Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File:                     Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier:          wO9vujTEedNDsrZYgK91K0UdzReELED9ELn4NrjQw4w=
Subject key identifier:   C1:D8:01:31:FA:5B:7A:F4:A7:7C:81:5F:17:9B:0F:C9:CF:3F:99:03
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer:       /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial:       019D9999341A400A36D3FD823D1E52549327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 04:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:47 +0000
Files and hashes:         1: 6MvEEf7_I3zO3ShtqYd8LKtfRq8.roa (hash: lIgvAYq1Ass4AfPtbYog1dJL/68LEdNig8uh3pGw9vM=)
                          2: EKgYi5uwmdQ3SbZogfsfQT2cobM.roa (hash: Y3gYmZwUht9JEwQTGH6EyDKQhtm/rC13n1867BeBzvQ=)
                          3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: SSLa/KgQs3MYW7qWsTAS0S0rAaCNlIMrJE+FGu5vDGI=)
                          4: Jqk7oDaY0GyweY_m1dLexacLzPE.roa (hash: prybAkap/ary1cwam/oMqauOzBkuf1YCV2giq0/4yoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:34:1a:40:0a:36:d3:fd:82:3d:1e:52:54:93:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
        Validity
            Not Before: Apr 17 04:00:47 2026 GMT
            Not After : Apr 18 04:00:47 2026 GMT
        Subject: CN=c1d80131fa5b7af4a77c815f179b0fc9cf3f9903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:9d:15:26:4c:26:83:63:ac:a2:7a:30:da:
                    af:70:78:fb:2a:67:23:fe:0c:8c:da:e8:1c:30:04:
                    7c:77:7b:a6:ba:1d:5c:93:56:ec:33:d5:5b:f7:36:
                    3a:17:14:b0:13:94:2e:ac:08:ee:81:48:e0:6b:ac:
                    52:ae:69:26:b5:1e:bb:f0:01:e8:50:ac:de:13:78:
                    e9:2c:39:3c:5f:5f:c3:26:e3:2c:2f:14:ec:d5:08:
                    cc:f7:71:78:0a:15:96:b4:05:dc:c6:af:ae:ef:d9:
                    ac:09:53:6f:9a:c7:bc:02:85:57:26:9f:13:ae:e0:
                    1a:33:4d:43:3a:e2:4a:04:43:7c:e3:ef:db:a4:22:
                    3f:a0:f8:f5:0d:2f:d7:a9:4d:3e:d8:07:4d:9a:7d:
                    40:90:1f:f3:02:26:72:a5:cd:93:86:31:ef:0b:64:
                    be:4c:64:97:c2:c3:cd:f0:21:19:e5:f3:3e:eb:ac:
                    c6:ab:89:92:6a:63:05:08:91:ef:99:9f:57:3b:8c:
                    db:a6:40:04:72:3e:21:2d:33:d9:67:2b:6a:da:6c:
                    cc:75:c6:69:42:b1:fd:05:81:8e:47:56:e3:69:b0:
                    c6:e5:3f:85:1a:d0:c1:de:26:ff:c9:ea:dc:1b:fd:
                    d5:b3:f9:63:ff:5d:ef:60:ea:22:50:7a:3f:86:5d:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D8:01:31:FA:5B:7A:F4:A7:7C:81:5F:17:9B:0F:C9:CF:3F:99:03
            X509v3 Authority Key Identifier:
                keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1c:5e:be:14:58:41:e8:50:36:57:43:76:73:92:29:d5:ce:
         6c:63:58:3b:b0:7b:14:9e:7d:41:fa:ba:bf:27:cb:64:77:44:
         8a:de:97:ed:6f:f4:1a:65:03:84:72:f2:2f:3d:da:2d:5b:cc:
         a4:07:95:aa:11:3a:7a:ab:c4:e8:c3:00:48:9d:fa:7e:50:d8:
         13:88:39:fd:60:d4:72:eb:65:d3:f6:11:0b:ce:4d:f1:a4:a6:
         81:2d:00:0a:59:66:9e:40:b3:3b:39:91:64:eb:ad:2d:50:a3:
         20:a2:96:7d:65:1d:fc:fe:f3:c6:16:78:00:9f:91:03:6b:9b:
         98:d3:a6:d4:ff:95:ab:18:81:4a:64:ea:1b:f1:f2:bd:71:ce:
         e5:f7:a5:04:48:c5:d9:15:99:1a:0d:ca:19:0a:9b:cb:b4:c0:
         97:c0:c0:80:fb:01:78:f9:b7:12:01:f1:02:35:11:62:b1:1b:
         e3:d7:a3:91:a3:8e:35:b7:0d:ff:97:07:10:23:5f:a2:8a:9f:
         87:0c:a7:84:86:e4:8b:d2:24:1a:e8:cc:14:be:24:00:25:f8:
         55:cf:b1:31:ef:5c:12:d2:5f:63:41:72:27:48:e4:24:5a:34:
         66:e1:3a:3f:2b:56:3a:d3:fc:6d:f4:cb:13:a3:58:4d:26:32:
         0d:6c:6f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:12 2026 by rpki-client