Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
File:                     jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json)
Hash identifier:          AaRGfw3Gw+0G1RbtW/GCRkXMa+RzmretcN5h1XLZsPw=
Subject key identifier:   18:3B:19:25:98:B0:BD:68:02:8B:68:AD:AD:6F:24:53:8E:2D:79:88
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Certificate issuer:       /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial:       019E1ED99E37391A3F9655B027A1099D60DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
Manifest number:          0367
Signing time:             Wed 13 May 2026 01:00:38 +0000
Manifest this update:     Wed 13 May 2026 01:00:38 +0000
Manifest next update:     Thu 14 May 2026 01:00:38 +0000
Files and hashes:         1: Av7Tod1G7bVf0RLE6AF_1uspRQ4.roa (hash: PKJbe7R30nXLIKZVxr4PxR3DgHe3p9fuHQbiz5PGfP0=)
                          2: MZF_p3jMKGfUhISu7itbGm8fVPc.roa (hash: 1+Bei67+jd9KSPOgvA1EOkdwYvs4YCuptX/4MdFdYpM=)
                          3: Yf20QMXkj8GFJGSLeIPw0rNOpPU.roa (hash: aWACKntsxHH3Va6cTR9cG1/KJpBjS153dDHspJ2qJ94=)
                          4: eeoFWs0EeMzDNXzBgME3-Q7Zi40.roa (hash: Ym0Iu/9+fRHj5itQ0uhzHv3jsEKnG3SriEsKFuazFW4=)
                          5: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: vbWrkZzB78zi/Nma8HH68cL9oLAR+lJuPO59ncpdWYg=)
                          6: jwB4zN15Dz0mBSEVC3TVgEW9Zpo.roa (hash: 5Pt3Ize/q+a+7aO+hYglfsfYUPua8ySbTiwN+zIbslM=)
                          7: ty6QDaVODiYQLRspH3UycajMk0A.roa (hash: FtWFx0VsvTm7b4c9sjAieCXjIjfYkBipIpfvr2217ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:9e:37:39:1a:3f:96:55:b0:27:a1:09:9d:60:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
        Validity
            Not Before: May 13 01:00:38 2026 GMT
            Not After : May 14 01:00:38 2026 GMT
        Subject: CN=183b192598b0bd68028b68adad6f24538e2d7988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0c:26:fa:d9:84:38:7f:6b:fb:88:6a:42:b2:
                    25:fd:de:ee:0e:f1:58:1c:70:4d:26:5c:a4:b2:a6:
                    ad:af:6f:e7:7b:53:10:87:5b:ad:38:52:54:3f:72:
                    c8:74:b3:7d:b9:48:e9:1a:ef:7c:a5:1d:09:5f:e4:
                    65:2f:95:5e:3c:98:f6:a2:97:30:b5:bd:97:79:e1:
                    47:dc:f3:6a:20:45:34:32:10:13:0d:40:b0:93:87:
                    74:ae:27:5d:21:07:9a:08:a1:15:45:30:1f:fc:42:
                    e6:6d:2f:fd:56:04:4b:73:58:62:1b:b0:da:70:d1:
                    00:1f:eb:22:41:5a:0b:ae:d0:a1:61:b2:3f:da:d0:
                    fa:4f:77:5d:c8:1d:68:6f:e5:8e:94:70:c0:ab:e0:
                    68:57:29:52:39:a1:b9:91:b3:10:00:bb:25:a9:b9:
                    48:af:57:a0:87:e9:7c:99:0e:0e:90:41:af:3b:72:
                    b2:4b:d4:44:34:0a:2e:d1:02:7c:7d:18:7f:03:5a:
                    9e:d1:fd:80:60:51:17:8e:52:87:27:ab:c7:3b:0a:
                    a2:03:0b:3a:81:ba:3e:c4:d2:4c:e3:0c:55:f9:4a:
                    b4:87:3d:bc:c9:34:bc:2f:8b:7b:5c:ad:11:a9:5e:
                    6d:ae:12:b0:cc:fa:96:94:51:ea:1a:bf:ea:8f:17:
                    99:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3B:19:25:98:B0:BD:68:02:8B:68:AD:AD:6F:24:53:8E:2D:79:88
            X509v3 Authority Key Identifier:
                keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:64:ca:c7:8e:b4:1e:b9:b8:90:b0:c4:81:04:55:1f:a0:73:
         6d:b9:cb:7e:d4:1d:97:be:8f:0a:3a:97:63:1d:cd:cc:db:70:
         cf:82:f4:e3:0e:e5:a5:98:25:22:55:8b:8b:bc:08:90:90:30:
         50:18:34:25:f8:80:e8:33:0c:93:f0:e4:c1:79:95:4e:8b:a3:
         d1:c0:dd:96:75:c9:d2:e9:42:c4:1e:9f:3f:4f:c9:dc:02:32:
         03:96:5f:09:b6:c7:14:36:68:d1:3a:26:85:31:58:e9:f4:1f:
         b9:ef:ce:84:aa:10:4e:a2:5f:03:8e:10:6b:72:80:45:10:20:
         97:1a:5b:3b:a7:b3:07:aa:84:c5:ba:ca:98:61:55:04:e8:a3:
         a9:67:42:11:c4:ec:19:90:d7:4a:ca:d4:6b:bd:2f:48:62:28:
         d3:df:86:a1:ec:88:c3:5c:8f:9b:5c:bb:de:99:c3:15:79:e5:
         35:d2:38:30:9c:98:af:ce:88:06:7d:5a:83:b4:31:1f:6a:12:
         f0:41:f4:9e:87:ff:20:c9:50:f5:d0:96:3f:c7:4c:92:86:a8:
         5f:37:e9:86:f1:89:38:15:5e:e2:dd:64:04:eb:16:cd:90:7d:
         7d:dc:81:21:af:4a:0d:9b:2e:3d:91:aa:eb:d5:77:6b:c3:0c:
         d5:25:55:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:39:38 2026 by rpki-client