Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
File:                     jnruNVn8wxv-137s6LdHnI6Fals.mft (raw, json)
Hash identifier:          bGKM1Ntv0ut5BLfRtfYfBLL4Pt1aGVKkfGDPh8TFxsE=
Subject key identifier:   A3:48:EE:C1:00:D2:61:C3:95:D8:93:08:74:E3:7A:EB:07:B8:9E:2E
Authority key identifier: 8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B
Certificate issuer:       /CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
Certificate serial:       019E2A39EF6558C5A28C9A21269860174F26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
Manifest number:          190A
Signing time:             Fri 15 May 2026 06:01:40 +0000
Manifest this update:     Fri 15 May 2026 06:01:40 +0000
Manifest next update:     Sat 16 May 2026 06:01:40 +0000
Files and hashes:         1: 4bTXmGhsxtuFXj4LFcQly9l8q-g.roa (hash: vtBxAeTUSDqb7QyMrleFLdTGUG4t5qmz9DhHOiNE2wM=)
                          2: jnruNVn8wxv-137s6LdHnI6Fals.crl (hash: rKOtqx4i9Jfm9eFPi1ucEWRfrs4AnAywYCgzHSCNH9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:39:ef:65:58:c5:a2:8c:9a:21:26:98:60:17:4f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
        Validity
            Not Before: May 15 06:01:40 2026 GMT
            Not After : May 16 06:01:40 2026 GMT
        Subject: CN=a348eec100d261c395d8930874e37aeb07b89e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:51:71:20:62:80:99:10:36:15:67:d1:a7:c2:
                    4b:63:de:70:ce:17:43:f5:63:29:ef:02:49:8b:c7:
                    b7:d2:cf:b8:1f:22:77:c9:6d:db:03:79:eb:0e:b2:
                    f2:c1:c8:d5:24:9a:94:a0:a1:17:08:4c:6d:3a:f8:
                    e0:11:20:ec:20:f4:d6:03:dd:5e:df:85:02:ee:34:
                    96:06:34:88:eb:52:a0:68:5c:01:5a:5b:77:39:f3:
                    16:05:85:33:93:74:61:a8:0f:c4:06:8f:fd:a6:b8:
                    f4:c6:b6:96:79:5c:28:e8:03:c5:e3:b5:b3:7e:a9:
                    ac:14:4a:4a:cf:4d:24:b7:9f:fb:8a:9b:51:17:55:
                    7b:e5:e2:88:ed:93:7c:7c:1c:3c:96:27:06:85:d3:
                    37:ce:6f:f2:01:67:b6:71:2a:bf:66:61:d0:fa:6d:
                    40:3b:40:f0:2a:90:9f:a9:ba:68:dc:fa:47:73:ba:
                    6b:fb:51:5c:42:0a:48:a6:c9:6f:34:7e:e4:fe:61:
                    01:b9:88:9c:5b:fc:ea:55:44:91:be:70:cc:92:6f:
                    19:c7:5e:94:3b:2e:90:94:9c:59:5b:cb:f8:ae:75:
                    dd:31:8a:4c:2f:02:6e:e2:f2:53:bb:cf:72:4c:cb:
                    3e:23:ad:a7:ef:c0:c2:e8:6d:40:a2:74:eb:05:c6:
                    dd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:48:EE:C1:00:D2:61:C3:95:D8:93:08:74:E3:7A:EB:07:B8:9E:2E
            X509v3 Authority Key Identifier:
