Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
File:                     JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json)
Hash identifier:          o6bCv7Q07T3ho2yT26jCgm6OyZeudp2fIiaFAS6wVuU=
Subject key identifier:   F9:B1:93:D7:38:58:70:B7:67:18:C9:82:A4:8E:3E:67:32:49:6D:4D
Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Certificate issuer:       /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Certificate serial:       019DA4F8CA0F7A1DB5D2EA6317947D0381F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
Manifest number:          18C4
Signing time:             Sun 19 Apr 2026 09:01:01 +0000
Manifest this update:     Sun 19 Apr 2026 09:01:01 +0000
Manifest next update:     Mon 20 Apr 2026 09:01:01 +0000
Files and hashes:         1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: fMos8C8Ur5a2s0qB9KYsKwWHj3HRurW6Amdjgzn4/5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:f8:ca:0f:7a:1d:b5:d2:ea:63:17:94:7d:03:81:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
        Validity
            Not Before: Apr 19 09:01:01 2026 GMT
            Not After : Apr 20 09:01:01 2026 GMT
        Subject: CN=f9b193d7385870b76718c982a48e3e6732496d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:1d:eb:5b:59:e0:e0:ca:28:f2:96:a1:f8:
                    cf:86:df:5c:69:b3:43:d6:37:04:84:d9:08:0d:ed:
                    f7:94:00:9c:57:5d:85:11:00:15:5d:ab:4a:40:10:
                    20:27:f1:f7:28:87:b5:d4:37:22:08:99:38:de:4d:
                    8b:58:c6:cd:da:a6:4d:d8:3f:c9:98:ae:e3:92:a5:
                    a7:12:09:05:b3:ee:1e:c1:bd:53:ae:55:90:ab:10:
                    bd:29:11:b7:49:79:59:01:2b:5e:4b:9e:ce:bc:39:
                    31:0d:06:11:fe:30:b4:f4:d3:f0:29:aa:3b:ec:fe:
                    c0:fa:b9:70:52:c0:38:a2:0b:f3:23:39:2b:f9:d6:
                    8d:cc:af:55:23:69:82:64:e7:f5:d9:d8:36:14:c8:
                    78:55:42:a0:c4:38:bc:b2:b4:b0:ba:4c:67:09:07:
                    23:46:02:85:d7:16:6e:24:86:70:0d:1b:73:f2:f0:
                    00:89:ee:ef:4b:0c:87:f6:cc:90:d4:17:cb:00:fd:
                    6e:7b:ed:f3:d8:62:4a:5c:74:92:f3:bf:f3:dd:d9:
                    bb:5f:05:b4:1f:4a:d4:a7:03:ea:65:d7:cb:93:10:
                    98:55:1c:d7:13:57:c4:39:36:da:ed:8f:c1:2a:cb:
                    6e:45:0e:6d:f3:10:95:a0:ab:dc:d9:e8:d7:0b:19:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B1:93:D7:38:58:70:B7:67:18:C9:82:A4:8E:3E:67:32:49:6D:4D
            X509v3 Authority Key Identifier:
                keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:45:63:85:3b:c1:45:6d:68:52:84:60:d8:4d:2f:51:34:a2:
         23:33:d0:50:f1:1a:7e:2f:21:59:13:ca:42:fd:c2:5f:07:40:
         89:b5:3d:65:b0:ee:83:95:9c:56:77:bd:69:8f:ea:fb:fe:37:
         07:a9:bf:55:44:ea:6a:49:99:9f:0c:6d:90:3a:3f:c8:49:6e:
         93:12:96:4a:46:74:55:eb:7a:1d:e6:31:16:27:65:51:de:63:
         9a:39:66:b1:be:ac:f6:b8:25:43:4d:2f:4f:e0:d6:a3:4b:49:
         f2:4e:23:70:ce:f2:44:1c:a0:4f:6f:b8:21:c7:22:59:44:16:
         e9:3c:1a:b2:78:98:38:7a:ae:91:46:32:b8:31:0c:3a:61:75:
         ba:4a:9c:7f:28:42:ff:50:48:24:59:d6:71:ce:d4:fa:b8:5a:
         d0:e4:26:34:17:1e:f0:4f:36:ea:d2:85:96:b9:46:70:d0:a9:
         3a:fc:2a:99:02:5c:f8:aa:f8:bf:36:7e:6c:a8:7f:91:8a:48:
         49:2b:34:63:69:9d:d9:1f:d7:db:64:e3:4a:a6:1d:d5:02:1f:
         77:bd:62:eb:f7:35:43:db:fe:1c:06:61:2d:10:a3:7e:b8:a3:
         6d:b8:dd:d6:10:86:5a:3d:40:a4:81:7a:42:55:a9:06:61:86:
         22:25:97:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:20:01 2026 by rpki-client