Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File:                     sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier:          EHhv20/tnk4+fvu8jQeqpLC7BltVgnOUERxPPej1iNk=
Subject key identifier:   A5:58:29:BC:6D:CE:39:A5:19:29:F2:73:EC:7D:72:7D:BC:01:51:BB
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer:       /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial:       019E314E036A1536125D4EF744C21553952F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number:          1913
Signing time:             Sat 16 May 2026 15:00:56 +0000
Manifest this update:     Sat 16 May 2026 15:00:56 +0000
Manifest next update:     Sun 17 May 2026 15:00:56 +0000
Files and hashes:         1: BQSGEx3nMb3rW3Le5hymWyu8-YU.roa (hash: S7mWCQBW//r+Jv4L1fzMRolM2RhYHtuAZtqku2trt+E=)
                          2: _JF8Eg2LajBMQ-wk536FOe9jq_A.roa (hash: n3KkRLrkwjt5uz08CMrAQjO1W+ar0ekBVWg2d9z/IMg=)
                          3: oX6Il5fRV1X5jAgqxERBXvUP_Tw.roa (hash: XUq2WuxGzyAj/pRWgnx4uOuNcbSM05FoBf026KrRFWM=)
                          4: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: nAsU51mYBBYQP0VqLeXfA3NLfDaxvuoibCcUmwGA/FM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:03:6a:15:36:12:5d:4e:f7:44:c2:15:53:95:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
        Validity
            Not Before: May 16 15:00:56 2026 GMT
            Not After : May 17 15:00:56 2026 GMT
        Subject: CN=a55829bc6dce39a51929f273ec7d727dbc0151bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:32:9e:57:18:70:74:68:6f:77:c5:be:d9:
                    10:40:9f:df:47:20:02:6c:98:4a:85:1d:9f:46:39:
                    79:68:03:c6:ac:a3:3c:0c:97:a0:b1:47:b2:fd:b4:
                    c4:96:51:39:91:87:85:8e:a2:38:18:b5:63:86:e9:
                    b0:1a:2c:a3:82:e8:ae:b4:1e:2f:59:35:bf:a5:17:
                    28:e0:c2:9a:71:61:f9:64:ce:76:89:ad:ac:99:c8:
                    64:c5:ac:1d:ee:30:5b:f1:eb:b7:9f:e7:ab:67:17:
                    5c:ab:7b:cc:a8:03:4f:32:44:8b:7c:0d:ac:40:27:
                    d9:da:97:ad:e0:87:0f:46:dc:cb:a1:fe:f6:96:a7:
                    26:1a:03:aa:bf:6a:ab:0d:fd:7e:73:d7:ce:3e:0b:
                    95:be:49:a2:60:35:8c:ad:8d:27:f9:9c:30:0c:c4:
                    19:e6:01:f9:49:17:e8:11:05:e8:71:58:c2:1a:a7:
                    c0:3a:0b:31:4c:1c:09:24:1b:81:1b:f7:37:eb:d0:
                    00:cd:34:17:d5:08:2a:f7:af:3f:34:26:25:5b:ff:
                    2c:34:2d:ac:69:95:ca:eb:fe:87:ce:07:c0:73:73:
                    65:fa:bc:0f:fa:de:ad:0a:47:90:d2:97:c0:96:9c:
                    71:b3:7d:d9:06:93:30:6f:74:f4:a1:9a:4c:f8:90:
