Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
File:                     i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json)
Hash identifier:          /irrwVZUo9R5udCpImABgNxNoMFHB15TFQfA/mHgyfc=
Subject key identifier:   80:3B:16:E1:47:86:1B:6E:B9:18:9E:43:61:4A:D8:05:43:7B:39:8A
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Certificate issuer:       /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial:       019E1D59B8E6670D138F97541BA0B15862ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 18:01:19 +0000
Manifest this update:     Tue 12 May 2026 18:01:19 +0000
Manifest next update:     Wed 13 May 2026 18:01:19 +0000
Files and hashes:         1: 3fmRvkperMmvyU4KqpsUtOxTyt4.roa (hash: 7eZzl4W/3A8ZztuV2lmxwvx6VP7+Qvs+/fsXhTjc0rc=)
                          2: 7Tcz0pE1-IDNMp7AQ99DVCGrgjI.roa (hash: IYa4nqDQg0w4fOWwfwmQezvrBABwOK7SbfWTarCYxSQ=)
                          3: 7W1NXgkMSkIdBVSG746iQwH_IUI.roa (hash: 8/Z+GxzPEApZfT9MVxqAMLn34ihqPk9rP7wFg/FqfLU=)
                          4: EdFWUcc8IVOoO0eCHGrnGkFmsGg.roa (hash: hRMzKjUqKk1WuOs7kzmRaFOXrwrTn6B37s4zIKdomao=)
                          5: Ljk83VCvMFaaB88IfYzmXG7UKBY.roa (hash: f8wXBBWZbB++s5ojWl86XJPa1ZQ8YeSsSho2itzHWeE=)
                          6: MVvq6Rgk9g4xb6udrHASJS9rhUU.roa (hash: M5I2tbJMcYnMo8jDDImO8+z5cJdQDV2EBlWZ+aqbq4Q=)
                          7: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: zxYa1YIoqNZ5wtf4Ri/1GMEpy8YWjNiComVX77ykO0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:b8:e6:67:0d:13:8f:97:54:1b:a0:b1:58:62:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
        Validity
            Not Before: May 12 18:01:19 2026 GMT
            Not After : May 13 18:01:19 2026 GMT
        Subject: CN=803b16e147861b6eb9189e43614ad805437b398a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:92:4d:39:8c:9e:6d:bd:b9:ed:21:70:f3:63:
                    3e:f5:41:ad:83:f6:49:eb:8c:ec:b2:0b:f5:6a:d9:
                    76:93:e6:6f:e1:53:bc:eb:2c:23:6c:1e:5b:ff:32:
                    cf:6f:70:4e:d4:f2:2f:5b:eb:50:69:59:fa:88:7f:
                    0b:2d:36:d1:f7:31:1f:47:f1:e3:f0:b7:f5:ea:b0:
                    00:7d:a6:f6:cc:6e:33:d3:1d:1b:07:9a:45:7e:4c:
                    56:ce:9a:68:2f:eb:12:31:97:66:86:85:51:33:cd:
                    38:cc:f5:8b:d9:bc:74:d1:60:f7:24:72:84:da:6f:
                    72:aa:89:d0:b8:ef:bc:42:c7:00:e4:55:08:90:62:
                    da:69:1f:42:82:d3:00:07:a5:d9:f8:27:94:73:b4:
                    d0:72:e5:db:a8:af:9d:21:4e:1a:81:e3:6a:8b:06:
                    6a:7d:8f:01:94:5a:6f:f0:d0:8b:b9:c2:04:23:05:
                    34:12:8a:9d:17:b9:d9:18:1f:41:65:51:bb:cd:3f:
                    d9:5b:01:bd:1e:12:57:cd:1e:d6:4a:b1:37:53:0f:
                    bd:d1:5e:d1:e4:49:05:8c:7e:ca:d1:a8:e2:e1:c4:
                    bd:a3:ca:d3:2d:b1:c3:a4:0f:60:07:fc:f5:d0:33:
                    1c:25:42:03:e9:f4:2c:e8:8c:38:b0:ce:95:eb:6b:
                    77:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3B:16:E1:47:86:1B:6E:B9:18:9E:43:61:4A:D8:05:43:7B:39:8A
            X509v3 Authority Key Identifier:
                keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:15:6d:6e:bd:15:96:83:fe:73:49:32:79:39:f9:a1:74:81:
         44:8f:d4:d0:19:ec:da:cb:5d:37:00:13:4f:b5:a6:3c:cd:ca:
         b4:a2:be:57:3c:21:bc:79:d0:72:7d:58:7b:15:80:11:83:32:
         b8:78:80:49:39:75:14:4a:a1:e0:73:ac:63:52:c5:71:33:5b:
         20:66:c3:88:8c:49:a6:24:9a:35:74:39:31:56:b0:97:a0:25:
         f2:4e:90:2a:12:f1:64:5e:22:ba:b6:39:a6:76:04:a1:9e:f3:
         d2:16:37:3f:da:f5:bc:22:bb:b5:5b:44:62:c1:b2:37:d1:f8:
         09:52:1d:8e:a6:5e:2c:d2:7b:f5:97:bc:52:4d:c5:05:41:2a:
         8e:1d:b3:e6:c7:91:e6:86:3d:6c:ac:03:64:fd:63:6b:72:36:
         cd:8a:6b:bb:31:9a:53:73:5b:75:0f:5c:be:c9:52:33:95:74:
         6e:ab:9f:2e:fd:ed:ff:4b:66:5e:0b:aa:e5:02:e0:5f:bc:0e:
         e2:bf:ab:26:14:2b:e4:91:05:a1:df:24:ba:f8:ad:9c:d6:48:
         6f:d5:db:4a:d7:dd:25:41:a0:46:e9:2d:17:60:2b:49:03:1f:
         fe:4f:e7:e8:c2:17:3d:8f:f7:0c:3c:1b:00:40:2f:a3:60:2c:
         1d:93:e4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:51 2026 by rpki-client