Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
File:                     jDutauSRZD0HXiHLqFnvKOJuPHk.mft (raw, json)
Hash identifier:          bwl8t9dHP6diaAZIxGmc2IqEaEcX9PwlqQQ/uXkipsw=
Subject key identifier:   2E:11:A4:23:A0:E3:68:E0:3B:FF:3F:29:1B:30:6C:A4:48:33:7A:C1
Authority key identifier: 8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79
Certificate issuer:       /CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
Certificate serial:       019D992B801EC5F05ED5878B62ED99573823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
Manifest number:          1568
Signing time:             Fri 17 Apr 2026 02:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:58 +0000
Files and hashes:         1: jDutauSRZD0HXiHLqFnvKOJuPHk.crl (hash: IXJ/kOs+msV4vpcdhV/KyyMOSLBxtiT+QrHMXliOHZE=)
                          2: qmZ4U9hGV8VSwz5yK7CScI-NPoI.roa (hash: lBrjEmgGCnOGQAjqYMA0OP4JZ/cwhcFHf/zVri7F27g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:80:1e:c5:f0:5e:d5:87:8b:62:ed:99:57:38:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
        Validity
            Not Before: Apr 17 02:00:58 2026 GMT
            Not After : Apr 18 02:00:58 2026 GMT
        Subject: CN=2e11a423a0e368e03bff3f291b306ca448337ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:20:2f:2b:05:77:ee:44:73:fb:fa:63:4b:
                    98:b5:8d:a7:7f:2c:9e:60:1a:8f:8c:81:2d:93:b9:
                    22:e4:d8:6b:17:a7:b0:7d:ed:87:51:84:8a:50:bb:
                    a5:4a:eb:c4:fd:b6:97:0f:27:24:b8:2d:89:43:9b:
                    1e:0b:f2:b8:1c:ed:aa:9a:df:38:e3:02:84:12:4b:
                    be:e7:4b:ab:af:0d:d2:d7:76:3a:4f:ee:b0:10:57:
                    f9:ef:ec:d8:c8:e5:01:2b:88:a4:29:63:60:83:f4:
                    05:c7:2c:b6:27:80:cf:65:71:fa:e0:75:5f:5a:4b:
                    16:9b:b0:db:f9:68:93:5c:64:f5:97:7a:ce:88:60:
                    8b:a6:bb:48:7e:b6:36:36:42:74:61:e5:15:fc:1d:
                    ac:d6:51:52:60:3b:b0:ab:3f:cd:08:51:2a:53:fc:
                    55:20:56:9b:3d:f9:c0:c2:0e:14:98:fb:7d:32:30:
                    58:84:7c:04:fd:a3:c6:95:07:12:bc:58:75:14:69:
                    34:9c:87:33:a9:cb:96:3d:49:69:e1:c9:b0:2e:fb:
                    cb:63:57:00:11:b4:22:3f:3d:e6:5c:1e:a8:03:eb:
                    db:a2:94:23:d9:d6:1c:d8:7c:e3:68:de:16:a6:18:
                    57:1b:30:57:b9:59:b0:15:d9:64:81:5e:fd:18:99:
                    e9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:11:A4:23:A0:E3:68:E0:3B:FF:3F:29:1B:30:6C:A4:48:33:7A:C1
            X509v3 Authority Key Identifier:
                keyid:8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8d:93:5e:31:3a:46:44:94:c5:18:34:16:ad:c8:65:69:1a:
         48:5c:f0:a1:64:66:e7:65:4e:c6:7d:a8:6b:4f:8c:39:ed:74:
         4c:08:ea:2a:f3:ee:d5:0a:c3:fb:53:16:09:99:62:27:1e:2f:
         21:dd:a9:eb:93:72:14:36:73:d0:15:b5:c0:38:f8:4c:22:86:
         00:4c:91:8f:c1:b1:0c:83:25:6a:61:84:bf:ac:a3:5e:08:f5:
         b2:a5:af:8b:81:c0:3d:9a:73:af:65:f4:a8:42:6e:2b:39:e1:
         d8:34:44:4f:7e:7a:54:59:2a:2b:6f:6e:b3:69:af:2f:ca:6f:
         ca:3c:8b:01:e4:13:2d:52:c0:75:26:90:2c:3a:97:c0:86:bf:
         d4:30:4b:40:fb:ae:b2:bb:4d:b8:71:34:54:5d:62:3d:ec:d1:
         ae:88:e3:d5:c1:9d:25:74:8e:6a:2c:4c:cf:1f:7a:b9:43:06:
         de:70:e0:22:9d:db:ea:06:e7:b4:53:e7:fe:ca:c4:a7:e8:30:
         1e:37:56:8e:42:65:14:38:87:85:43:4a:40:26:3e:08:2b:2a:
         f3:dd:1d:a7:60:14:b8:1b:81:4b:e6:f6:0c:16:48:a3:88:fa:
         1f:1c:6a:34:bd:15:5b:23:b9:a4:0e:17:e1:22:cb:a0:3a:71:
         0e:61:11:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:18 2026 by rpki-client