Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File:                     jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier:          DMXGRuF6J96BXhPtteG7i8UtSi3U1lBAqj9PN1zGVlM=
Subject key identifier:   88:C1:EA:49:A2:96:9C:67:67:D1:C9:EF:BC:89:64:F6:27:A6:66:66
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer:       /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial:       019D99990C4F4635928D24729DC95AC13245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number:          1374
Signing time:             Fri 17 Apr 2026 04:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:37 +0000
Files and hashes:         1: 70JHdnkKgsjKCsL3ulG1wQpZGp4.roa (hash: +7UX7nSd4wTkbsTAwwas6oJrJFj4JuJ4qtAQ6S+C8Y8=)
                          2: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: 6V3y9YNDlpdALXH/9gGah1gfdrpwgqy3YGzMyCEBfg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:0c:4f:46:35:92:8d:24:72:9d:c9:5a:c1:32:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
        Validity
            Not Before: Apr 17 04:00:37 2026 GMT
            Not After : Apr 18 04:00:37 2026 GMT
        Subject: CN=88c1ea49a2969c6767d1c9efbc8964f627a66666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c9:f8:a6:4c:20:43:74:86:d5:e8:43:98:aa:
                    ad:7f:91:9f:3d:f9:ba:f4:56:19:a5:74:a2:51:82:
                    40:6e:e7:88:cc:11:27:ec:7c:92:35:83:ef:7c:a9:
                    65:17:dc:a0:de:cc:5a:b1:82:04:4f:cc:e9:57:b5:
                    1a:4f:26:11:d6:40:fd:6f:f0:b5:3a:bc:b7:ec:a6:
                    00:85:44:eb:64:73:7e:b7:5e:9f:06:e4:f5:66:c7:
                    0c:18:66:a0:86:b7:6d:97:90:07:0e:9a:27:42:4d:
                    3c:f3:ca:a2:5a:e1:88:eb:61:35:64:6e:1f:fd:3b:
                    6d:5f:be:6c:85:58:23:d4:c3:ce:0c:65:50:b3:55:
                    ad:f9:d4:36:70:2f:dc:26:52:c6:ee:99:c0:fe:75:
                    e7:f8:85:a1:13:d8:d9:02:b4:49:f1:dd:3e:ba:a1:
                    a1:2c:dd:c6:5f:98:fb:53:2e:e5:29:62:af:26:e9:
                    21:2f:38:f6:f0:46:9c:17:a0:41:36:9a:f6:a5:8c:
                    66:59:c4:aa:ed:e5:4a:2a:63:69:a8:2a:c0:ca:aa:
                    9c:90:d8:07:59:f6:e2:20:5a:d6:d7:24:51:dd:53:
                    bd:d0:4b:98:01:a2:76:b4:47:32:86:cd:28:94:0f:
                    da:25:c9:47:1c:3b:49:07:c8:84:94:60:f6:43:8a:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C1:EA:49:A2:96:9C:67:67:D1:C9:EF:BC:89:64:F6:27:A6:66:66
            X509v3 Authority Key Identifier:
                keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:84:c4:ba:a4:85:e2:a8:bd:b9:4d:97:fa:d3:a7:54:c2:2a:
         e4:12:ae:28:53:7b:a7:f8:6b:65:1a:dc:82:95:ba:c0:95:27:
         9a:27:87:33:77:06:73:be:9c:df:71:cb:2d:6c:1b:b4:d6:6c:
         2b:a1:2a:a7:81:76:44:56:67:8e:a4:3d:1a:19:ad:98:3e:33:
         d7:30:49:7f:ce:68:0b:38:9d:b0:f4:9f:96:dc:27:7e:6c:e4:
         33:13:b9:70:ef:5c:a9:a2:80:92:d1:91:23:cc:26:02:f3:3b:
         de:ec:7d:8c:6b:8d:93:62:1e:1f:1b:31:6a:2f:79:91:18:91:
         4e:bd:8c:4b:4a:2d:9f:e3:a3:f1:2f:01:91:13:84:f9:ad:40:
         ad:6b:44:95:41:47:b4:64:c7:41:96:8a:da:15:2e:7b:83:21:
         23:16:3c:08:95:3e:3f:b5:c0:22:82:01:a7:fa:39:41:e4:bb:
         9b:33:45:d7:70:98:ee:9a:47:b2:6a:9b:79:d9:1d:14:a1:64:
         11:02:3d:89:e7:5d:40:a5:f4:ae:08:07:23:5f:0f:ae:e0:02:
         b2:ac:0e:e6:38:9c:2b:1a:12:33:97:30:f9:5a:a8:02:09:8a:
         df:a5:62:ff:32:2c:02:1b:d7:70:83:09:73:01:b1:ca:91:f0:
         54:1c:97:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:03 2026 by rpki-client