Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
File:                     DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json)
Hash identifier:          Z5UbiKSVGLEeuyH8ag9/Szqp/FkByUgGv/pq1bFqe0Y=
Subject key identifier:   03:0E:D4:31:2C:18:C6:0B:77:5A:DD:46:21:3A:2A:EF:0B:C0:73:B2
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Certificate issuer:       /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial:       019E315C5C126D2148E1BF17F5618694A4CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
Manifest number:          193C
Signing time:             Sat 16 May 2026 15:16:36 +0000
Manifest this update:     Sat 16 May 2026 15:16:36 +0000
Manifest next update:     Sun 17 May 2026 15:16:36 +0000
Files and hashes:         1: 1-AaI8fejT2EuBy8bU5EK8dhnX4M.roa (hash: qwdK+ai51JoHl+AaZesyfOeD/xmeqONm4BEGQ9/yp+8=)
                          2: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=)
                          3: 8khK9FRPf0byhiBZHnCIdhAcOEk.roa (hash: M5jEdLm9AcXZIxKRXOcHMpGqLP1Wk6IQD7HnH4NNOWA=)
                          4: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: pT/rDrkx/zWY1AuSmUb/z0IjrQED6iSr5kLh4iZ5CH4=)
                          5: E6UE2krhype5dEzk47kdTgLnbpY.roa (hash: vsoIyEhJQxtatJF7s3epaLpBxKoTWt/dlawVFelKxOY=)
                          6: G5mvuaSRPkxYIO5weFmc3z2dMvE.roa (hash: HqBvDkJQofWkGi5lAbp36rSzA/Y0n3WFIHiQdNe2ZCc=)
                          7: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=)
                          8: So7wgV37uMU10usyjc3NkFGk6ts.roa (hash: 8Vbw5UOb8aVdIPULOCRAbsCHgBmlFwUXcGJtQEpFBfE=)
                          9: Sp2drqUQ318UbCDq0UI3Ie43g9Y.roa (hash: +HZFpj/ZCNqL9JJ6XTPR+HA24wrurx2yPZm7+IYPUJw=)
                          10: _6q9wuDzSJiIGCZ9YefFcAoBZMQ.roa (hash: C/UzzUHj11yHXboHm5t8vq3dYh7JXyh5B3Cj1fatyLw=)
                          11: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=)
                          12: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=)
                          13: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=)
                          14: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=)
                          15: ceHX5930Yw-uMYDr-pQpJhg5-v8.roa (hash: Ca28wHc4zXYTAAEZqjDqcQtD0iK+HxJ4xEb2WB6NA28=)
                          16: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=)
                          17: k-N3kRPBrLDYKlWh2RmWRi1tZ3o.roa (hash: u022PW4D1hnx1r+hl9upVSkbea5Bxn4AcnwA5Cem/nk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:5c:5c:12:6d:21:48:e1:bf:17:f5:61:86:94:a4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
        Validity
            Not Before: May 16 15:16:36 2026 GMT
            Not After : May 17 15:16:36 2026 GMT
        Subject: CN=030ed4312c18c60b775add46213a2aef0bc073b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b5:02:42:0a:15:fa:70:25:8b:da:e8:7c:4b:
                    af:98:d3:10:20:45:e4:a3:fa:ef:fc:90:0a:67:c0:
                    09:22:51:01:22:d3:7f:6f:0d:21:77:62:c9:ef:06:
                    b2:56:85:34:3b:83:ac:42:ab:a2:20:a0:18:bb:eb:
                    07:26:d5:e3:66:65:7e:09:f6:7e:99:66:1e:5f:b0:
                    c1:78:dc:e5:d9:93:05:4a:1b:79:da:11:95:91:72:
                    0b:fc:17:5e:47:9f:39:88:ba:e7:c5:5a:4c:df:da:
                    5d:3a:29:89:b4:f1:c1:a7:a4:23:a2:f7:92:21:ac:
                    f9:7c:74:45:2e:a7:e2:ca:67:c4:10:ad:8e:43:57:
                    ae:d3:99:28:0f:34:d2:b8:ed:34:ca:25:42:fc:cb:
                    c0:76:89:1e:02:05:fa:d4:17:0a:c2:7f:91:f4:12:
                    59:01:89:7c:a1:77:75:b8:62:62:ea:92:ad:7d:ac:
                    f7:14:7e:59:3d:45:f9:1b:9b:ad:4a:a8:1d:4e:6d:
                    d6:10:94:a6:83:6a:c2:1d:49:7a:27:2e:37:72:b2:
                    ab:72:d9:16:7b:1c:17:02:c0:1f:b7:ad:8c:8c:f9:
                    c9:5e:80:29:94:59:17:c1:d8:ae:45:8f:3c:64:63:
                    4a:c9:7b:b6:00:3c:18:fd:f0:be:59:53:22:2f:c4:
                    9b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0E:D4:31:2C:18:C6:0B:77:5A:DD:46:21:3A:2A:EF:0B:C0:73:B2
            X509v3 Authority Key Identifier:
                keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f9:e2:64:0b:4d:40:03:8e:67:ad:a3:bb:7b:b6:72:a5:51:
         42:64:43:a9:0c:b0:94:f4:79:9b:b0:82:79:67:6d:53:2f:58:
         0d:f0:6a:d3:a3:20:b4:a3:3f:3c:0c:8d:bb:bf:93:d9:40:8f:
         2e:e9:52:92:e8:74:66:5a:d2:1d:0d:f9:1c:bd:73:3d:ab:51:
         0f:c8:d5:f9:f5:50:35:c7:36:a2:86:29:f6:1d:6a:95:44:e3:
         b0:47:fa:eb:20:c9:f8:38:87:42:8a:6f:99:15:ec:8a:ca:8b:
         a8:78:9d:9f:cd:19:99:5f:5b:2b:31:9a:b4:23:f3:64:73:c0:
         79:2e:18:8a:55:65:d8:e8:3b:cd:e0:8b:09:06:7d:a3:95:16:
         55:64:88:9a:c0:aa:cb:5f:40:3d:a7:b7:8d:d8:5a:d7:00:15:
         a3:62:2e:71:33:09:ca:5c:3c:1c:6d:30:a2:46:97:8f:1a:1e:
         ed:01:93:52:94:f9:8d:1e:fb:bf:b5:9b:74:29:db:dc:d7:13:
         bc:28:3f:c4:e1:24:2d:bf:dc:cd:4e:2b:3e:b5:6d:c2:7d:3e:
         b6:26:a9:99:d2:18:a7:b2:25:a1:89:67:ef:cf:5a:60:7a:c5:
         45:86:54:fb:a4:97:3d:5b:5d:d7:94:28:af:b2:45:8b:6f:67:
         b1:63:c2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:53:59 2026 by rpki-client