Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File:                     jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier:          ZeYRxvSCtxDeHz5MHMNG9/YO5rvOwaoAA3Nu+K2AgSU=
Subject key identifier:   1B:CC:B1:17:E1:B4:DB:5E:1F:EC:DA:36:48:4B:01:03:F0:AD:44:A7
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer:       /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial:       019E314DF9E755E32F43D8000CB6C6A51466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number:          1921
Signing time:             Sat 16 May 2026 15:00:54 +0000
Manifest this update:     Sat 16 May 2026 15:00:54 +0000
Manifest next update:     Sun 17 May 2026 15:00:54 +0000
Files and hashes:         1: cJKHZhAm1yldfA_-lkZ40EEeBjQ.roa (hash: TCa2UPciLzCyI82T5SQG7r+50DodL6V7wmJQlR4Fxqk=)
                          2: eVoNOatSRfhuXM7VthqXLINerLI.roa (hash: ztlCcPqCI+akzeK//M1QjBNCZ/FiH8i56TSQ9QdKnuc=)
                          3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: Zvv9B+joUUoCXLddAo0PL9JCrC7hNMA1ATQcKluZIAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4d:f9:e7:55:e3:2f:43:d8:00:0c:b6:c6:a5:14:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
        Validity
            Not Before: May 16 15:00:54 2026 GMT
            Not After : May 17 15:00:54 2026 GMT
        Subject: CN=1bccb117e1b4db5e1fecda36484b0103f0ad44a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:b2:eb:46:b9:41:42:d6:e3:42:3e:f4:e9:
                    07:32:79:d5:71:3e:0b:3e:51:dc:dd:b2:3c:9f:81:
                    12:b8:85:5f:4a:71:58:e4:bd:67:5d:0f:6b:63:c8:
                    26:28:f2:29:ba:81:e2:3f:93:11:9a:8d:a6:c5:31:
                    52:27:48:b3:6a:a9:a0:43:1c:64:08:64:42:6a:ca:
                    e7:ea:bc:2d:e3:4e:02:f8:9e:87:d7:1f:68:6e:ad:
                    81:eb:b3:21:a7:e8:ff:03:d8:a4:8e:73:a0:a3:06:
                    65:cf:c7:23:5d:e1:be:13:df:e4:60:9b:76:44:85:
                    45:6e:43:f3:0a:3b:61:6a:e4:8c:2a:d7:2f:25:1e:
                    21:a5:4e:b5:ff:a4:67:56:6b:1c:b9:83:3a:93:be:
                    f0:2c:8d:f9:58:ee:a2:a2:3d:ec:53:8b:de:ca:83:
                    a8:de:56:a5:16:73:36:b2:13:47:c4:60:f4:17:e4:
                    ae:24:f6:52:a8:e9:4a:05:d4:5a:cf:6a:70:fd:d3:
                    ee:b4:5f:0e:ba:33:01:de:6b:28:af:54:e0:e3:26:
                    02:8e:cf:33:ca:18:f3:3c:a3:47:54:68:d9:31:92:
                    63:ea:02:03:63:ec:a5:54:a1:e6:9f:fa:13:ec:6b:
                    67:6f:6b:1a:3c:43:9a:e8:f2:d7:e1:e6:28:ff:64:
                    09:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CC:B1:17:E1:B4:DB:5E:1F:EC:DA:36:48:4B:01:03:F0:AD:44:A7
            X509v3 Authority Key Identifier:
                keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c3:b8:dd:ee:c0:7f:8c:44:f1:79:4b:19:c3:be:8c:3a:9d:
         94:84:54:5f:df:e9:f3:1c:7c:83:ea:33:dd:d1:ea:33:57:8c:
         57:8f:0b:8a:eb:8f:c4:1a:14:51:ba:d9:0e:90:12:03:29:0c:
         ff:fa:ae:6d:29:6e:a1:db:90:6f:28:42:26:f7:b7:86:a4:74:
         ff:12:7b:b8:e0:fb:d5:8e:74:6a:3d:68:80:9a:73:96:41:f2:
         2d:9b:2d:9c:ae:fd:40:37:a0:87:c2:8c:70:24:f6:65:90:dd:
         91:aa:9c:f0:f1:2e:eb:2d:19:e2:18:46:90:ea:79:94:71:03:
         19:d2:a0:db:d2:a2:08:1a:bf:3d:34:72:21:69:48:6d:c8:7b:
         d6:18:7e:9d:71:59:80:e8:4a:8a:87:e5:f6:61:11:c9:9e:47:
         a9:ce:ff:3f:42:18:9f:0b:6e:ae:94:a5:a6:34:1a:2a:ac:b3:
         f6:90:67:5f:37:45:b3:95:60:28:73:c5:0c:1e:f4:f9:6e:6a:
         dd:33:9e:25:28:3f:13:7a:29:ae:ee:d0:70:f2:70:9b:82:6f:
         ae:b5:bc:bf:76:49:0a:f2:9a:65:c6:be:c9:70:8c:43:e1:e6:
         58:8c:e5:7f:a5:57:c9:bf:bc:23:c6:36:bc:79:34:aa:59:94:
         74:65:b1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:00:49 2026 by rpki-client