Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File:                     jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier:          8PTKvzNo2mj98C7ixNoWfafrA9JNV1oxs18zjucVMJg=
Subject key identifier:   A4:EA:C8:C0:26:29:54:89:5B:2E:6E:DC:6C:C0:DC:87:46:32:11:B9
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer:       /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial:       019E1F7ED78DB8E65CD86005FFB6758CF483
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 04:01:06 +0000
Manifest this update:     Wed 13 May 2026 04:01:06 +0000
Manifest next update:     Thu 14 May 2026 04:01:06 +0000
Files and hashes:         1: 5UgWz4TquW-RCZNQAffQO9XK1TY.roa (hash: K3S0eQrPAI5ZGDD9EhtxIW1xNbkOZ7avoejLjH/PyGs=)
                          2: TrdJEenqgtHhdFelNOTUIFotJQw.roa (hash: Dr0F+aTEx7ePrr0l9Z8JmKO/N1C2g7VZ2b2KhzfPrQQ=)
                          3: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: Bdk/B2F2ay9IYgC9IBM77iiCaBnwQt9AcEJDh7qsfUE=)
                          4: kzDbK2QoBVIIp9tqNTtnUJP1NZs.roa (hash: X7UOIcXOkpLacmMqPlB5bii5jBSrwu1Tt1zBt5jizCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:d7:8d:b8:e6:5c:d8:60:05:ff:b6:75:8c:f4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
        Validity
            Not Before: May 13 04:01:06 2026 GMT
            Not After : May 14 04:01:06 2026 GMT
        Subject: CN=a4eac8c0262954895b2e6edc6cc0dc87463211b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:5a:2d:6d:f1:82:e2:ec:df:6f:6b:44:cc:
                    f7:83:d4:a4:20:b6:d4:c1:df:73:0f:57:33:3c:d8:
                    5d:29:23:e4:49:d0:ef:6e:3a:ad:37:9d:1e:60:4a:
                    88:ac:dc:4c:dc:cb:23:22:5f:3a:e5:c5:11:43:44:
                    30:8b:00:8c:89:2d:e6:b6:b2:f4:36:ea:f4:20:95:
                    48:83:b7:fd:9b:7b:84:d1:02:37:6e:c2:15:ec:a0:
                    98:7c:b5:06:0c:ac:df:cf:e1:bc:5f:48:b1:33:10:
                    ac:ac:38:88:5f:3d:5b:48:6c:6d:cf:42:7c:52:b4:
                    da:4f:7d:47:f8:96:b3:1a:6d:73:ad:76:00:79:3c:
                    36:35:98:4e:18:8f:a5:1a:24:eb:78:b5:0f:94:6b:
                    56:3c:ea:27:0c:14:63:bf:f9:30:e0:5f:fa:72:ba:
                    15:12:4b:5a:a8:f5:85:21:40:d1:a4:ab:f1:07:ce:
                    bb:73:f7:d6:ab:80:5a:b3:09:9c:14:26:e0:f7:b3:
                    26:f1:81:ca:ca:29:98:61:ec:bb:47:f0:12:9c:d6:
                    41:6b:99:29:91:13:5d:12:4c:d6:55:97:04:50:b4:
                    db:05:1d:b7:9b:91:50:22:93:57:25:8d:c2:2c:64:
                    fa:73:27:87:54:fb:30:1d:4f:22:48:02:53:6c:29:
