Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
File:                     jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json)
Hash identifier:          EOAmPjTjT1mjFLXdv6ItZXZvbmGBfoXn2HBPE7tDrcw=
Subject key identifier:   28:4D:FA:8D:4C:A2:2A:A2:CB:C5:E5:B6:07:EE:0F:D5:E0:F2:13:81
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Certificate issuer:       /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial:       019E1DFE0B2FEB3C3C727573E4385578A282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
Manifest number:          1508
Signing time:             Tue 12 May 2026 21:00:48 +0000
Manifest this update:     Tue 12 May 2026 21:00:48 +0000
Manifest next update:     Wed 13 May 2026 21:00:48 +0000
Files and hashes:         1: DDNpOrAqAOY0hs2uDPL3iCWLdnM.roa (hash: 8faJdkXXJZqTecw2oUQhwrCEcBbQjYDmWPFG/2WQ35U=)
                          2: YTLyjD8Zm08JN9ilWwpHNjSNOgM.roa (hash: ctWafbXvuy+Ew0x5ejjfVIYon0eWDnM21tPyQNTYZdQ=)
                          3: jhwcBBc8oOvXs_IDaLwdciLIw5g.roa (hash: 2wOw67KJ6XBImFQRXWSqni2LckUYvmgNYdwa7nlm6bU=)
                          4: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: dkHnPFe82l9iAcIaIJgtUyUjJE2HdjQ8VVzAa1XwHIA=)
                          5: oVTQSnnZbgxF4uVxhrTKvTjBHlc.roa (hash: EHUZVTErWURFxtqmqMqxx38zSEmivlq5W8eBCUAE6Hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:0b:2f:eb:3c:3c:72:75:73:e4:38:55:78:a2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
        Validity
            Not Before: May 12 21:00:48 2026 GMT
            Not After : May 13 21:00:48 2026 GMT
        Subject: CN=284dfa8d4ca22aa2cbc5e5b607ee0fd5e0f21381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:c1:a0:e2:34:03:93:f9:d7:93:cd:f1:e1:
                    26:22:26:0a:0e:e4:bb:43:dd:66:03:02:cd:76:97:
                    a0:10:e2:1d:f2:e5:ea:94:70:6e:b5:7d:8f:90:e4:
                    22:1e:5c:ea:e0:e1:d0:88:d6:c1:2f:91:08:0b:1d:
                    25:7e:d2:fd:59:8d:1e:9f:52:95:88:11:bf:c9:bf:
                    20:e5:5b:66:f7:8e:d4:2c:b9:5f:fc:b9:53:ae:2e:
                    27:30:bc:78:cd:32:4c:4c:62:3f:18:20:5c:06:82:
                    8b:f1:9b:d2:c0:5a:32:c5:1d:12:3e:8b:79:08:28:
                    93:96:93:c9:b1:ed:e7:7a:b0:5c:8d:dd:fa:27:6f:
                    1f:18:38:e0:9d:bd:da:f6:2b:42:08:94:58:58:dd:
                    4c:50:4d:d4:9a:29:ae:71:9e:40:92:87:29:a6:ad:
                    2f:6a:13:5a:b6:44:92:90:cf:4c:ad:fa:70:fb:60:
                    c2:3b:de:c0:a7:3c:f4:69:70:97:6f:30:f5:61:ea:
                    40:e2:37:6c:bf:b6:d1:6e:e3:b1:98:b9:12:2c:e7:
                    3b:d7:59:2f:aa:d0:c2:41:e0:4b:2e:fc:59:4a:f3:
                    3d:1d:53:e3:cf:e6:50:b4:a9:4d:a1:49:e5:ba:1d:
                    1b:5c:ca:f4:88:41:9a:88:16:cf:7f:b1:e9:d7:24:
                    4c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4D:FA:8D:4C:A2:2A:A2:CB:C5:E5:B6:07:EE:0F:D5:E0:F2:13:81
            X509v3 Authority Key Identifier:
                keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:dc:fd:15:1d:41:6c:59:62:28:b8:4f:2f:04:58:ee:3e:04:
         db:20:8b:47:32:16:78:46:61:e6:f5:a9:8e:2b:df:0e:48:e3:
         31:54:6e:18:b5:f2:1f:ec:94:a3:fd:41:cd:ca:4d:6f:63:93:
         d6:c6:9a:55:2b:4d:52:44:42:00:0c:8f:4f:74:81:24:ba:d7:
         19:19:49:b2:9d:75:37:4e:b1:15:88:fd:2c:ad:b9:a3:e2:ea:
         62:c3:e7:05:9c:d7:57:37:b1:f8:2f:fc:87:93:c0:c6:1b:6b:
         38:ee:33:cd:d1:1f:92:85:dc:c9:40:5b:4f:c5:79:42:71:7c:
         38:3a:4e:e2:c0:ef:1e:5a:be:8a:b2:4b:5a:4c:7d:20:62:5f:
         bb:fb:e9:67:69:20:09:00:de:75:4d:87:15:cb:b5:cf:9c:63:
         f1:77:10:bf:15:e5:b3:4a:ec:11:59:5d:b7:a2:02:80:f6:72:
         30:13:9d:7e:fe:c8:e8:1f:f5:86:74:36:05:4f:b3:c4:79:7e:
         0e:75:4b:c4:5d:e8:03:1a:d0:b1:9f:b2:ef:51:4f:51:9d:f7:
         4f:84:0a:7d:a6:05:bd:15:9b:e8:29:26:6d:87:a0:42:f5:f9:
         3b:04:6a:8d:1a:36:f6:74:db:f1:94:d1:1e:7f:b3:72:f3:14:
         a7:92:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:31:04 2026 by rpki-client