Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File:                     jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier:          psCgBzVRh93toDcO0hlbruRNPuubtQ3OxZi3KzfqC7Y=
Subject key identifier:   0D:23:BA:FA:C9:71:96:3F:FD:B9:1C:1E:AB:2D:0C:2F:87:BC:83:85
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer:       /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial:       019E1FECCB2C3E8D4569766FB536ACB1C305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 06:01:12 +0000
Manifest this update:     Wed 13 May 2026 06:01:12 +0000
Manifest next update:     Thu 14 May 2026 06:01:12 +0000
Files and hashes:         1: Qx0ddBKlSvnACpzjugQJrfWkEs4.roa (hash: aJD4jYhJCqk7+8Q4F//sAqddVJklJ5JHNsKetWjBmH4=)
                          2: dElS2LHmvzOJL3jvJ8t1FWNOXRQ.roa (hash: pKoUZvmEW4liSwgxySiejWpEorumEVEvbMzgYr8Wr84=)
                          3: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: w0fXaXswAknVeGZqgscIV/rRNX8d8VEXJmJx2946dwY=)
                          4: lKM1gHFyylwdRUKMaY5fLo9cQo4.roa (hash: s0i27z26ycWaj2Sw/lN75r12wdUfV6zW3S6uMy4zqRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:cb:2c:3e:8d:45:69:76:6f:b5:36:ac:b1:c3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
        Validity
            Not Before: May 13 06:01:12 2026 GMT
            Not After : May 14 06:01:12 2026 GMT
        Subject: CN=0d23bafac971963ffdb91c1eab2d0c2f87bc8385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:ac:cf:7f:18:80:60:6f:90:56:2a:66:44:
                    e2:f3:b9:c3:70:ab:6f:c7:53:a3:86:8d:b9:c4:83:
                    03:30:8e:4d:72:e2:1a:93:35:53:24:c4:d4:41:a3:
                    c6:df:d0:a7:07:34:1f:15:a7:7c:e5:92:18:34:cf:
                    7f:45:d9:22:42:da:87:e3:e3:c1:a8:e9:49:9c:5e:
                    b1:a5:6e:fe:e8:e4:1a:bd:bd:71:f4:70:7d:e6:b5:
                    db:67:cc:51:79:d7:05:50:9b:11:8a:38:d8:03:1a:
                    06:fe:70:25:b5:b5:7c:e2:10:36:d0:23:a9:53:db:
                    48:2c:35:b3:9f:8c:20:84:c2:5c:5c:39:8d:fa:54:
                    4c:a7:d2:5c:49:13:c0:98:96:4a:85:ff:40:09:4d:
                    40:14:1b:68:82:41:d5:c4:b4:9d:6c:47:56:87:5b:
                    5e:5d:0b:0d:80:dd:b3:2e:ac:47:79:24:bf:ef:5c:
                    60:b2:24:5a:76:7e:a2:bd:82:87:60:18:a4:74:36:
                    62:bc:b1:cb:4d:0b:6f:c0:93:b1:8a:31:af:4e:a0:
                    7c:13:31:1d:35:da:b5:27:2c:4c:63:26:31:46:93:
                    06:63:53:6f:1f:c2:ef:29:0b:9d:8f:80:98:a2:25:
                    10:54:31:0b:3b:81:f8:af:be:7e:a8:53:ba:e7:5f:
                    cb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:23:BA:FA:C9:71:96:3F:FD:B9:1C:1E:AB:2D:0C:2F:87:BC:83:85
            X509v3 Authority Key Identifier:
                keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:25:9a:55:6f:3c:ab:aa:ac:7b:1f:e9:4d:51:39:45:3c:39:
         a7:4d:51:1b:33:9a:84:09:4b:0a:62:d0:6e:95:b8:54:90:c2:
         b8:a2:33:2f:db:df:5e:f2:fa:2c:33:0f:ca:4a:34:70:78:73:
         38:84:cb:64:ab:13:37:bf:7b:44:40:77:11:d4:51:22:dc:52:
         95:9e:80:d1:3b:a8:bc:ff:79:1f:48:ed:54:88:83:eb:de:be:
         15:07:fc:cd:c8:9c:12:70:7b:60:70:79:0e:9a:6d:eb:28:e3:
         e2:3c:c9:ee:c3:01:78:48:d7:81:21:f9:5a:5a:e6:e4:7a:4a:
         3f:27:5a:8c:ac:ad:0b:81:ce:24:f0:bc:f6:d3:03:cb:57:5e:
         df:21:9c:2c:c8:ff:cd:92:2b:50:92:ff:8d:c3:ed:49:24:c4:
         db:5e:98:58:58:0e:4a:a3:99:32:39:36:ea:c5:3d:6c:43:1e:
         dc:7e:9d:2b:20:80:0a:09:25:47:6c:04:c9:36:52:ba:5b:59:
         63:be:f1:f4:61:1a:57:d6:1d:fe:f9:90:f5:38:91:1b:8d:34:
         da:0f:cc:70:d2:3a:19:c9:2b:fc:e4:20:35:a3:5f:06:17:7a:
         4e:e8:45:41:3b:84:ce:1f:42:59:ac:42:c7:a3:bf:99:ae:26:
         86:73:68:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:38:25 2026 by rpki-client