Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File:                     KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier:          tIzT59KSdGZ6sksfu5xKKMbFtf2xn6WkEjLjZTH6yeA=
Subject key identifier:   B5:E4:5B:12:07:D5:53:DC:F2:5D:76:C2:BD:45:33:E9:20:57:12:C4
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer:       /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial:       019E337415911E494024D26836F5CDB506CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number:          103A
Signing time:             Sun 17 May 2026 01:01:46 +0000
Manifest this update:     Sun 17 May 2026 01:01:46 +0000
Manifest next update:     Mon 18 May 2026 01:01:46 +0000
Files and hashes:         1: 15UE9HDgWyp_cAsmKQd04BSa6H4.roa (hash: pIxWzOfjFzWdadGYH0vQMpRvkDryxRhDbvZeh4lLEUw=)
                          2: GcuCBFhhPLtm6AWump2_50RkipM.roa (hash: AN10LtfSDckqwD3VaI/98tkLVo8/t79z+my+6bUMJos=)
                          3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: yFGupWL7R6Cv0tB4L1v+ABXQZioF/uJDyfGlyT7OmS0=)
                          4: bs5yH2megPEoLiq-1Ee8Z68_g6s.roa (hash: bWsVIEeX18Zj1B9Yp3oHbkNqexSpprAqTGKtlbcwk7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:33:74:15:91:1e:49:40:24:d2:68:36:f5:cd:b5:06:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
        Validity
            Not Before: May 17 01:01:46 2026 GMT
            Not After : May 18 01:01:46 2026 GMT
        Subject: CN=b5e45b1207d553dcf25d76c2bd4533e9205712c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ed:e6:54:ee:ac:3c:f6:a8:78:2b:af:5b:14:
                    cb:0a:63:00:74:8a:16:93:5d:b3:1b:31:45:d6:79:
                    a1:3f:ae:56:ca:fa:35:d8:93:2a:b8:56:51:d5:bf:
                    44:f1:f6:73:80:95:6b:95:2f:e0:44:cb:15:c2:bc:
                    fb:43:09:d1:e8:a9:48:5f:f8:03:a5:47:b1:1c:8a:
                    99:02:fd:b3:64:e5:34:24:3a:d3:9a:24:d7:b5:d6:
                    5b:5e:7a:72:f1:47:59:bc:1d:b9:37:de:fe:5b:ab:
                    76:20:4f:ed:d0:f4:6f:78:e4:d8:b2:29:39:95:e9:
                    3e:86:87:7d:a7:47:6b:ef:fb:3b:a3:92:59:92:6b:
                    7d:e7:b7:26:5d:aa:1d:05:7c:e4:68:cb:ab:e4:58:
                    04:e7:da:e5:2d:40:5c:56:05:3f:c9:11:16:5d:55:
                    b6:bd:00:e0:dc:ff:93:5e:6d:b1:86:f6:9a:ab:8d:
                    7c:55:55:30:a6:36:de:2b:5b:36:55:78:48:9c:c3:
                    a6:7d:bd:87:38:90:1d:99:34:3c:60:79:21:bf:a2:
                    6e:14:7c:20:d7:18:e3:89:0c:2e:f7:bb:59:fe:6a:
                    b4:08:c1:93:42:03:ca:21:8d:bb:df:3b:6b:c8:38:
                    01:8f:72:a2:50:a0:8f:77:3f:70:26:c2:10:27:a9:
                    1b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E4:5B:12:07:D5:53:DC:F2:5D:76:C2:BD:45:33:E9:20:57:12:C4
            X509v3 Authority Key Identifier:
                keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:67:04:95:61:20:ce:ec:a9:78:8a:87:53:22:4b:ff:04:c9:
         65:29:15:4c:d4:47:62:8e:45:92:1a:4a:72:4a:0f:67:2e:08:
         f5:bc:41:e9:23:57:47:ee:17:f7:94:3a:56:15:c6:71:9d:25:
         26:2c:0c:45:8b:d5:c2:8e:5e:35:97:db:c3:ed:77:fa:93:50:
         64:f3:1d:44:a8:f2:92:cc:db:33:d8:7a:62:09:fc:d3:13:3a:
         31:74:56:9d:d1:70:25:6a:f2:ef:de:17:85:89:82:57:fb:0e:
         92:f7:e7:fb:bb:5c:5d:c0:bf:82:ec:4d:2a:8f:99:e8:a7:04:
         a5:a2:ec:15:c8:e9:d0:18:ae:af:9d:e6:fe:fd:f6:f1:fc:b2:
         29:c5:f5:a6:4a:01:77:80:80:d7:64:1f:3d:a3:0b:4a:2f:63:
         16:bb:b8:33:5d:b9:4b:84:b6:7f:95:21:06:6e:24:c6:76:3c:
         47:98:2f:c0:82:d6:b1:61:c4:ea:4d:cd:f8:89:92:74:31:03:
         c5:0e:c3:4c:cf:96:7a:bd:27:7d:ab:fd:46:d7:67:ee:c3:76:
         9d:8d:3d:62:0d:bb:91:2a:b4:c8:d3:ea:7d:9b:33:1d:6a:95:
         17:2c:ed:b2:06:fd:2e:1c:c9:8f:d6:d8:39:d4:e0:a0:f7:31:
         a7:fa:95:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 08:23:33 2026 by rpki-client