Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
File:                     jEjc7LvMBSxln5cWCSKeNlaj2VY.mft (raw, json)
Hash identifier:          fkaBSY7R8XSypBm8xLuDNUhDUMcvGoanWZ5uXsGGguE=
Subject key identifier:   50:F6:0E:7F:3B:59:8D:8A:EE:F0:26:3B:41:00:E7:8E:19:11:43:0E
Authority key identifier: 8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
Certificate issuer:       /CN=8c48dcecbbcc052c659f971609229e3656a3d956
Certificate serial:       019D99D096933469717248B566B7A839CB75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
Manifest number:          07DF
Signing time:             Fri 17 Apr 2026 05:01:17 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:17 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:17 +0000
Files and hashes:         1: jEjc7LvMBSxln5cWCSKeNlaj2VY.crl (hash: tvmJxqAy2doDpal9OXYoT+SihWE2Y1eQGvLChL9g3eU=)
                          2: nyskGSMyjznwMN2wb3tRAEeMLcE.roa (hash: PX/bA+AaDD7Kn1LegVS7xXR8J6c1hlmfLAOwmDLgfNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:96:93:34:69:71:72:48:b5:66:b7:a8:39:cb:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c48dcecbbcc052c659f971609229e3656a3d956
        Validity
            Not Before: Apr 17 05:01:17 2026 GMT
            Not After : Apr 18 05:01:17 2026 GMT
        Subject: CN=50f60e7f3b598d8aeef0263b4100e78e1911430e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:ea:67:83:91:5d:34:06:08:74:36:6e:50:
                    38:14:8b:58:ab:7d:5a:5e:e1:3f:c2:3d:b6:09:d1:
                    1c:db:a1:57:0c:0e:b9:73:be:ef:c7:8b:6c:99:f3:
                    5a:bc:72:8d:4b:97:80:ac:7c:bd:05:5d:7d:6e:4d:
                    89:1f:15:ac:8c:57:52:5d:41:89:38:0a:72:6e:09:
                    5c:cb:a6:97:97:cd:93:de:85:24:d2:1a:4f:14:ae:
                    4b:18:56:d0:07:ce:64:ed:77:64:49:c2:e6:5a:6c:
                    e0:c4:07:42:1e:f0:5e:b1:13:fa:80:f5:ca:07:e4:
                    11:ae:d2:9c:e8:8b:f2:64:09:d7:f9:57:64:92:f2:
                    ec:ff:7e:8f:be:fd:6f:08:83:09:fe:97:ef:e0:72:
                    ee:02:96:40:bd:84:4a:4f:fe:67:c7:92:ab:ef:42:
                    5d:13:af:81:b7:df:6b:d1:23:b2:a3:bc:9b:2f:c6:
                    8d:6d:e8:7b:b3:51:00:6f:0c:0b:b7:d6:1c:59:5c:
                    42:cc:66:18:cd:4e:d1:5a:4f:2f:7e:7a:b6:08:9a:
                    19:f9:d2:3e:67:03:4f:49:5d:79:9f:64:50:8d:0b:
                    da:b5:05:05:23:cb:85:18:6f:1b:46:e6:81:b9:c1:
                    a6:fc:14:5e:55:3a:6f:9a:21:b0:be:f5:42:63:b3:
                    73:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F6:0E:7F:3B:59:8D:8A:EE:F0:26:3B:41:00:E7:8E:19:11:43:0E
            X509v3 Authority Key Identifier:
                keyid:8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:93:b2:46:a9:3d:3d:36:e8:f9:93:fa:14:07:35:91:39:91:
         45:bf:6c:77:4a:e0:5f:e1:7f:59:53:10:b6:f7:13:b1:b6:84:
         48:02:4e:46:ce:9e:8e:69:df:8d:e8:e4:88:97:ea:ed:70:02:
         6d:71:4a:49:3e:44:a9:9c:9f:8b:05:41:17:c4:06:86:cd:02:
         c3:e2:87:9c:c1:42:72:0c:1e:4c:5d:02:4a:0f:9b:61:99:06:
         e5:ba:da:e6:f0:7c:0e:84:99:04:6d:25:ee:4b:da:8d:d9:49:
         a8:4f:4b:f6:92:33:d5:02:ce:73:5d:3e:2f:5d:05:fb:5e:e6:
         24:48:1a:6f:0f:ce:28:33:ae:09:08:0a:36:76:b9:98:45:88:
         0b:15:2a:59:aa:04:ad:c1:25:24:c2:7d:1b:a3:a0:59:63:ca:
         91:a8:03:20:c5:e5:9e:84:62:c5:ec:9c:5c:2a:08:67:39:5f:
         10:34:f8:67:52:d8:12:06:be:cf:15:d4:2f:3a:96:4b:74:46:
         32:dc:9b:3c:80:00:59:df:a1:07:f7:1a:d4:0b:28:19:ba:6f:
         33:d4:be:97:57:33:9b:62:cc:d1:b2:d8:09:fb:04:2f:fc:f7:
         7e:61:a0:39:00:9b:46:32:c1:4e:0d:54:ef:73:9c:b2:9d:88:
         6f:25:ea:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:36 2026 by rpki-client