Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
File:                     J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft (raw, json)
Hash identifier:          +MQg83/NJzDxHQq4UEyzkzCCe+x4Hb3D/WrgU5fllPU=
Subject key identifier:   95:9B:7E:F5:9C:DE:31:04:FE:1F:CB:2D:9D:B7:E5:50:AB:61:13:23
Authority key identifier: 27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14
Certificate issuer:       /CN=27b56eb25b05a08826c2648fff1acf36b494d814
Certificate serial:       019D9BBEB6D0DF81938F0509B26745A7FA6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
Manifest number:          057E
Signing time:             Fri 17 Apr 2026 14:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:00 +0000
Files and hashes:         1: J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl (hash: jYT3Mj5F/scr5DE85JjlMb4s0ohJ4sNCV/Fz2Svp08U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:b6:d0:df:81:93:8f:05:09:b2:67:45:a7:fa:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b56eb25b05a08826c2648fff1acf36b494d814
        Validity
            Not Before: Apr 17 14:01:00 2026 GMT
            Not After : Apr 18 14:01:00 2026 GMT
        Subject: CN=959b7ef59cde3104fe1fcb2d9db7e550ab611323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:db:6f:4d:8c:d2:25:cd:c7:2e:5a:4e:57:
                    42:2b:61:10:87:e8:19:56:04:5c:aa:9b:17:45:fd:
                    a7:4a:4a:c2:fd:13:09:1c:bb:09:89:8e:7f:56:00:
                    6b:7f:fb:64:f1:35:6a:d3:07:fb:57:c7:40:1f:b2:
                    c8:95:2d:84:8f:73:3f:0f:0a:9a:f0:ca:52:22:bb:
                    e0:f3:96:bd:28:0e:c0:af:38:50:84:f7:e9:ac:57:
                    8a:ba:34:97:4c:12:f1:9a:a6:11:d8:6f:46:03:31:
                    e6:ff:14:79:9d:db:f6:8c:a0:8a:f5:fa:44:28:b0:
                    c7:fd:ba:53:d0:bd:39:79:75:11:82:f0:21:fa:5d:
                    95:a6:0f:66:c3:20:de:f3:3f:b7:7b:af:4b:68:ce:
                    b2:2d:41:62:3c:98:26:e8:8c:5d:f9:c3:ae:ae:c7:
                    4d:b7:ab:3b:a3:21:24:4d:17:1e:4c:4d:b5:19:cc:
                    96:d2:fd:79:fc:0b:f3:2e:88:d7:97:87:e0:93:fe:
                    0f:d1:91:98:0a:f9:2f:f2:c3:5a:67:ee:9d:84:b3:
                    e8:9d:57:24:97:d7:36:71:f3:db:0f:c0:48:71:2e:
                    aa:f4:4e:68:29:e4:e3:ea:da:e5:f8:d8:9f:f2:2c:
                    46:68:f2:9e:04:02:1e:80:e0:8c:c0:12:fe:4b:0e:
                    21:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9B:7E:F5:9C:DE:31:04:FE:1F:CB:2D:9D:B7:E5:50:AB:61:13:23
            X509v3 Authority Key Identifier:
                keyid:27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2d:e1:78:d1:74:87:77:91:12:23:42:d3:85:7b:73:2b:39:
         9c:a8:99:47:e9:4d:a7:fe:15:26:ef:d0:a7:34:e2:dc:28:7c:
         31:ab:ce:13:a7:9f:da:f0:51:eb:5d:23:f1:84:a5:bc:7e:1c:
         8d:49:a4:f0:95:c8:5b:6a:44:ec:58:04:cf:85:6a:5a:b9:29:
         76:87:4d:98:36:47:4a:9d:5d:00:4c:32:c1:9b:69:4e:9c:11:
         14:31:7e:49:88:6e:e0:59:e8:80:3a:f4:06:ff:b6:fd:40:73:
         bb:af:87:a8:46:61:ee:d4:80:dd:0e:67:5c:36:26:3a:57:0d:
         94:97:17:45:56:e1:5b:c9:c1:5b:a5:bb:75:fe:46:e9:99:0b:
         f4:6d:35:93:8d:4d:1c:d9:a2:e7:c1:f6:60:90:ba:ae:44:f8:
         c9:ab:0d:ce:cd:10:74:32:69:79:60:be:ce:a1:fd:fc:8b:95:
         cb:90:99:cc:64:55:a8:1a:8d:10:7f:e8:f6:f8:9f:54:71:11:
         fb:9b:c3:ba:22:06:10:ad:65:9e:80:a4:1d:14:26:7b:b7:47:
         ce:e3:cb:fb:93:60:79:b3:13:89:be:06:eb:08:72:27:e3:52:
         5f:1c:17:27:6a:65:e6:f5:7a:93:43:85:72:1e:7c:2a:7e:80:
         1b:b1:de:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:41:31 2026 by rpki-client