Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
File:                     jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json)
Hash identifier:          S5yQWDVIQKOSRL//xacfbfIg3s7ZBmuOCSRXtnKpyVc=
Subject key identifier:   0E:30:50:FB:C2:D8:01:F0:DB:31:BA:16:53:15:F3:0B:0E:9B:3E:69
Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
Certificate issuer:       /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Certificate serial:       019D9A074611218E08113BD17D4C01D0AC99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
Manifest number:          0C45
Signing time:             Fri 17 Apr 2026 06:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 06:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 06:01:01 +0000
Files and hashes:         1: e29x5KQ9lUTXsNTy9Js9YJvWUiY.roa (hash: CkkrAFaQANiawRM+t6VTBnKH0rFPseRbQYjCYVGniKU=)
                          2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: OgDXS5Pb7Z3JeWlYG/llr2poOfrxBFHlNwS9iTQHr/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:46:11:21:8e:08:11:3b:d1:7d:4c:01:d0:ac:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
        Validity
            Not Before: Apr 17 06:01:01 2026 GMT
            Not After : Apr 18 06:01:01 2026 GMT
        Subject: CN=0e3050fbc2d801f0db31ba165315f30b0e9b3e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:05:3f:de:93:d3:03:d4:46:88:d8:bd:d2:
                    d5:a4:d1:f3:be:73:a2:be:65:f2:6f:a0:59:1f:1f:
                    ba:f2:35:57:a6:a2:71:2f:3d:4f:f0:3b:6f:72:5f:
                    5d:9a:bf:d3:4b:15:1c:9c:f5:46:46:ea:47:8a:52:
                    96:5b:6e:89:59:58:e1:37:28:ad:ca:24:47:6e:a7:
                    43:31:d5:bd:99:a6:35:9e:0e:3b:7e:97:05:ee:bb:
                    60:03:2c:dd:04:62:87:e9:96:44:25:43:c8:e5:be:
                    32:94:50:97:fd:e8:33:87:de:35:ff:3d:79:1b:8b:
                    fe:2b:ea:5a:f1:a1:3b:5d:ba:45:f4:3f:23:33:d2:
                    86:e5:73:5e:ff:80:af:2e:e5:ab:1c:c7:15:af:31:
                    69:22:30:17:a6:6a:c9:a3:e9:43:b3:0a:c8:6e:ae:
                    e2:0f:7b:ee:9f:59:5b:8d:1f:c7:f1:23:df:b0:47:
                    cc:85:93:6d:aa:91:f0:83:e1:fc:e9:4f:36:8c:fe:
                    4d:9b:d9:3c:a1:df:32:2b:28:86:c4:07:62:ae:1b:
                    88:10:cb:24:36:0e:20:74:a3:b8:ad:9d:6b:38:04:
                    5e:53:e1:ad:b6:b0:f6:04:0c:e6:36:96:cf:18:23:
                    1a:a2:c0:b6:88:8a:3e:40:61:f6:02:cc:78:91:78:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:30:50:FB:C2:D8:01:F0:DB:31:BA:16:53:15:F3:0B:0E:9B:3E:69
            X509v3 Authority Key Identifier:
                keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e7:aa:60:24:d5:39:77:9c:0e:99:8f:9a:48:c0:e7:90:ce:
         ac:1e:ff:39:4d:46:df:50:9b:c2:57:83:05:54:6a:c6:bf:90:
         ab:8d:5a:11:24:37:18:23:c7:2a:9c:a3:d0:45:81:91:75:3e:
         4e:50:04:15:d7:92:ce:c8:b9:97:94:e4:86:8f:fb:7b:0f:f8:
         fe:77:c4:dd:91:e4:5e:66:82:fc:f4:69:8b:02:a1:7c:b5:b9:
         0a:9c:fb:71:77:2f:fd:78:5a:64:39:f8:a1:db:a7:4f:4c:e8:
         8f:18:ca:c8:65:38:4f:94:8d:b4:97:b2:d2:f0:9e:52:87:5a:
         04:3c:d1:47:8c:3e:0e:a7:3d:05:39:ce:cd:57:01:99:18:11:
         f2:df:28:60:f1:f9:e7:e4:30:3f:be:db:20:54:7f:6f:f4:8e:
         c0:15:9a:12:d0:e9:d4:b4:0b:a8:f0:a5:34:53:8c:04:88:5c:
         63:cf:67:a4:27:da:be:f0:d2:33:e0:75:4b:cb:7e:bb:0b:07:
         b3:4a:b2:ef:76:d1:15:74:fa:42:bf:6e:05:53:a4:1d:01:87:
         e4:4e:13:08:44:ad:bf:3d:55:29:bb:5d:7b:13:4c:fc:e3:a3:
         57:5b:54:a9:82:da:18:40:23:af:22:c1:61:ce:a8:da:2f:6b:
         3f:f8:55:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:51:35 2026 by rpki-client