Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
File:                     _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json)
Hash identifier:          OINRDI9uMQMCBEorklqRM/ARCzXwT5VNziU8hZf+y2M=
Subject key identifier:   C5:5B:45:94:3C:14:B5:46:BA:C8:DC:36:ED:82:CC:38:60:D2:6C:A8
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Certificate issuer:       /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial:       019DA453F1311EA2131F8152E67283FB664A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
Manifest number:          1888
Signing time:             Sun 19 Apr 2026 06:00:57 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:57 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:57 +0000
Files and hashes:         1: P2oeyWo8SpEDQbw0DLQ8DP_geQk.roa (hash: PEQ4xvXLXvHc+J3GPvJUsqvRxaO/0pnd2viLxQ0rLmw=)
                          2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: ZPjWtU8HNfhbhUi1q2SusmCMeLsKqC0qMdj0xICHTzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:f1:31:1e:a2:13:1f:81:52:e6:72:83:fb:66:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
        Validity
            Not Before: Apr 19 06:00:57 2026 GMT
            Not After : Apr 20 06:00:57 2026 GMT
        Subject: CN=c55b45943c14b546bac8dc36ed82cc3860d26ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:79:9c:11:0a:71:b5:17:60:a0:e0:45:43:
                    e9:8c:b0:e4:c1:52:cb:96:b8:00:82:f1:64:f0:83:
                    92:95:9e:ef:19:3c:81:c7:69:f0:08:cf:98:53:25:
                    72:af:98:80:44:ec:93:74:b6:f9:43:34:b7:7c:e4:
                    30:59:bd:56:2c:15:f4:1e:d1:55:1d:ba:7a:04:e3:
                    0b:87:b1:0d:03:83:1c:e8:fa:8e:56:d2:1d:ee:a9:
                    8c:89:63:fa:d3:f6:42:93:f4:01:d5:57:b6:cc:cc:
                    87:59:1f:8d:10:7e:54:87:38:35:8e:b7:08:43:a7:
                    1e:0d:73:b2:4f:97:77:fc:17:a2:10:7d:7b:2b:37:
                    d5:c3:23:42:ea:a1:bf:a6:90:50:f7:8e:6e:f7:ad:
                    be:d4:86:44:64:22:38:bb:79:a6:37:3d:bc:c4:95:
                    67:f5:2c:7b:00:3c:ef:a6:73:22:f8:3c:82:7c:2e:
                    9f:c8:54:b8:3b:36:0b:2f:c3:7f:cb:ea:94:74:0b:
                    dc:03:b1:bd:cb:da:fa:ce:23:fe:55:a7:3a:dd:bc:
                    85:be:89:b3:eb:67:47:70:dd:1f:9a:a5:ce:ad:60:
                    9e:2b:af:1b:99:f1:d4:b1:6a:67:35:ba:2a:75:98:
                    44:90:32:a6:0a:40:7e:ac:a4:41:c3:ba:ed:b1:f4:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5B:45:94:3C:14:B5:46:BA:C8:DC:36:ED:82:CC:38:60:D2:6C:A8
            X509v3 Authority Key Identifier:
                keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:45:72:82:8b:0b:ba:09:03:85:5f:e5:d2:87:b5:75:f5:0a:
         77:6d:65:0d:1e:71:b5:0e:2d:86:a6:ff:ad:46:cf:e6:17:7e:
         2e:5c:96:4f:6c:04:c8:f3:f9:4d:4e:36:38:6b:b2:b7:10:59:
         66:c2:76:51:5b:a4:f9:90:13:15:46:c1:5e:ef:66:d5:ef:94:
         cb:52:9d:e9:df:16:f7:1a:50:d2:5b:47:73:9d:a2:46:fa:96:
         62:20:50:de:7e:0c:8c:c2:ab:98:dc:2f:e5:36:94:8e:a5:43:
         c3:b5:91:28:c3:28:1e:2c:38:2b:42:2f:c0:2a:10:52:40:0b:
         06:48:6e:e7:37:e6:af:cc:45:70:91:b2:37:d0:ee:c8:cf:45:
         42:aa:5f:14:bf:26:bd:b9:1b:2c:b6:81:3a:da:f9:17:82:75:
         33:33:61:01:1f:e8:2f:c0:f8:ca:99:78:92:07:e9:75:3f:40:
         10:40:0b:75:31:f2:4f:87:1e:c6:66:ee:85:d9:69:a3:9a:0f:
         4d:47:9a:43:42:23:e5:61:8a:f9:3d:9e:2f:f7:d1:fc:00:47:
         6a:6c:43:f5:cf:8c:52:ac:13:71:3d:1d:6f:80:ca:35:b7:3c:
         da:1b:f6:5d:80:e3:95:a2:fa:f5:de:5b:86:b1:d4:3b:a2:22:
         1a:04:d9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:25 2026 by rpki-client