Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
File:                     jcayOVFjzkewNvrgKnH5SIBL9V8.mft (raw, json)
Hash identifier:          55oDuMaElnyplYohP2aoQfWGoa+YyDZE5b9WrB7NxpY=
Subject key identifier:   CB:26:4C:B5:03:70:FB:39:B2:E8:68:EC:1E:CA:7D:86:E8:A6:9E:9E
Authority key identifier: 8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F
Certificate issuer:       /CN=8dc6b2395163ce47b036fae02a71f948804bf55f
Certificate serial:       019DCCAB60E06D265D706058BC3C5EA376D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
Manifest number:          47
Signing time:             Mon 27 Apr 2026 02:01:16 +0000
Manifest this update:     Mon 27 Apr 2026 02:01:16 +0000
Manifest next update:     Tue 28 Apr 2026 02:01:16 +0000
Files and hashes:         1: UqSLybQPqtyf12w058GGJrCrwlE.roa (hash: ay496TJzckN/WV79yGM4pv+K/GRv47GhhBgHEduwC9o=)
                          2: jcayOVFjzkewNvrgKnH5SIBL9V8.crl (hash: YFtBOXxf1bwGR++2tdh1W8RTww7QGh9NHoxBWxMSNj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 02:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:ab:60:e0:6d:26:5d:70:60:58:bc:3c:5e:a3:76:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc6b2395163ce47b036fae02a71f948804bf55f
        Validity
            Not Before: Apr 27 02:01:16 2026 GMT
            Not After : Apr 28 02:01:16 2026 GMT
        Subject: CN=cb264cb50370fb39b2e868ec1eca7d86e8a69e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:da:c1:c1:64:1d:96:af:ad:a8:9a:c4:dd:
                    d9:6f:aa:a6:59:cd:07:79:db:86:75:3c:ed:dc:93:
                    6b:57:72:7b:88:97:0d:db:d0:85:40:da:85:16:03:
                    7a:d4:31:08:27:a9:3c:4f:7a:e3:e1:63:d7:84:ac:
                    fa:e4:bc:94:4d:a6:eb:76:c6:ce:87:8f:9f:c3:2e:
                    cd:5f:7d:d7:0d:a2:89:f0:9e:09:0d:56:4d:91:65:
                    38:ca:8f:d4:39:75:f8:20:92:30:37:53:3f:bb:91:
                    d5:2a:c1:34:4c:b0:1b:90:e8:5d:ea:1c:a4:6b:ee:
                    ad:12:5f:85:0f:dd:3a:55:11:07:b4:f8:1d:53:4e:
                    44:7f:b8:89:bb:23:a8:43:13:87:50:c2:c4:2c:a4:
                    d3:f3:7e:a5:9f:40:6a:8b:d3:0a:1a:0a:80:1a:05:
                    e2:fc:b4:76:93:17:f5:03:35:41:e7:a6:80:a4:e5:
                    41:39:99:a1:3b:14:fb:47:57:cc:c5:45:27:d0:44:
                    d9:e6:de:2e:7c:5c:b4:76:31:76:89:9c:a6:57:e7:
                    b7:9e:5a:34:0b:0a:dc:b9:ec:94:72:07:ec:47:3d:
                    1e:b6:6e:c8:51:ef:e0:e9:c5:f5:d0:8b:95:39:9c:
                    4f:b1:3f:e5:b6:58:c7:83:f2:42:b3:2f:6f:7c:b2:
                    db:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:26:4C:B5:03:70:FB:39:B2:E8:68:EC:1E:CA:7D:86:E8:A6:9E:9E
