Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
File:                     jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json)
Hash identifier:          O1QkDnoL6oR6VBXvCfx5w/r4awFqXMvKl2E5jDQ1NQQ=
Subject key identifier:   07:DF:89:11:D8:B2:80:00:3C:C8:D8:1B:12:54:D1:5C:0E:63:B6:CC
Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
Certificate issuer:       /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Certificate serial:       019DA48B575241E932100DCC008E2E41848A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
Manifest number:          0484
Signing time:             Sun 19 Apr 2026 07:01:28 +0000
Manifest this update:     Sun 19 Apr 2026 07:01:28 +0000
Manifest next update:     Mon 20 Apr 2026 07:01:28 +0000
Files and hashes:         1: iYRjHQAbJIp2oowSGAKJD6LLKmw.roa (hash: OcorZbUCquJDtFh4AjtJAw2ooEcP9az5ezvyYCaccyU=)
                          2: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: X9WMgFShBH83yOvC4zMxM5u78rXcBqCBiJkRYAmAhy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8b:57:52:41:e9:32:10:0d:cc:00:8e:2e:41:84:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
        Validity
            Not Before: Apr 19 07:01:28 2026 GMT
            Not After : Apr 20 07:01:28 2026 GMT
        Subject: CN=07df8911d8b280003cc8d81b1254d15c0e63b6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:43:cb:49:2e:3c:49:9a:75:57:97:62:4b:60:
                    78:33:42:6a:8d:77:b6:1e:23:e1:28:57:81:f7:1f:
                    e1:01:81:71:47:dc:77:de:09:ba:27:82:6d:47:1f:
                    19:93:ee:d1:72:c2:1e:96:af:44:47:84:31:64:32:
                    4d:cb:71:40:2c:ce:b4:b3:1b:20:59:b1:9b:12:a1:
                    fb:ee:8b:59:4d:bb:3d:79:74:48:27:60:2f:7d:52:
                    5d:47:d1:88:e4:1d:1e:80:16:c0:de:2b:51:3e:e8:
                    c3:7f:9c:c1:df:9c:86:9f:ed:2f:a9:d6:64:3e:2e:
                    78:69:d3:be:06:77:50:59:c2:04:f4:c0:b1:bb:40:
                    73:df:0c:ac:47:1c:89:ec:68:04:f4:a7:51:62:cf:
                    43:8f:a8:a7:ec:53:67:eb:46:fb:05:cb:5c:59:7c:
                    62:33:4e:15:26:c2:19:83:e4:32:00:32:4c:43:de:
                    8d:30:e6:c8:ff:8e:b9:b4:71:4e:f9:fa:b3:72:2e:
                    5b:c3:a3:22:41:3d:d3:36:7c:e8:4b:82:5f:30:e6:
                    7b:9c:a0:bf:e0:8d:c2:e5:96:0e:62:1f:21:b5:59:
                    cb:85:d4:7b:68:e9:d8:20:81:84:ff:19:db:14:93:
                    74:83:64:c2:b1:89:eb:85:a8:07:57:77:ff:cb:e7:
                    60:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DF:89:11:D8:B2:80:00:3C:C8:D8:1B:12:54:D1:5C:0E:63:B6:CC
            X509v3 Authority Key Identifier:
                keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c8:a4:2a:32:db:ec:af:69:5d:0f:da:ee:99:53:51:43:95:
         27:9d:34:a7:e7:46:5f:17:b0:96:b1:48:be:6d:0a:71:4d:78:
         0f:4f:2d:d8:af:01:fe:64:42:a6:23:a7:cd:e0:38:15:ca:51:
         28:0e:00:19:42:cd:00:ed:be:55:da:5d:c6:d6:1d:41:c6:50:
         c3:4c:ad:0a:2f:5f:2c:d4:57:8d:50:1d:97:da:d8:c0:29:bd:
         e7:cc:20:6c:52:5d:1d:1b:43:ec:8f:c6:3b:ce:a7:d9:97:f4:
         ce:6e:5d:20:d4:7a:0c:08:17:12:b7:43:e8:7f:69:9c:93:a5:
         a2:5f:ad:db:f7:34:18:f5:57:09:5b:48:09:45:f1:63:63:3b:
         30:49:d1:11:f2:f7:3b:55:87:36:ca:70:15:1e:6d:16:20:e0:
         a0:0f:a3:82:b8:1b:33:f5:15:cd:57:09:45:80:a1:76:39:01:
         18:59:c7:17:9c:6e:0f:25:33:ad:19:63:51:ed:ad:07:ac:31:
         31:bb:dd:ae:cd:3e:24:55:d7:cd:c7:df:29:24:ce:35:13:bc:
         ac:15:9b:29:7f:5f:26:f7:cb:d8:3e:35:a2:f2:bb:b2:dc:ef:
         8e:19:f5:2a:75:7a:9d:78:18:2c:eb:f4:64:53:3b:b9:46:4e:
         58:6c:e5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:43:59 2026 by rpki-client