Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
File:                     jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json)
Hash identifier:          Q2NO9zeH+W9QSxTnYcebVDojsaZXuXK6o9ZF6NPi6Is=
Subject key identifier:   62:08:39:14:F6:3C:32:32:0E:A8:18:9D:B2:48:C1:1D:03:3A:7F:1A
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Certificate issuer:       /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial:       019D99D06DA50A5A18D93FAEEC1162F25716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
Manifest number:          11AA
Signing time:             Fri 17 Apr 2026 05:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:06 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:06 +0000
Files and hashes:         1: 2dl-f-UK6z-wcsJEmLBo_kTVQA0.roa (hash: E+Lj08rzgs1LC3v6bo+hL91M0+iDXn1Q2UMdAOL8ihg=)
                          2: BcaKc_qpZcw6gUkkrXQbt6m-3Nw.roa (hash: FCBImm07RTNhqFegiiS82dUG+xaTXFVxce08GQ6qTS0=)
                          3: MxVivBucAENp2PAscr5joXqh_oY.roa (hash: qdH6vqEjmsgzasuWWeKuMXOT/SGrMj1v+Oi8w3/Eecw=)
                          4: PPTpKN0G94Qk3SCfG74G6E4gLdw.roa (hash: IpDfPDw0GzTAcezF6u+iyqtASEo3jItEu1XZDEJz9Yk=)
                          5: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: Yssl+4pgfwzJ8j7ZuXI8abgokXlyMIgiFYHArcQKwbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:6d:a5:0a:5a:18:d9:3f:ae:ec:11:62:f2:57:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
        Validity
            Not Before: Apr 17 05:01:06 2026 GMT
            Not After : Apr 18 05:01:06 2026 GMT
        Subject: CN=62083914f63c32320ea8189db248c11d033a7f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:41:63:6d:96:7a:a2:03:72:a7:77:cd:80:15:
                    a0:ef:46:50:cd:bc:04:f4:26:0e:b0:bf:31:9e:69:
                    69:73:9b:cd:47:d6:ff:13:f5:f0:b4:fc:07:b2:28:
                    fa:bd:66:dc:25:e5:fe:b5:bb:85:73:1d:5f:2f:af:
                    d6:68:b1:c1:46:10:fd:39:aa:45:eb:c2:0a:64:bb:
                    1d:7d:aa:ac:77:a5:ff:f1:fc:bf:33:bf:60:8b:3f:
                    f1:5e:42:a0:ef:1f:fb:de:1a:41:81:33:d8:6d:3c:
                    77:4b:38:a8:e1:2d:7a:ab:8d:a0:3a:e8:e3:db:ed:
                    65:ed:b0:78:41:34:61:dd:f8:34:39:80:09:a0:ef:
                    6f:36:d6:12:a2:95:1a:55:b8:90:34:3a:70:f1:fb:
                    33:c7:0b:85:51:22:70:6c:20:2e:5e:ea:ea:94:48:
                    16:49:d2:e9:65:1c:1d:3a:5b:67:bd:2c:9a:08:98:
                    f2:6e:21:91:42:d0:01:09:4a:7d:cc:48:32:ba:3d:
                    02:0f:9f:9f:08:42:fc:4b:e8:06:d9:3c:24:fd:2e:
                    6c:a6:eb:6a:b3:d3:8e:7d:66:50:9d:09:ec:52:5c:
                    96:0e:ba:75:ad:4f:af:b1:72:d5:59:64:f5:b5:3c:
                    92:5b:88:19:2e:64:cb:6a:b2:ab:91:a4:da:86:ea:
                    60:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:08:39:14:F6:3C:32:32:0E:A8:18:9D:B2:48:C1:1D:03:3A:7F:1A
            X509v3 Authority Key Identifier:
                keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:bd:91:7b:56:06:5c:81:bd:e9:03:50:10:c5:18:8a:6f:6b:
         66:a5:1d:78:48:90:e7:da:00:09:79:d2:5e:bd:62:ce:b2:41:
         b2:43:66:68:49:fe:6e:88:1c:44:9d:84:14:ad:e2:c8:a9:9d:
         9f:45:a8:78:ed:22:d4:88:66:c9:8b:83:24:50:a9:51:be:24:
         55:13:2d:0a:09:01:ef:c8:45:36:47:6c:ec:e8:60:ac:da:e0:
         4f:b7:35:e9:4b:bd:26:cb:b1:0c:d8:b0:88:b4:1d:69:16:19:
         2b:9e:f0:8f:4d:f3:e1:ba:a1:6f:5c:ae:82:06:98:4f:aa:91:
         db:e5:cc:6f:d3:27:8b:2b:28:33:d6:dc:e9:a9:79:cd:55:75:
         9d:0c:7f:19:c2:26:f0:7e:3c:01:47:77:eb:3f:ab:33:6e:1c:
         ce:d6:50:f1:f7:38:56:11:3c:88:28:b5:78:84:36:14:cc:9e:
         53:0c:8d:67:a8:8c:46:04:83:3e:96:eb:fe:81:f8:28:80:84:
         fc:b9:fb:a7:44:3e:57:72:d6:58:e3:01:c9:13:df:9c:0d:6e:
         03:66:47:68:09:97:40:d4:70:2d:ca:f0:d0:12:29:a6:29:9a:
         eb:b0:1e:f1:f4:2e:77:72:55:14:61:4e:a2:e4:93:7f:24:21:
         ce:74:96:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:09 2026 by rpki-client