Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File:                     J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier:          elrKasvL84S8HC5Fk6knPbFLxUmLfZ9pQHyfaIlKR1E=
Subject key identifier:   69:3F:45:B2:CD:C7:25:58:66:D8:DD:0C:EC:E2:CB:C2:B3:8F:C8:9D
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer:       /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial:       019E1F7F0BC255144A75FED0914A23B24D04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number:          190C
Signing time:             Wed 13 May 2026 04:01:20 +0000
Manifest this update:     Wed 13 May 2026 04:01:20 +0000
Manifest next update:     Thu 14 May 2026 04:01:20 +0000
Files and hashes:         1: 3RCjNuMxUkfSYyNOUlggwRfWfc4.roa (hash: UnwrsssJDeDLbtzFhokPg+3DUFYJBO3poSSiUsMCOJk=)
                          2: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: E3Q3dGt5FROA7UDKQkhYy83iYDkwgRO1u5EBzLlBecM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:0b:c2:55:14:4a:75:fe:d0:91:4a:23:b2:4d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
        Validity
            Not Before: May 13 04:01:20 2026 GMT
            Not After : May 14 04:01:20 2026 GMT
        Subject: CN=693f45b2cdc7255866d8dd0cece2cbc2b38fc89d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:11:71:ba:53:5c:96:3a:f8:c9:e7:2d:71:
                    7e:42:0e:e7:20:ac:c3:56:5d:e7:63:a5:2f:87:67:
                    67:d5:d9:fe:fe:8a:f4:07:8c:17:e8:16:55:97:79:
                    f9:d0:2b:6b:04:a3:ac:ef:a8:e2:88:40:ce:8b:71:
                    64:e7:2f:db:58:83:19:7c:40:4f:8b:31:41:20:a2:
                    0c:c0:6d:4a:ce:5b:bb:49:4b:ea:3f:c3:b4:af:29:
                    80:7f:dd:ec:5b:b2:a1:1b:90:af:3d:ef:ce:c7:90:
                    f4:5f:54:d3:ec:ef:4c:58:e7:cb:65:64:f7:86:49:
                    34:96:04:91:da:86:b3:bd:5b:82:04:f8:4f:52:97:
                    1d:14:46:09:b8:8b:ec:ae:ce:72:7b:97:d2:f3:bb:
                    ba:7d:9b:87:af:34:bc:02:a1:17:7b:3b:98:47:41:
                    10:fc:d5:a2:d5:cd:1b:ed:00:49:9a:4f:81:63:85:
                    e5:3d:dc:92:6e:7d:a0:4d:e0:af:20:06:fe:0f:5b:
                    8e:b2:1e:78:38:d9:eb:32:81:7a:48:d7:6a:16:80:
                    3e:9d:86:16:9a:64:49:a8:8a:6f:81:7d:d4:bd:0b:
                    99:84:3b:99:4d:fe:dc:1f:c8:e9:eb:4f:19:29:3d:
                    04:a9:69:1e:8f:91:e9:0b:ea:3a:1c:6c:07:8c:2a:
                    81:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3F:45:B2:CD:C7:25:58:66:D8:DD:0C:EC:E2:CB:C2:B3:8F:C8:9D
            X509v3 Authority Key Identifier:
                keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5f:b3:e8:90:f7:09:19:3f:c7:c0:ec:9c:d9:0a:96:9d:22:
         37:9a:f7:b8:4f:5d:c0:a5:22:7e:e7:e2:09:62:c0:d4:95:a5:
         73:59:89:09:f4:5c:14:7a:45:c7:8d:20:a9:1c:b4:34:ca:db:
         08:b9:6b:10:43:58:34:f8:e1:cf:99:72:8e:46:b3:f6:b3:c6:
         e3:35:08:fd:5d:e7:2b:67:6b:32:57:61:01:2c:d6:37:f6:7a:
         f9:2e:88:1e:b7:1d:42:e6:43:f1:03:e0:31:eb:78:82:c5:be:
         b6:3d:34:36:5e:a1:7b:5a:37:75:8d:eb:ea:6f:ac:e6:5a:35:
         69:34:1d:18:ee:54:ae:35:3e:29:3e:2e:5a:fa:8a:1d:9d:ac:
         a0:b3:6b:c4:97:6b:9e:69:dc:c0:27:60:08:6b:8b:82:18:6a:
         27:82:6a:9c:fd:12:da:d7:28:1d:aa:8b:bb:69:68:04:7b:33:
         91:bd:ca:3d:b9:57:b2:ab:7e:0f:d4:5a:d8:83:83:e6:d6:54:
         8a:9d:6a:41:ec:a9:81:a2:4c:71:a5:7e:db:98:99:29:18:ea:
         62:aa:fd:e5:a2:0c:0c:d9:b8:15:2a:1f:98:e9:8a:5a:aa:5a:
         e6:59:fa:d7:9e:73:ec:b4:f9:6e:d5:90:5f:93:50:90:03:c7:
         24:f6:85:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffwvCVRRKdf7QkUojsk0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YmIzMmFhOGM5ZjhkMDVjNTE3YmUyYWQ2NjUyZjY2NTUw
YThkNTcwHhcNMjYwNTEzMDQwMTIwWhcNMjYwNTE0MDQwMTIwWjAzMTEwLwYDVQQD
Eyg2OTNmNDViMmNkYzcyNTU4NjZkOGRkMGNlY2UyY2JjMmIzOGZjODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqToRcbpTXJY6+MnnLXF+Qg7nIKzD
Vl3nY6Uvh2dn1dn+/or0B4wX6BZVl3n50CtrBKOs76jiiEDOi3Fk5y/bWIMZfEBP
izFBIKIMwG1Kzlu7SUvqP8O0rymAf93sW7KhG5CvPe/Ox5D0X1TT7O9MWOfLZWT3
hkk0lgSR2oazvVuCBPhPUpcdFEYJuIvsrs5ye5fS87u6fZuHrzS8AqEXezuYR0EQ
/NWi1c0b7QBJmk+BY4XlPdySbn2gTeCvIAb+D1uOsh54ONnrMoF6SNdqFoA+nYYW
mmRJqIpvgX3UvQuZhDuZTf7cH8jp608ZKT0EqWkej5HpC+o6HGwHjCqB7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGk/RbLNxyVYZtjdDOziy8Kzj8idMB8GA1UdIwQY
MBaAFCe7MqqMn40FxRe+KtZlL2ZVCo1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjdzeXFveWZqUVhGRjc0cTFtVXZabFVLalZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hN2RjZWItZmY1NC00MzZhLTk0MTUt
NDg0MjIxYTFmMjg1LzEvSjdzeXFveWZqUVhGRjc0cTFtVXZabFVLalZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9hN2RjZWItZmY1NC00MzZhLTk0MTUtNDg0MjIxYTFmMjg1
LzEvSjdzeXFveWZqUVhGRjc0cTFtVXZabFVLalZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1+z6JD3
CRk/x8DsnNkKlp0iN5r3uE9dwKUifufiCWLA1JWlc1mJCfRcFHpFx40gqRy0NMrb
CLlrEENYNPjhz5lyjkaz9rPG4zUI/V3nK2drMldhASzWN/Z6+S6IHrcdQuZD8QPg
Met4gsW+tj00Nl6he1o3dY3r6m+s5lo1aTQdGO5UrjU+KT4uWvqKHZ2soLNrxJdr
nmncwCdgCGuLghhqJ4JqnP0S2tcoHaqLu2loBHszkb3KPblXsqt+D9Ra2IOD5tZU
ip1qQeypgaJMcaV+25iZKRjqYqr95aIMDNm4FSofmOmKWqpa5ln6155z7LT5btWQ
X5NQkAPHJPaF7A==
-----END CERTIFICATE-----
Generated at Wed May 13 13:10:17 2026 by rpki-client