                keyid:8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:33:db:1b:1a:ff:ff:6d:d2:6d:5b:47:e9:e5:c3:e2:8c:21:
         71:3a:f4:c7:59:02:3e:cd:49:84:aa:cb:aa:74:ee:41:59:68:
         08:f7:1d:ae:eb:07:56:c4:53:e5:3a:87:3a:7e:52:4c:04:ba:
         6d:a6:5e:9e:e5:3a:d4:ce:07:08:79:96:62:7d:56:32:68:95:
         f0:78:f7:47:fc:17:51:19:76:23:dc:63:68:49:83:f4:87:80:
         33:d0:11:df:b9:6b:b4:44:0c:4d:e6:ad:58:3d:92:40:f4:5c:
         f0:95:ea:c4:78:5d:87:5c:4b:c5:f9:2a:62:84:ea:91:9c:61:
         d9:0f:31:cb:10:a1:7b:57:d9:4a:3b:d1:54:c3:b4:a3:19:7f:
         35:04:3b:59:b0:4c:59:95:e9:60:4b:be:4d:85:55:72:aa:cb:
         9f:a1:42:25:e8:db:6f:44:25:4e:63:f8:44:9e:ab:af:7b:be:
         93:ea:bb:c1:17:a0:77:e1:9b:97:09:8b:f8:25:a3:f6:d5:1d:
         7b:f0:9f:b2:d4:3a:9e:f0:95:56:ac:f5:10:05:7d:cd:0e:27:
         5e:6c:f2:bf:2b:e0:a3:2a:fc:8d:02:cc:3e:c6:55:8b:fd:93:
         88:ec:32:b2:c7:d4:a8:f2:94:72:35:53:c8:29:4b:d7:80:44:
         48:62:c6:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qOe9lWMWijJohJphgF08mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlN2FlZTM1NTlmY2MzMWJmZWQ3N2VlY2U4Yjc0NzljOGU4
NTZhNWIwHhcNMjYwNTE1MDYwMTQwWhcNMjYwNTE2MDYwMTQwWjAzMTEwLwYDVQQD
EyhhMzQ4ZWVjMTAwZDI2MWMzOTVkODkzMDg3NGUzN2FlYjA3Yjg5ZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VFxIGKAmRA2FWfRp8JLY95wzhdD
9WMp7wJJi8e30s+4HyJ3yW3bA3nrDrLywcjVJJqUoKEXCExtOvjgESDsIPTWA91e
34UC7jSWBjSI61KgaFwBWlt3OfMWBYUzk3RhqA/EBo/9prj0xraWeVwo6APF47Wz
fqmsFEpKz00kt5/7iptRF1V75eKI7ZN8fBw8licGhdM3zm/yAWe2cSq/ZmHQ+m1A
O0DwKpCfqbpo3PpHc7pr+1FcQgpIpslvNH7k/mEBuYicW/zqVUSRvnDMkm8Zx16U
Oy6QlJxZW8v4rnXdMYpMLwJu4vJTu89yTMs+I62n78DC6G1AonTrBcbd1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNI7sEA0mHDldiTCHTjeusHuJ4uMB8GA1UdIwQY
MBaAFI567jVZ/MMb/td+7Oi3R5yOhWpbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5ydU5Wbjh3eHYtMTM3czZMZEhuSTZGYWxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wMWM3YzAtZTcwMC00MThlLTkyMDct
OTExNjBiYjRjNjU5LzEvam5ydU5Wbjh3eHYtMTM3czZMZEhuSTZGYWxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wMWM3YzAtZTcwMC00MThlLTkyMDctOTExNjBiYjRjNjU5
LzEvam5ydU5Wbjh3eHYtMTM3czZMZEhuSTZGYWxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTPbGxr/
/23SbVtH6eXD4owhcTr0x1kCPs1JhKrLqnTuQVloCPcdrusHVsRT5TqHOn5STAS6
baZenuU61M4HCHmWYn1WMmiV8Hj3R/wXURl2I9xjaEmD9IeAM9AR37lrtEQMTeat
WD2SQPRc8JXqxHhdh1xLxfkqYoTqkZxh2Q8xyxChe1fZSjvRVMO0oxl/NQQ7WbBM
WZXpYEu+TYVVcqrLn6FCJejbb0QlTmP4RJ6rr3u+k+q7wRegd+GblwmL+CWj9tUd
e/CfstQ6nvCVVqz1EAV9zQ4nXmzyvyvgoyr8jQLMPsZVi/2TiOwyssfUqPKUcjVT
yClL14BESGLGgg==
-----END CERTIFICATE-----
Generated at Fri May 15 10:35:08 2026 by rpki-client