Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
File:                     rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json)
Hash identifier:          4yG/dsdHMm/f2l5lM1sq6/rKFiKZoh/PD1alXdZ9XPQ=
Subject key identifier:   D5:08:32:B0:F2:4C:38:8D:B5:99:D2:F9:C3:0E:9F:EF:EF:B6:F9:E7
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Certificate issuer:       /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial:       019D9BBEAEF8566F19DFB665705D3EAB9096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 14:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:58 +0000
Files and hashes:         1: jkhYRK4apXHLHJ4HFanP0SfT4FA.roa (hash: Q8Lk/xTao2v2+r34JtDDrlWHGb5NTl6AAYXGaL/XHn8=)
                          2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: PX5RqHMKGT2GfHAy4ZxQedXTKtjPSNwaCRLHOiQ+sVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:ae:f8:56:6f:19:df:b6:65:70:5d:3e:ab:90:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
        Validity
            Not Before: Apr 17 14:00:58 2026 GMT
            Not After : Apr 18 14:00:58 2026 GMT
        Subject: CN=d50832b0f24c388db599d2f9c30e9fefefb6f9e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:f3:7f:0b:03:5f:7d:40:d1:d4:64:04:f8:
                    d7:40:16:4c:b4:3e:20:78:cd:d9:d6:33:75:1f:b4:
                    59:dc:cf:0e:b2:e9:1e:55:77:31:27:ef:aa:1d:41:
                    a4:62:69:5a:b2:f8:ea:d5:bb:da:f5:c8:de:dd:ad:
                    a4:b3:0e:f9:d3:21:e5:15:41:0b:c4:7a:71:f5:ba:
                    73:25:59:0e:c7:4b:ee:24:86:12:7e:fb:31:97:7a:
                    55:0e:3b:9c:52:9c:31:f5:5e:ff:e0:a9:99:a3:bd:
                    32:fa:bb:6a:c9:78:62:d1:71:b8:36:47:ee:f8:b1:
                    f4:a0:46:5b:2c:a9:2f:45:36:8a:06:47:56:61:a3:
                    f6:05:12:b2:1d:8b:fc:a0:da:69:54:d4:76:0b:4b:
                    fb:bc:7c:a2:9e:63:54:f0:6b:9d:eb:6f:16:ae:de:
                    2c:9a:20:fb:bf:51:0b:08:96:9b:6c:5f:a7:63:3e:
                    0f:5a:27:04:9a:6a:50:c1:0f:da:33:dd:bc:71:96:
                    77:fb:c5:3f:c8:ea:6a:fd:68:1c:08:6f:21:89:33:
                    d2:ce:4c:d5:64:4e:2a:7a:24:c2:32:a3:75:a8:8f:
                    0b:78:d0:ed:7b:a5:9a:eb:97:a2:21:94:fb:23:43:
                    53:78:01:11:43:c5:2a:fc:47:df:38:fe:38:ec:f8:
                    a3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:08:32:B0:F2:4C:38:8D:B5:99:D2:F9:C3:0E:9F:EF:EF:B6:F9:E7
            X509v3 Authority Key Identifier:
                keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:f2:b9:b5:85:33:38:ca:5c:83:d0:d9:40:fd:bd:48:68:fe:
         59:9a:07:46:86:f8:38:d5:a8:b5:65:cf:26:aa:e4:cb:11:c6:
         0e:c0:8f:65:39:fc:20:97:3f:9a:8a:a3:0e:85:c4:f9:d4:48:
         90:ad:25:d6:c5:4d:66:de:e2:34:5d:b4:cc:75:8d:0f:06:ef:
         6f:4f:b3:6b:c5:1c:3b:58:08:42:38:5d:f2:ae:66:36:cc:4f:
         31:ff:8b:d5:3c:08:bf:cf:88:42:6e:68:aa:eb:7b:03:bf:26:
         2f:17:0e:44:35:24:53:61:61:9d:76:91:f2:6c:29:bd:70:5b:
         d6:08:14:eb:88:85:b8:02:34:f7:16:88:02:08:92:e3:c9:23:
         2f:3b:03:d0:95:7f:5a:36:d5:7b:c2:14:eb:80:91:07:d2:74:
         eb:ee:e3:7b:cd:28:29:46:b5:b2:61:d5:2e:73:6c:2e:90:74:
         f1:9b:d9:21:b6:cc:b5:b6:35:4e:23:65:47:92:36:a6:ad:a5:
         70:27:33:09:f0:6b:a4:6b:1e:37:4a:cc:10:8f:10:96:a3:55:
         c2:6f:ce:a7:e7:c8:5b:c9:b8:40:95:a9:69:bd:47:5d:20:89:
         9d:90:3e:ab:df:f5:a1:43:5a:47:ea:6f:70:14:3f:f7:7b:c4:
         18:b3:38:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:34:17 2026 by rpki-client