Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
File:                     jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft (raw, json)
Hash identifier:          PRY1JbIlNdp855RFlsmFqyowNXi0zUFJ+rA/303jRII=
Subject key identifier:   6E:8B:B2:DB:A2:BE:20:04:A8:2E:AB:16:AC:6F:8B:4E:03:5F:6D:35
Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E
Certificate issuer:       /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
Certificate serial:       019D9C634D79B755A0307DB58D4FB91A4B11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
Manifest number:          0190
Signing time:             Fri 17 Apr 2026 17:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:46 +0000
Files and hashes:         1: 8sncQGN_dofXozDeejTadUl8wRs.roa (hash: SW1+/cf3HtR0IB+S11zpo2LhAnvKL4afLlJ8vSGUHZ4=)
                          2: UtXzH5Oi0AulZFx0l8qig6QKaPg.roa (hash: 1qkvw5zb1r9z9CjOBe9UqDsw7BNtoAEFm0cGx+TLWUU=)
                          3: jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl (hash: JPSvE3F6UmR62P9OGV9sMDv3NlPedW7oQjwix3w4eJk=)
                          4: qTnj_y_Wd49wsAXE39s8dZ0CQvA.asa (hash: Pe+G1o42QcpD2g0wE/O5joEX35Ku4HHh+kf6CsJnEYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:4d:79:b7:55:a0:30:7d:b5:8d:4f:b9:1a:4b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
        Validity
            Not Before: Apr 17 17:00:46 2026 GMT
            Not After : Apr 18 17:00:46 2026 GMT
        Subject: CN=6e8bb2dba2be2004a82eab16ac6f8b4e035f6d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:34:f0:3b:40:fd:dd:5a:c1:76:f0:41:c7:27:
                    57:15:b9:8b:d8:d2:dc:55:d5:78:af:d5:6d:83:6f:
                    bd:8c:42:67:70:65:a7:80:4d:8c:45:03:89:99:86:
                    00:fa:20:db:2e:67:03:f7:df:33:2a:9e:60:97:35:
                    6a:03:d8:28:85:76:c1:aa:0a:42:64:88:29:0c:80:
                    9c:0c:1e:45:8a:73:9a:8a:f0:69:b9:e9:b3:c2:59:
                    f4:b0:9b:51:59:89:8c:96:e8:c9:80:80:3d:cf:2b:
                    f6:dc:6c:c4:e2:32:83:95:8a:f5:9a:60:07:1d:c9:
                    1b:b2:3b:ae:cc:4d:f5:d1:cd:3b:9b:cb:5e:cc:6d:
                    de:c6:fd:9a:a7:cf:04:fa:2a:18:62:f5:7c:19:55:
                    93:d6:58:da:bc:59:a4:b9:49:06:1e:7e:2b:ff:33:
                    89:a9:51:5f:69:c7:3f:85:43:a5:7e:5d:23:a3:4f:
                    7f:7b:b1:62:22:b5:0e:5b:1d:22:82:db:ba:8f:12:
                    c1:55:7e:af:db:4a:58:17:86:4f:86:3a:12:e7:cf:
                    85:29:a2:54:84:d1:2b:32:4d:09:d4:f5:9b:33:01:
                    b8:0f:95:07:d1:a7:65:12:29:d4:be:49:60:67:9b:
                    0f:4c:7e:4a:7a:ba:f3:3b:aa:ea:8f:e7:ec:56:1e:
                    10:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8B:B2:DB:A2:BE:20:04:A8:2E:AB:16:AC:6F:8B:4E:03:5F:6D:35
            X509v3 Authority Key Identifier:
                keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6b:f7:0a:10:57:d9:83:c2:b1:bf:7b:f0:43:e6:ee:7a:61:
         59:d1:13:db:f1:89:cd:b0:11:e7:6b:0a:7b:f6:eb:c0:6a:19:
         8d:21:11:13:88:ea:12:0a:02:fc:7a:fb:bb:d8:34:a7:d7:4a:
         94:98:86:a1:91:51:c3:a8:36:76:fb:63:53:93:1a:2c:3c:ee:
         91:3a:b4:62:ef:0c:2d:d5:6c:21:4a:f5:6d:41:dd:3e:db:17:
         14:69:9f:c6:a6:aa:a6:05:ab:0e:80:b3:21:30:a6:d5:00:80:
         60:4f:0a:26:01:23:68:ca:01:96:ae:30:4b:e5:dc:75:45:20:
         16:a7:90:d4:8b:1a:17:52:d9:95:cf:03:77:45:7c:00:b2:0d:
         3e:8d:1a:8a:19:1b:1d:60:67:a6:70:7f:cd:3c:5e:d9:a6:68:
         96:4b:3f:b1:7f:95:9c:24:bd:30:f8:a7:d9:34:1e:cf:b6:11:
         d1:df:80:f3:f8:0b:cf:c3:aa:a1:5a:55:c3:5b:25:0c:c6:92:
         f1:b8:af:5b:a6:45:82:8d:6e:f7:11:4f:6f:8b:94:58:14:40:
         fb:73:6a:84:df:10:13:fe:1e:a2:14:02:d6:18:78:6e:d8:c6:
         be:45:42:53:2a:5c:01:8a:5a:81:df:80:67:77:ed:73:59:af:
         9f:27:f8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:59:43 2026 by rpki-client