            X509v3 Authority Key Identifier:
                keyid:8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:77:16:fd:05:7b:9e:69:35:d9:52:0e:ae:fd:ff:ed:b4:04:
         0f:ed:53:52:c4:ae:5b:0b:d2:45:83:43:4b:9e:61:f7:bb:ae:
         6c:28:98:f5:08:87:c7:f5:6b:58:97:9a:62:cf:83:80:a5:06:
         93:d6:08:c1:07:4a:29:6b:a9:fd:e0:0e:5a:7f:f5:76:1b:d4:
         02:b8:c8:6b:78:65:1e:bc:bd:63:1d:8d:bf:56:cf:c4:a8:6a:
         8a:a9:28:10:db:e2:f0:b2:5c:32:98:f2:6c:eb:ee:20:d9:df:
         5b:6e:19:ac:3d:42:72:2a:37:b1:52:59:e4:5e:4d:2c:7a:bf:
         16:b4:d9:4f:04:2b:85:4f:c4:1a:de:38:44:9f:54:8e:13:6e:
         7f:b6:68:d0:16:54:81:dd:6c:15:2e:cc:e4:30:77:23:02:5a:
         fc:48:8d:fd:3d:cf:43:f7:ad:c5:d4:e1:52:58:00:e8:2b:5e:
         eb:56:48:5c:51:77:a3:bd:bc:ed:7f:79:e0:88:c5:fb:85:6d:
         69:72:22:76:a8:0d:a3:eb:8d:b1:92:2f:3a:f2:9a:91:cc:92:
         33:4a:95:8f:5f:08:08:fe:74:fa:34:1f:4c:b5:80:a2:97:da:
         a5:9a:67:77:30:76:f8:60:db:c6:36:cc:a1:43:a1:ba:31:f7:
         35:a2:fe:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Mq2DgbSZdcGBYvDxeo3bWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzZiMjM5NTE2M2NlNDdiMDM2ZmFlMDJhNzFmOTQ4ODA0
YmY1NWYwHhcNMjYwNDI3MDIwMTE2WhcNMjYwNDI4MDIwMTE2WjAzMTEwLwYDVQQD
EyhjYjI2NGNiNTAzNzBmYjM5YjJlODY4ZWMxZWNhN2Q4NmU4YTY5ZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4rawcFkHZavraiaxN3Zb6qmWc0H
eduGdTzt3JNrV3J7iJcN29CFQNqFFgN61DEIJ6k8T3rj4WPXhKz65LyUTabrdsbO
h4+fwy7NX33XDaKJ8J4JDVZNkWU4yo/UOXX4IJIwN1M/u5HVKsE0TLAbkOhd6hyk
a+6tEl+FD906VREHtPgdU05Ef7iJuyOoQxOHUMLELKTT836ln0Bqi9MKGgqAGgXi
/LR2kxf1AzVB56aApOVBOZmhOxT7R1fMxUUn0ETZ5t4ufFy0djF2iZymV+e3nlo0
CwrcueyUcgfsRz0etm7IUe/g6cX10IuVOZxPsT/ltljHg/JCsy9vfLLbgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsmTLUDcPs5suho7B7KfYbopp6eMB8GA1UdIwQY
MBaAFI3GsjlRY85HsDb64Cpx+UiAS/VfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNheU9WRmp6a2V3TnZyZ0tuSDVTSUJMOVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YTRiZDItZmQwYi00ZjJlLWFmZGIt
OWY4ZjgzZjgyMjI4LzEvamNheU9WRmp6a2V3TnZyZ0tuSDVTSUJMOVY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YTRiZDItZmQwYi00ZjJlLWFmZGItOWY4ZjgzZjgyMjI4
LzEvamNheU9WRmp6a2V3TnZyZ0tuSDVTSUJMOVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHcW/QV7
nmk12VIOrv3/7bQED+1TUsSuWwvSRYNDS55h97uubCiY9QiHx/VrWJeaYs+DgKUG
k9YIwQdKKWup/eAOWn/1dhvUArjIa3hlHry9Yx2Nv1bPxKhqiqkoENvi8LJcMpjy
bOvuINnfW24ZrD1Ccio3sVJZ5F5NLHq/FrTZTwQrhU/EGt44RJ9UjhNuf7Zo0BZU
gd1sFS7M5DB3IwJa/EiN/T3PQ/etxdThUlgA6Cte61ZIXFF3o7287X954IjF+4Vt
aXIidqgNo+uNsZIvOvKakcySM0qVj18ICP50+jQfTLWAopfapZpndzB2+GDbxjbM
oUOhujH3NaL+Yg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 10:38:31 2026 by rpki-client