Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File:                     JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier:          R40APZctxWBGB3sOiVGwwk6lEldmwI/3ZGpTLxZFlCU=
Subject key identifier:   CD:ED:9B:0A:B9:C4:6C:5C:80:A1:29:34:B7:E0:B4:8D:AD:73:34:AD
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer:       /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial:       019D9A3E2F05E7078CAFBFAB8645A6BC8F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number:          1160
Signing time:             Fri 17 Apr 2026 07:00:59 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:59 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:59 +0000
Files and hashes:         1: 68M1iA2v1hZrN-WYmwaUYqloW_k.roa (hash: Lu1vR1WuACYYOAE0lbWO8n33EaanCEqHclq+Bu+0jM4=)
                          2: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: NzzH33VCSLzdmU7S2m6hpqZDg7kJg0TBcLi+Z6k9KJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:2f:05:e7:07:8c:af:bf:ab:86:45:a6:bc:8f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
        Validity
            Not Before: Apr 17 07:00:59 2026 GMT
            Not After : Apr 18 07:00:59 2026 GMT
        Subject: CN=cded9b0ab9c46c5c80a12934b7e0b48dad7334ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:af:76:0c:8a:d7:25:d4:04:1c:18:73:b1:
                    a2:83:38:d1:0e:dc:86:e4:7a:3a:ca:47:55:a8:27:
                    26:46:79:7c:de:11:01:60:44:bd:69:5a:9f:95:bd:
                    7c:98:4e:ae:49:b3:11:0b:df:10:50:ba:3d:ce:09:
                    f9:1f:0d:30:68:eb:a7:75:df:9e:c8:9c:0b:31:60:
                    cc:ae:a1:b4:cb:6c:7a:84:3c:e6:d4:d2:59:e6:f1:
                    54:68:55:d1:20:e1:36:a3:6b:8d:1e:fe:c4:17:ac:
                    03:b5:23:aa:1e:00:77:fa:58:22:04:95:3f:99:22:
                    95:6c:0b:dd:f2:67:cf:b7:36:74:c5:cb:95:65:87:
                    92:65:f5:24:07:93:b1:1d:5f:90:a0:d7:c7:08:32:
                    5c:5a:7d:6c:45:32:d2:a6:90:9b:07:49:09:4d:5a:
                    a1:d2:f8:90:25:d1:80:af:90:04:4b:40:11:29:10:
                    5b:d8:d6:cb:ec:8a:0b:37:d6:04:8f:73:b3:13:72:
                    bf:9c:64:0f:29:76:14:16:ba:90:a8:f7:0c:31:a0:
                    21:bd:9d:83:5b:11:a5:34:74:46:3b:66:06:f9:bb:
                    bf:35:8e:02:0b:8d:30:5a:1e:39:43:1c:ce:37:cb:
                    5b:94:27:e0:2b:50:72:43:80:7d:4e:0c:6e:da:c2:
                    22:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:9B:0A:B9:C4:6C:5C:80:A1:29:34:B7:E0:B4:8D:AD:73:34:AD
            X509v3 Authority Key Identifier:
                keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:54:b5:8f:64:3a:aa:d9:98:d2:f8:bc:1c:7e:4c:64:ab:08:
         2e:ab:80:17:90:2b:e1:ed:3e:45:ea:35:5e:d8:67:36:7e:41:
         74:32:19:77:cb:a1:7f:ff:03:65:1d:cc:3d:f5:cb:45:4f:b6:
         81:c7:8d:76:e7:be:44:df:db:62:3d:44:6a:2a:9a:b8:31:e9:
         c9:c8:60:ad:ed:a0:07:c0:fa:f3:76:e9:84:24:2f:72:ed:5c:
         86:f3:30:39:ff:68:be:ec:20:ec:f9:94:e3:8e:b8:52:50:ed:
         03:66:80:02:c7:34:48:16:4d:fd:5d:76:cf:60:25:b5:3a:d7:
         a2:94:dc:a3:ed:63:1a:de:08:2b:fa:54:71:fb:98:b8:08:90:
         bf:93:72:43:3b:3a:3e:b0:e2:fe:5d:6d:71:4a:df:27:34:b5:
         67:7c:45:5d:3f:59:36:d6:c7:f1:2d:9a:d0:d3:fd:b5:e1:10:
         59:9e:2c:06:f2:72:07:32:72:68:91:ea:f7:df:21:59:13:67:
         98:37:3b:2c:01:fe:f7:3d:b5:f3:5f:6b:52:ba:73:35:2f:69:
         d2:6e:65:9a:a4:78:93:f0:87:fc:49:64:71:83:dc:2b:3e:df:
         85:33:6a:7d:7c:79:7a:73:e2:e2:a0:67:10:72:38:ca:1c:9e:
         bd:ae:8d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:55:43 2026 by rpki-client