Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
File:                     yjuG5lRw-ZTfptb-6OJk22LiSvk.mft (raw, json)
Hash identifier:          B/7iXRtHeHvaPaojT90S7m3guQO3LqUbF07zWsk4N9M=
Subject key identifier:   59:09:82:5D:8A:9D:7B:7E:9E:A6:84:1F:18:2F:C4:C2:41:CE:4C:65
Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Certificate issuer:       /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Certificate serial:       019E1EDA1ABE21031C5E15041648E8635506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
Manifest number:          190F
Signing time:             Wed 13 May 2026 01:01:10 +0000
Manifest this update:     Wed 13 May 2026 01:01:10 +0000
Manifest next update:     Thu 14 May 2026 01:01:10 +0000
Files and hashes:         1: 3Ogv-65T1Kg_Y0PwX3iWSALH4hk.roa (hash: Zkr3qlEk5NZQXDe7nwoX/wyvk4zh4il5FQTwuh5WfIw=)
                          2: cpTfXtYH4v1rSjqKtu9ZqpUx3xM.roa (hash: ovwDXS3yKtACozUh0/9y9dib/PgNmZTku682Xe84kxM=)
                          3: yCVmIRzNa3tIF_MU4qrOr7DResw.roa (hash: obCtvPuMFr0+7aVoRxpK/YudJ9U9WEay72ENhR3GLLg=)
                          4: yjuG5lRw-ZTfptb-6OJk22LiSvk.crl (hash: 5RGnd88gzv9lhBE5ropcrbTbMPWd+jNVi6+VgQ7fL1w=)
                          5: yzMl80kUPFPXCVyuhTRWq2l6-PU.roa (hash: 10HhilhYAwZngg7Yfm2XzCkVn++CZDGvggSHZV4Fd0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:1a:be:21:03:1c:5e:15:04:16:48:e8:63:55:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
        Validity
            Not Before: May 13 01:01:10 2026 GMT
            Not After : May 14 01:01:10 2026 GMT
        Subject: CN=5909825d8a9d7b7e9ea6841f182fc4c241ce4c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e4:88:28:42:c8:14:90:ac:67:00:18:ff:2a:
                    6d:26:a7:36:cd:bd:b8:67:7a:fc:0c:0d:a1:db:c2:
                    b6:46:a4:ba:d4:10:f2:4b:9d:bf:3e:44:84:ff:6b:
                    34:93:23:0a:d1:97:63:e2:d7:09:66:eb:64:14:9a:
                    f2:fd:d2:61:d0:82:16:5c:52:9a:96:12:25:ed:83:
                    69:ce:36:de:c0:e9:1d:b9:b1:6b:c2:d5:f7:b6:ea:
                    86:cf:59:74:5e:94:6b:23:72:61:03:ae:ce:4a:00:
                    30:0c:af:cf:3f:b0:5c:d3:5e:8f:95:1f:fd:9e:27:
                    be:38:79:0f:30:60:65:94:5c:45:25:89:15:c8:29:
                    ca:d9:8a:a4:48:08:c5:b6:c0:cf:2e:c1:90:4d:42:
                    f2:ef:0a:e9:7a:3b:11:c8:30:00:fa:a7:8e:9d:b1:
                    78:e0:5b:5c:6f:19:a2:e3:23:86:43:da:d4:ea:e5:
                    58:81:21:fc:7a:02:ab:1a:b6:44:c2:db:ab:3f:13:
                    24:c6:4f:ac:87:1d:aa:d8:e4:38:d0:2c:5f:0b:19:
                    be:73:66:49:83:bc:77:8f:80:1f:fe:11:97:93:3d:
                    ce:53:63:39:65:f8:d2:01:43:7f:49:2b:1b:79:1b:
                    5b:0c:d5:7d:d5:e2:3e:bc:a4:ac:67:42:4d:5a:2c:
                    7e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:09:82:5D:8A:9D:7B:7E:9E:A6:84:1F:18:2F:C4:C2:41:CE:4C:65
            X509v3 Authority Key Identifier:
                keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:82:06:5a:0a:be:e0:2e:01:17:4d:51:ee:67:f7:11:0b:e2:
         3c:ec:6f:86:be:30:86:7b:a7:0f:0a:f0:ca:89:aa:b4:78:6c:
         e9:d5:9a:9f:5e:a9:78:a7:7a:b1:61:c9:58:a2:2f:75:92:55:
         37:e3:a6:d0:89:df:7d:5e:15:57:67:d1:14:7d:42:17:a5:95:
         a0:d9:e0:c0:c5:a6:aa:91:91:63:fc:37:52:3b:ca:58:61:ea:
         c1:2b:04:df:28:be:58:c0:45:f3:bb:83:1d:fd:1e:77:53:15:
         58:ae:bd:20:b6:6a:2c:4d:04:88:11:19:43:1c:4c:3a:c8:74:
         74:69:4a:ab:b9:69:4e:90:1c:e0:86:f0:b4:7d:c8:79:ea:d2:
         7d:98:b3:60:5a:1b:1e:4c:f1:38:a9:2d:20:b3:52:16:ce:09:
         4c:44:0c:fb:08:b3:38:1c:b6:b3:e0:5e:1a:5a:17:27:8c:df:
         7c:ef:36:c3:00:a7:0a:bc:21:78:23:3c:e5:7d:1b:e1:16:dd:
         13:98:f1:b4:fb:5d:2f:ae:5a:88:a5:72:e0:6a:e7:be:02:cf:
         da:81:e0:7a:ab:9c:e3:91:39:1e:41:cf:22:43:8c:a1:30:18:
         6d:b7:06:bd:90:8d:28:73:a3:69:b9:ed:68:ff:b2:e9:ef:1f:
         95:fc:58:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:58:52 2026 by rpki-client