                    c2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EA:C8:C0:26:29:54:89:5B:2E:6E:DC:6C:C0:DC:87:46:32:11:B9
            X509v3 Authority Key Identifier:
                keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:35:5b:80:b4:4d:2d:23:33:3a:2d:d9:e1:6b:90:68:af:59:
         28:94:2d:be:80:ab:8e:6a:ad:8a:d4:90:f9:1e:4a:21:d7:67:
         f1:a3:a7:dd:a4:82:26:04:5c:17:49:89:ab:99:05:72:3b:4f:
         b2:10:fa:54:0f:23:42:07:06:6a:18:87:2c:26:06:74:53:0d:
         6d:ae:05:7b:3a:36:5b:46:3b:13:72:98:8c:14:cf:7e:87:24:
         1f:a4:29:e6:e6:24:f8:6c:31:00:64:13:20:91:fa:c5:5f:6a:
         e9:3b:1a:81:56:87:74:dd:59:65:8d:ae:b2:7f:2e:cc:76:92:
         c6:ae:d5:0d:1b:98:09:42:fc:e0:84:5b:d5:54:04:27:03:51:
         c0:cc:fc:a2:80:e3:8f:d6:5b:a6:59:06:2b:15:ea:f7:48:5d:
         21:a6:f6:ef:a7:e4:4c:be:0f:50:8e:9d:9d:f8:fd:0b:a3:99:
         55:5d:71:56:9b:64:8f:91:fd:54:8a:2b:21:6e:aa:a3:64:93:
         4f:24:a3:3f:39:6f:7e:5a:7a:c3:ea:ba:df:ae:2c:55:3a:ad:
         45:9a:8d:ca:50:9d:9e:28:46:1c:6f:73:03:0e:47:e1:c2:b2:
         a0:54:80:1e:04:c0:a5:8b:99:8a:0d:9b:b5:6d:d0:08:0f:63:
         2f:9f:0b:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffteNuOZc2GAF/7Z1jPSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODU2NTU3YzQxNDZhOGI1MGRjNGQ5NDQyNGIwNjY4MGNl
Zjc1NWIwHhcNMjYwNTEzMDQwMTA2WhcNMjYwNTE0MDQwMTA2WjAzMTEwLwYDVQQD
EyhhNGVhYzhjMDI2Mjk1NDg5NWIyZTZlZGM2Y2MwZGM4NzQ2MzIxMWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyxaLW3xguLs329rRMz3g9SkILbU
wd9zD1czPNhdKSPkSdDvbjqtN50eYEqIrNxM3MsjIl865cURQ0QwiwCMiS3mtrL0
Nur0IJVIg7f9m3uE0QI3bsIV7KCYfLUGDKzfz+G8X0ixMxCsrDiIXz1bSGxtz0J8
UrTaT31H+JazGm1zrXYAeTw2NZhOGI+lGiTreLUPlGtWPOonDBRjv/kw4F/6croV
EktaqPWFIUDRpKvxB867c/fWq4BaswmcFCbg97Mm8YHKyimYYey7R/ASnNZBa5kp
kRNdEkzWVZcEULTbBR23m5FQIpNXJY3CLGT6cyeHVPswHU8iSAJTbCnCoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTqyMAmKVSJWy5u3GzA3IdGMhG5MB8GA1UdIwQY
MBaAFIyFZVfEFGqLUNxNlEJLBmgM73VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEt
MmE2YjlhMGNjYWJkLzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEtMmE2YjlhMGNjYWJk
LzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDVbgLRN
LSMzOi3Z4WuQaK9ZKJQtvoCrjmqtitSQ+R5KIddn8aOn3aSCJgRcF0mJq5kFcjtP
shD6VA8jQgcGahiHLCYGdFMNba4Fezo2W0Y7E3KYjBTPfockH6Qp5uYk+GwxAGQT
IJH6xV9q6TsagVaHdN1ZZY2usn8uzHaSxq7VDRuYCUL84IRb1VQEJwNRwMz8ooDj
j9ZbplkGKxXq90hdIab276fkTL4PUI6dnfj9C6OZVV1xVptkj5H9VIorIW6qo2ST
TySjPzlvflp6w+q6364sVTqtRZqNylCdnihGHG9zAw5H4cKyoFSAHgTApYuZig2b
tW3QCA9jL58Lvw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:59:37 2026 by rpki-client