Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File:                     JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier:          rDQMhg3SxXcxIiW20N+g2iOx0GUirbpKSsnvb/C9TAI=
Subject key identifier:   45:34:F0:2F:03:0A:24:7F:10:A7:56:6C:F3:60:17:89:12:B2:5B:FA
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer:       /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial:       019D973D50B52AA7C97393DF58E7BEB294D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number:          05E1
Signing time:             Thu 16 Apr 2026 17:01:11 +0000
Manifest this update:     Thu 16 Apr 2026 17:01:11 +0000
Manifest next update:     Fri 17 Apr 2026 17:01:11 +0000
Files and hashes:         1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: MSKK3aD9PALtlaSd7fNRZmq+7k0RVDOwGe9yL4IFRZ0=)
                          2: gUQyWeEpQgGbTNbqg5fkirZYaTk.roa (hash: Uag44MrYWD7AlqlTHqDCPjaMLMN6/SqLUtWcxqj+gh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 17:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:3d:50:b5:2a:a7:c9:73:93:df:58:e7:be:b2:94:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
        Validity
            Not Before: Apr 16 17:01:11 2026 GMT
            Not After : Apr 17 17:01:11 2026 GMT
        Subject: CN=4534f02f030a247f10a7566cf360178912b25bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:d9:28:9e:54:c6:a3:e1:28:e6:03:cc:c9:
                    d0:e2:fd:87:92:b0:cf:eb:48:51:45:8c:8c:5e:b0:
                    f9:19:36:d4:04:18:c3:11:86:6f:b5:1b:db:8f:13:
                    44:db:97:bc:2e:63:07:00:02:67:b7:90:f4:25:f3:
                    d5:61:b4:b2:e5:b6:44:5c:bb:f6:5a:e6:2c:23:b2:
                    a5:60:2c:7e:60:a5:21:26:9c:35:21:2a:99:36:84:
                    be:0a:5d:a9:f8:39:e2:bc:36:82:42:1b:5c:05:da:
                    9e:9d:18:05:79:d2:7c:31:f5:a8:df:21:8f:7c:36:
                    60:2b:50:f2:99:a8:e7:d0:df:9c:47:a8:45:f6:a6:
                    52:2d:d9:85:1a:6d:3f:8d:7f:12:cb:42:7a:e0:7e:
                    9e:0f:b7:62:20:b0:ad:a6:0f:d8:b5:2d:d3:22:a5:
                    1c:89:ab:79:ae:88:10:36:d5:af:73:88:09:5c:7c:
                    d1:52:ad:29:6c:13:c5:d9:14:8c:1c:1a:b1:a0:f9:
                    99:97:0b:d3:16:dd:01:69:5c:ea:ed:5d:ac:8b:2b:
                    88:d6:c4:9c:b3:bf:9b:25:12:52:b5:59:e2:19:a2:
                    5f:47:4a:76:20:8f:43:6e:58:7b:23:2b:01:16:11:
                    dc:ad:c3:bc:ac:fa:90:24:8b:9e:4e:cd:4f:c6:fb:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:34:F0:2F:03:0A:24:7F:10:A7:56:6C:F3:60:17:89:12:B2:5B:FA
            X509v3 Authority Key Identifier:
                keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:fb:f6:82:34:d3:2c:3c:ef:4b:fd:28:4e:20:94:ea:d5:3f:
         50:e4:07:ff:38:72:a0:22:31:c4:aa:73:63:81:55:d2:b2:27:
         1f:93:0c:ec:28:c2:2b:1e:81:2f:3e:d5:56:e3:94:9e:d9:fd:
         64:af:71:87:d7:8a:17:2b:b5:bc:2e:22:01:a7:77:44:4b:24:
         6e:bc:b7:ed:b7:7a:16:74:2b:af:30:b0:f8:63:4d:10:87:0d:
         d4:3c:d0:10:33:a2:1e:0c:03:e8:2f:04:5f:47:6a:e2:ee:46:
         98:4a:04:1f:d6:49:aa:97:f7:7a:fb:6a:2e:54:c4:73:94:5e:
         c5:7f:71:02:2e:71:55:c5:08:12:4b:4a:ee:6d:bd:ed:47:49:
         34:24:14:e1:73:f2:da:72:1e:53:9a:15:f1:08:7f:c9:82:76:
         14:c9:6c:ee:fa:19:5b:58:ef:f3:a7:f9:08:0d:19:f5:3d:b3:
         ea:e7:86:0f:ec:3b:65:95:17:df:62:43:ae:5c:56:69:7e:04:
         e9:68:49:09:d8:22:1d:a9:24:ca:bf:46:09:fb:89:4b:da:c2:
         12:57:9d:95:47:b3:69:1f:ef:12:ff:b3:16:05:26:6a:d5:2a:
         95:b8:d5:bc:61:11:8e:1b:3d:28:95:76:00:5c:a2:75:0e:10:
         1f:df:ec:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:51 2026 by rpki-client