Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File:                     JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier:          5wyeRKd2g5h6PYJw7S9S+600ZPe9jCZfqihfDvI/vbg=
Subject key identifier:   1A:AE:24:45:5E:38:2A:0D:2B:AC:FF:D9:06:FD:36:A5:8F:90:37:E1
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer:       /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial:       019D9D07FCD443B9C3070816E41EC404904E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number:          1856
Signing time:             Fri 17 Apr 2026 20:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 20:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 20:00:39 +0000
Files and hashes:         1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: qKzxy1Mu5UGoowjQs9T2bekfQ1quh9Z/uspV46iNHkw=)
                          2: eL4sddmNTd7PSzARjzADz_21RBc.roa (hash: 9PP/TpfqraKWqrmb3Ro9MwG6dH8Z8rYhFZu1I649JYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:07:fc:d4:43:b9:c3:07:08:16:e4:1e:c4:04:90:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
        Validity
            Not Before: Apr 17 20:00:39 2026 GMT
            Not After : Apr 18 20:00:39 2026 GMT
        Subject: CN=1aae24455e382a0d2bacffd906fd36a58f9037e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:e2:34:ed:31:fc:e8:f5:ae:f7:bc:92:7e:
                    9b:49:6a:2a:3d:ec:2a:da:52:8e:6e:30:ac:d1:49:
                    d4:15:d3:3f:9d:4b:b5:7c:8f:ea:69:51:2a:0b:c9:
                    fa:bb:7a:21:99:0c:6c:6c:1f:3d:08:ea:ea:4c:1c:
                    a2:f7:fa:b8:0e:8f:ed:54:22:ca:97:45:e6:7d:82:
                    9f:35:a9:bb:34:99:9c:0b:e6:5b:de:70:28:50:82:
                    e8:64:58:55:62:0a:98:24:31:ad:72:c3:09:a7:77:
                    c4:af:05:69:e5:e2:dd:10:69:ab:e6:4a:7e:ac:aa:
                    2c:55:45:00:25:d9:52:84:c5:80:13:aa:d3:2f:51:
                    23:f7:09:af:86:41:f2:c1:5f:cd:fe:2a:bc:b7:69:
                    02:7f:f8:9f:34:38:42:76:61:d8:9d:41:f6:0f:17:
                    8b:54:9e:75:6b:6b:a9:c3:d9:0d:45:5f:e5:cb:aa:
                    31:48:25:a4:01:3e:53:bd:67:6c:04:39:9d:b9:3c:
                    a9:f0:6c:cd:1d:00:4a:10:24:68:c0:38:ec:38:0f:
                    d1:11:6c:a6:28:95:3b:91:02:e5:d2:cb:f6:f2:8e:
                    4a:fc:3a:e0:56:51:8e:64:21:15:76:7d:0b:33:28:
                    18:54:d6:a5:e8:6f:5b:bc:cd:9d:f8:c0:c0:01:46:
                    af:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AE:24:45:5E:38:2A:0D:2B:AC:FF:D9:06:FD:36:A5:8F:90:37:E1
            X509v3 Authority Key Identifier:
                keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:32:8d:c2:8b:de:76:7f:9f:7d:de:f9:09:0f:0a:7e:bf:de:
         38:28:81:5b:c9:f5:91:eb:ff:f0:67:9c:58:55:50:a0:de:ee:
         4a:d4:40:bf:96:5b:a2:fa:14:4a:9b:03:31:04:20:43:48:6f:
         28:57:5b:cc:87:07:20:c0:f2:bd:34:1d:53:16:19:81:23:83:
         22:2a:a1:78:bf:2f:b9:de:93:f6:0c:0a:02:6c:ce:dc:1c:79:
         78:02:e0:4f:0a:81:72:96:61:36:dd:1d:c7:0c:f5:14:10:98:
         31:26:43:e5:43:a3:ff:06:27:5f:4b:06:97:6e:1d:b8:4f:87:
         3f:66:ba:b8:98:fc:b3:f5:e9:3e:c1:7c:9d:12:e4:27:9b:8a:
         67:98:e8:b7:ce:37:e9:78:8d:6e:de:d7:df:94:e4:5a:6c:a3:
         98:69:89:c5:da:a4:9a:c9:91:25:3b:41:21:c8:c8:90:5a:1f:
         21:5a:ad:48:20:04:f4:74:49:05:e4:9b:f8:d2:97:cd:15:9d:
         b8:cd:00:3b:a9:25:f5:de:c2:85:77:be:9a:24:14:b5:04:00:
         62:14:90:fe:5d:72:1a:dd:31:cb:b3:42:96:69:22:e6:81:cb:
         86:a7:d0:d1:6e:3c:43:fa:20:5d:c1:01:47:1b:9c:34:d0:19:
         74:ee:9b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:32:44 2026 by rpki-client