Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File:                     JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier:          BJSdbbQi3mqKUXMOylwkVoRrgSdOo/uj4sF51FvscWY=
Subject key identifier:   6D:C4:FE:53:2B:35:FD:B4:15:95:1F:C7:D2:F8:7B:9D:70:0C:76:07
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer:       /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial:       019DA3411A4204FCDC94000A32C5F2F9C876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number:          18C9
Signing time:             Sun 19 Apr 2026 01:00:45 +0000
Manifest this update:     Sun 19 Apr 2026 01:00:45 +0000
Manifest next update:     Mon 20 Apr 2026 01:00:45 +0000
Files and hashes:         1: 3pF8IhqwUxmlbr6s48L9oPema6M.roa (hash: dwMpIPqTUrQBexVcKq3XaTovbIKuATLe+PvFHdYURt8=)
                          2: 8MhUGiidi2m0HnQqAR9gajVbxRM.roa (hash: H33xML5R5o+4GB2XWvGYGH7H4gss4OnrQcVOqELCXeI=)
                          3: BsDV5gEChvqJlOEUL1parquidSQ.roa (hash: 66XQpURFVhssGT5jkMQej1bzbdrps7y8gPjFudVSOts=)
                          4: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: PQ5Qe1hOI9D0t337hq/Jd3Lw8JaPPzADk2r+RyjVHpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 01:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:41:1a:42:04:fc:dc:94:00:0a:32:c5:f2:f9:c8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
        Validity
            Not Before: Apr 19 01:00:45 2026 GMT
            Not After : Apr 20 01:00:45 2026 GMT
        Subject: CN=6dc4fe532b35fdb415951fc7d2f87b9d700c7607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:00:94:75:ed:a0:e3:92:03:cc:01:0e:13:
                    5e:f6:48:53:bf:05:ec:c4:c0:3f:30:29:17:a8:dd:
                    ce:19:0c:23:00:41:95:c9:fc:ab:00:82:62:ed:e3:
                    47:8a:25:23:6e:64:5a:9e:d3:5f:0b:6f:72:30:79:
                    c3:d5:8a:72:e7:81:b1:b2:6b:e1:13:3e:38:a1:09:
                    f3:4e:16:ae:33:2a:44:4f:d0:a5:b5:c7:ff:43:59:
                    ba:99:e0:bd:df:85:0e:7a:6b:9c:49:8b:c8:55:1b:
                    07:05:84:87:51:f6:26:a4:15:5b:18:b8:e7:90:06:
                    18:a9:20:92:c0:2f:fd:30:6b:c1:08:df:73:df:b0:
                    a9:8f:79:04:ee:d2:cd:66:ac:0c:cb:de:58:1a:9d:
                    e3:e7:60:48:bc:42:0e:1d:91:10:fb:59:8f:48:9a:
                    72:43:f2:0c:ec:71:0a:1e:9d:42:90:f1:a4:ca:6a:
                    6f:12:80:de:84:9c:c9:d4:c5:0f:67:f6:67:7c:12:
                    03:5c:c5:c2:9c:35:ec:c7:32:6b:e8:00:9e:f4:58:
                    72:9c:90:69:8a:5b:83:e1:7f:e2:b3:f1:80:54:6a:
                    03:35:d6:39:31:bc:6c:cf:7f:41:ca:a7:6d:2d:9e:
                    dc:ab:0a:0d:80:29:32:b0:65:11:9f:62:23:c4:45:
                    69:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C4:FE:53:2B:35:FD:B4:15:95:1F:C7:D2:F8:7B:9D:70:0C:76:07
            X509v3 Authority Key Identifier:
                keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2c:58:68:a0:5d:6e:96:ed:5b:c3:e2:be:53:3d:3c:47:a1:
         bb:e1:4c:59:50:04:88:d6:7d:39:65:d2:f8:31:9e:30:34:82:
         59:17:28:2a:ad:2f:55:a6:7d:f6:12:3c:76:ae:73:77:36:a5:
         c5:35:64:1e:8e:8f:31:90:ce:06:47:62:02:5a:03:ff:74:82:
         57:92:ab:de:38:30:9e:a5:9f:dc:d3:df:49:e7:ea:c9:47:ec:
         01:db:17:51:a4:a8:60:ac:a7:c7:33:1a:08:a4:d1:a1:98:8b:
         e3:ed:46:61:e5:e4:d4:f4:97:a6:f7:b1:b1:89:2d:6c:24:f7:
         e4:18:35:fa:b9:54:c0:ad:89:9b:71:98:24:f5:60:b0:b6:96:
         8f:77:36:dd:41:69:65:a8:85:46:0e:a5:0e:6b:16:d0:67:04:
         03:97:f8:d4:d2:06:5f:2a:f2:8c:96:0b:6a:7c:b4:3d:cb:15:
         bb:38:15:69:1e:ab:c9:04:73:b5:1e:90:65:07:63:b5:11:38:
         0f:d9:eb:c9:84:a4:34:2e:f3:94:6c:2e:19:69:8f:79:12:37:
         6b:a3:48:b1:59:2b:92:79:40:1d:94:c3:62:62:20:40:43:ec:
         01:03:93:88:19:d8:7d:ae:3e:66:1b:e5:6b:74:5c:a0:06:13:
         4b:3e:74:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:08 2026 by rpki-client