Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File:                     ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier:          u5ui5UF/WLGbVYxjPM9hQPsejupxSRxUVNrV1ODTf3k=
Subject key identifier:   E6:23:1E:6D:56:FE:52:0B:13:3C:07:A1:B9:D6:BD:81:C6:7B:19:58
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer:       /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial:       019E1E6C8DA8F335F94296874D84F346C0F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number:          190D
Signing time:             Tue 12 May 2026 23:01:31 +0000
Manifest this update:     Tue 12 May 2026 23:01:31 +0000
Manifest next update:     Wed 13 May 2026 23:01:31 +0000
Files and hashes:         1: 3I0ccbWDDm2AJ0Og3v2UYgTm0kU.roa (hash: vjrwzp/zqZBxc6wOSE5N6kztkRal6ScIrhGe+5Xi3bI=)
                          2: MEjN6NiBRUno6jMiVrI76qBgUXE.roa (hash: s2vQYXj0w7LOeK8L7upi2AL1yMhCtXme3TjzeGEM0n8=)
                          3: ZknLlp2vh9WJk0H7iXXLOw9c2pU.roa (hash: S6ynW8hTvcrSOBVEp2ULNqC2ZlGWhPVxKi1FBjbkc4c=)
                          4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: 7I6GDr/8d4DR1xpFlxSrX1iqf6UNdJ8Ltjg5UM0015Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:8d:a8:f3:35:f9:42:96:87:4d:84:f3:46:c0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
        Validity
            Not Before: May 12 23:01:31 2026 GMT
            Not After : May 13 23:01:31 2026 GMT
        Subject: CN=e6231e6d56fe520b133c07a1b9d6bd81c67b1958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cf:e7:78:8a:2f:86:60:95:40:5a:16:21:1f:
                    96:35:49:b3:46:66:8d:05:72:14:f1:d1:ce:fb:b5:
                    97:c3:d4:12:d9:79:cd:74:0b:b8:d8:7a:94:b9:91:
                    c5:56:8e:40:2f:84:32:dc:8a:e4:84:1a:28:b5:51:
                    3a:b8:8f:bb:06:82:b5:55:59:b1:8b:1f:c1:ab:0b:
                    dd:3b:5c:46:d8:4a:da:ba:7b:38:28:84:2f:b6:22:
                    65:c3:61:0f:0f:d6:92:68:f0:6f:d9:22:37:5d:87:
                    3b:4a:24:31:53:22:7d:a7:1b:46:d8:3a:b4:4b:33:
                    f8:8a:fe:92:61:0a:57:22:26:70:d6:fd:69:95:17:
                    25:3c:5c:a3:0d:b7:5a:e2:4d:10:9e:2d:0f:f1:95:
                    d2:58:a8:5a:8a:79:83:98:1b:81:d5:71:89:ab:ad:
                    4a:75:16:15:8c:2c:50:01:91:c4:69:cc:9f:df:54:
                    f8:36:47:f1:98:91:d3:34:94:66:6e:1b:85:a9:a7:
                    6a:78:fb:62:5d:a6:ca:22:cf:a4:a7:59:17:80:7d:
                    d5:1e:50:19:4c:f2:a5:a5:1b:71:7f:df:7a:05:54:
                    5c:48:52:da:c4:81:5f:66:98:6c:f5:d7:e8:0e:98:
                    70:61:19:b5:6f:ff:8d:3b:5d:17:0c:83:30:ed:20:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:23:1E:6D:56:FE:52:0B:13:3C:07:A1:B9:D6:BD:81:C6:7B:19:58
            X509v3 Authority Key Identifier:
                keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:0b:e5:57:7c:11:d5:c1:40:7f:48:6f:14:be:99:1e:0d:f4:
         73:9f:84:88:6b:f9:d4:18:b4:3c:01:7b:d1:57:d2:f5:50:43:
         41:96:00:95:8f:73:f4:fc:31:db:a6:09:9f:56:1b:72:f4:ca:
         dc:4c:7d:b5:e1:23:0a:40:eb:84:a9:a6:ec:ed:77:62:c9:ae:
         8f:a6:43:53:12:fc:18:e0:4a:58:6d:fd:f3:65:38:03:3c:0a:
         55:37:22:0f:69:f0:d3:cb:e5:0a:bc:c6:88:4f:cc:ce:4b:1c:
         ae:db:54:4a:fc:9a:63:26:66:1f:a1:da:d4:71:8f:d3:61:82:
         47:9d:d5:10:09:6f:38:bc:7d:39:f1:60:d2:5a:78:9b:ab:b7:
         87:29:a3:fb:b7:7b:54:07:a8:6a:17:f9:78:42:25:f0:4f:56:
         e0:a2:7e:d9:e5:f9:6f:cc:f3:f4:ab:d9:0d:36:b8:be:b4:72:
         d6:73:c0:cb:01:29:f5:9f:66:a9:52:1d:10:aa:95:c4:ba:1c:
         eb:01:08:bd:77:e7:25:eb:f6:40:2d:88:4b:88:c0:89:75:ca:
         48:69:0b:f2:43:93:8b:0d:f9:e1:9d:e9:93:0d:76:69:58:c0:
         86:51:b7:0a:43:45:e2:7f:5f:0b:fa:d0:ad:c6:3b:6b:d9:e9:
         c7:ec:43:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:42 2026 by rpki-client