Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
File:                     jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft (raw, json)
Hash identifier:          zNOXAyzMA/wGfi+2hNJLUF/ONMcQWhFzBDTNopfGXHM=
Subject key identifier:   5A:DD:8E:10:61:89:28:9C:9C:FE:6E:95:70:73:D4:21:6D:83:DA:A4
Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
Certificate issuer:       /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Certificate serial:       019E1EDA69B7108AFE5F2A16187EA73D7A3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
Manifest number:          0D85
Signing time:             Wed 13 May 2026 01:01:30 +0000
Manifest this update:     Wed 13 May 2026 01:01:30 +0000
Manifest next update:     Thu 14 May 2026 01:01:30 +0000
Files and hashes:         1: UCCvpf2A0w3TS01Mgi-mxKvg6Y4.roa (hash: wMobn9EgqRdgXS7vAj6osPvNRe/uCjfH5YvFicmgWAM=)
                          2: jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl (hash: advhslbyUFR4e+0C5MRQGIubGQry9Gst0MR+7DyCFEk=)
                          3: krbPjQ7dV78artLAJHZH9VRMSb4.roa (hash: DfhzBCZr3lEjUY/BpGX15//8G6kbI+qsFYcc/tJsimw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:69:b7:10:8a:fe:5f:2a:16:18:7e:a7:3d:7a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
        Validity
            Not Before: May 13 01:01:30 2026 GMT
            Not After : May 14 01:01:30 2026 GMT
        Subject: CN=5add8e106189289c9cfe6e957073d4216d83daa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:11:cb:1e:0a:21:01:e0:bf:73:b5:b0:76:
                    e9:5c:81:44:ba:32:5d:29:97:f8:47:fe:7e:64:56:
                    46:ab:c4:b8:ae:20:79:19:b3:51:e4:4f:a9:5b:d8:
                    4f:bd:82:59:a9:36:94:f6:96:d9:49:8b:d3:a6:9d:
                    38:b8:cc:15:04:01:69:d3:98:bf:34:43:f1:d9:94:
                    fd:01:9d:33:f6:b2:48:ff:46:3d:6e:70:e1:d8:46:
                    8d:a3:d1:31:b3:3b:60:96:a3:bb:fc:7d:3b:83:5d:
                    bd:82:af:b6:08:33:98:a5:51:d3:b0:05:27:cd:f8:
                    2e:92:8d:bf:bd:f3:3c:48:a0:31:91:9f:04:25:1d:
                    6a:1e:8d:e5:34:96:28:be:ed:0f:12:4b:64:bd:7a:
                    7a:fc:b7:63:d3:96:61:a5:37:1a:0e:04:80:2c:0b:
                    1c:f8:76:27:bb:f5:74:7b:55:c2:c7:40:04:15:6f:
                    2e:3c:47:75:7f:5f:1d:70:c7:89:b7:79:1d:47:5d:
                    e6:2d:94:76:78:02:da:04:0c:97:c9:8b:b3:97:94:
                    a8:ae:01:3f:4a:8e:e5:5f:b5:7f:d3:3e:3a:64:18:
                    2f:89:a4:22:d6:8c:f2:c4:f6:5c:b4:b9:bc:eb:cf:
                    10:5b:90:9d:ea:58:9f:08:a8:6c:e2:f3:8c:69:ca:
                    96:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DD:8E:10:61:89:28:9C:9C:FE:6E:95:70:73:D4:21:6D:83:DA:A4
