Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
File:                     jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft (raw, json)
Hash identifier:          TGOevIiHL2StypxbA+SIKV1vbePItgtteKc/rMf5hwY=
Subject key identifier:   7C:7C:10:55:6B:92:19:26:7D:B5:6B:E6:78:C7:BA:21:08:CC:BF:08
Authority key identifier: 8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
Certificate issuer:       /CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Certificate serial:       019D99995D48E0E1E24D43434D7282EC8D10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
Manifest number:          0810
Signing time:             Fri 17 Apr 2026 04:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:57 +0000
Files and hashes:         1: jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl (hash: pOdWw0rwcD239Ia7c6BgDJDXDBHR0XfzpHM7Pkgl7x0=)
                          2: qK0Mrs6KenO_aRFhW0teITHdeuo.roa (hash: 4G9MkNxMVnSOflcsOcuB/8IbmHM1MZ+IOen97Qx/3A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:5d:48:e0:e1:e2:4d:43:43:4d:72:82:ec:8d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
        Validity
            Not Before: Apr 17 04:00:57 2026 GMT
            Not After : Apr 18 04:00:57 2026 GMT
        Subject: CN=7c7c10556b9219267db56be678c7ba2108ccbf08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ef:d8:aa:e9:93:b0:e0:94:10:f5:6e:e4:4b:
                    3a:29:fb:1b:2f:c1:e9:d1:bd:07:b9:d6:f7:56:23:
                    a0:37:38:2b:89:a4:d1:95:ac:3a:de:60:8c:1d:3b:
                    ad:30:6e:69:49:b2:72:42:3a:50:2a:4e:40:17:02:
                    5a:93:29:35:46:75:3a:c0:01:5b:49:c8:ba:cd:6d:
                    23:e9:ea:dd:6f:0d:ad:7a:04:c0:f4:5b:b9:b0:aa:
                    97:b9:8e:6b:9c:c3:c6:d2:35:22:c4:d2:f1:fb:9c:
                    db:6a:d7:66:c5:e3:96:ad:97:50:26:e7:a8:5a:fd:
                    fd:64:28:f2:c2:bf:51:e0:74:89:7c:55:e3:ae:dc:
                    b4:f6:1e:e4:9b:e0:ae:c7:ce:83:d9:9f:ec:7d:8c:
                    7a:33:8d:8c:87:b1:04:23:8c:bc:07:7f:e9:0d:77:
                    56:3b:bf:84:01:49:f3:ff:03:0b:21:19:55:6b:20:
                    ba:0a:ef:d7:d0:1f:cb:15:77:e1:34:24:7a:2d:2e:
                    a4:16:de:87:38:7b:78:32:45:24:65:7c:cf:86:b7:
                    88:4b:f2:52:55:93:0f:8d:c8:7a:cf:cc:e6:67:35:
                    93:34:44:ae:5a:73:9f:09:ef:36:cc:7c:91:a0:f0:
                    22:d9:09:4f:04:2c:9a:62:3e:c3:e9:b4:a2:31:8d:
                    67:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7C:10:55:6B:92:19:26:7D:B5:6B:E6:78:C7:BA:21:08:CC:BF:08
            X509v3 Authority Key Identifier:
                keyid:8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:4f:1a:87:93:e9:34:d3:ea:22:ad:8e:5e:61:f9:7c:69:73:
         c4:95:ac:ed:66:0e:19:bb:b7:14:80:9c:57:d0:7f:d1:e1:1e:
         c5:4a:c3:a8:97:04:01:f3:a3:1e:5c:58:f6:72:f0:06:07:7e:
         58:c1:19:69:f8:13:38:2e:71:13:02:76:d3:57:d9:5a:0e:13:
         f8:a9:04:e5:e9:ce:25:6a:ac:91:41:75:98:de:36:cf:97:38:
         c0:89:76:c8:ce:f9:0c:b1:a1:e8:5a:f1:12:e4:cf:6e:cd:07:
         ee:36:45:9d:44:85:89:ce:0c:c9:3c:c7:9c:94:3f:b4:64:d5:
         10:c4:f2:da:53:93:1c:f7:dc:74:aa:2d:44:90:f8:ff:f6:c4:
         02:c3:29:6c:96:5f:92:0d:59:ef:1d:c6:88:ef:47:49:2c:b8:
         de:60:03:ef:3a:5b:db:8f:b0:c6:61:2c:9d:92:a0:87:2c:90:
         28:44:9f:72:a0:c1:e1:76:a0:a0:8b:c2:7d:46:67:6e:19:09:
         59:4d:54:e7:b4:5c:62:6b:dc:3f:1c:c3:7d:db:97:9e:ed:41:
         ed:e5:32:6c:fb:09:31:a4:1a:d6:39:ba:1f:17:f4:f3:4d:f4:
         81:98:cd:fc:31:71:fa:68:ee:79:9a:5a:6f:f1:37:bd:3a:ab:
         21:8e:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:06 2026 by rpki-client