Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File:                     _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier:          jaU7wpmLQjE5Q2wg6vvsQ5q1eNTu+gvW8aLf9+nxkX8=
Subject key identifier:   88:C9:EB:98:2B:5E:2C:EC:43:FB:D7:F9:AA:08:26:1B:75:24:B0:9A
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer:       /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial:       019E2926747E9E144C2DDEFDF878660344F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number:          190D
Signing time:             Fri 15 May 2026 01:00:46 +0000
Manifest this update:     Fri 15 May 2026 01:00:46 +0000
Manifest next update:     Sat 16 May 2026 01:00:46 +0000
Files and hashes:         1: 4cocr0q1XWVnObqRRasdUZTa22c.roa (hash: 86THFSFQTNeIPxjfawMpIZH9JHPT6I8T1KqMTV+dRZo=)
                          2: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: ZZ1VvlgycW8V3WwVdrs/FuQAwP5TcoHLTPzBdzbxfNA=)
                          3: iwkzEw-xYne2_moODPhsHHvfJEE.roa (hash: e85JS9mOgxQCslqs7Lpvehm/GeHrCKP2QV8UeWsf++I=)
                          4: lPb2QmWiKPxzYTHlUwItF0AKSL0.roa (hash: t0HsgpiNiYSsplZbvt5snbpm+tzmqAxHOzqpSQ+fk5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:26:74:7e:9e:14:4c:2d:de:fd:f8:78:66:03:44:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
        Validity
            Not Before: May 15 01:00:46 2026 GMT
            Not After : May 16 01:00:46 2026 GMT
        Subject: CN=88c9eb982b5e2cec43fbd7f9aa08261b7524b09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:76:9e:00:08:94:75:60:92:a0:6c:a5:3c:70:
                    a4:fa:19:46:89:5f:b3:8a:f6:f4:b5:00:70:8a:f8:
                    15:49:19:4b:a3:a7:ff:0f:f0:6b:81:39:d6:a3:9f:
                    cc:f2:71:d5:17:a1:b1:51:8b:20:2c:5c:84:c9:8b:
                    93:71:40:66:ea:63:da:a6:79:83:b4:9c:ce:e0:a1:
                    01:37:e2:1f:71:a5:6d:de:bb:d5:17:0c:80:92:42:
                    b3:5f:57:cc:a8:b3:4c:d7:f1:fd:4a:94:95:ce:8e:
                    8e:ff:2b:c7:9f:1a:aa:02:b5:77:c4:5e:22:8b:b9:
                    12:1c:47:aa:6f:25:45:48:ee:4e:d1:ab:ff:6f:35:
                    e6:d4:e7:ae:a0:e1:b7:b4:6b:3e:3f:79:53:45:3d:
                    58:6d:ac:63:ec:49:91:e2:68:96:fb:8c:c5:e8:07:
                    35:52:d3:ee:74:f8:7b:5d:ec:25:27:5d:dc:87:13:
                    49:d7:e1:24:2f:0c:e6:f6:b2:db:16:1e:b0:8a:9f:
                    c7:be:44:cb:e5:6d:d1:d0:b9:96:16:29:f2:a4:ca:
                    e4:44:8d:05:ea:c4:f0:3e:04:e6:4f:2d:56:5a:d5:
                    32:3b:31:38:49:c0:fa:93:ad:98:39:9e:d9:2b:0b:
                    ec:34:65:26:0d:57:0e:53:2c:e1:bd:ea:bb:41:13:
                    ef:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C9:EB:98:2B:5E:2C:EC:43:FB:D7:F9:AA:08:26:1B:75:24:B0:9A
            X509v3 Authority Key Identifier:
                keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c0:d6:c6:85:bb:cf:1a:d8:c8:51:85:34:55:60:41:ac:fc:
         35:c3:ac:57:75:78:a2:23:1e:27:65:59:66:c1:60:d7:26:63:
         10:4a:58:94:53:96:8f:79:f3:4d:cf:54:97:3f:72:be:c5:d1:
         59:c4:f3:4d:cb:3c:47:93:54:48:7c:7b:3a:43:d7:8c:b6:e1:
         f4:63:65:cf:5e:95:02:be:36:f4:f3:5f:e8:41:3c:32:93:12:
         10:e9:c1:c3:52:84:aa:37:7f:95:64:2c:9f:9b:3c:81:a5:fb:
         cc:c4:b8:97:38:3a:a9:62:99:5a:34:3e:b3:b7:33:d5:e8:c1:
         dc:aa:6c:0e:6c:aa:f2:14:51:69:97:67:2e:bb:28:af:2c:2f:
         e5:7d:8b:14:84:94:15:95:9c:26:d9:d2:1e:2d:ca:d8:c3:14:
         9e:48:4e:b0:44:e2:91:93:3b:e8:1c:c0:4a:72:00:30:31:66:
         4a:d7:a4:a8:a7:4d:02:b8:1d:64:50:0d:ab:5f:40:ed:1c:a6:
         5d:85:48:64:cb:5b:a7:56:2a:8b:7a:e7:f4:a7:ba:d1:c7:21:
         a9:e6:6b:66:85:9e:ff:77:88:69:32:b7:5e:0b:66:26:8f:15:
         cd:1d:be:6b:ab:e2:61:17:50:be:82:17:00:21:ca:95:e7:e2:
         32:12:47:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:59:03 2026 by rpki-client