Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
File:                     JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json)
Hash identifier:          asY4M53dRByV5/Ncg+JBDeBp8Kg4Ofg7bu87kRm1MpE=
Subject key identifier:   A9:88:A2:7B:5E:05:9A:A1:11:0D:0A:75:70:B0:25:07:47:96:BB:EF
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Certificate issuer:       /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial:       019D9B50A43774E2E80A1207911D2E8DC954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
Manifest number:          0DBA
Signing time:             Fri 17 Apr 2026 12:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:46 +0000
Files and hashes:         1: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: 24r3YXu6pvqp0mEM+QOGxANWHQUqQPilmBbnAB5LuT0=)
                          2: ZOxgWvCSe4fh3G-hS8UAvVzCxPQ.roa (hash: lLIc6IlVo/BfK1oQIkM/V9OuWrsKXh4yLdug5PFaT64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:a4:37:74:e2:e8:0a:12:07:91:1d:2e:8d:c9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
        Validity
            Not Before: Apr 17 12:00:46 2026 GMT
            Not After : Apr 18 12:00:46 2026 GMT
        Subject: CN=a988a27b5e059aa1110d0a7570b025074796bbef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a0:96:9f:c2:75:a9:e4:62:2d:92:a0:a5:bc:
                    4d:fe:21:42:8a:15:2f:03:d3:4e:2b:59:7d:9e:ab:
                    fe:e6:b5:ef:f9:ef:40:fa:49:80:42:7f:1f:b8:80:
                    fa:ee:3f:4d:6b:07:ee:85:4f:2c:36:c2:10:17:80:
                    a7:03:a0:a1:6b:06:20:11:95:64:c5:0d:ee:67:58:
                    c2:5e:e1:df:81:56:7e:ba:b2:88:12:c4:0b:15:ba:
                    4b:fc:7f:b8:af:f6:cf:b6:4b:a4:88:af:4d:49:2f:
                    4b:a3:91:09:4a:9b:d7:20:10:d5:0f:e4:cb:d9:bc:
                    0a:0e:7b:d6:25:64:60:84:24:e8:25:06:81:a7:2a:
                    6c:b2:d7:eb:11:6b:18:27:c9:91:1d:d4:ad:2b:67:
                    93:ad:ae:da:1e:ac:c6:90:89:32:41:89:4b:b4:3f:
                    a4:30:35:a7:33:75:96:a5:9f:68:ae:40:c3:bf:5b:
                    f8:8d:fc:43:51:85:15:f1:05:c9:90:1d:d4:c5:38:
                    bd:bf:83:a6:90:ed:ec:b4:c6:75:8c:59:a5:d4:3b:
                    31:56:75:86:0a:be:f9:3a:2e:80:d2:b6:e4:e1:2b:
                    e9:0c:cd:52:84:11:dc:09:84:74:47:5e:19:88:b1:
                    a9:56:c3:e9:50:ed:ac:e5:1b:74:ce:21:a9:da:0e:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:88:A2:7B:5E:05:9A:A1:11:0D:0A:75:70:B0:25:07:47:96:BB:EF
            X509v3 Authority Key Identifier:
                keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:cd:f0:d3:84:f1:ea:5c:3c:38:c6:25:64:11:13:5a:39:84:
         86:df:f5:72:a0:09:2b:64:5f:c8:91:88:ec:4b:74:60:c3:25:
         6b:6a:0b:41:3c:4b:c2:f7:b9:69:84:2e:6b:3a:41:e1:0a:28:
         58:64:6c:e5:dc:49:3c:4f:00:da:9c:4e:01:57:c7:35:49:3d:
         e2:91:e4:1c:19:8a:6c:f4:1c:bb:97:2e:7f:0b:4e:83:c5:84:
         c9:b2:a0:b0:b6:46:f8:9a:93:2b:fc:91:a1:5c:a6:d2:fd:f3:
         d5:86:d3:7c:e4:18:0d:07:c4:68:57:8d:9b:e9:9f:02:6e:d2:
         8c:bb:90:12:d8:2d:ff:f1:50:06:42:1c:7b:1f:4f:56:ab:1d:
         50:d3:46:d8:e6:f6:71:0d:4a:98:80:ae:38:dd:42:8a:23:69:
         63:88:13:e8:08:7e:7c:91:6c:f3:4e:17:41:ea:ce:29:16:d6:
         d2:79:27:aa:2f:df:a3:6d:79:41:c9:aa:8d:98:64:22:4d:8f:
         cd:19:d1:18:b0:f6:6b:da:6e:10:af:b8:04:55:5d:b2:4e:d8:
         f6:7f:d5:f3:3f:01:6f:52:a5:66:11:8f:7c:8c:b2:6e:d1:c5:
         82:0d:6d:a7:3b:2e:09:f1:67:a0:00:6b:a9:86:98:5d:39:8e:
         16:bb:2b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:03:45 2026 by rpki-client