Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
File:                     jw6u_3Y07o3-gFSthfihXoR1kRQ.mft (raw, json)
Hash identifier:          2GIxP8wbjkS473R2HWuxuPp3wWBhNbYNBeEQF9R2ZGo=
Subject key identifier:   4D:00:1D:FB:44:88:44:B9:57:63:00:51:87:8C:2F:90:ED:4E:64:A4
Authority key identifier: 8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
Certificate issuer:       /CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Certificate serial:       019DA2D382B4C25C2364D0290C6BC58353DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
Manifest number:          07FE
Signing time:             Sat 18 Apr 2026 23:01:03 +0000
Manifest this update:     Sat 18 Apr 2026 23:01:03 +0000
Manifest next update:     Sun 19 Apr 2026 23:01:03 +0000
Files and hashes:         1: jw6u_3Y07o3-gFSthfihXoR1kRQ.crl (hash: f5oQUH8qQXQqN0WJ6GdVVgCKBe4DnElgIABVDEBEjTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 23:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:d3:82:b4:c2:5c:23:64:d0:29:0c:6b:c5:83:53:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
        Validity
            Not Before: Apr 18 23:01:03 2026 GMT
            Not After : Apr 19 23:01:03 2026 GMT
        Subject: CN=4d001dfb448844b957630051878c2f90ed4e64a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:76:3f:e8:fc:ef:07:6a:0d:6c:43:b2:9c:2e:
                    a6:74:a7:82:15:34:ad:67:80:47:5c:46:4f:64:05:
                    c5:89:89:d6:00:1f:11:f8:37:b4:84:42:b9:ce:63:
                    7c:a8:c4:1b:68:a1:92:b0:84:4d:bc:07:17:54:0a:
                    eb:9a:ad:6c:9f:9e:8e:43:03:f4:61:f1:bf:ec:11:
                    f5:da:f9:d1:62:df:9c:6a:bc:88:4a:af:a9:76:f4:
                    20:69:01:e2:49:3b:42:cc:3c:c6:db:11:28:a5:f1:
                    fc:d8:67:e1:ce:49:34:1b:10:ec:24:57:44:95:23:
                    59:55:91:50:1e:4e:3d:fb:0c:df:22:9a:ad:d8:de:
                    25:6c:7b:aa:96:1d:0f:8e:ef:a1:7c:1a:51:82:38:
                    fc:b0:6e:93:a3:ec:2d:8f:a9:c1:ca:f2:bd:0f:e5:
                    1e:bf:af:a6:61:1c:e3:db:d9:3c:f5:f7:82:74:80:
                    01:9c:8e:bc:8b:5a:03:a0:4c:54:51:b0:b7:25:79:
                    60:38:03:c5:19:60:27:1c:60:0a:73:f6:62:f7:e3:
                    76:ef:32:5f:2d:b1:c3:e4:13:08:61:ed:24:4b:b8:
                    ca:fe:f7:7c:3c:fb:94:00:d9:a3:2e:c6:a4:cc:ab:
                    54:14:cf:cb:bc:58:13:8b:1b:36:c1:8b:05:7b:98:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:00:1D:FB:44:88:44:B9:57:63:00:51:87:8C:2F:90:ED:4E:64:A4
            X509v3 Authority Key Identifier:
