Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
File:                     jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json)
Hash identifier:          yGMiQ6FaUikIXuYwq0Qj6vnlg7BpgY54cwevDlraBjE=
Subject key identifier:   94:F7:C1:D5:7D:E0:64:47:66:4A:52:83:39:14:30:61:06:91:2E:4A
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Certificate issuer:       /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial:       019D9BF563923780BE2407FC78073D109F87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
Manifest number:          1556
Signing time:             Fri 17 Apr 2026 15:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:43 +0000
Files and hashes:         1: W5uRfZYMXNW2milH0L5Q1SQBK_Y.roa (hash: twzlUdXhM38SqnTujzlhunBgW581D9DNlyRL1ec0bWg=)
                          2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: PlR5ggpoX0gIDNfSEedAZqzUtndaxOLOzTtjVO2iERU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:63:92:37:80:be:24:07:fc:78:07:3d:10:9f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
        Validity
            Not Before: Apr 17 15:00:43 2026 GMT
            Not After : Apr 18 15:00:43 2026 GMT
        Subject: CN=94f7c1d57de06447664a52833914306106912e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:53:86:3e:72:b6:7f:95:64:26:84:b6:97:20:
                    47:cb:10:e8:80:d6:34:9d:6b:f5:9c:f2:c6:2e:06:
                    9b:2b:8c:f9:6f:3f:70:2c:df:4f:cf:03:b3:dc:c8:
                    c0:fa:8f:53:70:0f:e0:92:4f:a9:94:fa:29:4e:37:
                    ea:7f:8f:53:7a:37:84:20:b4:0d:58:46:11:b9:47:
                    4f:e4:cf:77:9b:a7:33:00:40:3a:d4:42:cf:aa:be:
                    df:bc:98:af:b7:74:ff:22:b5:32:3a:a9:7e:55:9e:
                    ab:1d:c5:a8:46:cf:6c:0a:7a:f0:68:a1:fb:dd:6d:
                    78:40:4e:19:b1:d1:40:37:dd:91:ac:94:c8:c5:2e:
                    93:e3:fc:b0:7a:b5:9f:8e:03:23:9b:a8:9c:b1:5f:
                    02:54:f3:16:80:02:52:6b:04:34:05:68:d5:95:fe:
                    16:de:8f:73:e6:fb:2a:0a:61:f5:e1:45:f6:97:2d:
                    08:d7:d9:8e:4a:84:2a:99:20:44:a6:5c:5a:b6:ff:
                    0d:88:19:9e:77:a1:8b:3d:1a:2d:a9:ef:3f:c6:f5:
                    0c:de:90:43:4d:35:cc:27:ca:05:1e:de:6a:12:86:
                    a0:9b:2b:e2:3f:db:8f:9b:de:86:71:ac:7e:7c:e9:
                    09:0d:1b:6b:80:8a:c5:00:11:b4:0c:07:21:47:81:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F7:C1:D5:7D:E0:64:47:66:4A:52:83:39:14:30:61:06:91:2E:4A
            X509v3 Authority Key Identifier:
                keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e8:cd:2c:91:98:5a:21:48:92:49:3e:d2:a1:c5:bd:1d:3d:
         8c:b1:93:66:a6:94:0c:9c:65:de:b9:19:d5:36:59:18:35:3f:
         e0:36:65:e2:bf:61:86:85:fc:74:0b:79:86:5d:91:22:0b:33:
         25:34:0d:d6:c7:9d:2c:5e:5a:63:7a:29:59:6c:6d:c7:32:67:
         2d:82:c9:1e:49:56:04:38:6b:fc:9a:d7:b8:5d:da:70:e2:c8:
         a6:a2:ba:9c:fa:51:f3:88:bf:dd:c2:c7:a0:51:b3:62:6d:94:
         a5:86:4d:fe:87:e5:3b:6d:f0:6d:4b:05:bc:c8:94:68:01:2d:
         04:30:7a:84:2e:0d:2e:84:6e:28:4b:ea:7e:1b:ee:ba:02:42:
         b2:c2:3d:95:35:3f:67:1f:6f:6c:78:71:0c:1d:d8:01:10:0f:
         cd:82:7d:eb:ea:7c:58:ab:ef:70:26:0f:6f:8a:79:3b:0d:99:
         6a:2e:3c:a1:41:28:e0:ee:e1:df:44:83:2e:cb:13:89:90:28:
         8b:81:bc:4e:f3:11:c2:c5:e5:ae:68:fb:ea:ce:40:b5:64:9a:
         46:0a:e4:28:94:6c:91:41:b0:25:bc:81:c7:81:ea:45:28:69:
         61:38:c6:83:c5:33:fb:69:50:b1:b7:b1:bf:5b:f0:8f:84:51:
         4e:88:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:58:43 2026 by rpki-client