Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File:                     JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier:          IyK++87i9LX89dqhS4cUsSWIKqZPCsQWdfU3vyW0Jv4=
Subject key identifier:   E9:FE:11:54:45:4A:8C:E4:A3:8F:3A:A2:54:59:15:FB:8F:8E:64:F8
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer:       /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial:       019D9850819C18F56E13EFB052A06AE97523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number:          1556
Signing time:             Thu 16 Apr 2026 22:01:45 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:45 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:45 +0000
Files and hashes:         1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: gK6EJjjKo5+7OY0yUZHsY0bRi8lvL+2su6jHrDTDEt0=)
                          2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:81:9c:18:f5:6e:13:ef:b0:52:a0:6a:e9:75:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
        Validity
            Not Before: Apr 16 22:01:45 2026 GMT
            Not After : Apr 17 22:01:45 2026 GMT
        Subject: CN=e9fe1154454a8ce4a38f3aa2545915fb8f8e64f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:5f:8d:68:d6:21:be:1c:5a:a1:a4:ce:50:
                    be:f4:bc:74:f4:bf:8b:81:5b:ae:a8:9c:3c:a1:2f:
                    10:7e:c5:1a:8f:aa:d8:ab:72:f8:26:53:b4:79:55:
                    7e:ba:88:69:0b:71:75:ed:60:52:11:45:f3:b9:7e:
                    f7:0a:01:e6:3d:4c:20:a0:c3:bd:60:58:29:c2:ae:
                    21:ce:cb:df:34:4c:1d:67:89:26:ca:aa:28:9d:38:
                    2d:de:3c:90:f3:b8:b2:20:28:9b:13:2c:12:42:88:
                    03:2e:6f:01:89:13:3a:59:8e:c1:8a:4d:0c:5e:41:
                    72:26:99:0c:82:fb:31:e2:8d:b8:e0:d1:c9:86:4a:
                    c3:9e:d7:ce:06:7d:4f:a7:6d:45:16:9b:bd:d4:9d:
                    38:1d:4d:f0:43:54:c8:64:46:eb:93:63:d9:b2:a0:
                    b9:3c:48:89:c3:8b:11:50:29:9d:7d:59:1e:70:a3:
                    18:5f:b4:01:b4:f7:b2:9b:ce:16:5d:54:db:12:34:
                    83:26:64:2e:2b:24:2c:12:63:b9:ca:46:9a:7c:b2:
                    be:86:a7:07:03:4c:45:24:3b:4d:69:12:e0:b1:a4:
                    16:db:1e:de:9a:bf:89:87:4c:de:90:65:be:aa:99:
                    0b:cd:56:4b:48:16:20:ba:92:d2:e2:1c:fb:11:e5:
                    7e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:11:54:45:4A:8C:E4:A3:8F:3A:A2:54:59:15:FB:8F:8E:64:F8
            X509v3 Authority Key Identifier:
                keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1d:5b:1c:79:f0:80:04:37:4f:fa:5e:19:4d:97:2b:d9:98:
         63:e0:17:e4:bd:c0:73:b2:ff:17:bd:03:f2:aa:84:2c:c6:29:
         bf:1c:55:b0:41:28:f8:9e:e3:02:c2:92:f9:ae:85:f7:8f:29:
         35:37:7f:ba:c9:18:0d:fe:fe:25:46:b1:23:fe:9e:1c:04:8c:
         34:d7:fd:e7:fb:3c:9a:cb:17:67:89:15:51:ae:b4:30:85:bc:
         02:1a:53:d6:bd:cb:42:4d:93:f1:9f:9c:4b:54:20:6f:ad:a4:
         dc:3e:64:72:78:90:3d:b3:98:1d:52:2a:64:9a:c8:de:88:8b:
         3e:c8:ab:f6:2e:e9:e4:1a:f0:69:6f:78:22:9e:33:02:79:5a:
         21:ff:15:22:d0:db:77:51:35:47:32:73:20:ae:3b:f7:00:8d:
         81:62:0e:ef:3e:16:1d:76:63:ce:e4:95:79:64:2b:f6:c2:eb:
         53:7c:ba:be:10:db:22:62:1a:53:60:a6:5f:db:82:11:ce:98:
         02:d5:b3:78:31:f9:12:d8:0b:b2:15:95:1a:57:08:7e:1a:55:
         b4:0b:6c:da:e7:96:77:fb:e6:2d:19:29:a2:bc:25:5a:a4:61:
         bb:75:18:c1:c9:8f:4c:ae:2d:9c:61:bf:35:ae:de:9c:ea:99:
         67:6b:de:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:22:09 2026 by rpki-client