Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
File:                     jswinlaZEFgoVkt4UJ87cvMJCiE.mft (raw, json)
Hash identifier:          +isegKs5Tvxk9D2l2dx+Vm1SSXai5P0WOj6l2UsJQP4=
Subject key identifier:   C4:3F:11:AF:61:BF:2B:37:63:B8:3E:99:E3:C0:5B:E1:2B:1B:3D:03
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Certificate issuer:       /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial:       019E20234ED6917FF38CD28D373EDE142691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
Manifest number:          190F
Signing time:             Wed 13 May 2026 07:00:45 +0000
Manifest this update:     Wed 13 May 2026 07:00:45 +0000
Manifest next update:     Thu 14 May 2026 07:00:45 +0000
Files and hashes:         1: 12Bkajqn8hY_Tq-T8WCRlP0nznI.roa (hash: jWtonX7g3GC6/5xeR6p1a9rNHCNPlB4P0Uas2A2bjUs=)
                          2: 2HtmQ8xlAJvm0moSCesBLrlqcg0.roa (hash: KEh1A4R7uR3CothDrO5KpNTer5MO9ATqtUH8iwiVnsE=)
                          3: AO6sWsJNSjTXMKcNRY6EDXZ3xME.roa (hash: EfPwurI2AoPqZUYbh42RmCLOoiMjh57uB5KvuqjCpDI=)
                          4: AkkpcfvYgRN9-dBm_sDrZIzwpQg.roa (hash: tVvTVlzi68bWXLrCBZVOAwWEBV5LPqcuZ68tBSNWDQE=)
                          5: jswinlaZEFgoVkt4UJ87cvMJCiE.crl (hash: nqpgAJe0pqaowpFcoC3cSq/xkGkAkW2/MEnGb8snWMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:4e:d6:91:7f:f3:8c:d2:8d:37:3e:de:14:26:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
        Validity
            Not Before: May 13 07:00:45 2026 GMT
            Not After : May 14 07:00:45 2026 GMT
        Subject: CN=c43f11af61bf2b3763b83e99e3c05be12b1b3d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c0:aa:c0:69:1f:9e:7c:9e:1e:7d:ee:7b:e9:
                    b0:84:2a:35:23:af:23:50:62:e1:77:b2:df:dd:1f:
                    ef:fc:af:b3:06:6c:b1:a9:18:c4:de:55:04:f5:f9:
                    6a:67:11:c6:c7:33:e5:2f:f9:36:3e:c3:e6:7c:46:
                    c5:a3:6d:f0:78:45:13:e1:a2:66:2a:a9:90:a6:c3:
                    54:dd:92:c7:0a:49:af:41:93:6b:2d:da:4d:7d:ef:
                    3f:35:f3:2b:c0:17:cb:1c:d0:1a:8a:76:8c:09:6e:
                    99:f7:8f:a4:71:3c:56:1a:76:57:51:5a:f1:e3:f6:
                    cb:d9:3d:ae:76:0a:b0:c5:5c:78:b7:de:27:93:5f:
                    8b:32:3d:44:0d:70:6d:c0:d1:ad:f1:80:bc:41:c3:
                    69:a2:94:9d:00:fe:0f:6d:f5:11:47:a2:42:c8:fc:
                    e7:b1:12:5d:2c:b9:4b:9b:f6:a3:a3:fa:3f:78:76:
                    a0:08:cc:d6:46:65:02:f7:a9:6d:59:5f:1f:0b:52:
                    76:47:3d:66:18:7f:16:77:5d:3c:63:92:6e:01:e7:
                    8b:40:c9:12:77:4a:ef:e9:01:a2:38:90:8d:5b:3e:
                    9e:17:3f:a9:39:a2:1f:1c:5f:b2:4c:96:d3:3c:ed:
