Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File:                     jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier:          6rjpwcB5vVzQtJ91yZtjC5xaTtU0COYSzwO9JrHnUxw=
Subject key identifier:   D8:6F:F7:5D:AA:FA:DB:7C:82:1B:84:22:A8:65:B4:DB:55:4E:71:93
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer:       /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial:       019E2ADE69683FF78E0E78B3F7EEC47D2663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number:          1910
Signing time:             Fri 15 May 2026 09:01:19 +0000
Manifest this update:     Fri 15 May 2026 09:01:19 +0000
Manifest next update:     Sat 16 May 2026 09:01:19 +0000
Files and hashes:         1: RtAzEtFofwFDRI1uklV1iXMa1wg.roa (hash: cRkKQUmXVsmTzq50TJwx3uR/gXhJ/74yYnMnrtZIm+M=)
                          2: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: tiJlBzT9JsxQ9x7emFWMhpoYKVObbaIz1G7qgtUyDY0=)
                          3: zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa (hash: 5YNYXEQ+H71UmBiAtmwj2k1bmJWUMWVXm7siQv17RzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 09:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:de:69:68:3f:f7:8e:0e:78:b3:f7:ee:c4:7d:26:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
        Validity
            Not Before: May 15 09:01:19 2026 GMT
            Not After : May 16 09:01:19 2026 GMT
        Subject: CN=d86ff75daafadb7c821b8422a865b4db554e7193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1c:85:df:22:79:40:b6:46:2e:4c:d4:e2:f4:
                    7d:bd:31:35:5d:e0:00:47:3f:34:9e:87:02:db:a8:
                    07:42:a1:e5:ba:04:5b:fb:39:70:46:62:7d:90:46:
                    3e:38:2f:b7:b1:3e:11:ab:9a:28:a7:10:6f:46:b6:
                    3d:9e:82:5b:44:76:4e:81:c0:21:41:c9:72:ca:0d:
                    a9:3d:6c:8e:88:6f:36:cc:78:16:a1:42:d0:bb:6a:
                    7a:a0:9c:0b:fd:79:ef:46:9b:03:f2:03:e2:c0:75:
                    52:58:d3:4d:65:1c:48:65:84:81:7f:6f:4a:db:cd:
                    7a:85:7e:fe:b4:36:65:ed:07:ad:48:ad:3f:9e:11:
                    1f:1b:48:68:b0:91:a1:f6:80:e7:f0:fc:92:83:f9:
                    02:4f:15:ed:fb:54:58:00:07:0d:a5:5f:da:8d:52:
                    c6:9e:b2:dc:e8:7c:b5:be:ab:4b:6f:7d:ad:2a:2c:
                    e2:62:c6:26:87:45:bf:b7:61:f8:43:2f:86:99:dd:
                    05:04:90:34:13:32:da:bf:5f:72:01:50:16:ec:1e:
                    0c:da:9e:62:ce:17:c8:7f:f7:69:96:49:54:ac:0e:
                    fc:25:fa:8a:4e:0f:33:fb:69:e3:a3:4c:29:7e:b7:
                    75:de:9e:75:60:89:16:9d:cf:e7:35:2b:57:05:6a:
                    b7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6F:F7:5D:AA:FA:DB:7C:82:1B:84:22:A8:65:B4:DB:55:4E:71:93
            X509v3 Authority Key Identifier:
                keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f7:a6:ec:72:b3:f6:11:cd:fa:66:15:d1:30:d9:1c:4c:00:
         b6:dd:bf:9b:9f:78:7d:a6:7d:7b:9c:99:e5:03:71:16:55:27:
         27:73:83:e9:a9:26:77:62:a2:f8:11:72:7f:c4:ad:d8:b6:d2:
         76:bb:96:95:35:54:5c:d3:fd:dc:be:07:c0:36:c1:72:ca:d0:
         f6:11:41:b8:f7:6d:a5:76:42:45:3e:48:98:03:c7:ec:e8:66:
         9b:0e:38:c4:a8:4f:83:30:e6:ef:ca:30:a5:f3:fb:b2:90:63:
         94:88:39:44:39:93:9d:a6:ac:bf:bf:bc:ff:8d:36:f4:1f:55:
         55:b8:70:b3:bf:d2:68:ec:29:ef:4b:0c:42:77:b9:d0:8c:bd:
         0a:6f:9a:a3:9f:d1:19:ef:7f:02:3a:52:ce:8b:0d:cd:dd:d3:
         c0:14:69:ca:99:d3:f3:00:8e:e6:77:76:95:fd:90:e6:3e:4d:
         11:bc:3a:1a:a6:f3:73:c7:93:d5:d9:ef:71:4e:e1:f3:72:84:
         33:10:64:f1:ff:b6:df:4f:31:32:7e:c7:8e:6f:32:26:a4:17:
         ad:28:c6:36:aa:79:d6:30:95:0f:84:4e:ee:54:50:ff:80:f2:
         92:97:bf:35:28:8d:ef:2e:d8:92:d3:07:63:66:72:11:f2:04:
         55:76:a3:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4q3mloP/eODniz9+7EfSZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjYwMzJlMDg4OTQxMThkNzk5OGM1YzA2MGNhNDZlYjM4
NzEzMzgwHhcNMjYwNTE1MDkwMTE5WhcNMjYwNTE2MDkwMTE5WjAzMTEwLwYDVQQD
EyhkODZmZjc1ZGFhZmFkYjdjODIxYjg0MjJhODY1YjRkYjU1NGU3MTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphyF3yJ5QLZGLkzU4vR9vTE1XeAA
Rz80nocC26gHQqHlugRb+zlwRmJ9kEY+OC+3sT4Rq5oopxBvRrY9noJbRHZOgcAh
Qclyyg2pPWyOiG82zHgWoULQu2p6oJwL/XnvRpsD8gPiwHVSWNNNZRxIZYSBf29K
2816hX7+tDZl7QetSK0/nhEfG0hosJGh9oDn8PySg/kCTxXt+1RYAAcNpV/ajVLG
nrLc6Hy1vqtLb32tKiziYsYmh0W/t2H4Qy+Gmd0FBJA0EzLav19yAVAW7B4M2p5i
zhfIf/dplklUrA78JfqKTg8z+2njo0wpfrd13p51YIkWnc/nNStXBWq3yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhv912q+tt8ghuEIqhltNtVTnGTMB8GA1UdIwQY
MBaAFI1mAy4IiUEY15mMXAYMpG6zhxM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUt
NTk5ZDFjYTZhNWZkLzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUtNTk5ZDFjYTZhNWZk
LzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfem7HKz
9hHN+mYV0TDZHEwAtt2/m594faZ9e5yZ5QNxFlUnJ3OD6akmd2Ki+BFyf8St2LbS
druWlTVUXNP93L4HwDbBcsrQ9hFBuPdtpXZCRT5ImAPH7Ohmmw44xKhPgzDm78ow
pfP7spBjlIg5RDmTnaasv7+8/4029B9VVbhws7/SaOwp70sMQne50Iy9Cm+ao5/R
Ge9/AjpSzosNzd3TwBRpypnT8wCO5nd2lf2Q5j5NEbw6Gqbzc8eT1dnvcU7h83KE
MxBk8f+2308xMn7Hjm8yJqQXrSjGNqp51jCVD4RO7lRQ/4Dykpe/NSiN7y7YktMH
Y2ZyEfIEVXajig==
-----END CERTIFICATE-----
Generated at Fri May 15 17:01:17 2026 by rpki-client