Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File:                     j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier:          Wn9Ws2Lxo0oPbO5Rlvaa+bb9MzoeWzeVDYCO85Bi6wg=
Subject key identifier:   F0:09:35:FA:8D:32:C6:49:47:3C:D0:C8:14:6F:C6:0C:13:AD:93:93
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer:       /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial:       019E205A2A269ED63E533DDC6E9351C3007D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number:          190B
Signing time:             Wed 13 May 2026 08:00:40 +0000
Manifest this update:     Wed 13 May 2026 08:00:40 +0000
Manifest next update:     Thu 14 May 2026 08:00:40 +0000
Files and hashes:         1: OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa (hash: fGvKZaOlhgdkgyxl6/1AuWFmm3crcDp6VjKR5yKK6Ms=)
                          2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: zFXTqmKgxA/U/H69gTRgw1GzXyC6ZoAxtN54AVufWuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:2a:26:9e:d6:3e:53:3d:dc:6e:93:51:c3:00:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
        Validity
            Not Before: May 13 08:00:40 2026 GMT
            Not After : May 14 08:00:40 2026 GMT
        Subject: CN=f00935fa8d32c649473cd0c8146fc60c13ad9393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3b:14:15:f4:de:ad:dd:c1:db:96:0e:8a:b9:
                    f4:50:b5:03:3c:30:a4:85:40:e4:80:b6:82:03:ee:
                    65:a5:be:78:b9:f3:bf:42:96:37:a3:a8:14:49:5d:
                    fd:69:ed:f5:6f:5b:78:ae:6f:7a:70:9f:a3:96:30:
                    9a:54:ba:9a:4a:d2:fc:06:f3:e1:37:b7:75:b9:c9:
                    ff:3d:7f:ff:f8:97:2c:8e:ef:38:cb:b9:1a:d5:ce:
                    6a:92:04:f2:a6:a3:a9:c1:fc:db:68:92:e7:66:20:
                    70:aa:e1:20:e6:31:ef:ad:51:75:45:e9:e9:25:8e:
                    0f:72:f9:53:ba:cd:bf:1c:66:ab:85:c7:f4:8a:b7:
                    c8:0e:24:8a:8c:af:e6:6f:be:91:14:50:19:f2:d3:
                    19:99:23:01:42:ec:e9:92:8a:75:70:53:59:e3:ca:
                    2e:21:7b:5c:51:f2:d6:73:0f:97:93:61:91:67:d9:
                    e4:b3:48:a8:4e:64:ca:f2:28:13:37:aa:f4:1a:ff:
                    df:e6:98:d5:87:2b:2c:ee:6c:a6:2e:6d:d8:68:45:
                    ed:fa:67:6d:3a:f4:44:1c:db:07:a6:90:24:6c:ab:
                    58:bf:75:20:06:92:ad:48:8b:42:55:ac:bb:58:16:
                    2a:5b:fa:25:c8:98:45:22:2f:2c:ed:c1:0b:40:d7:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:09:35:FA:8D:32:C6:49:47:3C:D0:C8:14:6F:C6:0C:13:AD:93:93
            X509v3 Authority Key Identifier:
                keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:de:f4:2f:03:d3:c1:77:2f:f8:f4:ca:44:14:4e:fe:6d:3c:
         e5:9e:1f:31:5b:49:04:3c:44:b0:ec:9a:3c:66:de:2f:12:75:
         9a:52:e5:26:32:e9:63:03:aa:ba:5e:4b:2e:ac:43:9c:f1:93:
         27:33:b4:75:03:44:f9:6a:fe:b1:d7:4b:f4:7b:55:ce:c6:b9:
         80:16:15:e0:f9:4c:ee:7e:81:bd:2d:03:24:96:a1:8b:f6:a1:
         ff:ad:b0:00:ba:31:f6:84:c0:7c:bd:b5:f4:70:2f:80:16:45:
         47:bb:87:79:55:f5:06:3c:0f:08:40:00:97:2b:78:ce:ae:9d:
         f1:a0:9c:2b:f1:cf:76:c5:b6:7d:9d:81:78:b9:d5:08:83:d5:
         fd:38:d8:1e:79:62:4e:f9:2d:18:7a:7f:2f:e7:ac:79:fd:8f:
         47:76:42:49:0b:38:c6:ed:68:42:82:c7:6c:fb:05:2b:ee:23:
         15:4c:f4:5e:f0:ea:3f:29:db:b1:f5:81:a7:75:ca:31:1f:38:
         81:6f:ef:ba:a1:f1:b6:29:57:b1:5a:f5:50:d2:c8:b4:76:4c:
         38:9b:67:cd:00:b4:89:a2:fb:fd:58:68:13:2b:bc:31:52:da:
         54:ca:4f:fe:9e:cf:1d:cb:46:9a:ae:66:f6:7e:da:bb:b4:33:
         96:fd:bf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:43 2026 by rpki-client