Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
File:                     jvZFdw0pFEAtbJW42vUff_4Sdys.mft (raw, json)
Hash identifier:          ppxsPQUWcexgq8thqVx5frJWQ3f1LKPjHNmTquEF6QI=
Subject key identifier:   F0:44:B5:62:87:F4:CB:34:8E:CD:E6:C5:32:F0:E8:96:5F:3B:79:0F
Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
Certificate issuer:       /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Certificate serial:       019D99626CE88936CC31C89FC0CA91EAEE56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
Manifest number:          0CAE
Signing time:             Fri 17 Apr 2026 03:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:57 +0000
Files and hashes:         1: Ze7KRAUjPeqGh8cPqUx4LdDwghM.roa (hash: 9nj7uwXDpwi4IaoN4BLsfOwzpOwzS34nmfQiM2vUZE0=)
                          2: jvZFdw0pFEAtbJW42vUff_4Sdys.crl (hash: FcQptJ0/woThPnZS5ZPGXoEJ6wKfCrAPDjsvFWsWZ80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:6c:e8:89:36:cc:31:c8:9f:c0:ca:91:ea:ee:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
        Validity
            Not Before: Apr 17 03:00:57 2026 GMT
            Not After : Apr 18 03:00:57 2026 GMT
        Subject: CN=f044b56287f4cb348ecde6c532f0e8965f3b790f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a7:36:1c:4c:61:c3:29:11:37:fa:34:ed:91:
                    64:be:35:8d:ed:3c:cb:30:a4:c1:93:f9:d4:24:36:
                    35:0c:8c:88:23:55:ba:1b:86:99:5f:23:33:d1:fc:
                    d1:79:e5:b7:28:b6:7b:90:20:bf:a1:6e:d0:b5:20:
                    13:50:5e:a6:ab:40:71:74:19:97:71:fb:26:68:79:
                    4e:f5:fe:33:16:d7:8e:91:c5:de:16:73:66:19:fd:
                    6d:c5:6f:2c:05:ed:ad:ff:23:71:97:41:a8:7c:8a:
                    72:c7:b3:af:8d:66:7d:bb:74:0f:bd:6c:f7:d7:3f:
                    c6:57:46:bd:cb:5c:5c:88:eb:1b:60:10:8b:4f:6f:
                    41:01:48:46:2b:68:3b:39:50:48:9c:e5:3a:d2:e9:
                    55:16:e7:4c:42:25:3b:41:fd:f8:1b:a1:b3:64:f9:
                    55:d2:1e:83:84:2b:f3:68:6d:3b:74:22:45:c6:91:
                    fe:0a:ba:9f:ca:cd:07:6e:30:72:ed:fb:c8:69:6b:
                    2d:8e:e5:57:53:37:d8:3d:87:32:90:59:c6:7e:8c:
                    27:87:bd:95:3b:18:5b:6a:ab:eb:28:84:ae:f8:ca:
                    4f:5c:4e:f2:eb:39:e9:0f:09:0b:1c:96:89:aa:d2:
                    f1:16:92:29:c3:69:5c:9c:d8:d7:b1:ab:f9:14:2d:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:44:B5:62:87:F4:CB:34:8E:CD:E6:C5:32:F0:E8:96:5F:3B:79:0F
            X509v3 Authority Key Identifier:
                keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:cd:7b:ed:2b:80:2e:f1:7b:04:11:bd:62:ed:07:dc:1a:cc:
         3e:39:a5:cc:9c:57:1f:45:13:4a:ec:dd:d4:71:b6:4a:2a:2f:
         9a:9b:84:d5:a0:b8:0e:ff:2d:f1:fc:02:ac:ac:18:de:b8:e5:
         92:15:73:6e:b8:b2:81:e6:a6:38:16:75:22:5e:0c:63:ac:68:
         7e:1b:1c:e1:e2:2f:d2:42:d5:1f:3d:23:59:d3:84:b4:01:c1:
         88:e3:b6:2f:a0:86:75:a4:aa:5c:47:f2:bf:77:3c:1a:8f:06:
         b4:8b:4e:49:ce:02:ff:a0:90:47:77:f9:c4:99:e7:83:71:72:
         18:70:d4:4b:1b:8d:15:8e:e7:39:8b:76:37:c3:9a:b4:8e:b4:
         99:9f:10:2b:97:07:44:ba:52:14:e8:f4:64:5d:a4:82:95:6f:
         a5:b1:5e:4f:72:52:b9:c2:fa:e0:1b:ac:b6:02:a8:11:d2:77:
         b5:e9:e5:90:8a:34:3c:ce:68:f7:bd:88:04:33:6f:39:cc:91:
         4d:2b:33:e5:49:7a:04:23:82:23:bd:75:64:ef:d1:39:5c:e5:
         09:14:d5:33:cd:56:0c:40:86:1f:73:c7:30:2b:1f:51:99:cb:
         df:89:a8:f0:bf:1e:58:c2:76:ec:22:0c:f5:a5:a0:3b:ec:2b:
         13:31:72:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:21 2026 by rpki-client