Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
File:                     Jp9PcUO0BngFy6mkD2OXMu59QuU.mft (raw, json)
Hash identifier:          3DU3XKqWxpnayVuRycMRlflr0ghkt0+hpjKWLU6q5zw=
Subject key identifier:   3D:F0:CF:81:4B:9B:75:A5:00:FC:86:D4:8B:5B:DA:BC:28:CF:0F:BC
Authority key identifier: 26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
Certificate issuer:       /CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Certificate serial:       019D9962FEAF15EE9AAD4A1C442D3171DAD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 03:01:34 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:34 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:34 +0000
Files and hashes:         1: Jp9PcUO0BngFy6mkD2OXMu59QuU.crl (hash: 8n6yWpZY+wdP3IrQYgwLmItCNnJLS31Ql27u4atwrEU=)
                          2: fK_RqyAKvk7n3ODLIZ0WLrGJM8w.roa (hash: 7v/5RLR7Q81lEDWcKmADnfeMIsDhKBKucowaJiP2+SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:fe:af:15:ee:9a:ad:4a:1c:44:2d:31:71:da:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269f4f7143b4067805cba9a40f639732ee7d42e5
        Validity
            Not Before: Apr 17 03:01:34 2026 GMT
            Not After : Apr 18 03:01:34 2026 GMT
        Subject: CN=3df0cf814b9b75a500fc86d48b5bdabc28cf0fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:99:61:c5:57:44:c3:be:9e:a3:4a:c3:94:5e:
                    ba:63:5f:bc:85:48:98:61:fd:4e:98:9c:4e:b4:20:
                    48:ff:bb:93:28:f4:17:a6:cc:5e:b1:91:58:da:24:
                    b2:1d:26:b6:9e:03:c7:61:55:1e:e6:bb:19:a6:ed:
                    b1:53:cd:66:90:53:2b:56:e9:d6:e5:1e:9c:75:73:
                    a5:47:35:52:ac:f7:b0:76:ad:6f:d3:c4:e2:72:71:
                    82:5f:e1:aa:f2:b7:19:3e:ec:7b:06:38:b9:4a:d4:
                    a9:00:6b:b3:d2:74:df:65:2f:78:95:2c:70:82:bb:
                    17:ae:1d:db:1d:38:b0:4b:83:80:2a:87:5e:74:b0:
                    1e:ef:86:a0:75:b0:96:5f:7c:68:05:6c:70:03:0a:
                    43:77:98:64:5e:60:cd:1a:bb:c9:ee:de:b2:19:1a:
                    d0:48:26:d5:89:44:66:73:8f:9a:98:66:ca:ea:09:
                    af:a6:58:7b:0c:f4:b9:3a:3b:4d:b3:60:50:41:16:
                    f0:46:3c:fe:1f:11:41:02:01:53:69:fb:90:55:58:
                    1d:9e:8f:48:41:5b:07:e1:6d:4f:d4:ed:fd:40:87:
                    d5:c2:e1:57:e9:88:87:fd:6b:93:ac:b4:81:d0:eb:
                    b7:58:da:58:b8:ec:b6:b7:d8:21:6b:0d:d0:30:09:
                    17:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F0:CF:81:4B:9B:75:A5:00:FC:86:D4:8B:5B:DA:BC:28:CF:0F:BC
            X509v3 Authority Key Identifier:
                keyid:26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9f:b5:10:d8:5d:f2:55:71:68:fd:ae:57:8c:5e:d4:9d:20:
         9d:e7:60:36:d8:79:82:42:22:4a:83:40:64:8c:d8:aa:39:e3:
         80:da:8d:bb:14:c2:f3:fc:bf:a1:c5:dd:1b:7d:13:3a:24:40:
         99:61:c1:83:5d:a4:88:a7:93:e3:4c:f7:29:2b:73:b2:55:cc:
         38:15:e3:58:3c:24:e0:d2:8d:2a:73:b1:40:41:28:70:a3:8a:
         44:c5:48:fa:2d:b2:a4:9b:d0:65:25:fd:90:22:72:f0:62:0f:
         8b:fd:bc:36:42:8d:8b:bf:c7:0f:7d:bb:88:b3:01:de:3c:da:
         a8:24:54:b6:39:04:44:5b:c8:6d:87:6d:4d:c8:0d:56:7c:55:
         96:59:24:2a:d1:61:5a:9f:46:13:1d:15:64:28:2b:55:f5:ac:
         29:9f:84:5d:09:62:f3:fc:31:38:26:08:88:67:74:cc:36:dd:
         a7:f9:b8:4c:aa:81:37:0d:5d:2f:9a:22:6b:65:bc:5c:14:6f:
         c8:96:30:ae:87:f2:ee:0e:36:60:87:82:12:81:59:58:52:5d:
         3d:26:5a:ab:1c:e4:55:77:92:05:af:27:92:4a:be:41:67:fc:
         2a:21:d2:a5:72:93:81:35:f2:ca:2a:4a:fb:30:1a:13:55:12:
         f8:03:89:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:23 2026 by rpki-client