Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File:                     JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier:          bgW7K2UiSHrsKmh11Omxr0FXMLXL6UK3tR3n5BhU+KA=
Subject key identifier:   99:75:7E:BB:40:BE:20:14:04:53:2F:5F:D1:B6:83:28:5B:E9:07:15
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer:       /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial:       019E2994F34C2BC9797FCCD73751B478F366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number:          0337
Signing time:             Fri 15 May 2026 03:01:27 +0000
Manifest this update:     Fri 15 May 2026 03:01:27 +0000
Manifest next update:     Sat 16 May 2026 03:01:27 +0000
Files and hashes:         1: 0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa (hash: AMOeY2WBqIDOZyan24GKWqLsMD/oVDxNwHTF+9g2L3g=)
                          2: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: yq9ZvFnJKgiKZMSl6wCsB3mWAisFeOib6Nboy/nXMVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:94:f3:4c:2b:c9:79:7f:cc:d7:37:51:b4:78:f3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
        Validity
            Not Before: May 15 03:01:27 2026 GMT
            Not After : May 16 03:01:27 2026 GMT
        Subject: CN=99757ebb40be201404532f5fd1b683285be90715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:92:be:d2:15:ab:43:64:2a:c2:bd:60:0b:ad:
                    47:48:8c:1b:f9:6b:af:54:28:51:19:b8:e8:43:54:
                    82:3c:b5:16:72:b7:ae:61:23:82:b0:31:ac:c6:45:
                    25:23:31:60:4d:49:d0:af:6a:d5:28:4b:a1:d9:af:
                    69:04:ac:86:03:d4:44:7e:20:7b:fa:cf:54:ef:e4:
                    57:e8:50:e7:4b:32:e9:ab:32:2e:3b:f1:af:6d:9c:
                    44:96:02:11:af:11:ea:e1:d4:cd:16:df:f4:37:cf:
                    df:90:a2:db:93:5a:2b:c6:e5:f0:74:f7:ba:d6:b9:
                    43:00:4e:51:8c:1b:96:25:b1:24:7a:db:90:ea:ec:
                    47:48:ce:89:1e:c1:56:33:c8:5f:f9:a2:f4:68:11:
                    43:84:48:8b:f1:3e:96:f5:2b:62:9f:1f:24:c1:56:
                    ba:7e:a5:45:cb:c6:fa:72:a9:7f:21:e4:c8:4d:20:
                    6c:44:a3:a1:26:4f:82:a6:54:1c:46:24:4c:24:25:
                    f2:99:b4:0c:b4:52:3a:14:a2:3c:2f:b0:ab:c3:f8:
                    36:7d:8f:e3:24:80:2a:b7:70:5a:f2:f5:ba:b0:b0:
                    c4:c3:27:77:78:6b:89:23:a6:6b:2a:10:f0:9b:ff:
                    08:d5:93:29:7a:93:c3:30:72:a9:f2:7e:da:27:10:
                    27:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:75:7E:BB:40:BE:20:14:04:53:2F:5F:D1:B6:83:28:5B:E9:07:15
            X509v3 Authority Key Identifier:
                keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:90:80:1f:fb:2c:79:c9:89:ba:fc:ec:88:c3:34:80:14:6e:
         65:2e:28:6e:76:84:e7:9c:68:f2:72:0c:7f:e6:71:0f:31:fe:
         11:72:c9:01:3d:d0:73:d0:f2:bc:a8:58:07:50:d1:10:e3:cb:
         b9:f3:bb:6a:36:d6:60:15:da:4e:f1:92:f3:48:a6:46:b6:f8:
         0d:d4:13:ad:ec:e3:41:d4:f7:90:4d:87:20:ba:0f:3b:d0:7b:
         68:63:47:cc:ad:3f:44:9d:35:77:87:92:bb:79:46:c1:40:bf:
         ce:7f:81:97:31:9a:3a:ea:6e:97:52:77:41:e1:d6:a8:bd:92:
         f1:37:cd:53:b5:99:1b:5f:34:d4:95:68:1a:66:18:d3:bb:03:
         d6:8d:ff:16:10:20:24:52:b3:43:1e:c8:fa:7b:64:55:c8:f2:
         e2:0b:d8:15:e9:99:de:a4:eb:3e:d6:9c:dc:f6:6f:6a:af:e6:
         e7:c8:ed:12:e5:f6:da:bc:93:7e:4d:f7:ca:a1:62:43:2e:98:
         5b:0a:ab:71:10:7c:a9:bd:f8:f2:fb:60:82:f3:c2:2c:a6:6c:
         76:8f:f8:6c:07:b3:f1:5c:84:2f:39:0a:6c:bf:aa:2b:6c:38:
         c5:55:1f:cf:3b:b7:4d:88:9e:ef:d4:bb:91:fb:1c:d5:0f:e7:
         1d:b7:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 05:41:24 2026 by rpki-client