Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
File:                     J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft (raw, json)
Hash identifier:          kKtFs+PaMrHEUKifO7VXK/V4WTEXFClFsbcKOmecIyw=
Subject key identifier:   4B:19:3B:DD:99:AB:C2:BF:12:36:A9:2C:26:23:2A:C6:50:AD:2D:A3
Authority key identifier: 27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2
Certificate issuer:       /CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
Certificate serial:       019E3305FEF617FA65E97FB81B4CFDD932BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
Manifest number:          1914
Signing time:             Sat 16 May 2026 23:01:31 +0000
Manifest this update:     Sat 16 May 2026 23:01:31 +0000
Manifest next update:     Sun 17 May 2026 23:01:31 +0000
Files and hashes:         1: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl (hash: pl9LBdj6lgmya5ifTMi8MZQ1axNDDBYTywijKCzHZRQ=)
                          2: f6iqlfdMArGL77ftRWPuRND2qEw.roa (hash: Y4n4zPlQ5X9WdhdswqlaVDVx5UOEzkW5UgOyIaM7S3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:33:05:fe:f6:17:fa:65:e9:7f:b8:1b:4c:fd:d9:32:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
        Validity
            Not Before: May 16 23:01:31 2026 GMT
            Not After : May 17 23:01:31 2026 GMT
        Subject: CN=4b193bdd99abc2bf1236a92c26232ac650ad2da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:c7:ac:f4:91:ad:9d:c8:ba:d8:cf:80:e2:
                    b3:1e:7e:c8:01:96:2b:dc:7e:c9:fb:bc:08:c1:31:
                    1a:2d:c3:95:7a:0c:ca:35:58:5f:31:55:cd:4e:96:
                    9b:6e:83:b6:70:e9:eb:4c:2f:63:12:ee:c4:27:25:
                    3c:6c:3f:0d:bb:b2:2f:fd:32:ef:f4:d0:b4:57:67:
                    77:cb:36:54:0a:42:d5:bf:9c:6e:a6:e2:7f:c1:d9:
                    9c:34:00:40:40:c7:ec:f2:50:26:a4:84:f6:c6:7d:
                    21:ac:8e:94:46:5c:68:35:46:8e:2f:6e:28:a1:c3:
                    04:cc:fb:ed:23:09:d9:99:8c:fa:e6:27:e8:0a:04:
                    a4:fe:eb:04:2a:bf:3d:cd:02:06:b5:15:d8:40:1f:
                    ef:77:dd:c3:1e:40:53:33:c9:04:50:02:31:71:79:
                    b0:b7:e3:99:73:36:b9:96:f3:20:1f:a7:57:33:b1:
                    91:e0:2d:1e:54:8a:60:a4:dc:93:87:36:4a:81:97:
                    49:26:ba:f1:57:1d:05:8d:7b:4e:32:5c:7a:dd:07:
                    70:e7:77:32:74:3e:c8:81:82:86:8d:ff:53:ac:2c:
                    8e:f1:52:db:71:98:bf:c8:17:9f:ee:1b:03:c6:e9:
                    05:9d:d0:e2:79:05:5b:2d:46:c8:0d:be:f9:bb:46:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:19:3B:DD:99:AB:C2:BF:12:36:A9:2C:26:23:2A:C6:50:AD:2D:A3
