Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
File:                     JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft (raw, json)
Hash identifier:          Dkcw2b71Sq6Jile6z7BheO9dpRO7cPUqwnZxkRTDlsw=
Subject key identifier:   49:6B:BF:47:A9:25:C0:09:A2:D0:88:00:F7:5B:0D:E2:A2:95:5F:91
Authority key identifier: 25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
Certificate issuer:       /CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Certificate serial:       019D98188A026A092E4A31FAB536AADB7B76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
Manifest number:          0822
Signing time:             Thu 16 Apr 2026 21:00:38 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:38 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:38 +0000
Files and hashes:         1: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl (hash: BKwIqVYAo9AbNdEszQIBqx4N28yJXUqL9L5JdvfNU9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:8a:02:6a:09:2e:4a:31:fa:b5:36:aa:db:7b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
        Validity
            Not Before: Apr 16 21:00:38 2026 GMT
            Not After : Apr 17 21:00:38 2026 GMT
        Subject: CN=496bbf47a925c009a2d08800f75b0de2a2955f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e7:d5:18:08:6f:7e:e6:60:4d:5a:e8:55:d6:
                    6c:84:e4:56:e0:a3:5e:81:67:26:1a:ba:8e:e9:58:
                    0d:1e:10:5d:75:64:13:c4:c6:6a:f5:3a:b0:6c:b0:
                    80:0b:bb:22:00:a9:62:16:38:b1:68:cb:8d:82:e7:
                    93:d2:71:e9:a7:a6:a9:f5:c0:63:85:cf:31:e3:9e:
                    f7:64:e2:af:39:4b:10:37:c8:ba:07:4c:9d:aa:b3:
                    c1:bb:1a:01:5e:e1:05:e1:3f:2a:82:84:2f:ba:d7:
                    d8:93:ba:c1:11:4a:2b:ef:f7:57:14:28:4b:c4:b2:
                    0a:98:54:38:ef:ff:15:ad:b5:2b:13:07:99:a7:4e:
                    6a:34:b9:c1:ae:bc:9e:6c:ed:2d:8b:8d:f1:e3:f2:
                    70:e6:c5:7d:a2:5e:6e:4b:5d:d0:d6:a8:38:c0:67:
                    8f:8a:8e:6c:88:f3:a1:a8:8f:3e:42:2d:c4:ff:ee:
                    02:ee:17:0e:7a:b7:f9:11:ad:c2:35:a1:6b:41:26:
                    91:6c:bd:77:82:2a:e9:53:c3:12:f7:76:32:b6:1a:
                    30:c5:92:c4:17:36:09:9b:84:65:1a:4f:92:9b:c7:
                    c2:b8:28:8a:b7:51:2c:61:36:17:e5:c7:4a:7c:a7:
                    69:a8:30:82:6b:24:a1:bf:a3:64:5d:a0:47:95:59:
                    c0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6B:BF:47:A9:25:C0:09:A2:D0:88:00:F7:5B:0D:E2:A2:95:5F:91
            X509v3 Authority Key Identifier:
                keyid:25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:4e:5b:14:f7:80:99:c9:03:bb:7c:38:e6:23:9b:ee:db:d5:
         96:e2:0f:90:c4:91:d2:f9:4a:a7:77:0e:e6:f1:ab:e0:e2:24:
         12:24:93:3a:7d:24:6f:3e:08:8e:eb:3b:f8:cc:d4:89:2e:8f:
         5f:34:34:6b:76:c3:c0:d6:20:25:c5:8c:1a:f8:c4:f2:9f:b8:
         87:4d:42:00:d6:73:7d:46:d5:ab:0b:b8:b3:4b:85:c8:16:51:
         a5:61:a8:7e:a3:88:8a:83:70:73:26:05:21:81:06:99:f3:05:
         cc:c6:65:f8:73:3e:24:76:00:48:6a:90:78:04:80:e1:e6:5d:
         6b:b6:2c:cf:8d:01:b0:6b:a7:4d:47:5f:dc:86:3b:73:0e:0c:
         fe:9b:9d:7d:68:4b:f7:39:7a:b3:7a:c6:42:ba:8b:24:dd:d0:
         4b:db:cf:12:5e:1d:f4:4a:bd:73:59:64:c0:34:41:81:c2:ce:
         56:7a:56:20:2d:2b:24:e3:a5:fb:73:57:17:d9:96:95:fd:2f:
         13:52:03:d1:51:e0:b7:6c:72:63:99:fe:5e:42:0a:c4:ee:b1:
         32:44:10:48:c6:cc:16:ce:01:ce:fa:6d:02:9b:2e:1c:6f:90:
         af:d2:91:f7:d7:2c:79:6a:94:86:0d:bc:b1:0d:0b:2c:96:b1:
         7b:e6:b2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:14:38 2026 by rpki-client