Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File:                     jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier:          otyYZ7uDvzETOtfZ+T2q05OuG87ba0AQVcfECobVRYE=
Subject key identifier:   B3:CB:25:ED:C8:C5:65:F6:70:D9:36:E1:7A:26:E9:96:57:D5:AC:6F
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer:       /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial:       019D9A3E0FAB0C2D6675217326749AC2B215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number:          190D
Signing time:             Fri 17 Apr 2026 07:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:51 +0000
Files and hashes:         1: 7M11WAr8ASMmTsOpEXXftqbLZKI.roa (hash: Hy7iKCS/PTOuaQ4Hy/XwhYj+Mf9Lpbiz3nTqAU+v+KA=)
                          2: IPD7v-J9c376oyXeNIKc_aWnNmQ.roa (hash: EEItVG+CeXn/JupxjY6OK4AdQvnwdrYLgxk2U0ldhpY=)
                          3: _gRsaSao0vaUMwc0x3LyFobrYg8.roa (hash: NuZeEvpoAsVGvJOhf6lMpbCZ6vhyLjtVLY0IuaaWnsk=)
                          4: gpd1mhOHXiMRj4sBD1YUlIe0OKY.roa (hash: Mp1A6bnLjG6e+iNvqlRY2Pi1q3kKD3uoZO/De04Jgqw=)
                          5: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: kgF4CNBCT9h/hLIYqFW7gzp+6P4fiQ4/ZA1fhFJWehU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:0f:ab:0c:2d:66:75:21:73:26:74:9a:c2:b2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
        Validity
            Not Before: Apr 17 07:00:51 2026 GMT
            Not After : Apr 18 07:00:51 2026 GMT
        Subject: CN=b3cb25edc8c565f670d936e17a26e99657d5ac6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:9e:ef:ea:cb:dd:e2:5f:c2:98:78:5e:bf:
                    52:9e:23:a4:72:69:51:9a:3e:2d:13:01:bf:f3:c9:
                    34:fa:bc:e0:a2:a4:3c:bd:20:4f:a0:9a:63:38:ed:
                    d3:f1:10:80:55:87:13:ca:93:1a:13:a1:74:7d:c4:
                    b2:f2:55:ce:ac:52:e6:2a:b9:c9:59:a4:b0:13:cf:
                    b2:b3:23:50:42:7e:b7:24:a3:4d:67:5f:67:f6:29:
                    b5:db:99:bd:13:ac:87:a0:54:3c:f1:60:d3:ae:6f:
                    9c:06:74:f2:8c:74:02:d6:d3:a3:9d:9c:d1:4f:e2:
                    ec:94:99:ce:e0:f7:39:91:86:04:da:5c:24:c7:c7:
                    6b:5e:f8:40:64:11:cc:4d:a4:75:84:55:67:5a:53:
                    b5:85:0e:24:08:4d:e0:79:95:71:3c:50:47:af:5e:
                    45:1e:f5:05:3d:94:40:f5:de:5c:a6:48:0e:af:30:
                    69:db:91:00:85:d1:93:52:a0:b1:0b:d1:93:6f:0e:
                    1b:e4:39:13:c1:f5:3f:1a:5c:1d:d6:ae:04:f8:57:
                    ac:bc:eb:22:f9:ab:df:84:92:b0:f8:bc:39:3d:f0:
                    96:d9:2a:5b:98:4f:86:77:fb:d8:c8:17:e4:98:98:
