Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
File:                     JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json)
Hash identifier:          POwKoT8VrIQKGt+8wohTdB7gE81144VYgLP5XsQSQwo=
Subject key identifier:   1F:6D:AD:9A:1A:48:55:CA:98:F8:54:06:39:4D:33:1F:43:44:84:01
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Certificate issuer:       /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial:       019D99CFD8EC2AC048AAD9BC62FA69AA9EB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
Manifest number:          160F
Signing time:             Fri 17 Apr 2026 05:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:28 +0000
Files and hashes:         1: 1MewjKs7oZbPQCWXkDdeqf-hRUI.roa (hash: ZIOY5qx7Rihwq5CYw6fFGk6ypYaqCmJubtJXiapIpl8=)
                          2: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: 5EmzeVOg92kZE/yLqXmxokA6UbPNSEJLyUhUD3UtXGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:d8:ec:2a:c0:48:aa:d9:bc:62:fa:69:aa:9e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
        Validity
            Not Before: Apr 17 05:00:28 2026 GMT
            Not After : Apr 18 05:00:28 2026 GMT
        Subject: CN=1f6dad9a1a4855ca98f85406394d331f43448401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:d2:80:08:d6:3d:21:3b:fe:be:5d:36:7e:
                    35:ee:89:cf:aa:ef:16:14:1e:aa:28:7f:fa:dc:36:
                    87:5b:a4:d9:29:6b:43:eb:2e:78:59:f8:72:66:e6:
                    57:ae:59:e2:32:b5:27:49:02:a2:8a:35:26:85:ac:
                    d6:19:40:bf:9c:6e:50:9d:51:fa:72:93:7e:be:70:
                    5e:23:bf:36:32:cc:7b:e4:38:4d:a8:44:43:ba:3b:
                    27:34:89:bc:02:54:63:0b:7e:cf:42:5b:7c:50:f4:
                    08:59:b8:7a:02:0f:91:23:87:de:9b:e8:95:55:f4:
                    ac:ce:a3:7e:68:92:b9:c9:b1:83:ea:49:49:83:96:
                    7a:b2:3c:a0:9a:72:51:81:09:19:d2:48:b1:e5:fe:
                    ae:d0:f5:6f:9b:ff:66:19:3c:14:d2:65:64:dd:2c:
                    87:9a:0f:19:ca:07:50:e8:87:d4:d5:6b:b4:eb:06:
                    11:b9:2f:1c:81:b0:6c:59:80:5e:ef:d8:7d:75:1c:
                    40:a9:c9:b7:6b:a5:4f:45:50:f8:0a:59:e1:94:35:
                    f9:c2:ae:76:8c:6c:20:ee:b1:9d:60:35:2d:ba:23:
                    d7:69:f9:63:00:c8:f1:01:bc:37:c7:57:a6:29:d9:
                    22:f5:06:cb:90:38:c9:33:88:89:bb:49:a2:14:00:
                    e9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6D:AD:9A:1A:48:55:CA:98:F8:54:06:39:4D:33:1F:43:44:84:01
            X509v3 Authority Key Identifier:
                keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:44:a6:82:70:64:2c:c6:60:18:1c:04:bc:bc:36:5e:9b:f8:
         af:45:d6:d5:f6:3b:7c:f0:7e:c1:fa:9f:fe:d8:d7:1c:7e:dc:
         4f:2b:4f:bf:00:35:0b:56:86:82:1e:c5:be:0f:f4:a7:c6:96:
         5e:2c:34:d2:9e:79:7d:ec:53:d2:4e:be:0a:8c:9d:6c:8f:62:
         fa:f7:5c:d1:a2:98:de:56:67:07:7b:85:cb:55:0b:a7:63:a4:
         07:e5:80:e8:cc:49:f8:6b:e7:fa:b1:b4:a3:6b:df:3f:fd:ab:
         0b:56:15:25:2b:83:09:f7:cf:dc:e7:da:b0:df:34:de:6a:c5:
         a5:fd:a2:14:60:37:5f:57:1b:4a:28:06:3e:22:40:b7:b2:75:
         8f:b3:b2:19:15:b2:7b:7e:1d:f7:71:cf:90:2c:2a:32:f0:5a:
         ca:8d:3b:6d:ef:3e:36:9a:ce:2a:75:f2:a1:38:68:a1:ac:92:
         d1:b5:13:5a:3f:19:d7:b2:18:e7:53:8f:10:8c:c7:b3:30:7a:
         e9:d5:ae:25:7a:cb:eb:8b:c3:9c:10:9d:91:2e:d9:ab:05:a9:
         68:5f:42:5c:86:89:25:c4:11:78:9e:ba:17:39:bf:49:1e:3c:
         01:c3:87:f0:6e:30:7a:cf:1f:f6:d1:72:fd:4d:db:cc:e9:56:
         d1:88:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:37 2026 by rpki-client