Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File:                     Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier:          twrzY5Rs7Tym4QrOP4G2giixZbfjxx2jV9dtTJlu05E=
Subject key identifier:   D9:DD:40:AC:0E:3C:22:DE:EE:D1:CE:9F:F4:52:F4:7D:3E:9D:7F:3F
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer:       /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial:       019D97E17EC744AEC07B7AFFF80A7052B324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number:          05D4
Signing time:             Thu 16 Apr 2026 20:00:30 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:30 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:30 +0000
Files and hashes:         1: 23D13zVh0lxnV6wqT9G8OQpIzbk.roa (hash: 9tKZpVV4QTGwDjEBmfC0cE/pR6rIK/y06jjpKw6H3j4=)
                          2: MqPaLwzBlGzF1hD8NaRt1le-Ui8.roa (hash: FtEly9gUhctynmcfbBuFtOjyzirnIbZ/PaDH3U6VMXg=)
                          3: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: /TRb7aTIb1Te0pzZXTO+4efRZdfrXfU1KjqMnuSv5Ac=)
                          4: sB7bazw82pxn7uZCsBRtwsZkc2A.roa (hash: 7xTRvo9YJ48k8rtWT1N5PatcI2zCXtinI13rQTQnEO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:7e:c7:44:ae:c0:7b:7a:ff:f8:0a:70:52:b3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
        Validity
            Not Before: Apr 16 20:00:30 2026 GMT
            Not After : Apr 17 20:00:30 2026 GMT
        Subject: CN=d9dd40ac0e3c22deeed1ce9ff452f47d3e9d7f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e5:7c:7d:f9:ef:60:0c:c5:b2:3c:8b:2c:0c:
                    77:fe:1f:08:0e:ab:06:4c:d4:8b:28:3a:e8:5a:f7:
                    d9:1c:79:9e:4d:79:6a:93:ea:9d:36:90:7d:57:fa:
                    a2:89:b1:cd:0c:63:72:43:e4:34:51:86:1e:61:bc:
                    f4:a6:94:3f:fc:dd:58:b3:35:c0:6f:61:cc:87:29:
                    07:c0:a1:90:b8:5b:da:9f:45:a2:b6:ea:e7:7b:9a:
                    30:50:23:38:e1:b0:eb:05:89:5a:48:45:ab:01:92:
                    27:15:c9:6b:4e:06:6d:c4:f6:d0:54:18:a9:64:56:
                    3e:39:f1:27:cf:5b:ae:e9:c8:4e:00:90:eb:49:3d:
                    9f:dd:b3:e9:db:37:42:f5:d0:68:d7:22:57:1c:36:
                    38:c2:f1:c8:da:1f:40:4c:0a:0f:30:ce:db:26:b7:
                    a5:53:a0:91:51:5e:02:3c:d0:bd:20:70:99:11:cc:
                    35:7d:f8:bf:ac:ed:09:76:f0:04:aa:24:69:9c:bd:
                    3b:d3:e9:ea:43:7e:08:fb:b3:33:ba:4e:de:fb:47:
                    83:66:ab:aa:ef:f2:72:df:09:42:18:cd:3b:46:4f:
                    2a:88:5c:ab:05:28:e6:2e:da:74:0f:c2:30:6f:0b:
                    79:70:28:08:ef:7a:d0:15:d5:6a:6c:07:f3:79:9f:
                    74:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DD:40:AC:0E:3C:22:DE:EE:D1:CE:9F:F4:52:F4:7D:3E:9D:7F:3F
            X509v3 Authority Key Identifier:
                keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:69:f8:40:6e:d8:a9:6a:16:85:06:a3:f2:ae:45:8b:1d:21:
         59:06:5f:85:85:ea:1d:07:2f:a4:08:cc:ad:66:84:65:7d:61:
         03:9f:e5:a4:80:b1:33:65:50:b5:09:f1:9d:3a:f5:0c:e9:c6:
         cf:9e:c6:96:31:6f:5a:96:1a:20:13:34:e9:2a:8e:b3:74:92:
         2d:c5:f6:88:7f:f8:ee:eb:c6:40:4e:cc:5b:1d:7b:94:be:01:
         89:fc:a8:14:f8:93:14:14:03:98:f9:d5:e4:94:23:4e:c7:f4:
         7b:36:b8:af:13:95:75:79:f1:a7:c1:52:6b:e3:3a:b4:33:23:
         51:3a:de:5d:ec:f2:ef:ba:da:b5:a1:e8:86:66:02:50:87:6b:
         de:e7:53:d7:c7:96:1f:34:9e:d0:12:77:ba:94:60:e7:55:11:
         58:cc:f7:81:be:bb:a2:55:6b:d5:94:62:f6:c1:52:e2:6e:1d:
         ef:e7:6c:d9:5c:61:41:f7:ad:fa:8d:04:6c:7d:5e:09:b0:c7:
         2d:f4:ec:f9:7a:2d:2b:5b:f3:79:c2:5c:02:ac:f3:2e:2a:d1:
         cb:1d:ce:c8:be:67:8c:78:76:b2:a7:51:f0:ff:1f:d5:03:be:
         85:58:e0:29:be:82:fb:45:5d:60:d9:cb:8e:6a:d6:4c:74:4b:
         13:c4:00:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:39 2026 by rpki-client