Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
File:                     JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft (raw, json)
Hash identifier:          ILmUYd23OOfYF5UavYRRkX5F1Ypbiq/KX0eSlRiOxYc=
Subject key identifier:   5D:39:E5:B3:69:DB:01:F6:A1:6E:AE:17:67:F7:68:BD:60:A6:BE:88
Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
Certificate issuer:       /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Certificate serial:       019D97E1AA359EBDB96246BD315B9C1195BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
Manifest number:          18C0
Signing time:             Thu 16 Apr 2026 20:00:41 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:41 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:41 +0000
Files and hashes:         1: 1-etkEpJT5huTCkvp4nk0dydE9KA.roa (hash: eid4ChJhHIbdTu3ltYjDcXJHFhgZsYu7s5rAP/A4Ugo=)
                          2: JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl (hash: XMfDR42BGyVizNuhz1C1FkkbG1UgyJrHR916h1flBaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:aa:35:9e:bd:b9:62:46:bd:31:5b:9c:11:95:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
        Validity
            Not Before: Apr 16 20:00:41 2026 GMT
            Not After : Apr 17 20:00:41 2026 GMT
        Subject: CN=5d39e5b369db01f6a16eae1767f768bd60a6be88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:91:a1:4e:88:e5:1e:95:90:a1:22:f6:53:
                    d7:1d:d2:75:7b:ed:b1:9b:42:c4:e2:af:fb:7e:f4:
                    ac:b7:eb:f6:1e:ca:7e:83:fd:77:c9:69:fd:57:2b:
                    7a:2e:7c:1f:67:c0:9e:8c:c9:fb:f3:ac:3d:02:5f:
                    89:9b:08:bb:76:e7:fa:74:8b:c2:c3:87:04:03:58:
                    3f:16:c9:06:6b:d0:3c:d2:2f:35:51:eb:1d:57:5d:
                    e2:99:9a:ab:4c:4a:aa:ad:26:8a:96:5c:21:92:e1:
                    c4:a4:19:7f:a8:73:4e:6c:51:f7:1a:76:b4:67:e8:
                    5d:24:c4:94:4c:b4:ac:d8:c3:b2:d2:95:d8:1a:a6:
                    d0:d4:c7:44:d9:7b:09:57:74:bc:00:ba:d4:b7:a6:
                    62:cf:52:6f:4c:a0:fb:97:04:ad:32:ac:20:42:00:
                    17:55:74:c5:57:72:6f:b3:dd:71:2b:ea:62:a2:9e:
                    9e:ee:b3:62:6a:1f:b1:57:49:44:9f:4d:2c:dc:e0:
                    1e:b0:a9:80:3f:3e:75:86:bf:f7:51:33:66:4e:3c:
                    a5:0f:8d:78:bb:bf:22:59:67:55:14:3c:d0:7b:f2:
                    f6:e3:1e:bd:f2:51:cc:44:39:42:19:a6:fd:53:e0:
                    3e:41:6b:34:96:a1:03:3d:6a:4e:3e:e6:ca:d0:3b:
                    78:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:39:E5:B3:69:DB:01:F6:A1:6E:AE:17:67:F7:68:BD:60:A6:BE:88
            X509v3 Authority Key Identifier:
                keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f4:06:f3:f6:b6:5d:09:cb:60:27:4a:1a:a9:50:9c:f5:20:
         88:f2:74:f3:8a:73:47:4d:34:30:82:20:2e:c2:f1:18:e2:17:
         05:b3:91:d8:e8:df:f3:40:1c:89:45:e9:ed:1f:95:38:2b:c5:
         d2:51:3c:c3:70:03:63:0d:a7:6b:5e:2b:da:26:e8:c2:d8:57:
         38:80:9e:9c:0d:6e:48:78:c6:ae:01:38:9d:fc:8e:69:c8:f1:
         4e:d6:94:d9:26:31:e8:d3:7d:9c:07:2a:7d:e1:37:63:32:d3:
         35:98:b8:b4:7d:4d:c2:a1:f9:93:2b:1a:ff:f0:01:c4:00:5c:
         54:38:9e:58:ff:f4:a0:0a:d4:f5:a6:28:bb:f5:e9:5d:7d:51:
         3f:07:b5:65:76:bd:53:d3:ad:b9:8a:04:a0:89:f6:15:45:56:
         b7:6a:ef:dd:f7:39:a9:75:6d:e9:cc:c4:11:38:da:2c:31:2f:
         cb:75:b0:54:7e:ea:a8:2e:1b:b1:c7:5d:35:d1:10:5c:b2:ca:
         07:87:d9:86:a1:45:1f:15:5d:14:04:f2:52:9d:46:5f:65:a5:
         05:12:ba:a9:b7:f1:dd:70:3d:ae:ec:7b:de:04:1f:e8:fd:b6:
         ad:02:35:4e:e2:24:9d:73:cc:6e:17:2f:09:c3:01:52:21:04:
         6c:dc:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:31 2026 by rpki-client