Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File:                     J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier:          EpFyygnkrFfDY7PIqjuxMLGI+WjlAgGZjl1i1t7CifI=
Subject key identifier:   BC:5D:1E:79:11:A1:15:49:43:D6:56:94:90:3D:CE:D4:0F:77:24:47
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer:       /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial:       019D99D0D7240428DB470BC35FB49BC69363
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number:          1850
Signing time:             Fri 17 Apr 2026 05:01:33 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:33 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:33 +0000
Files and hashes:         1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: 67RikVo46wcZ1EUKaFknRTQ6ByJR/Z5UoN8RX1Du9gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:d7:24:04:28:db:47:0b:c3:5f:b4:9b:c6:93:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
        Validity
            Not Before: Apr 17 05:01:33 2026 GMT
            Not After : Apr 18 05:01:33 2026 GMT
        Subject: CN=bc5d1e7911a1154943d65694903dced40f772447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:e8:1f:52:8a:6d:81:31:ee:d0:4a:1a:41:
                    f3:82:50:d7:87:0b:ea:7b:1c:09:42:cb:d3:b5:dd:
                    d0:72:4f:86:e3:bd:bd:26:a0:b5:9b:49:0b:92:6b:
                    cf:5a:b6:4f:19:93:91:dd:52:c6:a1:b0:65:66:2f:
                    0c:4d:e2:4e:31:30:79:ee:73:01:a5:ee:62:cb:3c:
                    0b:c5:a8:69:8c:02:27:6e:59:84:ce:c8:ab:39:c6:
                    92:ba:3f:ad:ed:19:28:03:49:d9:42:d7:70:04:44:
                    5a:a7:e4:09:bd:5a:1f:f1:b0:de:c5:41:57:d9:ef:
                    10:47:9b:ea:c2:3e:12:42:76:11:58:07:2a:77:dc:
                    ae:30:e8:ba:8d:d3:3c:32:c6:a0:6d:43:b4:e9:68:
                    57:7d:b8:84:ce:80:d6:c9:79:23:f4:84:3b:db:63:
                    a3:ec:c0:77:36:75:f9:45:7b:c4:05:22:e5:e7:8a:
                    b8:68:82:ea:54:e6:31:cd:4b:9c:4a:ef:a9:d3:bb:
                    a3:c2:73:23:17:84:84:bc:8e:b7:50:bb:9d:cc:bf:
                    5d:ed:1a:f2:f6:dd:ce:b8:eb:bc:ba:52:f4:a2:72:
                    ab:6c:48:41:06:d8:31:07:7b:85:fb:6c:05:92:8f:
                    fa:eb:5e:1a:bd:a5:c5:a2:3d:49:9c:2c:f5:82:61:
                    90:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5D:1E:79:11:A1:15:49:43:D6:56:94:90:3D:CE:D4:0F:77:24:47
            X509v3 Authority Key Identifier:
                keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:75:0e:ab:0c:f8:cb:fb:bd:71:f6:b9:5d:01:58:aa:50:b0:
         83:6b:8b:54:ff:c7:6b:25:40:09:9c:e2:b6:85:aa:87:f9:3a:
         fa:f4:74:36:1f:a9:7f:4c:b4:31:a8:a3:ad:5f:0d:23:87:fe:
         96:f3:bd:9d:39:49:f6:68:f3:e5:f8:47:1b:7a:48:c2:af:6c:
         78:4e:27:a4:55:86:72:2c:96:c6:10:3c:e3:b0:0d:8a:49:30:
         04:1a:01:12:9c:2a:aa:b0:f6:c6:10:7a:8f:e9:a3:d9:27:79:
         af:ba:56:8e:e0:9b:28:2b:5e:da:c7:7a:ab:9e:f3:73:c0:d0:
         bc:86:c7:ab:0c:e9:f4:f2:f1:82:88:63:fd:ea:8f:38:43:2e:
         f6:b7:3d:3c:82:c8:26:2b:38:d2:91:a5:e3:c7:f9:82:43:10:
         62:7a:f1:cc:ff:c2:91:51:5a:d2:e9:1c:e0:ee:09:ec:a7:2d:
         97:7a:9b:70:6e:7b:7d:cf:4e:d4:a9:59:a3:91:ea:d2:4f:42:
         a7:0d:57:20:2f:5b:70:f2:6c:8c:43:4a:8a:2e:66:25:d6:79:
         ad:cb:82:fe:c9:99:a2:1c:ac:47:55:fa:44:32:7e:c7:12:ab:
         92:b1:fa:45:d9:80:c9:7e:68:c1:d0:19:2b:ae:98:2e:63:36:
         4a:c4:9e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:33:49 2026 by rpki-client