Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File:                     j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier:          ZbSyXCLUn8/BjgZJAumgUzN5knw3cqZT8NGqxXCqxOw=
Subject key identifier:   DF:DA:64:7A:7E:D8:8B:22:2C:47:08:83:70:C0:1C:69:25:26:1F:79
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer:       /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial:       019E1ED99CE8FC923226F5CB8EA88AAB450A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number:          191A
Signing time:             Wed 13 May 2026 01:00:38 +0000
Manifest this update:     Wed 13 May 2026 01:00:38 +0000
Manifest next update:     Thu 14 May 2026 01:00:38 +0000
Files and hashes:         1: 1-99tj9n-LWYw_lI6J2ZtTlYMtsw.roa (hash: Ptwrv4fZgKC6RoxF9JtUijELaGYTN5wfnCikQVHX0jc=)
                          2: Vbu4WFHtQs8CWjvDwWDBgOfuqwQ.roa (hash: N29scv8xguie+t9aPoJpoSulc1+RZLFrY9t5xm5Se4E=)
                          3: WHqH2EhDK6xxFIiXyNlsjw-yMMg.roa (hash: boc+B5V0r/3xbux19AoHg18zg6QdefO3+vjSL8b5Cv8=)
                          4: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: yINwLr9uRP0FYqSZ0KTd/Papngn2/zEIOxCmnZsAvQg=)
                          5: wsaxcP_FSlrJyUqyv6RnWe5M_1k.roa (hash: 7BcGsYEeMK3lgIGyfCupRWnQz43ULZB5dbROxwaq/V0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:9c:e8:fc:92:32:26:f5:cb:8e:a8:8a:ab:45:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
        Validity
            Not Before: May 13 01:00:38 2026 GMT
            Not After : May 14 01:00:38 2026 GMT
        Subject: CN=dfda647a7ed88b222c47088370c01c6925261f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:d9:19:bd:2f:bb:3b:4a:15:7f:9a:ab:78:
                    2a:8d:0a:7e:2c:e2:6e:05:f6:22:90:c8:d8:66:f2:
                    d5:b6:b5:27:b5:12:b9:5a:6a:ee:cf:f6:b3:24:4e:
                    2d:d5:1e:b5:dd:d9:25:8b:49:50:48:4d:aa:82:b8:
                    b7:51:5e:e1:da:ce:48:54:c6:ca:93:a0:e3:cc:66:
                    c5:64:bc:bb:a5:53:6b:9e:7c:cd:83:f3:9f:31:20:
                    85:2c:08:4c:0d:97:e5:3f:f2:f2:d5:72:79:2e:f6:
                    54:86:62:9e:b8:39:af:3d:ac:9b:4f:e6:d8:5d:a9:
                    f5:56:91:a6:a6:1e:7f:82:85:61:a5:89:41:8b:55:
                    35:7d:50:3b:4a:1b:e4:45:bd:94:5b:5d:78:d0:1c:
                    62:97:04:3c:00:f0:af:d5:f0:06:ba:32:b8:70:a0:
                    c3:23:6f:a6:4d:6c:cb:e5:49:5c:01:2e:b3:c8:a5:
                    ae:13:40:66:30:ec:4a:32:18:c2:d1:0b:82:06:33:
                    e3:e0:cc:b6:81:85:c1:df:9e:fe:fa:0d:5f:38:24:
                    47:37:d3:61:cf:6b:23:ac:25:f4:3a:34:a0:e6:a7:
                    81:8a:4e:54:49:0b:f6:4a:ea:47:6c:d0:68:b5:34:
                    63:72:f2:86:0d:87:f8:80:0d:e9:6f:ee:74:a4:f6:
                    ab:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DA:64:7A:7E:D8:8B:22:2C:47:08:83:70:C0:1C:69:25:26:1F:79
            X509v3 Authority Key Identifier:
                keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:02:5b:56:72:5f:93:68:d6:8b:43:2a:5b:b1:fa:7a:16:58:
         ef:82:14:b6:8e:ce:5c:5a:78:43:36:97:6f:2a:a3:55:24:f1:
         a6:71:39:10:b1:6b:d7:de:3d:1c:bf:6a:17:b5:e6:07:68:7c:
         88:cd:cf:ef:36:ca:20:ae:23:57:ad:de:cc:f0:fb:b8:30:6b:
         41:6a:ec:dc:b2:e1:33:ca:1b:38:10:ee:2b:0a:db:1c:88:6e:
         3f:37:a1:dd:f1:16:4b:41:cd:f7:2b:94:aa:48:a6:c6:67:24:
         bb:18:49:4d:42:54:c6:0b:2c:b1:1c:dd:cc:a8:6a:59:b1:df:
         71:5c:dc:f0:eb:34:5d:1c:7f:a5:40:ff:73:2a:64:ea:5d:55:
         b4:db:a6:f5:05:b6:8d:64:ec:0c:cf:f6:74:2a:02:d0:8c:c2:
         00:2f:03:2f:a2:6d:87:df:7d:f1:67:6b:1a:dd:81:71:c4:e4:
         74:31:18:b1:2e:a6:11:fa:70:cf:bf:5c:8a:7e:3c:c2:bc:13:
         6c:d1:35:86:5f:7b:2e:92:60:b1:0b:3a:cf:df:24:74:14:98:
         1b:25:ed:73:9e:da:83:f5:dd:fa:b0:84:30:da:7a:21:1b:84:
         05:29:e5:c4:10:47:6a:b4:9c:05:98:79:5d:96:af:87:41:46:
         53:de:ac:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:47 2026 by rpki-client