            X509v3 Authority Key Identifier:
                keyid:27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e6:ab:ff:50:dd:f2:5c:3c:3b:a7:de:32:d8:c5:21:c6:84:
         de:51:4b:13:9e:53:a2:49:a9:cb:c7:78:54:f2:6d:09:c8:9e:
         fe:f9:4d:8f:2c:ee:f8:4e:47:dc:61:b5:2f:ff:e4:4b:54:4a:
         1f:7b:a3:77:1b:eb:5d:97:f1:51:f2:58:27:2d:09:8d:aa:db:
         64:ce:37:82:96:4c:56:85:c0:d9:21:96:91:6d:dc:1e:ff:f9:
         20:ff:be:c5:2f:44:4d:aa:93:cc:ba:04:c5:c7:8a:e1:8f:35:
         77:7f:71:a6:28:2c:49:cb:0d:d4:94:97:ba:d9:b7:b9:de:ac:
         32:e4:91:c7:8a:1f:fe:f9:e4:ec:c2:54:0f:50:5d:26:66:db:
         0a:e9:d5:4a:3c:bc:55:6e:99:da:41:a2:e2:85:a0:5c:21:56:
         fa:9c:55:9e:6d:c5:37:bd:0b:7b:b7:f7:88:21:32:42:75:30:
         26:19:72:94:2b:be:f4:74:34:a8:59:a0:87:61:4a:95:e7:70:
         8b:f4:5b:3c:41:9e:be:ca:1c:68:36:b3:de:2c:d5:5a:5a:f8:
         16:22:e3:09:82:5d:a3:f4:7e:20:3b:58:d9:e7:45:d3:dd:ce:
         06:58:7e:0d:23:a2:df:c8:3c:aa:83:0f:cc:60:24:5b:bc:2a:
         35:ad:37:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4zBf72F/pl6X+4G0z92TK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTQ1NTYzOTViNDdiZjQzZTBkNWQ1NTZlN2UyNTViNmM4
YWNjYzIwHhcNMjYwNTE2MjMwMTMxWhcNMjYwNTE3MjMwMTMxWjAzMTEwLwYDVQQD
Eyg0YjE5M2JkZDk5YWJjMmJmMTIzNmE5MmMyNjIzMmFjNjUwYWQyZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzozHrPSRrZ3IutjPgOKzHn7IAZYr
3H7J+7wIwTEaLcOVegzKNVhfMVXNTpabboO2cOnrTC9jEu7EJyU8bD8Nu7Iv/TLv
9NC0V2d3yzZUCkLVv5xupuJ/wdmcNABAQMfs8lAmpIT2xn0hrI6URlxoNUaOL24o
ocMEzPvtIwnZmYz65ifoCgSk/usEKr89zQIGtRXYQB/vd93DHkBTM8kEUAIxcXmw
t+OZcza5lvMgH6dXM7GR4C0eVIpgpNyThzZKgZdJJrrxVx0FjXtOMlx63Qdw53cy
dD7IgYKGjf9TrCyO8VLbcZi/yBef7hsDxukFndDieQVbLUbIDb75u0bmPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsZO92Zq8K/EjapLCYjKsZQrS2jMB8GA1UdIwQY
MBaAFCeUVWOVtHv0Pg1dVW5+JVtsiszCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hNWI2ZjctZjU1MS00NDFiLWJiOGYt
NzlkYTdhYWFhM2IyLzEvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hNWI2ZjctZjU1MS00NDFiLWJiOGYtNzlkYTdhYWFhM2Iy
LzEvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+ar/1Dd
8lw8O6feMtjFIcaE3lFLE55Tokmpy8d4VPJtCcie/vlNjyzu+E5H3GG1L//kS1RK
H3ujdxvrXZfxUfJYJy0JjarbZM43gpZMVoXA2SGWkW3cHv/5IP++xS9ETaqTzLoE
xceK4Y81d39xpigsScsN1JSXutm3ud6sMuSRx4of/vnk7MJUD1BdJmbbCunVSjy8
VW6Z2kGi4oWgXCFW+pxVnm3FN70Le7f3iCEyQnUwJhlylCu+9HQ0qFmgh2FKledw
i/RbPEGevsocaDaz3izVWlr4FiLjCYJdo/R+IDtY2edF093OBlh+DSOi38g8qoMP
zGAkW7wqNa031Q==
-----END CERTIFICATE-----
Generated at Sun May 17 01:15:22 2026 by rpki-client