Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File:                     sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier:          BAHH8Omb5yIYpaOjXq3e+2CwAYi5Ab1axhIhFGkM0JY=
Subject key identifier:   E7:69:79:8D:65:4C:C0:5E:DE:B8:BD:98:E7:0B:25:17:B2:79:E2:9C
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer:       /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial:       019D992BAD2C9A1C1D7778E8EA70BDF9A4F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number:          18CC
Signing time:             Fri 17 Apr 2026 02:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:09 +0000
Files and hashes:         1: 4ugY9PI_m6eOsD-Mx-tvHs43wxY.roa (hash: 5C991dyiRExbUxUE3jh7duuCkFVGkEv4KlbSfP+17rs=)
                          2: CvdJK5OT8GtA-xh7l9tdYncfRDc.roa (hash: 3p6vjzHMzoQ2xfV5P6Ow9qn/DbQ1xG3hoqj2RJOaMPk=)
                          3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: tmmO5Rk/v/XEzjAj95AesghTgJEvdPi6Nf3Ou2EocWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:ad:2c:9a:1c:1d:77:78:e8:ea:70:bd:f9:a4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
        Validity
            Not Before: Apr 17 02:01:09 2026 GMT
            Not After : Apr 18 02:01:09 2026 GMT
        Subject: CN=e769798d654cc05edeb8bd98e70b2517b279e29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:64:40:54:ac:4b:4f:c0:8c:e7:8e:e1:04:94:
                    a9:d4:22:ef:2c:73:b8:93:79:7f:65:96:d6:64:99:
                    d3:2c:72:aa:cb:ec:c4:0b:b3:4c:e6:72:6e:99:21:
                    8c:8f:56:af:a8:cb:9f:66:1b:b6:7f:c7:65:50:a2:
                    0e:c5:40:20:a3:50:5c:0d:60:32:2e:2b:6e:17:f4:
                    7b:da:dd:b7:3d:c4:f0:13:d6:03:88:bb:07:3c:a8:
                    e4:a4:7f:07:da:36:87:98:03:aa:21:92:99:55:c8:
                    47:48:db:f6:cd:ec:44:f4:9a:ae:0a:ba:30:83:e8:
                    87:bb:7d:50:fc:f0:4a:56:9b:80:27:14:2d:cd:67:
                    a9:ef:04:9b:8e:c9:7b:44:e6:21:56:22:60:f3:93:
                    db:b8:72:83:5e:cf:b1:26:e1:fc:01:ab:ba:6a:1c:
                    80:b3:6c:fd:9c:6a:c2:1e:1d:2c:36:d4:5e:9a:49:
                    25:b4:62:da:22:f7:be:72:11:8d:61:9a:9a:52:bb:
                    23:22:41:2d:31:36:1f:1e:80:d7:76:f8:1d:3a:a4:
                    0a:a3:84:c7:00:3b:3a:7f:90:63:22:c0:59:04:17:
                    ec:c3:0a:c6:e1:91:1a:7d:05:b3:15:e7:9b:79:a0:
                    0a:8e:dd:cc:fa:e3:8b:a3:92:57:8f:37:97:01:f2:
                    12:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:69:79:8D:65:4C:C0:5E:DE:B8:BD:98:E7:0B:25:17:B2:79:E2:9C
            X509v3 Authority Key Identifier:
                keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:5d:b3:10:5d:3d:5b:66:97:40:62:5a:d4:10:85:3c:dc:ec:
         45:bb:e3:af:85:66:15:38:e8:3f:98:6f:8f:10:7a:ad:46:0b:
         51:c3:3b:f7:7b:9d:93:c3:6b:0a:34:86:b1:52:f5:9c:b9:e7:
         8e:e9:5d:92:65:5f:11:b1:b1:a0:ef:bc:7d:5b:3a:61:e2:ce:
         17:33:37:4f:d2:3f:66:54:71:d3:1c:78:0a:12:96:8d:9c:36:
         ad:59:c5:ad:e2:d7:15:22:54:30:e8:76:a0:ac:aa:56:d2:72:
         24:2e:be:21:58:9d:96:89:6c:4e:96:e7:3c:7b:dd:c5:b4:45:
         72:33:3b:df:23:80:ce:5d:d0:77:ae:35:fa:17:58:ca:93:dc:
         3d:ca:2e:9e:5d:1e:c8:e4:ba:bb:dc:d3:1c:99:5d:fb:97:69:
         85:a9:df:e1:fe:ed:e9:c5:25:45:2a:69:b3:8b:a6:69:6f:55:
         5c:b2:b5:c6:8d:cf:7e:4b:55:41:06:5f:56:c4:cd:6b:8e:ff:
         74:1b:58:96:ec:59:d0:5b:5c:3c:4b:96:0e:19:8d:b9:39:fd:
         75:00:b6:0c:d0:2b:a8:aa:0f:f0:f5:97:af:b9:5a:12:dc:e3:
         a3:87:3e:9c:80:b3:54:60:b1:da:19:79:ef:91:2c:c1:66:00:
         0b:26:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:43:14 2026 by rpki-client