1b:f6:f9:35:c5:fc:f3:a4:4c:f6:34:f0:de:5b:82:
         4b:25:72:e5:35:0a:93:e2:85:0a:18:26:6b:b7:ad:98:e6:7c:
         d7:57:a7:37:54:bd:d1:4e:eb:93:06:13:03:bb:e4:12:90:67:
         3f:ab:a1:03:4d:7d:de:4d:0e:dd:8d:a6:a6:4d:86:bf:6a:4f:
         1d:1e:6f:98:65:40:2f:80:3c:4a:d3:c8:dd:4c:ab:24:b5:ba:
         dd:d2:8d:69:99:95:a0:5e:73:02:2b:39:ea:f5:5f:a9:f0:8d:
         69:b6:ef:e5:df:c8:45:de:e7:e8:6a:32:6d:9f:33:6a:66:7d:
         c0:15:e0:2a:b0:8c:d2:82:3b:ce:be:f1:bb:4f:0b:d0:6f:ba:
         e7:e4:59:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkEcnz+4gIyef86Cwd6SQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDgwMjUxMmNjYjc0NWIyYTFiOGYzMTU3MTRlYmUzOTM5
NTQwM2UwHhcNMjYwNTEyMTkwMDU1WhcNMjYwNTEzMTkwMDU1WjAzMTEwLwYDVQQD
EyhmNGE0ZWEwNjlhYzg2M2M0MWU4ODM3YWMyNWVkNjc4NDk0OGEwYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopa/DE9ZJP5xFcRO2T51Y1Imabs8
ajo6KFk/T7RQRKl7M9Iq2t3T2tCfiKTM78hO+HeDl04DDhka5xPqetQpNQRQue7x
rJ5M9lh47akANJgU/Qc4Z2WzsqgjFnu1DFCoZuTYCuIsf50nXZ8AH+YaBN/jIGMO
Yz4GltGs/7tSjG8Di9B97AYT/zW0dzftbOIWaYNM5WokYS3UXKHm7uTykd/5LLX1
xQZNrasB+1pVp61bLY4cEo4/m/6D/5jUUPC3Xbaz51u8JngR4zXkzEtAnieBnQaf
LQYeAXdYVqqo4C0evFOHM/TBptFQBmNHbuv8joFAYMG835ORvTg6vhIN4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSk6gaayGPEHog3rCXtZ4SUigq8MB8GA1UdIwQY
MBaAFIzYAlEsy3RbKhuPMVcU6+OTlUA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmIt
MzhlMDY4NTM2ZTZiLzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmItMzhlMDY4NTM2ZTZi
LzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATCYDAaS
aA3K5KEd5iX1r9iu1ddlcv01GKXw6aJE1BOR4glqk6zBl/LgYms7ayT7LY5KMO1x
NihS+8aKXTMMP0sWSbfLvTrok9Ps1GkFbjwJyT/FY/UlmT4BibRr0VoKAcQOW3xh
YOiJU91u03xFG/b5NcX886RM9jTw3luCSyVy5TUKk+KFChgma7etmOZ811enN1S9
0U7rkwYTA7vkEpBnP6uhA0193k0O3Y2mpk2Gv2pPHR5vmGVAL4A8StPI3UyrJLW6
3dKNaZmVoF5zAis56vVfqfCNabbv5d/IRd7n6GoybZ8zamZ9wBXgKrCM0oI7zr7x
u08L0G+65+RZfw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:53:18 2026 by rpki-client