            X509v3 Authority Key Identifier:
                keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:5e:a4:2b:c6:69:be:2e:d7:90:b3:87:e9:0a:3a:d1:8e:6c:
         47:16:58:9a:94:c3:fe:2f:00:3d:03:f2:9d:95:d8:87:11:fe:
         07:25:b2:85:65:dc:96:fa:08:9c:48:85:fd:7d:86:61:80:67:
         92:f7:7e:f0:40:2a:af:54:e0:dc:c4:41:ab:e0:44:60:7f:01:
         5c:2b:4b:59:88:08:25:a7:b2:c1:da:a6:55:53:38:89:9a:31:
         49:c0:dc:0b:1e:e0:8d:8b:ba:16:ec:2c:c2:e0:95:e5:bc:92:
         13:7a:39:6c:04:8c:95:dd:34:da:22:93:2a:fd:74:ed:a0:1d:
         ba:9a:b7:5f:5c:4c:54:68:56:1a:4f:42:d8:50:7c:24:30:13:
         c4:4b:db:01:90:3d:9a:8d:8e:a6:6e:37:77:dc:7c:89:6f:6c:
         e6:fb:3a:e0:0c:9b:a2:47:ee:98:e5:d8:94:f2:0e:66:7a:f6:
         35:a4:fd:10:0f:89:02:71:30:e9:e5:d2:85:8a:a0:09:20:b9:
         20:24:e9:44:c2:cd:3c:fd:88:68:8d:19:27:aa:aa:46:40:ba:
         a7:04:a3:1f:94:39:07:7f:b5:15:a8:17:0a:2f:7a:eb:10:4a:
         b0:f7:48:3e:89:92:f2:62:a3:47:10:7d:d3:94:1f:cc:40:82:
         50:70:a3:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2mm3EIr+XyoWGH6nPXo7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYThhNGQ0MmEwMTk2ZGY3Y2MwZTE0ZjU5N2NmNTY2MGQ2
M2MwOWYwHhcNMjYwNTEzMDEwMTMwWhcNMjYwNTE0MDEwMTMwWjAzMTEwLwYDVQQD
Eyg1YWRkOGUxMDYxODkyODljOWNmZTZlOTU3MDczZDQyMTZkODNkYWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfERyx4KIQHgv3O1sHbpXIFEujJd
KZf4R/5+ZFZGq8S4riB5GbNR5E+pW9hPvYJZqTaU9pbZSYvTpp04uMwVBAFp05i/
NEPx2ZT9AZ0z9rJI/0Y9bnDh2EaNo9ExsztglqO7/H07g129gq+2CDOYpVHTsAUn
zfguko2/vfM8SKAxkZ8EJR1qHo3lNJYovu0PEktkvXp6/Ldj05ZhpTcaDgSALAsc
+HYnu/V0e1XCx0AEFW8uPEd1f18dcMeJt3kdR13mLZR2eALaBAyXyYuzl5SorgE/
So7lX7V/0z46ZBgviaQi1ozyxPZctLm8688QW5Cd6lifCKhs4vOMacqWSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrdjhBhiSicnP5ulXBz1CFtg9qkMB8GA1UdIwQY
MBaAFIyopNQqAZbffMDhT1l89WYNY8CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaktpazFDb0JsdDk4d09GUFdYejFaZzFqd0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iYjA0ODAtNjZhZC00Mjg4LWI4ZDMt
MTAwNGMxZTUwZGZlLzEvaktpazFDb0JsdDk4d09GUFdYejFaZzFqd0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9iYjA0ODAtNjZhZC00Mjg4LWI4ZDMtMTAwNGMxZTUwZGZl
LzEvaktpazFDb0JsdDk4d09GUFdYejFaZzFqd0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArF6kK8Zp
vi7XkLOH6Qo60Y5sRxZYmpTD/i8APQPynZXYhxH+ByWyhWXclvoInEiF/X2GYYBn
kvd+8EAqr1Tg3MRBq+BEYH8BXCtLWYgIJaeywdqmVVM4iZoxScDcCx7gjYu6Fuws
wuCV5bySE3o5bASMld002iKTKv107aAdupq3X1xMVGhWGk9C2FB8JDATxEvbAZA9
mo2Opm43d9x8iW9s5vs64AybokfumOXYlPIOZnr2NaT9EA+JAnEw6eXShYqgCSC5
ICTpRMLNPP2IaI0ZJ6qqRkC6pwSjH5Q5B3+1FagXCi966xBKsPdIPomS8mKjRxB9
05QfzECCUHCjag==
-----END CERTIFICATE-----
Generated at Wed May 13 07:55:15 2026 by rpki-client