Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File:                     JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier:          uV3icsAnr43hgnq0j1UDCx0aFhhkf8O6wmZ6UegGsxU=
Subject key identifier:   5F:DA:1F:52:15:D6:1B:48:D0:A0:18:36:0A:78:D9:B8:DE:22:D3:44
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer:       /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial:       019D98BD5CD260D94AB888447800E67094B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number:          147C
Signing time:             Fri 17 Apr 2026 00:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:40 +0000
Files and hashes:         1: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: rlNiE2wULa7/tDyzHaz1FmtP0ApFXvnlW4iS3b3XkHs=)
                          2: kJSjLOsWhAHko1FJjBJtE40W7yI.roa (hash: R5x4NpWCvDVLqww0J/ygaTqJQCiT5GP/47DNzH/f1HY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:5c:d2:60:d9:4a:b8:88:44:78:00:e6:70:94:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
        Validity
            Not Before: Apr 17 00:00:40 2026 GMT
            Not After : Apr 18 00:00:40 2026 GMT
        Subject: CN=5fda1f5215d61b48d0a018360a78d9b8de22d344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:10:e1:4c:93:53:72:47:62:df:6d:db:a9:8b:
                    89:ea:05:72:a1:df:01:d8:6a:eb:21:31:71:0a:e2:
                    e5:59:6d:66:25:98:f4:ac:ea:17:95:fe:a2:5d:fd:
                    3b:9f:3d:72:d7:25:56:d1:61:44:55:fc:2d:18:ee:
                    bf:a8:75:61:14:f3:15:85:d9:74:be:ee:d5:8b:32:
                    11:58:e5:7c:5e:ff:c4:b5:89:9e:7f:c9:d8:3b:1a:
                    8a:d0:10:7f:50:ee:20:36:9e:da:4d:e5:fd:8f:7a:
                    e7:51:bf:ca:cc:3d:92:11:c5:f6:73:4b:2e:84:a4:
                    90:ac:7b:aa:59:f2:12:a0:2d:07:51:67:46:21:9e:
                    9b:44:1b:a6:5b:11:6a:e8:90:ce:e1:ae:d2:6b:13:
                    0b:9d:b6:f8:e7:ad:02:d0:07:bd:be:5c:43:1b:aa:
                    65:fb:c1:b3:79:f9:48:38:bd:ff:47:ad:3e:3b:59:
                    a7:07:62:a6:27:6d:9e:5b:98:11:0e:af:c6:eb:ca:
                    49:a1:7b:d8:6a:d2:9c:74:dc:5f:5e:e5:74:17:fc:
                    a2:55:4d:b4:b2:3f:7b:0c:f3:94:6c:b8:83:a2:be:
                    11:9b:7a:ed:67:74:a0:42:af:ce:0a:94:57:f9:26:
                    cb:c4:32:a9:21:aa:2a:e0:c1:57:d6:6b:c6:5c:32:
                    56:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DA:1F:52:15:D6:1B:48:D0:A0:18:36:0A:78:D9:B8:DE:22:D3:44
            X509v3 Authority Key Identifier:
                keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:24:b8:0b:ae:65:68:c6:76:02:d9:5f:ee:2b:d1:a1:44:50:
         84:fb:e4:92:73:b2:bc:02:ba:8b:d0:bb:b5:1d:ba:05:72:77:
         67:e2:23:30:04:af:74:bd:95:06:e5:6f:68:f2:ba:88:2e:c9:
         09:a6:53:42:aa:14:f1:4e:5b:b3:19:eb:fa:1a:9a:65:fe:87:
         45:66:c4:32:72:cc:a8:0a:75:0b:b0:c5:ee:32:fe:da:99:9a:
         3f:4d:fc:67:ac:79:e4:d6:43:53:01:76:41:2b:68:74:30:b7:
         e3:2d:49:1f:aa:c4:ae:4f:89:c4:ff:ef:91:8f:52:fe:f5:95:
         f9:38:5b:b1:5e:e7:ed:8e:63:22:dd:dc:45:fb:43:be:b5:b2:
         50:41:97:8c:87:b7:e1:a2:73:4f:25:26:03:b5:f0:d7:b5:87:
         7a:c7:97:73:51:7a:93:58:d2:2c:28:d2:ff:8e:ad:f3:b5:0b:
         65:de:68:99:77:c0:c2:1b:ae:ce:e6:f4:04:f6:fb:53:69:b2:
         e2:5d:2e:76:c0:4a:97:a4:98:40:87:97:41:c2:44:49:c1:d1:
         5d:00:33:91:50:52:70:f1:e7:03:d7:b4:07:9d:7f:eb:99:6c:
         2e:43:15:46:52:2f:32:6f:71:bf:49:3d:89:aa:4d:7b:90:6e:
         4c:df:3a:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvVzSYNlKuIhEeADmcJSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTk4YjYxMjVmNTI0M2UzZWQ4MzUwMTU5NjdjZGRiOTcx
NDhkZjEwHhcNMjYwNDE3MDAwMDQwWhcNMjYwNDE4MDAwMDQwWjAzMTEwLwYDVQQD
Eyg1ZmRhMWY1MjE1ZDYxYjQ4ZDBhMDE4MzYwYTc4ZDliOGRlMjJkMzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hDhTJNTckdi323bqYuJ6gVyod8B
2GrrITFxCuLlWW1mJZj0rOoXlf6iXf07nz1y1yVW0WFEVfwtGO6/qHVhFPMVhdl0
vu7VizIRWOV8Xv/EtYmef8nYOxqK0BB/UO4gNp7aTeX9j3rnUb/KzD2SEcX2c0su
hKSQrHuqWfISoC0HUWdGIZ6bRBumWxFq6JDO4a7SaxMLnbb4560C0Ae9vlxDG6pl
+8GzeflIOL3/R60+O1mnB2KmJ22eW5gRDq/G68pJoXvYatKcdNxfXuV0F/yiVU20
sj97DPOUbLiDor4Rm3rtZ3SgQq/OCpRX+SbLxDKpIaoq4MFX1mvGXDJW8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/aH1IV1htI0KAYNgp42bjeItNEMB8GA1UdIwQY
MBaAFCapi2El9SQ+Ptg1AVlnzduXFI3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZGJmYjAtZjkxNC00MGQzLWIyZTIt
YjkxM2U1OTY3MDdlLzEvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iZGJmYjAtZjkxNC00MGQzLWIyZTItYjkxM2U1OTY3MDdl
LzEvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyS4C65l
aMZ2Atlf7ivRoURQhPvkknOyvAK6i9C7tR26BXJ3Z+IjMASvdL2VBuVvaPK6iC7J
CaZTQqoU8U5bsxnr+hqaZf6HRWbEMnLMqAp1C7DF7jL+2pmaP038Z6x55NZDUwF2
QStodDC34y1JH6rErk+JxP/vkY9S/vWV+ThbsV7n7Y5jIt3cRftDvrWyUEGXjIe3
4aJzTyUmA7Xw17WHeseXc1F6k1jSLCjS/46t87ULZd5omXfAwhuuzub0BPb7U2my
4l0udsBKl6SYQIeXQcJEScHRXQAzkVBScPHnA9e0B51/65lsLkMVRlIvMm9xv0k9
iapNe5BuTN860w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:09 2026 by rpki-client