Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
File:                     JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft (raw, json)
Hash identifier:          IMxNU9dsTKNN+h2gEnUsJ50Z4y6dkxuQ5SzcnbOyYao=
Subject key identifier:   8D:0C:EA:BC:C0:DC:B5:8F:6E:64:17:3B:C4:8B:48:42:60:F8:EB:B2
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Certificate issuer:       /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial:       019D985046D3E8F9B3C06C16D74FF926F30C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
Manifest number:          1923
Signing time:             Thu 16 Apr 2026 22:01:30 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:30 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:30 +0000
Files and hashes:         1: 9AbUngTypkaoNALibGKyeTkaz4o.roa (hash: 8et21MYSocigMDejcXNZOBoqIIUukvEWNLqIqh49CVQ=)
                          2: If-4jw8504k0DpzNI8J-eTjth_I.roa (hash: +7hlM1fpCVGHtefaNr3Hcn1BgELFnn/j/b88Js0gOWM=)
                          3: JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl (hash: 9cTpjb8LBu7+p/GLk0BcyGow7bEFKcHmOrlAPQnrHS8=)
                          4: RyBPSWBAyvgzI58JUex72WdudTY.roa (hash: dlQYrNWmjCNno8rPfDE7ZKBncib9oiUvaLSq8gqa3/M=)
                          5: UT5KF9vV1JL4qQULVX8xBydW-Ws.roa (hash: CZXMjETLne5/ANsavo0h/DI6L9lViMMTJK0r4r9Tp+I=)
                          6: YJKWmoUnloWqQAavfXfWWxqnJ5M.roa (hash: Ka2Kdw/WOaN1bcBViqXyM0PUv8ChNL0LTlaKVsUXAN4=)
                          7: ob6pDJB_JE3UJu9H-9gufeyselQ.roa (hash: xbSbO7r3hHkWAEnbnrsxUE2H3xriXhgsX8DyAPUq47c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:46:d3:e8:f9:b3:c0:6c:16:d7:4f:f9:26:f3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
        Validity
            Not Before: Apr 16 22:01:30 2026 GMT
            Not After : Apr 17 22:01:30 2026 GMT
        Subject: CN=8d0ceabcc0dcb58f6e64173bc48b484260f8ebb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:6e:a2:4a:f8:ea:65:61:a0:16:d3:fe:06:
                    e5:4a:17:b6:cb:cb:4e:eb:76:33:41:ff:b0:1e:50:
                    84:11:66:5e:fe:fa:7a:84:7e:22:56:7a:7a:63:ef:
                    03:86:5e:e9:b9:c8:9a:78:56:76:92:0c:a4:39:3d:
                    d6:9a:5c:ae:9f:98:5a:ed:ed:69:d0:57:fc:9e:48:
                    50:25:52:a1:9c:28:08:b4:13:ec:0c:b5:8d:de:ed:
                    ce:e8:62:47:91:5c:89:d7:15:f9:6f:f6:a5:f4:30:
                    b9:03:ac:e6:d1:ab:bc:de:c7:0c:d7:9e:5f:3b:1e:
                    8b:b6:8a:07:bc:33:b9:fb:e7:43:7f:ea:cd:9b:d8:
                    4d:4f:40:48:6b:0c:ad:4a:13:df:35:aa:e7:9f:01:
                    46:b9:80:6c:07:12:46:cf:32:db:70:70:95:94:24:
                    4d:c6:0c:5d:2a:a3:f8:1b:bf:e9:4e:a6:c3:71:ab:
                    7c:5c:ea:e9:15:d9:14:ca:ce:d7:3e:f1:28:83:7f:
                    78:65:f0:db:5b:cc:45:70:0b:31:7a:ef:ab:31:e5:
                    de:87:18:94:94:6c:02:f3:91:61:08:df:2a:20:90:
                    bd:95:5c:26:32:3c:65:60:18:d9:be:26:2b:29:bd:
                    a5:2f:64:64:d2:ae:59:99:88:ec:eb:25:c2:a2:2a:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0C:EA:BC:C0:DC:B5:8F:6E:64:17:3B:C4:8B:48:42:60:F8:EB:B2
            X509v3 Authority Key Identifier:
                keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:10:92:9e:8f:ce:d4:03:e2:cb:87:48:82:78:7f:68:27:2e:
         e3:93:b6:8e:b3:21:c6:52:0f:87:2a:e6:22:2d:0b:26:65:16:
         b0:28:c3:6e:f7:2b:89:ef:2a:23:bc:72:ef:0d:6c:e4:3e:b4:
         0e:0e:fc:f6:a6:3e:d1:ad:c1:c2:74:1d:74:f8:6a:07:e4:c5:
         02:d3:3a:3e:be:b9:36:75:56:23:39:09:00:1b:7a:87:5d:10:
         41:14:5b:d2:be:7b:24:b3:93:ae:df:b4:46:7e:93:09:fe:37:
         9d:13:f0:f3:58:b9:1b:12:50:42:d6:63:3a:96:e6:db:6e:19:
         72:74:c9:5a:0d:a9:df:4b:f9:74:42:a5:98:4c:f2:d8:8a:a3:
         f7:cc:1d:2d:52:6c:2e:9e:07:cb:0d:03:4d:78:f0:62:7c:ef:
         66:5d:c2:c0:c9:a5:49:22:33:f9:96:af:44:1f:f1:da:de:3f:
         1e:14:09:de:e5:ef:6a:e2:ad:1a:af:a9:12:fa:bd:d4:9f:ba:
         f9:b6:5e:6d:89:5b:4c:03:be:e8:2d:78:93:55:3d:e6:21:f8:
         8c:f6:2f:04:c0:25:4c:a3:14:9f:c9:ff:dd:ad:d8:2d:a0:40:
         35:d2:a8:10:73:3a:e6:36:33:b6:bd:52:69:fd:b4:0a:09:92:
         60:e8:ac:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:04:58 2026 by rpki-client