Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File:                     jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier:          M8pX1wFk4vT45o7naJjY3lftK0qVu4UfhtyyHoIaLiA=
Subject key identifier:   EC:16:92:71:DC:58:AF:FB:97:80:75:9F:80:AE:5B:68:4E:73:97:A2
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer:       /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial:       019E3117B5F7C5A98B7626AE9C99D8A97448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number:          1917
Signing time:             Sat 16 May 2026 14:01:37 +0000
Manifest this update:     Sat 16 May 2026 14:01:37 +0000
Manifest next update:     Sun 17 May 2026 14:01:37 +0000
Files and hashes:         1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: NcPh2nnZjHDHOzIALyfToAoH73AF8BLUmXTBxWamdIg=)
                          2: lSlG7rI2eJuiPKf-HzKcyhBPp1g.roa (hash: 53i2XoHaeuLLxKqYVRpE4lR9h2EBCgSQcRQiDH1i//M=)
                          3: scC5gNxexOD9_MYBJVYJT8pP6Ag.roa (hash: yC68S8mkaapsGvYB3k9kgiLL9Ie9a4V0LG7QX9QvJvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:b5:f7:c5:a9:8b:76:26:ae:9c:99:d8:a9:74:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
        Validity
            Not Before: May 16 14:01:37 2026 GMT
            Not After : May 17 14:01:37 2026 GMT
        Subject: CN=ec169271dc58affb9780759f80ae5b684e7397a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:45:b8:9c:ed:c5:a8:39:c2:92:d7:81:3f:
                    b9:36:fd:2e:42:5e:4c:72:29:18:e2:09:7e:34:d9:
                    2b:b2:5b:6d:6c:f9:9c:21:cc:ce:98:4e:ee:25:58:
                    dc:13:9f:89:05:22:85:3c:a6:9c:4b:6d:d5:c8:5d:
                    fe:a9:3d:3f:57:bf:b9:47:7a:a3:26:23:05:b7:4f:
                    f9:21:21:46:79:c9:6a:52:a4:6a:a3:c9:1d:89:37:
                    cd:53:28:28:b9:68:e5:e8:2e:6d:47:4b:72:9d:0c:
                    98:39:7a:f0:db:38:ff:15:d1:58:b7:2f:df:80:7d:
                    9a:34:2c:ef:40:09:6a:8f:17:a2:25:8a:02:da:ce:
                    90:99:d4:3b:02:ca:9b:3c:20:44:4b:ae:b2:87:1f:
                    bd:71:ec:7a:25:2e:57:a7:82:24:5f:33:2f:fb:09:
                    45:33:1c:32:e6:85:c4:6b:35:42:ab:29:41:76:f2:
                    02:72:17:b9:aa:07:17:e0:ea:46:06:9a:60:b7:17:
                    62:78:23:d6:96:62:5b:2c:ab:ff:db:4f:c0:39:4f:
                    3a:b1:b1:e2:50:b2:38:80:62:5e:c1:a6:7b:2e:b0:
                    2e:df:af:e2:5d:c6:ec:65:a4:2a:c7:44:85:43:57:
                    ea:75:0b:fa:c5:df:da:58:77:91:b6:04:db:d4:3d:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:16:92:71:DC:58:AF:FB:97:80:75:9F:80:AE:5B:68:4E:73:97:A2
            X509v3 Authority Key Identifier:
                keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1f:8a:44:c5:38:c0:9f:cd:4b:65:22:18:f1:1d:2c:dd:45:
         ca:f1:cc:b6:1c:86:67:6a:36:a6:70:48:34:9a:8c:a6:7b:77:
         ae:fe:97:5f:50:fb:80:89:f0:a8:df:5c:e9:29:e8:95:81:a7:
         2e:27:86:1b:7b:0a:0e:64:eb:d4:d8:1b:8b:8d:7d:07:ef:f2:
         0a:fd:33:54:d7:b1:c8:34:d3:d2:62:79:0d:7d:75:16:2f:ab:
         b2:56:d6:e1:50:0f:43:65:be:a9:e7:f8:43:0d:04:3c:05:fd:
         64:aa:29:ea:cd:20:1e:3f:6d:ef:54:7c:5f:ff:63:1d:e6:bf:
         8b:81:f6:ba:07:ce:73:ed:6b:17:c5:39:b8:7a:5c:24:42:70:
         14:1f:01:40:21:06:29:8d:d0:da:b3:67:98:cd:5c:aa:d2:a0:
         71:71:34:15:a3:b2:99:98:c6:b1:39:80:1b:92:9a:e7:86:f3:
         e5:2a:ff:bc:c4:af:da:02:87:9a:41:68:5c:2c:d0:c0:9c:f3:
         b7:fd:3a:44:98:ee:a3:6d:26:ed:9b:37:40:5c:85:74:05:de:
         99:67:8c:23:86:90:92:7e:6e:69:68:1f:9a:ec:d3:5e:fe:0d:
         7f:a8:1b:1f:15:44:5a:b2:11:39:3e:66:74:fa:55:ef:21:c5:
         ce:f3:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:21:13 2026 by rpki-client