Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
File:                     j1Gq0OQUir4_KouNQxjzS0VrZfE.mft (raw, json)
Hash identifier:          e55IsV2DvnuIZymrhbE7DXmTCSegBdFIcial1lcBvjA=
Subject key identifier:   0F:B4:D7:A8:65:26:E3:2E:33:EB:97:FD:26:6B:B1:46:D7:57:0E:EC
Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1
Certificate issuer:       /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
Certificate serial:       019DED800471B564A14972C2D477C94F8FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
Manifest number:          01B5
Signing time:             Sun 03 May 2026 11:01:23 +0000
Manifest this update:     Sun 03 May 2026 11:01:23 +0000
Manifest next update:     Mon 04 May 2026 11:01:23 +0000
Files and hashes:         1: 17JRT-eliiqD0ZudhQwcd-RHoCY.roa (hash: rsCaM5usnSELR3Hid5CN2oWYMmohcr2pCEMxJm1TSn4=)
                          2: 5CYe2w6R8bIP53LSediQOkU8X6Y.roa (hash: 62hxmbI0Pt2Gc+kE97Qd4+IWL8YV1uOGUoBpSifMc4g=)
                          3: AiyDVffautqfmFw0-sHwLnrdi94.roa (hash: NqMMGxy1WwFAXktdmGqyVpQBfDu1vxm8tC/DWTYXqCg=)
                          4: KTAAuRsqmRld1n4ZdiqcKLG_hbI.roa (hash: Z/rqoZBNVfDm70QTbYQ7hfqHZXGsKtZpgexuaPzb1M4=)
                          5: j1Gq0OQUir4_KouNQxjzS0VrZfE.crl (hash: LZ2ZgwOFlmq7soD1J9ieh7gM/v2C7ELRqeL7HVjBgQ4=)
                          6: lXUAxU6WVwpNoYD3PNJupX0IdnQ.roa (hash: 1IXDFDpAZ7cDUUd7sdHkzjt07vGwbPC7cOUCYW3+UFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ed:80:04:71:b5:64:a1:49:72:c2:d4:77:c9:4f:8f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
        Validity
            Not Before: May  3 11:01:23 2026 GMT
            Not After : May  4 11:01:23 2026 GMT
        Subject: CN=0fb4d7a86526e32e33eb97fd266bb146d7570eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:05:8d:0c:85:39:a4:62:b4:48:c1:4d:91:57:
                    fe:8d:da:2d:79:11:b4:f2:26:d9:5b:91:03:74:df:
                    43:5a:73:19:8d:6e:1d:f3:22:19:08:24:77:35:90:
                    33:1b:8a:83:e9:64:23:cf:42:7b:db:f7:9b:3b:f3:
                    55:ea:fc:fe:5d:a6:c1:68:81:06:89:b8:e1:3c:79:
                    51:0a:8f:b8:b0:ce:4f:75:51:55:67:d8:59:fd:77:
                    6d:43:b5:bd:67:a9:4d:29:95:e2:10:f6:a4:23:1e:
                    d5:c0:82:9a:bb:0e:e9:e7:a7:58:6a:32:9e:c6:64:
                    96:01:e9:66:36:3c:b4:c8:d9:c8:0a:b1:d4:f0:a8:
                    d3:59:a7:78:d6:72:3f:94:f2:d2:4c:7c:66:b3:80:
                    39:78:17:c0:5a:50:68:e1:e4:8c:63:f0:5f:96:b1:
                    ae:47:7b:1a:28:61:7e:c3:5d:5a:f1:93:51:55:d4:
                    86:41:fd:5c:33:e9:df:db:aa:d4:18:30:d3:01:24:
                    3a:dd:e5:bb:d9:a3:5b:91:68:61:21:bf:a9:6a:47:
                    68:b4:4a:4d:dd:30:28:b9:b2:fd:15:1c:0f:0d:57:
                    fa:58:b8:0a:d7:f8:04:f2:2f:75:0f:3e:03:24:be:
                    39:50:db:44:05:a3:01:a8:90:df:28:bc:69:35:b7:
                    de:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B4:D7:A8:65:26:E3:2E:33:EB:97:FD:26:6B:B1:46:D7:57:0E:EC
            X509v3 Authority Key Identifier:
                keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ac:a7:0a:4a:51:c5:d4:31:1f:ef:6e:24:b2:a6:40:30:3f:
         19:a1:18:05:19:79:2e:03:21:98:59:cf:48:66:2d:6a:8e:c1:
         05:e4:43:2b:39:3a:bd:80:1b:38:9a:eb:4c:6b:4e:83:f2:7b:
         db:0f:2b:bd:fb:3f:6a:78:e3:2e:f5:44:90:be:8f:b4:14:c7:
         8b:94:e1:b0:19:d6:af:fe:f7:bf:ff:3a:b7:5f:76:54:a6:0c:
         c4:c3:dc:5d:2c:04:c6:ab:e4:ca:71:df:d5:d4:04:aa:ca:37:
         bd:ca:3a:fb:0e:3f:38:24:1c:ee:0d:cd:30:30:cf:27:ce:32:
         6c:a2:b1:d8:37:6d:67:3b:94:b8:04:51:2f:42:65:94:65:96:
         1c:41:26:5d:39:6f:ce:2d:04:d9:b0:8c:d9:25:71:99:e6:80:
         07:c9:a7:3f:dd:85:51:d1:dd:d3:1e:b1:b2:c8:55:7d:d6:6c:
         de:4e:73:f6:8f:50:96:09:71:11:0b:9a:2b:f1:32:db:de:ec:
         92:bd:c9:ea:a7:26:da:5b:b6:01:5c:e4:0d:21:e6:1d:ae:ef:
         9e:34:80:bf:d6:a5:be:3b:27:d8:38:e8:28:c7:c2:ef:e6:1a:
         da:1b:6c:ff:26:16:e6:00:c9:08:ab:26:7e:28:2c:98:01:e6:
         ae:3e:e1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:10:41 2026 by rpki-client