Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
File:                     Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft (raw, json)
Hash identifier:          XA7RKlG5J2SZkxFRstXQRrMplXYyLKULNLPKQTQFguM=
Subject key identifier:   85:23:63:57:A7:79:24:90:FA:37:81:35:E1:55:DF:0A:5C:CF:13:62
Authority key identifier: 26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E
Certificate issuer:       /CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
Certificate serial:       019D9962FED3A4E1449DF0E86C8F24B55C01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
Manifest number:          1852
Signing time:             Fri 17 Apr 2026 03:01:34 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:34 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:34 +0000
Files and hashes:         1: Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl (hash: 4oboTKqLClADTqcVs2yBFpieEqPifTJpGMPGMRECmAA=)
                          2: apgFIZZ2kNrAvx4UT-WLtpzNCTA.roa (hash: Kr/qYxPomhktonhz5Ep98c+wnNlvv7s4Ib91hHUnMsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:fe:d3:a4:e1:44:9d:f0:e8:6c:8f:24:b5:5c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
        Validity
            Not Before: Apr 17 03:01:34 2026 GMT
            Not After : Apr 18 03:01:34 2026 GMT
        Subject: CN=85236357a7792490fa378135e155df0a5ccf1362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:be:09:b6:76:e6:7b:d7:4b:a4:4c:3d:06:3a:
                    f0:63:0b:a3:ed:f6:e9:05:2d:03:29:ed:3c:cf:91:
                    0e:04:41:78:76:03:3e:41:c3:0a:49:2d:d6:3b:f7:
                    57:e8:bc:aa:fe:47:0a:00:13:62:bb:51:a7:f0:51:
                    b5:c8:d1:09:8f:b1:59:a8:c8:95:ea:a9:a0:34:75:
                    c9:cd:86:28:0e:7f:a3:28:93:d9:19:01:ea:8a:a3:
                    70:54:42:08:b9:93:70:de:6d:24:27:c1:cc:9b:ff:
                    a1:8f:86:51:05:03:81:a3:3a:e4:f6:50:ff:27:52:
                    c1:3e:a3:a2:8d:9a:08:8a:03:28:f5:6a:46:a9:38:
                    0a:61:e3:b0:f9:67:a4:67:5c:ef:6b:e9:a5:28:74:
                    1f:a5:8f:01:84:07:d2:b7:d7:a9:7c:0f:e0:c4:81:
                    35:ca:f9:c0:b3:bf:93:52:7e:f6:b9:b8:08:39:37:
                    aa:29:e7:b2:51:9c:24:9b:1b:4a:b3:20:ec:63:96:
                    f1:43:c7:f4:c1:9c:e8:a9:da:20:a7:e7:89:cf:58:
                    46:ab:3f:db:ba:e5:f1:4e:46:f8:a4:2a:b6:f0:99:
                    1d:c9:54:48:b6:aa:53:3d:92:6b:be:b7:ed:f7:e5:
                    86:a5:15:b9:0e:d4:db:25:b4:35:7c:b4:20:18:54:
                    9b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:23:63:57:A7:79:24:90:FA:37:81:35:E1:55:DF:0A:5C:CF:13:62
            X509v3 Authority Key Identifier:
                keyid:26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:42:b2:8b:fb:b1:6f:bb:b6:de:07:94:da:5f:c5:2e:e3:82:
         5f:4c:57:48:be:42:69:df:78:48:63:40:7b:89:be:12:c5:a5:
         63:8a:10:e2:50:cd:d9:54:79:df:47:42:ac:73:ed:72:02:f6:
         96:ac:c2:85:f6:c3:40:00:f1:4e:b9:1f:e5:c4:8f:fb:86:6e:
         ee:f6:8e:54:fb:17:5b:c9:d1:08:df:64:cf:98:39:32:b4:86:
         86:43:d7:9c:df:53:cb:da:d8:08:4d:ad:1e:bf:54:11:f4:82:
         84:28:73:0b:c6:aa:67:b6:9b:c5:5b:a7:16:e7:7f:bc:74:ab:
         8f:91:38:80:9f:ba:d0:5e:7f:89:31:68:0c:68:99:80:f5:e4:
         c2:3e:94:00:69:8e:2e:98:cb:c0:02:6c:4a:db:39:ba:7f:9e:
         17:ce:ee:ea:ff:ac:c7:bf:26:76:78:59:1a:db:a3:b6:b5:a9:
         59:3b:c0:5f:9d:20:72:53:f8:d7:fb:6a:20:ff:dd:dc:3e:d1:
         99:7c:de:29:f8:dd:c1:3a:77:83:96:3d:4c:4f:13:61:46:16:
         27:5d:65:df:fe:98:e9:82:a1:c2:5e:c6:29:d2:78:52:ec:37:
         25:c7:65:4f:20:c4:0a:cd:7d:93:92:ba:fc:40:ce:e6:11:f3:
         1a:d9:f3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:51 2026 by rpki-client