Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
File:                     ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json)
Hash identifier:          V7f6VHNUvI4z9kKvzovl30FloJTgWATOIiCSz+wyQA0=
Subject key identifier:   11:1A:9A:9E:6B:F4:E6:C8:DB:8D:A0:A1:11:1A:8B:16:A9:2A:4C:6E
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Certificate issuer:       /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial:       019E243790C86DCCB3EED0913D4B0400653C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
Manifest number:          1919
Signing time:             Thu 14 May 2026 02:01:21 +0000
Manifest this update:     Thu 14 May 2026 02:01:21 +0000
Manifest next update:     Fri 15 May 2026 02:01:21 +0000
Files and hashes:         1: 6osyBEyP0HcSM0NQyBHIvRn1Fhk.roa (hash: hglwRwFDDllYX9jYTjK+3ZWKDlBPRVFz/hfeMX7vQ4o=)
                          2: JauiIPMakXs-XxyLaWxO0rjIw8E.roa (hash: iXxbDtozEsteNQ9atnfu+OC8ptchPtG62ieHNq3ckVI=)
                          3: Ote8Xple36NOljGpswnBnv1BVHg.roa (hash: 7PcKnm0HqFWloTnBPRiK0Jc5QCuqif0gaeoULdBF7ck=)
                          4: cKqvG9BsZG6su7we84q3E8DeV-0.roa (hash: yebnJKVbgSkS4D7E+ORpv+scwNkFgxpLo5cTVCzh2rI=)
                          5: jYL_MHWzxB2OX15Vxs1hmwy4NzY.roa (hash: VfRhELdR7icqL4aOULnTdK+xLakSZDUjVfSg/1rTQ3c=)
                          6: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: noCKpqRlOI66TXXE0KZjWVyAGHVnfCeI6I5zHjcM1H8=)
                          7: vsAq2ox79fGO3Ta6QC_1orZGKIY.roa (hash: 11wmgbpdweQHKnUalimrWFHED8Za8q31JapGPV4qcP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 02:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:24:37:90:c8:6d:cc:b3:ee:d0:91:3d:4b:04:00:65:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
        Validity
            Not Before: May 14 02:01:21 2026 GMT
            Not After : May 15 02:01:21 2026 GMT
        Subject: CN=111a9a9e6bf4e6c8db8da0a1111a8b16a92a4c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:b3:be:bb:80:7b:83:a0:16:90:8b:6b:35:
                    1a:d6:1d:93:f1:78:f4:ce:ce:13:ab:b0:81:1b:ce:
                    5f:b7:f7:85:e6:b7:14:34:23:38:b9:99:7b:ba:c9:
                    e9:ad:89:26:64:a1:ce:ea:d8:3d:36:f4:be:57:ea:
                    a9:ed:39:6e:b0:75:4a:f9:ff:f4:8a:1b:f5:40:97:
                    6a:ae:7a:46:84:80:b2:fd:9c:a3:36:a4:ec:9a:8b:
                    d2:be:58:f4:63:33:02:d0:cd:4a:88:95:1e:e3:5d:
                    d7:3e:e8:c3:96:b8:31:04:09:69:db:6a:07:24:4a:
                    97:94:d8:6e:5f:5c:05:a3:d2:92:07:03:54:f6:9f:
                    27:32:a3:02:24:09:ff:7f:b4:8d:57:a4:0b:9b:55:
                    94:88:3a:4a:c1:01:94:af:3b:07:07:72:3f:e2:e9:
                    e6:bc:7e:f4:48:ae:2d:67:eb:3b:05:fc:37:22:12:
                    41:c6:45:16:73:5b:9f:b1:65:bd:cb:fb:78:bc:35:
                    1b:c7:05:59:09:09:47:c2:73:0d:d1:e9:61:0b:a7:
                    d0:d0:f2:ea:5a:4a:91:49:58:48:8a:72:98:3e:89:
                    aa:37:79:f7:3f:68:0b:8c:75:01:ed:70:fa:e1:95:
                    d4:e6:e4:36:7f:0d:cd:2f:fa:26:bf:0e:dd:a1:61:
                    f2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1A:9A:9E:6B:F4:E6:C8:DB:8D:A0:A1:11:1A:8B:16:A9:2A:4C:6E
            X509v3 Authority Key Identifier:
                keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:39:aa:b5:9b:27:95:0c:a6:f8:46:46:63:4c:e1:ca:85:66:
         20:fe:a8:0e:b5:35:fc:52:81:84:cd:25:9b:e9:af:12:3a:f6:
         44:da:14:fb:50:aa:c3:53:8f:8e:af:fa:87:5b:65:b8:6f:48:
         ce:7c:a7:d6:bd:30:6c:99:e0:80:8f:c7:54:b0:b5:a6:9a:86:
         9b:ca:8b:82:8e:41:35:90:3b:61:ca:df:8b:1d:5e:9b:33:cc:
         e4:54:7c:76:d6:f5:18:69:66:c6:d0:5f:dc:69:4d:39:65:c2:
         cd:5f:6f:70:ad:d8:86:25:20:44:77:14:3b:3d:5c:6f:2f:6e:
         f8:37:1d:1e:4c:99:a7:7f:24:40:49:ac:51:ab:d7:67:d0:d2:
         bb:e9:cd:64:7b:f3:02:8e:95:bf:d7:24:1d:39:94:e1:ca:29:
         a4:79:e7:93:9e:1e:cb:ad:4b:3c:4e:51:25:9c:9f:64:83:3d:
         7c:82:2b:eb:78:d4:d7:22:74:f4:fd:8a:c3:c1:08:95:4f:04:
         81:e3:ab:66:d0:20:31:31:22:71:b6:b7:77:eb:64:b6:5a:0b:
         70:68:d9:5e:35:01:97:15:e1:39:8b:c8:5b:6b:49:15:f4:91:
         1c:30:a8:6b:2d:b4:da:a5:b8:17:a4:02:31:68:87:9c:06:43:
         f8:19:0c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 10:44:35 2026 by rpki-client