Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
File:                     jeQsVg_CKLW7T0zwDt4t_ibGYws.mft (raw, json)
Hash identifier:          BPUEWvQlZJ4cEe5XyReIzGW/2E/cOw6PaqT1Byr/fGM=
Subject key identifier:   F3:EC:51:05:F2:47:19:30:11:27:80:77:AA:7F:AD:76:F0:B0:6D:42
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Certificate issuer:       /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial:       019E29CBB5164E657F7403812879E53B9ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
Manifest number:          19E8
Signing time:             Fri 15 May 2026 04:01:16 +0000
Manifest this update:     Fri 15 May 2026 04:01:16 +0000
Manifest next update:     Sat 16 May 2026 04:01:16 +0000
Files and hashes:         1: 6ALUAX_BlS5KlbgFgt-VADKUCoo.roa (hash: 6rsnp+qxPv9UYEyzzteDX/UyFa/laFrdA7bE3B5gdhE=)
                          2: SEZ6fU5AhjTcT-v2AF7aa1Lk33I.roa (hash: nyDU2awTDtLEQn8KT2rzLnNR5fVOBeEGOrOK5V7gTs8=)
                          3: YVVa8qXq8lG3mkbmd2P3XRnWZu8.roa (hash: /hcrN2c7yYYNROlrx3P8uAt7fQlO7FXIyMlqkaVFXbY=)
                          4: YW3dbYMvMGpRlXCgljvs9WEA8II.roa (hash: 0QFB4Z6/oF+6LZXj3qGwOBveMLWnuMyB/KPTEoXelQI=)
                          5: jeQsVg_CKLW7T0zwDt4t_ibGYws.crl (hash: LSbp1eh1W46FbY09qK1aLvbHdyLh5GnbZjPIMM4UNCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cb:b5:16:4e:65:7f:74:03:81:28:79:e5:3b:9e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
        Validity
            Not Before: May 15 04:01:16 2026 GMT
            Not After : May 16 04:01:16 2026 GMT
        Subject: CN=f3ec5105f247193011278077aa7fad76f0b06d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:60:d0:54:8a:3f:6f:19:4d:7f:ee:64:8c:e0:
                    87:bf:90:ce:28:5c:0e:42:7d:e9:ed:b0:b5:ce:e7:
                    9e:29:8c:4e:e5:67:41:1a:81:34:19:a6:dd:04:5b:
                    92:02:73:17:eb:9a:a2:8b:c0:57:47:cb:f5:c4:0f:
                    2d:f4:23:78:dd:0f:52:3f:18:8e:51:68:4b:0f:5d:
                    f9:fb:ce:ea:36:40:00:2f:4c:88:1d:e0:49:1a:ad:
                    02:52:de:7b:df:97:bd:7b:63:f3:17:6e:dc:af:21:
                    1d:fa:b1:03:75:08:5d:e5:1f:82:f2:f5:d6:a8:b9:
                    e2:17:52:7c:ec:fd:a0:3f:ba:f7:3c:37:75:fb:08:
                    95:18:f3:36:02:75:a4:f5:3c:46:38:27:5c:9e:c4:
                    2b:53:33:e9:7f:ff:7c:4d:0a:c7:26:84:39:2a:05:
                    18:a8:23:18:00:c2:a4:bd:3f:57:c2:b6:37:fa:46:
                    f3:cc:b9:67:e1:3c:99:71:b2:11:76:46:e2:0f:f2:
                    4e:e1:12:3e:ab:0a:f8:4a:bf:1a:7e:b9:a4:db:b7:
                    a9:65:1b:77:ad:ab:42:75:8e:f3:3e:1c:83:43:03:
                    64:50:91:77:8b:3b:3c:41:1d:da:33:91:53:44:87:
                    10:13:3f:b6:ea:09:3b:91:23:be:a3:d9:17:e9:f5:
                    79:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EC:51:05:F2:47:19:30:11:27:80:77:AA:7F:AD:76:F0:B0:6D:42
            X509v3 Authority Key Identifier:
                keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:26:f8:c6:0d:a0:1e:6e:ca:25:93:1e:65:e4:cb:be:81:30:
         fb:8f:d5:d7:a2:ea:c4:79:f0:74:b5:4f:fd:bc:67:77:2e:99:
         52:87:79:b8:83:1f:cb:4e:40:b9:8d:4e:7b:4c:5a:49:a8:2b:
         c9:03:ee:cf:35:5d:09:9d:3a:a1:d7:55:0d:13:b4:a8:c9:fe:
         b1:5f:cb:7c:2f:7e:65:58:9a:3d:e9:14:a8:7b:9c:3a:ab:6f:
         3c:56:bc:40:22:84:fc:2f:44:3b:ba:a2:a6:1c:e0:0f:15:10:
         8d:48:57:c2:8d:80:07:6a:1b:1e:ed:bb:36:29:6f:75:02:2f:
         0b:c1:a5:e0:db:5b:8f:2b:45:55:e4:c7:9b:24:24:9b:93:ba:
         50:58:7b:26:1c:33:e9:70:e5:d6:d1:d3:50:de:89:dc:16:35:
         4c:b9:b2:23:f7:b6:4b:c3:67:01:ac:27:c8:a7:f1:c7:72:77:
         54:50:25:9e:e3:c1:d6:89:1d:5f:19:29:60:95:89:ec:19:01:
         d0:ff:92:fd:c9:b1:02:8e:1c:9b:e1:e1:56:fd:20:32:69:03:
         a6:06:da:16:49:16:bb:b3:f4:c5:96:3f:4e:da:7e:79:00:bf:
         81:de:19:6a:29:a4:c1:84:c6:b4:e7:97:8f:73:9e:d6:00:e6:
         5e:6a:ef:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:35:02 2026 by rpki-client