Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File:                     jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier:          hFKWA//U81ll9/0MV3+8BRZkW63/hC842lqg3RntlI8=
Subject key identifier:   65:6C:AE:9B:5C:B9:EF:39:DC:15:31:E2:80:4D:16:38:71:CD:C1:1F
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer:       /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial:       019E2882207F70EE5E2F00FF9E0B06DB93FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number:          190B
Signing time:             Thu 14 May 2026 22:01:17 +0000
Manifest this update:     Thu 14 May 2026 22:01:17 +0000
Manifest next update:     Fri 15 May 2026 22:01:17 +0000
Files and hashes:         1: DW0L4TMX0k7NIxwBqURjmrgnl7k.roa (hash: 9bpHxyEG2FowJ+5wF/MX0mk7jznSAQlzUuYCWXpTFQM=)
                          2: fdMO8uKSbPAwkZWz81kW00ikw90.roa (hash: bDzUzfVEg3uUN6Y1DlBJvXf2YCZXufjYUiQMDPh+1vc=)
                          3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: csHdGfOmG9tkYLKwcYwLhh1QOCm49ZHhuv/gvYAcZJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 22:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:82:20:7f:70:ee:5e:2f:00:ff:9e:0b:06:db:93:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
        Validity
            Not Before: May 14 22:01:17 2026 GMT
            Not After : May 15 22:01:17 2026 GMT
        Subject: CN=656cae9b5cb9ef39dc1531e2804d163871cdc11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:ac:e8:58:4b:f5:df:9c:7a:5b:e3:55:08:
                    5e:e8:f8:51:3f:00:31:20:ef:f9:ce:35:9c:f8:53:
                    b7:c4:ec:e6:59:42:2c:00:90:23:b1:7c:ae:54:7f:
                    99:2d:b7:67:15:20:dd:6a:2c:05:2f:0f:1a:33:35:
                    66:c6:c7:ef:bc:56:1d:1d:9d:61:23:14:cc:71:1f:
                    0a:d5:54:81:6e:67:e6:6a:f5:4a:b6:05:66:a2:0c:
                    a7:87:ea:67:e8:9c:d2:dd:cc:f4:81:16:e7:2a:5c:
                    f0:64:ae:4a:c5:c5:53:57:71:dc:55:d4:4c:3e:e2:
                    32:86:de:47:a7:f0:5a:a3:24:7a:94:69:23:c0:d1:
                    d3:66:15:c9:84:ca:ba:a2:7a:21:62:44:b2:da:a3:
                    87:94:76:81:de:0c:c4:26:f1:1a:88:31:55:98:67:
                    d0:16:55:aa:f6:a5:ab:6f:a3:bc:23:2e:f4:52:d7:
                    00:8a:d2:4d:4f:04:7a:9d:3c:6b:c6:f5:80:6f:5d:
                    de:23:59:ec:3b:90:d5:b4:db:8f:92:c1:70:cb:56:
                    9a:4c:01:42:3c:95:a9:5e:f8:6c:ba:c0:7c:bc:10:
                    44:d5:1e:29:67:e5:16:e7:a1:54:9f:14:9f:2c:cb:
                    58:25:b2:eb:52:4d:37:fd:b3:e1:67:ff:bf:c2:c2:
                    6c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6C:AE:9B:5C:B9:EF:39:DC:15:31:E2:80:4D:16:38:71:CD:C1:1F
            X509v3 Authority Key Identifier:
                keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b6:56:94:02:ce:fc:97:f8:41:58:fb:4b:83:c9:00:83:b7:
         c3:27:ac:1a:2d:98:d5:09:7d:f3:0e:34:1c:5e:89:71:c6:1d:
         86:65:28:90:cc:bf:f4:cd:3e:96:72:7f:9f:d8:ac:7a:5c:77:
         70:66:ba:44:a4:fa:cf:98:8b:94:46:1f:e4:05:c0:8e:7d:83:
         69:b1:f0:b2:f0:9d:13:9a:ed:f4:36:7c:19:1c:01:c8:22:f2:
         8f:7a:22:b0:70:7f:4d:3f:b3:f0:d4:57:2d:2b:ef:eb:47:c3:
         63:ed:cf:a1:03:1f:01:d5:51:41:f6:5e:0b:7a:ab:a0:54:8c:
         8c:d7:72:18:7d:f6:e8:63:1f:c7:94:57:c3:ea:1c:a1:12:bb:
         c8:91:1b:84:0e:e0:8a:69:bb:6b:e4:8e:09:96:fe:1d:04:dd:
         cf:21:bf:41:5e:3b:25:de:df:91:9e:42:a8:34:42:8b:b7:54:
         9a:06:4c:e3:20:54:cb:51:ec:ba:28:8c:c8:83:cd:af:67:b2:
         2e:fb:10:e6:f7:34:05:9c:57:72:36:7c:dd:98:67:48:cb:43:
         84:9a:41:30:f2:d4:59:00:01:bc:61:dc:c4:3b:ea:5c:10:f2:
         2b:73:a1:7b:45:4f:93:19:ed:8b:49:27:a7:8c:3c:c2:45:65:
         89:42:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:58:37 2026 by rpki-client