Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File:                     j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier:          OMevZWfnGaq6Jqc8l+dX+OwjssxA+G6ai4xZLN+WZB4=
Subject key identifier:   93:1B:D4:8A:09:89:F2:FC:A5:B4:CB:41:B5:85:C8:13:06:21:09:F6
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer:       /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial:       019DECA42F6E82FEA427786E11DED5C660B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number:          1900
Signing time:             Sun 03 May 2026 07:01:16 +0000
Manifest this update:     Sun 03 May 2026 07:01:16 +0000
Manifest next update:     Mon 04 May 2026 07:01:16 +0000
Files and hashes:         1: 1-99tj9n-LWYw_lI6J2ZtTlYMtsw.roa (hash: Ptwrv4fZgKC6RoxF9JtUijELaGYTN5wfnCikQVHX0jc=)
                          2: Vbu4WFHtQs8CWjvDwWDBgOfuqwQ.roa (hash: N29scv8xguie+t9aPoJpoSulc1+RZLFrY9t5xm5Se4E=)
                          3: WHqH2EhDK6xxFIiXyNlsjw-yMMg.roa (hash: boc+B5V0r/3xbux19AoHg18zg6QdefO3+vjSL8b5Cv8=)
                          4: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: V4uot5uQb+Q/RO3cYlTSWvX3VE0YqwthAVDUuQP6ReE=)
                          5: wsaxcP_FSlrJyUqyv6RnWe5M_1k.roa (hash: 7BcGsYEeMK3lgIGyfCupRWnQz43ULZB5dbROxwaq/V0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 07:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ec:a4:2f:6e:82:fe:a4:27:78:6e:11:de:d5:c6:60:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
        Validity
            Not Before: May  3 07:01:16 2026 GMT
            Not After : May  4 07:01:16 2026 GMT
        Subject: CN=931bd48a0989f2fca5b4cb41b585c813062109f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:fc:6f:4c:b5:12:09:ae:87:cd:6e:7f:ec:
                    31:d6:16:bd:6e:1c:f2:32:0b:f5:31:68:c9:e3:12:
                    24:8b:2e:3c:ea:4f:93:02:56:9b:6c:36:d6:7e:ea:
                    6a:ad:9c:d6:cf:22:34:3a:83:a7:9d:e0:e6:6c:63:
                    35:d8:8e:8e:78:75:59:31:ad:a3:98:00:90:35:ea:
                    41:04:bc:f9:e0:16:e9:27:0d:25:5e:e8:4e:b5:16:
                    aa:38:f0:eb:5a:04:79:90:c8:ec:d1:99:7b:19:c1:
                    7e:57:b9:2b:ee:9b:18:65:e1:09:13:ac:e0:dd:63:
                    89:df:df:c3:6e:4b:9c:66:9e:df:67:38:81:7e:37:
                    86:30:93:d4:f1:48:53:6a:07:f6:f7:a6:2b:5f:1b:
                    77:b8:87:e2:34:21:4f:85:32:42:44:c2:27:9b:31:
                    1a:7f:a5:69:cc:e4:34:e8:fb:fc:f4:e0:0d:db:44:
                    23:1d:4d:da:cd:ce:e1:c8:c5:ff:0e:06:3d:ab:81:
                    dc:c7:cb:ee:ff:89:a8:da:d8:32:26:4e:c8:f1:6c:
                    00:32:3b:3e:f8:2c:ea:3e:a7:cb:1c:fd:83:41:76:
                    ce:b6:cf:bd:58:80:c2:65:92:6c:83:e8:2b:b7:69:
                    d2:0d:ed:c1:c3:4b:20:83:91:8d:45:e2:08:72:a8:
                    1c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1B:D4:8A:09:89:F2:FC:A5:B4:CB:41:B5:85:C8:13:06:21:09:F6
            X509v3 Authority Key Identifier:
                keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7b:ad:b8:be:6a:56:23:c1:13:dc:c9:6a:05:43:22:c4:70:
         ea:c2:86:99:85:d6:9f:5d:d3:94:b6:11:7e:72:84:23:3d:ce:
         55:00:4f:e1:40:24:62:40:8a:1d:d8:c5:17:0a:7e:33:1c:1f:
         5c:c5:e5:d1:dc:71:75:b5:39:8e:11:54:ca:64:8a:4b:5e:b6:
         b7:5f:fe:0e:f2:21:ee:8a:1d:37:66:94:f4:e5:fc:2d:82:ca:
         5c:53:03:96:76:2d:46:f0:80:f0:61:4a:2d:bf:18:2f:83:61:
         6c:04:42:40:40:ed:04:58:12:8b:fa:21:83:41:9f:40:2f:51:
         a7:48:7a:db:b5:82:01:4a:e9:84:92:1b:55:75:c3:28:b5:ea:
         b6:43:04:81:d4:54:e2:7c:5d:f4:64:05:7e:c5:df:0d:0c:63:
         f7:c5:8a:86:c5:46:b9:e0:58:5d:de:b8:89:c8:f8:63:2e:fd:
         f4:96:77:be:66:80:99:ab:16:b0:98:08:6e:b6:98:62:71:00:
         e7:ae:52:90:25:b1:dc:58:a1:6d:91:8e:b9:4e:3a:19:16:2d:
         55:99:fc:ad:37:7f:36:b2:91:0d:94:65:34:f9:99:51:14:7c:
         75:0b:24:81:3b:4b:11:2c:5a:c0:c7:0d:17:29:09:a8:ad:56:
         e3:65:66:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:51:02 2026 by rpki-client