                keyid:8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b6:49:ad:1d:34:ce:94:9f:7d:dd:4b:5d:ac:01:7f:37:e5:
         c8:90:30:5c:72:10:da:35:e4:9e:7b:e2:d0:f5:28:6d:ae:fe:
         2e:5f:b3:07:7e:f0:9e:91:15:2b:ca:22:b5:57:45:ff:e9:79:
         8f:77:b1:b6:4f:df:12:d3:6a:6b:dc:d0:49:b7:ec:aa:b4:e7:
         39:93:67:06:54:bf:02:8d:54:18:59:33:f2:31:03:dd:53:6b:
         4c:17:f0:b1:5f:9c:82:3a:03:44:43:b2:e8:7e:f4:62:a2:6d:
         73:b2:af:bb:27:a9:a2:c7:da:d1:e4:b4:37:73:9c:db:8c:eb:
         d1:02:5d:e1:2d:ea:fb:a3:c5:c3:93:7c:65:4d:00:48:fe:83:
         b1:13:e4:f7:09:34:9d:16:32:80:44:80:df:f0:67:49:a3:75:
         76:83:f8:45:e8:e6:9a:e0:5e:d8:7d:1d:d1:08:ab:85:69:6d:
         54:85:59:a4:33:e1:c2:38:18:18:74:5f:d4:c4:6b:5f:f8:49:
         70:92:2a:3b:13:61:96:bd:1c:d2:97:6e:7e:4c:38:3f:0d:c9:
         28:b4:3c:07:5a:72:4d:0c:7b:fb:26:04:06:b6:b5:22:fe:bc:
         46:10:2f:14:00:05:7d:4c:25:0b:92:ff:8a:dd:3b:fb:c4:95:
         57:ee:98:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2i04K0wlwjZNApDGvFg1PcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMGVhZWZmNzYzNGVlOGRmZTgwNTRhZDg1ZjhhMTVlODQ3
NTkxMTQwHhcNMjYwNDE4MjMwMTAzWhcNMjYwNDE5MjMwMTAzWjAzMTEwLwYDVQQD
Eyg0ZDAwMWRmYjQ0ODg0NGI5NTc2MzAwNTE4NzhjMmY5MGVkNGU2NGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXY/6PzvB2oNbEOynC6mdKeCFTSt
Z4BHXEZPZAXFiYnWAB8R+De0hEK5zmN8qMQbaKGSsIRNvAcXVArrmq1sn56OQwP0
YfG/7BH12vnRYt+caryISq+pdvQgaQHiSTtCzDzG2xEopfH82Gfhzkk0GxDsJFdE
lSNZVZFQHk49+wzfIpqt2N4lbHuqlh0Pju+hfBpRgjj8sG6To+wtj6nByvK9D+Ue
v6+mYRzj29k89feCdIABnI68i1oDoExUUbC3JXlgOAPFGWAnHGAKc/Zi9+N27zJf
LbHD5BMIYe0kS7jK/vd8PPuUANmjLsakzKtUFM/LvFgTixs2wYsFe5iXTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0AHftEiES5V2MAUYeML5DtTmSkMB8GA1UdIwQY
MBaAFI8Orv92NO6N/oBUrYX4oV6EdZEUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanc2dV8zWTA3bzMtZ0ZTdGhmaWhYb1Ixa1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jZmE4NTUtZjBjNy00NDU4LWEzZGUt
YjNiNGVlZmU3MGE1LzEvanc2dV8zWTA3bzMtZ0ZTdGhmaWhYb1Ixa1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jZmE4NTUtZjBjNy00NDU4LWEzZGUtYjNiNGVlZmU3MGE1
LzEvanc2dV8zWTA3bzMtZ0ZTdGhmaWhYb1Ixa1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7ZJrR00
zpSffd1LXawBfzflyJAwXHIQ2jXknnvi0PUoba7+Ll+zB37wnpEVK8oitVdF/+l5
j3extk/fEtNqa9zQSbfsqrTnOZNnBlS/Ao1UGFkz8jED3VNrTBfwsV+cgjoDREOy
6H70YqJtc7Kvuyeposfa0eS0N3Oc24zr0QJd4S3q+6PFw5N8ZU0ASP6DsRPk9wk0
nRYygESA3/BnSaN1doP4RejmmuBe2H0d0QirhWltVIVZpDPhwjgYGHRf1MRrX/hJ
cJIqOxNhlr0c0pdufkw4Pw3JKLQ8B1pyTQx7+yYEBra1Iv68RhAvFAAFfUwlC5L/
it07+8SVV+6YMA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:45 2026 by rpki-client