                    c0:64:22:a8:f0:74:a5:13:39:4a:53:ad:7c:09:d9:
                    45:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3F:11:AF:61:BF:2B:37:63:B8:3E:99:E3:C0:5B:E1:2B:1B:3D:03
            X509v3 Authority Key Identifier:
                keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4e:5e:85:3e:ef:71:21:b3:3a:14:04:c4:35:91:d5:55:a5:
         77:73:44:a4:10:2e:65:46:fa:8f:18:7e:60:45:38:01:5d:46:
         24:9a:bc:0d:d6:77:7f:54:ce:ab:0f:67:6b:a8:3d:a8:47:69:
         d7:01:d8:b4:84:02:ff:9e:2f:b7:d4:a9:33:55:8b:15:b7:4a:
         6b:15:ed:57:a7:04:d4:47:ca:11:09:f0:da:3a:86:86:4f:9d:
         26:04:4a:73:d1:4d:a8:0b:10:45:ac:a2:94:1b:ee:21:ce:16:
         30:44:7b:ac:d3:0b:c9:fc:b2:c2:3b:a1:64:37:db:4f:e3:43:
         19:26:f3:3d:56:72:7f:32:46:e0:ce:cb:97:8e:64:73:c2:0b:
         7d:ee:97:69:ea:24:5d:c5:35:99:02:e0:ea:81:bb:a3:43:d2:
         21:6b:5c:be:9c:f6:ae:f0:c3:27:9b:60:9e:8e:1a:b8:43:94:
         25:21:b0:32:3b:aa:5d:8c:6a:a4:b6:7b:94:5c:9c:1c:0e:cb:
         89:6a:a0:a9:b1:1a:ad:e1:30:e6:fe:5c:9e:cf:ad:e5:83:f4:
         2a:38:ef:9e:69:e3:86:41:e6:27:37:61:f8:41:a3:1d:8f:c3:
         ad:4b:f6:5f:26:27:c8:9a:d1:3a:1d:54:8a:9c:89:bf:03:ed:
         29:36:45:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI07WkX/zjNKNNz7eFCaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlY2MyMjllNTY5OTEwNTgyODU2NGI3ODUwOWYzYjcyZjMw
OTBhMjEwHhcNMjYwNTEzMDcwMDQ1WhcNMjYwNTE0MDcwMDQ1WjAzMTEwLwYDVQQD
EyhjNDNmMTFhZjYxYmYyYjM3NjNiODNlOTllM2MwNWJlMTJiMWIzZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sCqwGkfnnyeHn3ue+mwhCo1I68j
UGLhd7Lf3R/v/K+zBmyxqRjE3lUE9flqZxHGxzPlL/k2PsPmfEbFo23weEUT4aJm
KqmQpsNU3ZLHCkmvQZNrLdpNfe8/NfMrwBfLHNAainaMCW6Z94+kcTxWGnZXUVrx
4/bL2T2udgqwxVx4t94nk1+LMj1EDXBtwNGt8YC8QcNpopSdAP4PbfURR6JCyPzn
sRJdLLlLm/ajo/o/eHagCMzWRmUC96ltWV8fC1J2Rz1mGH8Wd108Y5JuAeeLQMkS
d0rv6QGiOJCNWz6eFz+pOaIfHF+yTJbTPO3AZCKo8HSlEzlKU618CdlFjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQ/Ea9hvys3Y7g+mePAW+ErGz0DMB8GA1UdIwQY
MBaAFI7MIp5WmRBYKFZLeFCfO3LzCQohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMDYwYmQtZmViMi00OTg2LWI5ZTMt
M2M5ZWJjNDU2NjIzLzEvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zMDYwYmQtZmViMi00OTg2LWI5ZTMtM2M5ZWJjNDU2NjIz
LzEvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARk5ehT7v
cSGzOhQExDWR1VWld3NEpBAuZUb6jxh+YEU4AV1GJJq8DdZ3f1TOqw9na6g9qEdp
1wHYtIQC/54vt9SpM1WLFbdKaxXtV6cE1EfKEQnw2jqGhk+dJgRKc9FNqAsQRayi
lBvuIc4WMER7rNMLyfyywjuhZDfbT+NDGSbzPVZyfzJG4M7Ll45kc8ILfe6Xaeok
XcU1mQLg6oG7o0PSIWtcvpz2rvDDJ5tgno4auEOUJSGwMjuqXYxqpLZ7lFycHA7L
iWqgqbEareEw5v5cns+t5YP0KjjvnmnjhkHmJzdh+EGjHY/DrUv2XyYnyJrROh1U
ipyJvwPtKTZFgw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:33:01 2026 by rpki-client