Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
File:                     jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft (raw, json)
Hash identifier:          05Q2f5eaU1etkn6hj7jRWyKtzxQfPIipCQlCJ9neGRU=
Subject key identifier:   53:39:7E:53:BF:A6:2B:C4:6F:18:42:6D:60:D0:58:B0:B3:64:F3:85
Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
Certificate issuer:       /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Certificate serial:       019E205AD8418E7226CB96ADFD3265DEB069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
Manifest number:          074A
Signing time:             Wed 13 May 2026 08:01:24 +0000
Manifest this update:     Wed 13 May 2026 08:01:24 +0000
Manifest next update:     Thu 14 May 2026 08:01:24 +0000
Files and hashes:         1: JwAMG7H5zqvWutaY0tL6qWOVQ84.roa (hash: WHBkccdZypDjFyRaZ97jWOQpOH4yG3/HgeMqK5knvm8=)
                          2: jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl (hash: 0fPgLtHefRc3HHK8htiSjM8cP8EhOf6mptMuFfzFZqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:d8:41:8e:72:26:cb:96:ad:fd:32:65:de:b0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
        Validity
            Not Before: May 13 08:01:24 2026 GMT
            Not After : May 14 08:01:24 2026 GMT
        Subject: CN=53397e53bfa62bc46f18426d60d058b0b364f385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:86:42:e1:18:3e:e9:12:e1:7f:2c:14:ef:
                    4a:8d:9f:93:67:9f:3b:eb:15:35:5e:3e:76:8d:c4:
                    a3:ce:8f:3a:fa:54:11:14:cc:70:25:79:fc:6a:72:
                    75:8f:16:31:d5:87:3d:e7:37:a1:3f:f5:30:98:8e:
                    02:56:40:4a:a0:e9:f7:ac:82:9a:4d:00:14:a4:f6:
                    0c:ee:b4:12:ac:dd:b1:89:8e:62:35:02:ec:19:6e:
                    d3:64:35:39:4f:37:31:4e:c2:ce:70:53:6b:bd:8e:
                    67:73:fe:e0:9a:1a:cb:09:6d:11:5f:14:e1:be:c0:
                    40:28:72:a4:a6:78:12:44:b4:10:47:c4:bd:62:ed:
                    eb:86:8f:26:7c:1f:87:aa:c8:b7:32:10:fa:2a:df:
                    f3:24:14:dd:0d:5a:db:52:9a:80:9a:a8:01:54:de:
                    6e:6c:01:6b:01:93:5e:13:d3:66:eb:9c:a5:f0:4a:
                    8a:3c:b1:2e:28:a5:d2:86:4b:90:68:7f:2d:6f:db:
                    78:90:26:f2:23:d3:79:ad:f3:b5:68:58:ee:57:0e:
                    e5:60:6a:60:20:62:32:ab:38:01:11:12:b3:8b:8d:
                    77:67:f4:ee:30:a5:37:bc:60:d5:4c:37:a9:2b:1f:
                    c2:12:a4:6d:d5:c4:87:d1:94:a9:0a:93:00:2b:5a:
                    1e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:39:7E:53:BF:A6:2B:C4:6F:18:42:6D:60:D0:58:B0:B3:64:F3:85
            X509v3 Authority Key Identifier:
                keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0b:9c:63:eb:2a:96:84:4b:35:e5:f4:ac:6c:c9:50:47:ec:
         77:cc:c7:90:e2:f5:2f:c1:a2:ae:8a:c5:48:7d:93:ea:30:a9:
         82:f7:7c:c1:cd:e4:d3:88:3e:e2:8d:ed:f5:33:2f:78:29:6c:
         b2:e9:d0:45:71:b8:4e:ab:41:8e:d0:36:35:2b:62:f9:bc:f9:
         2e:01:80:4f:65:4b:c2:18:82:cf:ab:f0:ec:b9:9e:47:1d:16:
         69:ba:b9:23:0b:08:1a:42:71:0e:5b:f0:87:8f:09:e7:df:17:
         11:d7:47:63:46:94:73:96:72:a7:c6:ca:6b:68:44:60:07:1f:
         d4:03:d0:65:a9:0b:ea:5c:10:39:17:d6:d6:1d:41:40:3f:86:
         c6:3f:42:7b:14:39:4f:7c:ad:40:29:36:11:f0:f6:2f:85:03:
         a0:36:73:df:ee:24:d4:6c:1f:68:5e:34:78:4e:7c:14:ad:84:
         7a:3d:00:76:61:34:c1:7e:b0:de:2b:7e:38:f5:f6:a0:d5:c6:
         5f:85:d0:4e:67:5c:e8:30:78:a2:58:9b:75:96:41:e9:36:a8:
         37:de:9a:8a:91:13:59:34:36:10:c7:a9:c1:07:88:83:69:b9:
         c8:6a:7b:b3:a6:80:1b:75:df:23:b1:5f:a1:67:8d:bd:e5:16:
         47:c5:59:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWthBjnImy5at/TJl3rBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjE1ZTUxYmY2MWFhNzRiZjM5NzI1NTE5OTc1OWNmZWM3
Y2M5YmIwHhcNMjYwNTEzMDgwMTI0WhcNMjYwNTE0MDgwMTI0WjAzMTEwLwYDVQQD
Eyg1MzM5N2U1M2JmYTYyYmM0NmYxODQyNmQ2MGQwNThiMGIzNjRmMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndmGQuEYPukS4X8sFO9KjZ+TZ587
6xU1Xj52jcSjzo86+lQRFMxwJXn8anJ1jxYx1Yc95zehP/UwmI4CVkBKoOn3rIKa
TQAUpPYM7rQSrN2xiY5iNQLsGW7TZDU5TzcxTsLOcFNrvY5nc/7gmhrLCW0RXxTh
vsBAKHKkpngSRLQQR8S9Yu3rho8mfB+Hqsi3MhD6Kt/zJBTdDVrbUpqAmqgBVN5u
bAFrAZNeE9Nm65yl8EqKPLEuKKXShkuQaH8tb9t4kCbyI9N5rfO1aFjuVw7lYGpg
IGIyqzgBERKzi413Z/TuMKU3vGDVTDepKx/CEqRt1cSH0ZSpCpMAK1oeEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM5flO/pivEbxhCbWDQWLCzZPOFMB8GA1UdIwQY
MBaAFI5hXlG/Yap0vzlyVRmXWc/sfMm7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85OWU4YzEtODY5MS00MWQ1LTlhN2Yt
NTQzNWY0MzQ1MTIyLzEvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85OWU4YzEtODY5MS00MWQ1LTlhN2YtNTQzNWY0MzQ1MTIy
LzEvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQucY+sq
loRLNeX0rGzJUEfsd8zHkOL1L8GirorFSH2T6jCpgvd8wc3k04g+4o3t9TMveCls
sunQRXG4TqtBjtA2NSti+bz5LgGAT2VLwhiCz6vw7LmeRx0Wabq5IwsIGkJxDlvw
h48J598XEddHY0aUc5Zyp8bKa2hEYAcf1APQZakL6lwQORfW1h1BQD+Gxj9CexQ5
T3ytQCk2EfD2L4UDoDZz3+4k1GwfaF40eE58FK2Eej0AdmE0wX6w3it+OPX2oNXG
X4XQTmdc6DB4olibdZZB6TaoN96aipETWTQ2EMepwQeIg2m5yGp7s6aAG3XfI7Ff
oWeNveUWR8VZwg==
-----END CERTIFICATE-----
Generated at Wed May 13 16:13:01 2026 by rpki-client