Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
File:                     Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft (raw, json)
Hash identifier:          rn2gZeoIpPKAIpOwopGwYJ4ufbQAiF8r+83/MDZvuk4=
Subject key identifier:   71:3B:6E:94:3B:03:AF:A7:36:76:E4:14:9A:20:7E:22:15:24:04:82
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Certificate issuer:       /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial:       019DA453AE47F10A7824326D5CE090D0CCE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
Manifest number:          18CD
Signing time:             Sun 19 Apr 2026 06:00:40 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:40 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:40 +0000
Files and hashes:         1: 1tq3O762pd4piMgBW1bA4-OkYdE.roa (hash: 5SImQwh0Wwz5tGyZ+mkSamCxnSlJbvkXrVz7wNpOrGA=)
                          2: 90AKDFsTQP1aQZWkwmcUiohlwPA.asa (hash: 4NiLTh3/niTL3AzhTxVb5ThZ/BzvIYRQ/A2bQ2ouE3I=)
                          3: Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl (hash: cDMzP8opoyzLp0poiy5NG1YEpmmbkhtricdMlXy5zYM=)
                          4: Qkt4P-3ZvRUFITOdiTeOKgCxrkw.roa (hash: 3rqF0FN3C+u7VPFtuecMJP1cP04f2T4s71febW5rYck=)
                          5: T7Qloq1sVKmUvN2otUd3yqvPvi0.roa (hash: Z426zyvv0yt+vgk/xSAFr9Ff02ANySvAKoQ2RQiwE0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:ae:47:f1:0a:78:24:32:6d:5c:e0:90:d0:cc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
        Validity
            Not Before: Apr 19 06:00:40 2026 GMT
            Not After : Apr 20 06:00:40 2026 GMT
        Subject: CN=713b6e943b03afa73676e4149a207e2215240482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:31:6c:e3:10:26:85:be:f4:a8:20:bf:3d:c6:
                    9d:9c:40:2b:2c:cf:96:41:bc:f7:df:51:2c:f7:42:
                    50:b9:f9:ea:7e:db:e1:94:9f:87:e6:bb:eb:ef:d2:
                    47:02:68:d7:45:d8:c7:f1:8b:4b:3c:ed:a8:cd:4e:
                    c8:18:37:b5:68:d0:0d:25:d5:c9:d9:19:03:27:f6:
                    7f:aa:39:29:05:1c:cd:e5:fa:c5:2c:12:dc:2c:a7:
                    c5:5e:c3:aa:0a:47:72:68:eb:aa:76:b7:21:24:e9:
                    e9:de:74:01:f7:a8:94:13:2b:3b:3c:d7:15:94:6e:
                    0e:ec:12:fd:4f:cf:98:32:58:e5:0a:d5:7a:64:ef:
                    90:de:d7:59:32:69:db:59:ed:d3:fd:08:f6:c8:27:
                    f6:d8:cf:4c:de:7d:19:48:3f:c9:ac:35:c0:9b:e0:
                    3f:79:1c:13:2a:b8:0a:3f:4a:5f:64:5a:72:04:3c:
                    29:72:df:a1:14:e4:4e:d4:f7:16:b2:18:71:7a:85:
                    ee:a4:bf:d2:f9:fb:dd:1f:d1:7e:bc:8a:95:50:a6:
                    66:8f:b9:15:36:ab:10:d0:9a:fa:1f:05:19:1d:65:
                    95:41:b9:93:17:fc:47:d6:e8:f3:78:31:a7:ab:1d:
                    70:12:d7:8e:f5:d9:20:66:46:a5:e4:39:5f:a8:78:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3B:6E:94:3B:03:AF:A7:36:76:E4:14:9A:20:7E:22:15:24:04:82
            X509v3 Authority Key Identifier:
                keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:eb:02:f0:ad:76:f7:fe:42:16:90:b0:c6:08:76:ea:09:88:
         3c:a0:a0:e5:e3:27:ad:34:c1:72:47:6d:f6:e5:8e:60:51:36:
         c9:18:bf:2a:c2:4d:c3:e8:bc:86:65:f1:de:25:2c:f8:19:0b:
         72:9f:a9:81:2e:17:ca:86:b8:92:f2:f4:b7:4a:53:b6:6f:66:
         6d:87:d6:23:6f:31:2e:71:93:8d:ff:19:27:b7:92:19:64:f8:
         1a:cf:66:8a:1b:80:79:c1:f2:65:50:82:94:4e:7c:2e:81:5e:
         d2:03:7a:58:e8:14:25:8a:1d:8a:0c:cd:05:45:91:81:db:6a:
         9d:f9:ec:a0:56:2b:68:77:63:18:15:35:5e:52:54:01:f8:dc:
         7b:85:43:ed:5b:7d:5e:c4:0a:6b:78:39:65:4c:ec:a6:4b:52:
         ac:b4:20:24:e3:b1:51:9b:50:f2:c9:3b:fd:29:54:4e:d2:3d:
         27:b2:b3:09:69:6b:b0:9a:4c:92:3f:4f:fd:79:f8:15:b4:5e:
         50:c5:02:65:7c:b4:87:ae:9f:ff:d7:c6:19:9f:a0:14:e3:8b:
         e5:a2:db:45:44:e3:3b:0a:d9:da:68:9c:83:4e:6f:17:45:9b:
         2b:ad:2c:f5:64:49:64:cc:bd:c9:92:fb:29:1f:a3:4f:d4:a2:
         b9:81:ef:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:29:19 2026 by rpki-client