Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
File:                     JijMfwbqCaJH9r6enldMTze06bY.mft (raw, json)
Hash identifier:          6aCCEfGOTmkgSySUWhVEKVMQ6khjstcM/3bwb4Oo514=
Subject key identifier:   C0:E8:D3:FB:4B:3F:19:2B:4B:97:5F:94:E9:AF:B3:E7:33:2E:A8:31
Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
Certificate issuer:       /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Certificate serial:       019D9998D702007B373C1C57E240697F3ADA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 04:00:23 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:23 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:23 +0000
Files and hashes:         1: JijMfwbqCaJH9r6enldMTze06bY.crl (hash: PjNwvab4I61wiQFkW/sB8VlUtyWMZO4L3vFwvUDQLy4=)
                          2: waZwL5p70K3eubkjn4rt16lrpmo.roa (hash: Yb1Set22MMS78/VHLDK1SdDRV6cNd11Qc3kiWPaHjXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:d7:02:00:7b:37:3c:1c:57:e2:40:69:7f:3a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
        Validity
            Not Before: Apr 17 04:00:23 2026 GMT
            Not After : Apr 18 04:00:23 2026 GMT
        Subject: CN=c0e8d3fb4b3f192b4b975f94e9afb3e7332ea831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e8:1b:c5:3d:c9:34:23:c0:8c:bd:fc:f3:d1:
                    7f:59:d0:87:e1:10:83:fb:60:90:aa:35:70:09:56:
                    80:3c:ea:50:c1:83:ba:56:35:ce:0d:3c:ba:10:6f:
                    13:e2:c8:87:38:cc:a7:97:18:e4:4b:90:63:b4:1d:
                    79:34:6b:43:6e:40:55:2e:55:6e:0c:07:3c:87:2c:
                    49:80:35:f1:71:61:29:32:46:b3:3e:27:7a:05:65:
                    d2:c3:a5:c6:f6:d4:f2:3e:47:b2:6a:fb:5c:92:47:
                    4b:43:a3:a2:d2:f9:53:bf:4d:c1:8a:d8:8a:35:1e:
                    a3:35:70:10:de:79:06:93:ca:eb:52:43:cb:6f:ed:
                    7c:7c:bf:b4:2d:cf:44:66:73:55:9e:b3:d8:69:8b:
                    1a:24:bc:57:11:59:d7:a2:00:f7:20:f0:a3:70:65:
                    fb:a1:0e:84:2e:6a:4b:9d:3f:85:f5:cd:b0:f5:73:
                    77:82:3d:3d:71:03:cc:bf:98:9d:d9:66:7a:ec:4e:
                    1f:f7:63:ed:23:72:47:0c:1b:c6:36:1d:e9:2d:13:
                    23:89:15:bf:1f:cc:9c:b5:9e:e2:57:dc:40:43:f5:
                    fd:da:b0:ff:ee:ba:98:24:ea:10:35:8e:25:24:04:
                    54:dc:3a:ab:f6:9d:02:71:9c:f2:b8:82:a7:04:a2:
                    da:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E8:D3:FB:4B:3F:19:2B:4B:97:5F:94:E9:AF:B3:E7:33:2E:A8:31
            X509v3 Authority Key Identifier:
                keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:11:78:5d:8c:84:84:11:98:58:b8:c6:c3:83:97:f1:3a:e7:
         11:cc:90:5e:11:1b:2b:ee:f7:c7:b6:f9:a8:a7:0f:f9:d6:2a:
         82:f8:db:19:6a:1a:dd:f2:5b:39:ef:2c:74:f8:18:f9:3f:e5:
         ae:78:17:df:fc:00:68:70:75:39:a9:9b:b7:6b:d2:ad:f3:c9:
         44:c1:cd:93:9b:d3:72:46:f2:5a:61:90:de:d9:43:57:18:ca:
         40:c5:e5:4d:cb:97:df:a4:fa:ca:75:f1:84:52:66:cc:db:86:
         af:6a:33:13:65:a6:c6:30:6a:bf:f6:4d:11:fb:ca:0c:83:cb:
         64:1e:db:32:36:38:75:d5:e3:a7:20:ab:cf:0b:cc:fc:39:34:
         35:79:4b:6b:c2:d9:da:4e:28:b0:43:77:87:05:76:91:f3:26:
         f8:ac:cb:92:77:21:e0:a5:ea:e6:af:d7:f1:1a:4d:5b:a1:8b:
         56:26:c6:e4:41:a6:e5:a7:95:15:e6:cd:0d:9c:0e:22:18:c9:
         0a:4a:43:1d:3a:73:fb:19:a2:63:9f:f2:dc:e9:fb:37:91:5e:
         8a:63:bd:1b:53:c9:f5:ee:12:13:ac:ec:87:b0:c1:2c:d7:57:
         5e:12:33:9b:bb:a0:a5:13:c6:82:f8:d3:5f:56:5d:c6:67:93:
         21:9a:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:50:45 2026 by rpki-client