Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File:                     kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier:          4NRtP9I5+7CIzT08p+Zd0/Ex5ZRUupa6EfdMBWjJVTU=
Subject key identifier:   74:FE:0D:B6:B1:EB:65:2B:57:AE:81:29:D1:01:16:A3:A1:E5:45:74
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer:       /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial:       019E2927092ACE5069F793EBC97C0AF6025F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number:          190F
Signing time:             Fri 15 May 2026 01:01:24 +0000
Manifest this update:     Fri 15 May 2026 01:01:24 +0000
Manifest next update:     Sat 16 May 2026 01:01:24 +0000
Files and hashes:         1: JhmecN5URCtv1yBIbMEV6e9g8Co.roa (hash: pl/+LhQub+A0lSXtk6Diu/3nX3HjGeeg4r2Cz4f+9V4=)
                          2: SgvNtEPjeS4PQsDsrJuu4hkfOtY.asa (hash: COU0yqjHmkzsF5ND+gIgB3KnAyucghgqR4Ewe3DYMIQ=)
                          3: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: itU3d3wqDQoHjNfjb28x+H8JfE2V+t5+mOMJh4/obu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:27:09:2a:ce:50:69:f7:93:eb:c9:7c:0a:f6:02:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
        Validity
            Not Before: May 15 01:01:24 2026 GMT
            Not After : May 16 01:01:24 2026 GMT
        Subject: CN=74fe0db6b1eb652b57ae8129d10116a3a1e54574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e5:49:10:10:44:e9:42:b4:87:01:e3:91:89:
                    a2:4c:dd:8e:f6:20:ea:3d:d6:e4:d7:9c:22:18:95:
                    a5:d0:a5:64:6f:c6:79:78:ae:5d:67:78:71:50:39:
                    db:c9:5d:c9:3c:7a:ce:37:4d:fd:c3:90:0c:65:7a:
                    13:93:f4:c0:e6:33:b8:7b:8e:6b:82:79:16:76:c5:
                    e2:a6:db:a8:e3:b6:18:6c:9c:74:c4:9a:b5:52:ab:
                    6f:a9:a5:37:22:21:83:84:bb:a9:89:06:e9:90:29:
                    5c:f9:dc:bb:af:dd:eb:34:12:6f:aa:05:9e:b8:6c:
                    85:ae:95:d5:e0:8c:4b:0d:1c:83:ce:51:4e:34:ad:
                    79:66:cc:2e:ab:41:a3:fd:ea:79:5b:32:78:e2:58:
                    2a:cb:d7:e5:0d:2e:ef:61:32:78:9d:2e:15:01:1d:
                    00:a6:29:cb:4d:17:1b:5f:f9:4c:35:64:47:c9:99:
                    98:dc:a6:00:cf:8b:5c:d9:fc:9e:9d:0a:c4:43:d7:
                    5f:97:e7:ed:6b:45:e1:7b:23:79:33:4f:6c:2d:a9:
                    c9:04:dd:b3:32:94:90:cb:4f:0c:db:f6:b7:91:d3:
                    7b:95:c4:a5:49:19:60:19:b0:24:52:e3:44:ae:91:
                    dd:ea:71:36:d2:63:60:c5:a5:87:49:86:8d:5c:fd:
                    61:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FE:0D:B6:B1:EB:65:2B:57:AE:81:29:D1:01:16:A3:A1:E5:45:74
            X509v3 Authority Key Identifier:
                keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:07:ee:46:7a:f8:65:4c:fb:ea:2e:fb:37:9b:08:55:4c:5f:
         50:58:18:51:a5:1b:f5:7f:7f:2a:70:da:39:1a:14:b9:5d:af:
         6a:2c:74:e2:41:62:97:04:e9:ff:14:11:44:5a:88:78:9b:56:
         12:ee:0f:dc:66:02:5a:14:16:e3:d5:0d:28:73:a4:e7:89:29:
         31:28:c9:74:a5:c5:19:66:9c:19:7d:ea:f5:26:16:d8:89:af:
         a1:45:e6:77:70:9d:06:1f:a4:f1:67:80:1d:c2:f2:9c:4d:1f:
         9d:79:64:26:cf:40:6b:42:0a:88:93:53:26:ea:a5:ea:02:ce:
         d8:5c:04:6f:01:f7:d9:50:13:54:20:d1:70:b1:b8:63:19:9d:
         19:7d:3b:63:53:ba:ca:8e:ff:9d:43:bd:d7:60:9a:bc:44:4a:
         34:06:33:5d:18:60:63:a8:3a:f8:a5:7b:00:b7:cc:b9:04:c9:
         b1:44:f5:38:98:5e:e2:72:19:52:7e:84:96:73:b0:19:ba:fa:
         33:b2:d4:3f:e1:23:cd:17:46:46:bb:e4:12:75:c0:db:1a:5d:
         0d:6e:42:dc:2d:39:ad:5c:b6:6d:74:4d:8a:d5:c9:a4:95:37:
         2f:77:f1:69:cb:51:77:6f:57:eb:b4:b2:1d:f3:60:74:7d:cd:
         14:b1:13:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:23 2026 by rpki-client