Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
File:                     jYkvTe2SJX5nunTxdiyLyRTr1hw.mft (raw, json)
Hash identifier:          wgBpPvc/KWd4AWaL1i+RFwIfTBajZ/pF2fP/w2z8V1w=
Subject key identifier:   88:82:22:AA:BC:16:0F:57:9E:50:9C:09:1B:F0:9D:63:D3:BE:6A:74
Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
Certificate issuer:       /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Certificate serial:       019E314DE89CBE51C5362AA0BAA705C7D486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
Manifest number:          1915
Signing time:             Sat 16 May 2026 15:00:49 +0000
Manifest this update:     Sat 16 May 2026 15:00:49 +0000
Manifest next update:     Sun 17 May 2026 15:00:49 +0000
Files and hashes:         1: 75-KqODx3w8CvM9m5Nq3kRsXyMo.roa (hash: A6bAUCVGwzASuTY5FNYElUtdHA4J3zfHfU7IL2XZWu0=)
                          2: jYkvTe2SJX5nunTxdiyLyRTr1hw.crl (hash: KXpN+x2pwb2r1dzQqgkAQVHl6BiZ9Cn1yd2Qytqsk8g=)
                          3: kN8sJaIrd98steTWsu3vc7sEjKI.roa (hash: MkLW8K9XVhuTwi22jPlIAzX7VARe0fbKX4ZjMGnmNrI=)
                          4: tTnZl8uF6ADN5gv_dFCnGczPy10.roa (hash: yFxKga5LtYoglKO/yUWDlJacjL9nZm+MXR5rVDyXPDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4d:e8:9c:be:51:c5:36:2a:a0:ba:a7:05:c7:d4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
        Validity
            Not Before: May 16 15:00:49 2026 GMT
            Not After : May 17 15:00:49 2026 GMT
        Subject: CN=888222aabc160f579e509c091bf09d63d3be6a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5e:c6:29:e1:d3:90:2b:af:8a:48:e5:6c:d3:
                    64:31:be:16:46:68:26:24:a5:77:57:9d:36:46:4b:
                    c1:ca:7e:8a:ce:67:f2:c8:71:67:a7:65:12:26:92:
                    1d:97:f6:7d:76:5d:63:cc:31:75:4f:59:5d:69:ba:
                    9e:53:e5:63:f4:ed:48:5c:f7:43:20:a8:4f:46:1a:
                    0d:30:90:d9:d0:b1:eb:9f:28:42:a9:d3:85:1b:8f:
                    5d:84:65:b4:65:2a:89:88:88:c0:1c:aa:6e:17:d0:
                    fe:c1:04:45:f5:d0:7c:b4:ac:c9:30:f1:ed:d2:36:
                    28:64:81:41:ed:68:e2:0f:9f:e7:86:85:cc:c3:18:
                    5b:82:4c:d6:06:fe:d2:4b:d1:ec:35:df:58:4b:56:
                    7f:6c:18:41:4b:55:e6:5f:db:1f:be:db:9f:ff:ab:
                    5b:1e:d2:bb:66:06:da:38:d3:a1:40:00:3a:84:3d:
                    dc:bd:9e:38:39:b0:ba:ec:c8:64:68:d4:23:b7:15:
                    62:91:76:f6:5b:8a:1d:20:fb:45:03:27:ce:e3:b3:
                    80:e2:76:e1:52:f5:88:0f:26:54:1b:bf:3b:3d:2b:
                    0c:29:71:c2:46:6f:54:fb:54:64:12:80:dd:86:a1:
                    ed:f7:bb:1a:1c:47:d6:30:78:12:11:6f:a8:eb:c7:
                    9f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:82:22:AA:BC:16:0F:57:9E:50:9C:09:1B:F0:9D:63:D3:BE:6A:74
            X509v3 Authority Key Identifier:
                keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b1:28:1a:61:d0:82:61:83:6a:55:e6:ef:32:04:80:f8:db:
         b0:6f:8d:4b:91:fe:03:cb:da:19:7f:ba:0b:e0:f8:87:ce:a8:
         95:1b:5e:52:0b:cd:ad:bb:b7:7d:13:2f:b5:1a:2d:23:06:55:
         58:53:b5:b5:76:04:ba:ce:ea:90:f0:a5:10:bb:57:1c:a8:2c:
         37:a6:a1:3a:5c:79:21:b1:d1:91:f9:ca:db:b6:18:6a:24:99:
         4e:d3:ec:51:f0:31:a6:8a:b3:50:bf:e5:09:94:6a:12:c2:7d:
         36:11:ba:13:ef:e6:4e:d9:15:6e:5f:6d:de:fb:0c:e6:cf:5b:
         51:32:f7:00:24:01:11:d0:ea:3b:cf:5f:74:db:c4:36:5a:c7:
         14:f2:1f:77:e3:64:bb:92:28:87:3e:ad:d0:76:21:31:13:9c:
         53:e5:d1:f4:e5:cb:dc:40:68:91:50:fd:3f:95:09:e3:2d:d0:
         37:aa:89:38:9b:d0:ab:f7:76:8e:79:c1:c2:44:6f:6c:7e:8b:
         a5:8f:9a:83:79:f6:7c:03:45:32:95:d1:06:88:38:1d:9b:cb:
         15:3b:53:8a:05:b5:38:d0:f1:e5:f6:b6:a0:57:2d:93:3f:d7:
         09:95:73:ab:a8:82:35:63:f9:2a:eb:94:e6:04:3f:e9:f6:22:
         f9:e1:99:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:18 2026 by rpki-client