Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
File:                     mJre8bGpea83LsZ1WgtUIaBncbs.mft (raw, json)
Hash identifier:          0vtkTHM8Y+UwfM1/DTr4IiSY3MLJnD81Gs8xRpnFfD0=
Subject key identifier:   08:3C:44:97:5F:1C:C1:1B:A2:E7:FB:B1:C0:27:AF:02:2F:58:C7:8D
Authority key identifier: 98:9A:DE:F1:B1:A9:79:AF:37:2E:C6:75:5A:0B:54:21:A0:67:71:BB
Certificate issuer:       /CN=989adef1b1a979af372ec6755a0b5421a06771bb
Certificate serial:       019D9D3ED0B41E310E66E613C0A6ECBC23E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
Manifest number:          D5
Signing time:             Fri 17 Apr 2026 21:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 21:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 21:00:32 +0000
Files and hashes:         1: mJre8bGpea83LsZ1WgtUIaBncbs.crl (hash: 0atFxfR+bEEaURIfdmWdDGOxo5F/ingObbQ8MB7p4K4=)
                          2: tLe7pLUB1FbsxJodBjiaylvPWqY.roa (hash: iCcIo0MXZAGo4QKL7jZTOf07lWCaTF9D6uBBNDm3oqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3e:d0:b4:1e:31:0e:66:e6:13:c0:a6:ec:bc:23:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989adef1b1a979af372ec6755a0b5421a06771bb
        Validity
            Not Before: Apr 17 21:00:32 2026 GMT
            Not After : Apr 18 21:00:32 2026 GMT
        Subject: CN=083c44975f1cc11ba2e7fbb1c027af022f58c78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:81:ea:46:75:33:cc:75:00:fe:65:b9:78:
                    53:66:b8:a6:aa:17:4c:19:ef:50:f5:32:db:6c:be:
                    30:51:1e:de:cb:b9:61:2f:6a:a1:f3:48:da:5e:f8:
                    29:19:ac:e6:84:73:06:d7:36:8c:b1:6e:2e:de:09:
                    e8:ef:61:57:3c:22:58:11:8b:a3:3e:de:43:8a:4f:
                    e2:08:ce:c8:0e:7d:8c:29:cf:ad:ef:24:8c:10:d0:
                    b8:5d:b8:94:03:a7:5a:8e:49:b1:da:8e:07:26:43:
                    03:76:0f:92:15:74:cd:47:b0:a9:ce:e1:29:fc:8d:
                    71:34:57:65:03:92:eb:64:06:df:62:99:54:65:b2:
                    ce:52:73:77:db:28:64:6e:4e:9e:94:73:3d:86:19:
                    d1:fc:8e:d2:b3:20:12:e2:f8:11:a2:d9:2b:d0:57:
                    ee:b8:54:b3:58:06:2c:88:b9:94:68:0f:b8:97:cf:
                    a9:82:44:8e:59:ca:28:a7:37:62:4b:ef:0f:cd:79:
                    69:30:0b:d6:c3:71:b3:7a:2c:b0:ed:f0:01:4b:c4:
                    92:27:56:8f:5b:16:9e:00:4c:db:b4:b7:2a:de:36:
                    af:8c:f1:cd:21:a0:51:68:b4:66:57:c5:d3:ec:f9:
                    9f:8c:a9:88:3d:18:db:d6:29:30:4f:82:31:fc:af:
                    89:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3C:44:97:5F:1C:C1:1B:A2:E7:FB:B1:C0:27:AF:02:2F:58:C7:8D
            X509v3 Authority Key Identifier:
                keyid:98:9A:DE:F1:B1:A9:79:AF:37:2E:C6:75:5A:0B:54:21:A0:67:71:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:76:35:ba:76:3f:1e:76:7b:6c:14:54:ff:41:3a:6a:28:6c:
         32:51:ad:bb:21:52:0a:16:ae:bb:4b:d2:f4:f0:4f:1d:7d:4e:
         47:74:c0:13:82:ac:92:78:3a:15:dc:3d:83:e3:12:d9:56:86:
         44:29:24:fe:32:1f:1e:13:ab:6a:30:ca:55:b0:ca:7b:b7:73:
         a8:47:77:31:73:5d:d4:e3:a9:03:76:bb:c3:c5:da:74:5c:1b:
         d7:8c:f4:0b:f5:28:9d:88:f4:4e:be:29:9a:45:e4:8b:55:83:
         6b:46:18:ff:05:78:90:89:a0:d9:12:ce:5b:f4:96:82:3d:89:
         62:52:dc:78:06:d5:31:99:52:9e:ef:a2:01:b4:b3:7b:d5:a0:
         4b:97:5f:5c:ed:d6:35:62:4a:bd:7d:f1:e6:ae:9f:7f:5d:21:
         a8:91:da:95:9d:c0:51:22:d0:f5:ee:06:8b:52:63:f4:f1:6c:
         fd:eb:7f:eb:52:68:83:d5:37:5a:cb:4d:a6:ec:db:af:16:6e:
         53:ae:32:c5:a0:89:ed:71:82:1b:70:a0:e3:6f:4a:58:48:6e:
         9c:79:fd:81:4e:0d:34:3d:e8:1e:0f:7c:92:f3:a2:27:a7:48:
         d3:61:f2:f7:4b:25:ab:9d:e1:af:25:a6:da:7b:4c:1c:71:59:
         26:36:7e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:58:44 2026 by rpki-client