Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File:                     jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier:          IZMW46d8VN4UU2uyI84EAqW+6mBnPdxiZiFz5UTpyYw=
Subject key identifier:   F1:94:9F:10:DD:CC:77:BC:EC:CD:7A:A9:0C:33:CB:D0:11:6E:87:67
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer:       /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial:       019E1F7F7FC3E90C0E7EE24497DEC065DB96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number:          117B
Signing time:             Wed 13 May 2026 04:01:49 +0000
Manifest this update:     Wed 13 May 2026 04:01:49 +0000
Manifest next update:     Thu 14 May 2026 04:01:49 +0000
Files and hashes:         1: hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa (hash: SieYkKpzIy6oq5VVbN7rTFUvyMh99g+Bi6wzQEIEdkQ=)
                          2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: 535Chq6Wu4DJF9C0cUdwsXQsT1i0mfi/eDS9DFxrG6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:7f:c3:e9:0c:0e:7e:e2:44:97:de:c0:65:db:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
        Validity
            Not Before: May 13 04:01:49 2026 GMT
            Not After : May 14 04:01:49 2026 GMT
        Subject: CN=f1949f10ddcc77bceccd7aa90c33cbd0116e8767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:0b:32:91:ae:16:51:70:fe:ec:f1:82:c5:
                    fc:06:b2:85:d4:de:89:57:eb:6c:2a:46:2d:d1:0b:
                    a3:68:38:dc:d9:20:1d:b1:65:61:e4:4f:28:fb:47:
                    3d:89:ff:8f:a4:cb:fc:2e:59:95:67:3c:38:fc:86:
                    70:08:99:6f:6d:e2:96:5d:36:e8:5d:a6:f4:36:17:
                    99:dd:56:9e:3f:df:b8:4c:5d:0e:d8:97:7b:31:0b:
                    fb:93:96:ba:9b:e2:6d:40:12:b0:03:74:1c:2c:5e:
                    7a:7b:25:46:d0:fc:1f:e0:27:6d:65:9b:4a:90:21:
                    99:5c:ee:c8:28:32:4a:dd:4c:23:bb:10:2f:d5:bf:
                    90:6b:f9:55:6c:c6:0d:4b:60:80:90:63:60:63:b3:
                    07:b2:5d:a6:41:a1:a7:35:01:3d:e3:d6:f4:f6:64:
                    e7:68:a6:bb:74:8c:7f:93:9b:45:8b:38:f1:d4:f1:
                    68:20:db:37:a5:9d:9f:34:12:8e:06:5b:85:4c:ce:
                    4e:63:3f:a1:98:dd:20:07:99:f1:01:65:35:9b:7a:
                    22:f7:0b:b0:4e:3f:49:bd:aa:08:d3:80:ea:83:66:
                    e5:94:32:01:d7:15:ac:4e:c2:5d:43:93:a7:80:47:
                    64:a6:a9:e7:b5:8b:19:15:e7:e0:b0:5c:e5:b2:93:
                    cd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:94:9F:10:DD:CC:77:BC:EC:CD:7A:A9:0C:33:CB:D0:11:6E:87:67
            X509v3 Authority Key Identifier:
                keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:cf:88:a3:33:6a:32:5c:0f:9f:8d:85:2b:5a:e4:4f:e5:1c:
         42:b4:37:66:1a:9d:78:13:bc:fa:38:a8:90:b0:31:bc:40:be:
         54:b7:0c:14:59:d7:c9:06:f2:c2:9d:6e:8c:95:39:f4:bb:c2:
         1d:78:f4:5e:9a:be:06:5f:34:f1:88:8e:91:86:01:ea:d4:34:
         55:b0:2a:33:c1:13:d6:fe:db:bf:f2:66:1a:b2:32:30:f3:12:
         18:12:b1:2b:3e:c2:76:81:f1:1a:1c:c7:fd:4f:9b:a1:6d:59:
         4c:c2:33:06:9c:0b:9a:bb:a9:db:72:92:f9:73:de:d1:10:4a:
         5e:2d:4e:eb:d6:ae:f6:2c:f9:58:4e:79:ed:d6:80:96:c0:9d:
         e9:b3:20:b0:0b:6e:8d:fb:31:96:d0:59:a8:98:24:90:0a:d1:
         c2:39:6f:80:43:58:c1:d7:a0:0f:38:5c:27:03:ae:40:8a:38:
         2a:89:e2:91:a5:22:82:0d:f8:3f:15:45:0b:89:41:f3:e3:43:
         03:43:0b:a9:ef:12:c8:98:ef:9f:4b:3a:53:97:d1:a1:8b:14:
         78:b7:0e:c7:03:c9:d5:a0:c4:e3:7c:3a:9a:85:bb:4d:6c:be:
         54:d4:0d:aa:b1:f3:74:fb:ba:f5:c1:a4:7d:21:6e:50:23:b1:
         f4:8a:40:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:16 2026 by rpki-client