Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File:                     ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier:          JNTt9Zbx/BWqD9eGrxskN933IQdoLjk307PkgjQORBQ=
Subject key identifier:   26:BC:06:28:01:7B:B1:F9:3D:15:3D:FD:20:83:2A:EE:56:CA:E0:DF
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer:       /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial:       019E295E171147A37DDC6244C258A2712724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number:          190D
Signing time:             Fri 15 May 2026 02:01:32 +0000
Manifest this update:     Fri 15 May 2026 02:01:32 +0000
Manifest next update:     Sat 16 May 2026 02:01:32 +0000
Files and hashes:         1: 1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa (hash: QA7GMjXjaXuTwdxfPne5d0+pqwIBxuYEEIDse7vYIO0=)
                          2: ES59hOIvPLDzVlJ0I-0JDt9aHrQ.roa (hash: uICrLcYcQwJ8TrC2iTXXi0SFYCmHd+cO9NYWiYi1hEQ=)
                          3: LyXo3omYYFGu0x-1vxCVc0jOXXk.roa (hash: tP3+/CoTgyHttLpNnNbTKpXPtaBjJcLwdaSRY8FXziI=)
                          4: Ux0GK8vhew9-6Io06jn8phMnWko.roa (hash: nIk3ffbMCGpJ8s89KtcodgQ7duWnbnupf2+qt/z+NVY=)
                          5: XOGzJgiv8zAvESFhap-saZBvegs.roa (hash: eulsgNSz45FKPDyCpVhnxj2XCa1xVua9poOew9IQNuQ=)
                          6: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: tuyK4RKmsCeg/KPDKN3Vacl6Q6urRQLu4HuzWlKJdUY=)
                          7: npu-xEBPXBXxkjcFkM42ClvBry0.roa (hash: oFDGroXu7G/kMj4/zbhdw+C0K6I1N4oL3NK6l6o4+Dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5e:17:11:47:a3:7d:dc:62:44:c2:58:a2:71:27:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
        Validity
            Not Before: May 15 02:01:32 2026 GMT
            Not After : May 16 02:01:32 2026 GMT
        Subject: CN=26bc0628017bb1f93d153dfd20832aee56cae0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:d6:a8:19:8d:fb:c4:c5:39:75:b1:e7:35:
                    1b:62:ee:64:64:0e:0e:56:00:35:df:5d:b1:d8:61:
                    85:7b:fa:a3:05:1a:93:65:ba:8f:43:ce:6e:db:39:
                    1f:21:1d:ef:06:bf:1a:a5:99:c9:f9:9d:97:20:c4:
                    1f:63:d3:91:fd:be:f2:37:ac:45:a9:2a:6d:1f:70:
                    c3:20:1d:be:f9:03:ab:37:eb:0d:ef:83:8e:0e:ae:
                    b6:78:b2:e7:dc:04:3a:2d:db:25:b3:21:e0:47:08:
                    c5:36:3d:3d:15:34:75:e7:11:a8:02:8f:d2:3a:96:
                    64:93:6e:13:9e:6d:e9:1b:41:40:f1:39:13:32:73:
                    ad:cd:dd:47:f5:63:43:5c:c5:82:e6:70:e9:e7:ef:
                    05:80:84:84:09:15:a7:72:ec:6e:6b:98:a8:34:15:
                    3a:e1:26:20:4f:66:bc:a3:bd:84:6f:9b:b0:7c:3f:
                    cb:80:2c:7d:61:22:77:6f:51:79:5c:42:74:8b:22:
                    6c:cf:1f:56:16:4f:ad:5b:81:73:c7:ce:0d:18:cd:
                    04:ef:c1:ed:3c:34:87:ee:2e:15:a6:c9:85:1b:5d:
                    39:bd:f6:1d:b4:0c:46:2a:49:87:32:05:41:98:25:
                    61:5c:47:6a:c2:8f:62:24:92:1b:f5:57:53:c2:22:
                    5c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BC:06:28:01:7B:B1:F9:3D:15:3D:FD:20:83:2A:EE:56:CA:E0:DF
            X509v3 Authority Key Identifier:
                keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:20:3c:83:ca:2a:4a:c2:67:a2:10:26:76:7c:18:13:c7:73:
         c4:a5:f9:43:80:4b:cf:67:00:e7:9a:7c:d5:4f:de:a8:34:7b:
         00:d9:88:ff:a0:bb:85:0f:b6:aa:72:b2:f2:50:87:f8:82:1a:
         fe:dd:49:c6:a8:80:82:6e:68:ff:74:e8:74:80:ae:d1:8f:ce:
         e1:bd:10:42:20:20:5f:6d:b6:34:73:05:45:23:a2:37:a9:d2:
         69:29:42:b0:21:b8:30:d2:3a:87:85:cd:02:56:1e:93:63:14:
         22:e2:cc:ac:cb:0d:11:9d:8f:a3:26:3a:6b:85:46:3d:38:e1:
         d7:69:59:be:36:f4:e5:60:51:a5:db:a0:fb:08:b0:15:40:de:
         e4:c8:68:97:45:03:09:42:e4:df:5e:32:8c:a2:9c:19:fd:cb:
         ad:6e:95:01:87:e2:01:ea:2b:b6:3d:fa:35:54:83:98:bc:bc:
         35:65:93:ef:8e:b5:74:60:09:4d:6f:24:73:2d:db:2b:19:81:
         be:a8:33:72:79:bc:78:1a:29:90:26:dc:93:1d:31:88:3d:a4:
         c1:38:79:4b:d0:86:fb:39:0c:6d:22:53:03:70:86:bd:47:30:
         d6:11:a0:85:5d:13:1c:ce:68:40:af:10:22:ce:0c:11:b0:ff:
         2d:e7:22:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:53:28 2026 by rpki-client