                    76:2f:0f:cf:1d:ee:49:ea:cb:22:1f:cd:9f:f7:2c:
                    d1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CB:25:ED:C8:C5:65:F6:70:D9:36:E1:7A:26:E9:96:57:D5:AC:6F
            X509v3 Authority Key Identifier:
                keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:33:b9:56:12:5a:b6:65:ef:8c:d1:02:b7:ca:9d:53:63:0b:
         24:8c:ae:4c:68:30:7a:94:65:0d:c9:99:77:35:04:58:ab:48:
         d6:b5:2c:e2:98:ff:72:b9:dd:d9:9a:22:34:e2:7f:ab:6a:e5:
         af:c6:6e:a7:d0:6f:02:46:58:ca:8e:70:b8:c0:65:cb:59:7b:
         8e:a6:bf:f0:fe:89:84:ae:08:15:6d:a8:bd:8f:ec:75:37:d4:
         8d:ae:05:c6:07:3b:c1:1c:0d:33:5b:24:1b:bc:76:b3:e7:45:
         b6:f3:53:03:b6:03:a1:27:51:bc:64:a4:53:e2:68:0c:09:6a:
         33:b1:8a:39:a4:4c:29:f1:dd:92:d8:ba:1d:9e:6b:ea:dc:d0:
         09:e1:0e:46:46:d6:04:af:6d:18:7e:83:6b:b9:d7:6b:4d:3b:
         12:ea:3a:d9:1b:3e:bb:d5:be:d8:09:e7:89:a6:ee:11:0c:d8:
         60:e9:66:23:02:86:91:e3:ae:fe:14:38:f3:1e:aa:91:f6:0b:
         58:e2:c4:be:0f:ed:de:cd:78:7e:a3:9c:40:a5:f2:8e:22:d3:
         41:90:ec:ae:c0:d7:48:e3:7e:e3:fd:b8:f2:47:e3:f0:0a:93:
         ae:84:07:e9:bc:d1:b8:22:99:a8:63:28:d0:25:08:8e:5d:ad:
         d8:08:e9:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPg+rDC1mdSFzJnSawrIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYjM0Nzc0YjAxOTc5Mjg0ZmQ5ZTc1NGZlYTY4ZmEzYzYx
NzgzZDAwHhcNMjYwNDE3MDcwMDUxWhcNMjYwNDE4MDcwMDUxWjAzMTEwLwYDVQQD
EyhiM2NiMjVlZGM4YzU2NWY2NzBkOTM2ZTE3YTI2ZTk5NjU3ZDVhYzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQqe7+rL3eJfwph4Xr9SniOkcmlR
mj4tEwG/88k0+rzgoqQ8vSBPoJpjOO3T8RCAVYcTypMaE6F0fcSy8lXOrFLmKrnJ
WaSwE8+ysyNQQn63JKNNZ19n9im125m9E6yHoFQ88WDTrm+cBnTyjHQC1tOjnZzR
T+LslJnO4Pc5kYYE2lwkx8drXvhAZBHMTaR1hFVnWlO1hQ4kCE3geZVxPFBHr15F
HvUFPZRA9d5cpkgOrzBp25EAhdGTUqCxC9GTbw4b5DkTwfU/Glwd1q4E+FesvOsi
+avfhJKw+Lw5PfCW2SpbmE+Gd/vYyBfkmJh2Lw/PHe5J6ssiH82f9yzRkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPLJe3IxWX2cNk24Xom6ZZX1axvMB8GA1UdIwQY
MBaAFI2zR3SwGXkoT9nnVP6mj6PGF4PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGIt
NjI2NTUyMWY2ZGY3LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGItNjI2NTUyMWY2ZGY3
LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjO5VhJa
tmXvjNECt8qdU2MLJIyuTGgwepRlDcmZdzUEWKtI1rUs4pj/crnd2ZoiNOJ/q2rl
r8Zup9BvAkZYyo5wuMBly1l7jqa/8P6JhK4IFW2ovY/sdTfUja4Fxgc7wRwNM1sk
G7x2s+dFtvNTA7YDoSdRvGSkU+JoDAlqM7GKOaRMKfHdkti6HZ5r6tzQCeEORkbW
BK9tGH6Da7nXa007Euo62Rs+u9W+2AnniabuEQzYYOlmIwKGkeOu/hQ48x6qkfYL
WOLEvg/t3s14fqOcQKXyjiLTQZDsrsDXSON+4/248kfj8AqTroQH6bzRuCKZqGMo
0CUIjl2t2Ajp5g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:20 2026 by rpki-client