Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File:                     jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier:          hetPsPSTqwLdCO9qkxxrq82r2w4DRuIITHmX8RmPmYA=
Subject key identifier:   F4:19:0C:F1:4B:DA:5F:81:33:17:4C:A1:33:0F:FD:70:AF:28:C0:C4
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer:       /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial:       019E30DFEE741CF743E209A9D06181454143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number:          1184
Signing time:             Sat 16 May 2026 13:00:42 +0000
Manifest this update:     Sat 16 May 2026 13:00:42 +0000
Manifest next update:     Sun 17 May 2026 13:00:42 +0000
Files and hashes:         1: hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa (hash: SieYkKpzIy6oq5VVbN7rTFUvyMh99g+Bi6wzQEIEdkQ=)
                          2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: ZUAeeJmwC1k9kZKLNOyriWiurOUaRWr3DEmiz3QySh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:df:ee:74:1c:f7:43:e2:09:a9:d0:61:81:45:41:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
        Validity
            Not Before: May 16 13:00:42 2026 GMT
            Not After : May 17 13:00:42 2026 GMT
        Subject: CN=f4190cf14bda5f8133174ca1330ffd70af28c0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3b:f8:ad:80:26:44:44:c4:41:ad:09:70:45:
                    31:49:3e:37:2a:a8:24:73:71:6f:04:9b:c8:1a:88:
                    1b:98:d4:bf:0d:3d:bc:d7:89:49:20:60:ba:59:55:
                    0e:03:d1:9f:85:c3:e3:49:6b:59:ca:e2:d8:20:11:
                    82:60:c5:d0:5c:f0:c3:bd:b0:b1:e0:76:09:b7:a4:
                    fb:18:d0:f5:11:ac:ec:3b:be:21:d4:bd:40:f5:0c:
                    ef:b0:2b:4b:a4:bd:9d:b3:1b:4f:da:2b:35:83:47:
                    08:60:fa:2f:1f:4c:a0:58:41:18:3d:28:71:fd:a7:
                    5f:a0:58:4f:33:2b:de:51:84:c0:8b:cb:ef:7e:62:
                    c1:33:dd:6d:87:16:90:3b:ab:53:26:00:aa:be:ff:
                    8e:06:76:5d:9f:a8:ae:23:6e:cf:bf:c4:bb:c5:08:
                    42:46:d0:f3:cb:24:96:11:0a:be:81:43:d6:75:3a:
                    22:dc:93:65:04:f1:d1:2b:f3:1d:ce:ed:b2:f1:dd:
                    47:79:fd:3b:8d:4d:e6:d0:ac:3a:c9:c6:ca:bf:f7:
                    56:0e:5a:1a:8a:bb:82:4f:f0:38:d3:45:9c:70:d7:
                    5a:3f:67:2e:d6:93:7b:2e:59:a6:c3:f3:4e:d5:69:
                    a4:e1:1e:f2:25:37:90:98:41:f1:67:b3:39:d7:d4:
                    51:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:19:0C:F1:4B:DA:5F:81:33:17:4C:A1:33:0F:FD:70:AF:28:C0:C4
            X509v3 Authority Key Identifier:
                keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ef:d5:0a:99:b1:fb:ef:6c:4f:a7:32:3d:28:17:6d:e8:57:
         c8:62:89:0f:b5:7e:fb:d2:d5:7e:0e:fa:e2:b4:0d:ae:99:00:
         a8:74:b0:3c:64:4b:4f:2c:11:2b:c3:79:8c:b8:32:f1:63:da:
         a5:05:c4:f2:46:f0:1b:6a:d1:ee:61:70:2e:a2:a8:ce:fe:e3:
         f5:c2:6d:89:91:dc:63:e3:8d:14:fc:24:6c:7b:28:0f:0c:40:
         e2:c8:1e:35:33:a2:bd:b1:a8:0c:83:18:6e:4f:5d:0b:50:7b:
         ea:dd:8a:3e:72:43:68:59:6a:67:99:ff:c6:83:37:f8:b5:90:
         4b:a7:4c:de:24:81:f9:84:ac:85:c1:b2:9e:97:b4:49:97:4f:
         04:e7:4a:f6:86:d8:dc:c2:11:ba:83:e7:87:d3:fb:83:1e:83:
         b3:db:a2:0a:3f:cb:d5:75:b8:e9:dc:e7:04:36:40:4b:4c:eb:
         24:25:d6:36:ba:ae:ee:41:88:18:aa:05:bd:b8:33:96:04:c7:
         24:74:38:41:8f:22:10:84:fc:b9:d5:90:89:ec:b9:b7:ca:8d:
         1b:52:a2:09:b4:60:75:67:29:3a:84:fc:16:f4:6f:00:06:68:
         9a:c9:7c:d5:75:6a:ec:bf:dd:2e:cd:a1:e5:9c:00:90:4a:bd:
         95:bf:ff:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:46 2026 by rpki-client