Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File:                     jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier:          W2Um002/zQebElk8cnz6fdtUcSpFP+k8AsW7aB4yFbQ=
Subject key identifier:   FD:DB:FE:0B:ED:08:05:54:4B:5E:71:68:40:17:BE:B8:A3:16:27:11
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer:       /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial:       019D981874E7DFE28BB120642831B65AB4FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number:          04B6
Signing time:             Thu 16 Apr 2026 21:00:32 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:32 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:32 +0000
Files and hashes:         1: Qu7i1hfHBSzNKAEQCFhBjLBdX88.roa (hash: txu1MfU2gFXJdRpf1GKWelwI6kKmpvlKQLQat4JHcus=)
                          2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: 3uZgPUaVpo+iYMGeYt2gv0C4ex73lRn/Ek/nUmTxMe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:74:e7:df:e2:8b:b1:20:64:28:31:b6:5a:b4:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
        Validity
            Not Before: Apr 16 21:00:32 2026 GMT
            Not After : Apr 17 21:00:32 2026 GMT
        Subject: CN=fddbfe0bed0805544b5e71684017beb8a3162711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:9b:90:4a:93:6f:95:22:59:66:fc:36:73:
                    58:5a:48:b6:f2:c0:89:ba:63:e2:34:52:29:a5:18:
                    22:fe:fc:2d:15:14:46:72:57:06:c8:7a:3f:68:1d:
                    5c:bd:fc:4a:0a:a6:4c:b7:f2:89:41:fd:e3:31:1b:
                    e2:42:64:c5:b6:c0:0f:be:9a:a0:14:46:f3:0a:24:
                    cf:3a:cc:07:93:78:06:ee:f4:c7:9d:be:75:36:82:
                    e7:dc:c6:29:a6:07:a4:63:12:7f:75:b5:ff:86:58:
                    59:77:95:a8:56:e8:bd:6c:fc:59:e5:55:23:da:ab:
                    6b:76:dd:49:cb:16:9b:9a:63:7f:9e:f0:00:0f:06:
                    db:34:47:e4:67:87:3b:d4:06:55:2a:b8:02:29:42:
                    02:a0:9b:7c:df:37:73:d5:da:e4:94:31:86:71:91:
                    d0:c2:15:c4:4d:c7:7e:f7:78:1a:c8:f3:b5:3a:3b:
                    f9:a0:8b:cc:00:10:d6:04:ab:e0:5e:b2:8b:d9:a5:
                    40:31:fd:8a:ad:a7:d6:01:85:4f:a0:d2:e3:88:f9:
                    2a:c9:3b:0b:bf:0b:b5:ef:1c:0d:77:57:16:a4:ad:
                    48:b0:5d:f8:95:0a:f8:b2:46:f6:e2:54:b0:09:5c:
                    80:6c:b9:b7:85:f4:01:aa:d6:97:03:86:3e:a9:3c:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DB:FE:0B:ED:08:05:54:4B:5E:71:68:40:17:BE:B8:A3:16:27:11
            X509v3 Authority Key Identifier:
                keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:9f:8e:19:5a:f1:c5:ba:13:d0:0e:49:f2:af:db:f1:66:e3:
         d2:02:ad:a0:0b:3c:a5:ef:bf:da:88:14:47:da:ae:6a:f4:63:
         16:38:b4:cc:00:5d:db:63:46:c5:6d:46:be:ff:20:a1:ec:b4:
         db:74:5f:1e:91:90:4e:bd:ed:10:e6:aa:a7:59:34:e2:f8:50:
         fa:0c:e3:03:f1:b0:4b:95:b1:b9:53:8c:de:68:96:05:7f:81:
         3a:42:ca:42:97:57:5d:48:4a:93:45:30:66:5f:fd:59:1d:d4:
         f9:d0:ec:06:3b:0d:3e:ee:fc:d9:b8:fb:ba:03:25:dd:c2:ef:
         b9:52:ec:ba:c2:15:9f:17:c2:56:65:eb:57:58:6c:c7:73:43:
         0b:04:24:79:75:d2:ff:38:98:61:0e:91:e2:53:9c:f8:e9:e7:
         4b:19:83:0e:55:87:ca:1a:a5:f9:d0:41:0f:85:3e:bb:a0:14:
         f5:c5:34:08:a1:7f:c6:a2:3c:df:a9:f7:ad:4d:87:25:68:78:
         a2:d4:43:de:52:ca:3b:b3:29:ea:d3:54:73:cd:82:fa:dd:cf:
         d9:29:19:32:fc:f6:20:f6:25:42:25:db:24:f6:9a:3e:01:4f:
         98:33:2f:ca:77:0b:b1:86:c9:4f:9b:56:02:7e:5a:3f:df:42:
         67:12:5a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:14:37 2026 by rpki-client