                    74:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:58:29:BC:6D:CE:39:A5:19:29:F2:73:EC:7D:72:7D:BC:01:51:BB
            X509v3 Authority Key Identifier:
                keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:60:c4:a4:ef:0c:d9:51:03:9d:f9:9e:1e:82:ab:43:79:d4:
         d1:e9:ad:c3:24:f8:d6:a4:d2:4c:31:c3:ed:7c:34:cb:fd:67:
         b0:e5:dd:91:a1:52:9b:68:d2:27:54:a4:ba:2f:95:b7:3e:71:
         cc:fe:23:0d:f5:51:e1:21:b9:78:8c:1c:0f:e2:88:f4:8f:b0:
         2c:90:19:38:3f:af:b3:6e:7c:ea:57:ff:63:1a:5d:1c:ac:6c:
         d1:51:20:f9:04:e5:3c:7d:7a:b7:33:e2:b1:21:6f:87:69:bc:
         3c:81:47:a4:30:19:19:71:3f:fb:1a:0d:89:f1:d9:15:30:78:
         de:eb:c1:8b:53:26:fe:7d:10:b1:b2:c3:75:a2:75:fe:06:e9:
         35:56:2e:ef:9a:8f:29:7d:8a:7f:a5:6c:a5:6c:8f:67:08:65:
         82:46:44:a6:aa:ef:85:5b:d3:f8:6f:77:ff:72:6a:e6:d4:f8:
         b0:6e:c9:54:33:48:91:67:16:ff:d6:dd:ab:9b:2b:b9:b6:b1:
         1b:7a:3a:b3:b9:18:46:9f:e8:da:b8:ce:48:5a:11:2a:c7:49:
         5d:ec:99:f4:08:e7:5d:0a:2a:55:cc:6f:e6:aa:7e:e6:f7:38:
         4c:4d:f5:0c:11:6b:08:3f:aa:0f:30:13:66:1a:a0:4d:c1:c3:
         33:05:9a:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTgNqFTYSXU73RMIVU5UvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzZmMmU0MjUyMmU5OGQzNzZiZTM4YTg5ZTVkZDUxYWJi
Zjc5OTYwHhcNMjYwNTE2MTUwMDU2WhcNMjYwNTE3MTUwMDU2WjAzMTEwLwYDVQQD
EyhhNTU4MjliYzZkY2UzOWE1MTkyOWYyNzNlYzdkNzI3ZGJjMDE1MWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp10ynlcYcHRob3fFvtkQQJ/fRyAC
bJhKhR2fRjl5aAPGrKM8DJegsUey/bTEllE5kYeFjqI4GLVjhumwGiyjguiutB4v
WTW/pRco4MKacWH5ZM52ia2smchkxawd7jBb8eu3n+erZxdcq3vMqANPMkSLfA2s
QCfZ2pet4IcPRtzLof72lqcmGgOqv2qrDf1+c9fOPguVvkmiYDWMrY0n+ZwwDMQZ
5gH5SRfoEQXocVjCGqfAOgsxTBwJJBuBG/c369AAzTQX1Qgq968/NCYlW/8sNC2s
aZXK6/6HzgfAc3Nl+rwP+t6tCkeQ0pfAlpxxs33ZBpMwb3T0oZpM+JB02wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVYKbxtzjmlGSnyc+x9cn28AVG7MB8GA1UdIwQY
MBaAFLI28uQlIumNN2vjionl3VGrv3mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYt
NmVhYTFjODk4MjRhLzEvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYtNmVhYTFjODk4MjRh
LzEvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmDEpO8M
2VEDnfmeHoKrQ3nU0emtwyT41qTSTDHD7Xw0y/1nsOXdkaFSm2jSJ1Skui+Vtz5x
zP4jDfVR4SG5eIwcD+KI9I+wLJAZOD+vs2586lf/YxpdHKxs0VEg+QTlPH16tzPi
sSFvh2m8PIFHpDAZGXE/+xoNifHZFTB43uvBi1Mm/n0QsbLDdaJ1/gbpNVYu75qP
KX2Kf6VspWyPZwhlgkZEpqrvhVvT+G93/3Jq5tT4sG7JVDNIkWcW/9bdq5srubax
G3o6s7kYRp/o2rjOSFoRKsdJXeyZ9AjnXQoqVcxv5qp+5vc4TE31DBFrCD+qDzAT
ZhqgTcHDMwWa2w==
-----END CERTIFICATE-----
Generated at Sat May 16 22:01:17 2026 by rpki-client