Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
File:                     _j0jo57TZW-aYGS2CdAqL25KOCc.mft (raw, json)
Hash identifier:          UC0kTe6ZEiyrglqb+h3oV9wG2ic+uP0bMvTpuA4jGNs=
Subject key identifier:   C6:A0:E2:AD:70:DC:CA:36:31:04:93:09:57:E2:28:74:D2:AE:30:1F
Authority key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
Certificate issuer:       /CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Certificate serial:       019DA453C29972BBBF2A2CA6EA7B8BC2D08E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
Manifest number:          07A8
Signing time:             Sun 19 Apr 2026 06:00:45 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:45 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:45 +0000
Files and hashes:         1: _j0jo57TZW-aYGS2CdAqL25KOCc.crl (hash: 3dZctHrR1/xt3l+LA/4jAaJGRnxYzkP6WsowzPwi4pI=)
                          2: obQSThMDI54tnVCG6iwWlU2d5xA.roa (hash: fWHmiFl72Qtr24MSIZkfu38dOhvU6zUrAoirFatj96E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:c2:99:72:bb:bf:2a:2c:a6:ea:7b:8b:c2:d0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
        Validity
            Not Before: Apr 19 06:00:45 2026 GMT
            Not After : Apr 20 06:00:45 2026 GMT
        Subject: CN=c6a0e2ad70dcca363104930957e22874d2ae301f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:66:0b:58:64:6b:8a:e6:c5:53:fe:67:0b:
                    f4:02:29:63:85:e2:c3:64:13:9f:ba:a9:be:6d:39:
                    09:27:21:99:62:d4:2d:72:5b:ed:5d:e1:0d:37:95:
                    1e:b8:22:34:68:e3:49:1f:c1:f6:31:23:f7:f2:62:
                    cd:99:39:c7:82:69:0f:a6:c3:89:37:26:d5:c0:7b:
                    5d:bf:20:3e:37:43:d0:ef:75:c1:b2:d2:cd:71:6f:
                    ef:dd:c9:11:f3:7f:82:6a:9f:be:fd:0a:04:ea:41:
                    25:fa:1e:08:a3:43:32:2d:ca:36:02:9a:1c:81:b0:
                    58:33:4c:6a:4d:e3:e9:48:5c:34:d0:ab:8f:1e:ba:
                    96:4e:42:8f:de:78:2e:5c:00:c0:ae:27:8b:d2:52:
                    35:2f:38:df:b9:ea:f9:d9:6d:a3:bb:56:37:4c:3b:
                    3a:c9:c9:1a:97:85:59:c7:66:ad:7f:ea:46:17:4b:
                    3c:e8:f9:2a:cc:8f:95:d4:55:53:a7:fd:16:30:6d:
                    4a:d0:8e:31:6a:62:4e:50:a5:8f:90:9d:55:d4:83:
                    a2:e6:98:01:13:14:db:5c:3a:5b:eb:4d:92:6c:3e:
                    8d:46:8b:63:46:9c:cd:64:50:64:cc:fa:f7:05:82:
                    9e:0f:1d:88:a2:0f:52:6d:29:e2:a9:d1:42:cd:4d:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A0:E2:AD:70:DC:CA:36:31:04:93:09:57:E2:28:74:D2:AE:30:1F
            X509v3 Authority Key Identifier:
                keyid:FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:20:b2:15:f8:08:3a:28:36:cb:3b:6f:ca:28:49:b4:4c:ab:
         12:93:c9:ad:1b:8d:64:00:66:f7:cc:05:70:e2:a9:d7:be:a8:
         1e:cd:67:92:b2:0d:50:a6:e5:b8:e7:67:02:6f:11:38:3d:86:
         89:7b:47:17:0e:c5:c6:f7:d4:de:ff:1b:6a:a0:26:8e:50:bb:
         d1:5d:9d:48:5a:25:df:6b:70:3a:63:8e:ce:f4:d4:34:f8:41:
         cd:63:ea:04:f8:19:17:6c:6b:a9:36:be:a5:a5:ce:a2:7b:9e:
         5a:2c:10:5e:5f:b8:78:d4:0f:23:be:81:a8:52:47:d5:c8:61:
         12:09:fb:83:4b:42:09:59:f6:62:b4:fd:4f:9d:bc:6b:2f:8a:
         45:67:3d:03:f9:22:72:b1:86:d8:23:36:22:a9:72:ba:25:54:
         57:19:c1:6a:fd:a0:44:eb:9d:38:b1:5a:9b:b0:73:9f:ea:1d:
         79:fb:7d:d4:c7:4a:e8:9a:59:f0:a5:2d:ad:e1:18:a8:1d:3a:
         3b:53:4a:f4:8c:6e:da:c1:1d:8b:c2:25:12:b0:d4:b3:28:fa:
         64:1d:a8:b9:92:cc:b7:e4:f4:16:f4:f6:6e:e9:0b:1e:a4:64:
         dd:b4:83:94:ae:40:77:96:1a:d9:49:3c:70:94:53:f9:79:f5:
         45:50:c8:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU8KZcru/Kiym6nuLwtCOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlM2QyM2EzOWVkMzY1NmY5YTYwNjRiNjA5ZDAyYTJmNmU0
YTM4MjcwHhcNMjYwNDE5MDYwMDQ1WhcNMjYwNDIwMDYwMDQ1WjAzMTEwLwYDVQQD
EyhjNmEwZTJhZDcwZGNjYTM2MzEwNDkzMDk1N2UyMjg3NGQyYWUzMDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3JmC1hka4rmxVP+Zwv0AiljheLD
ZBOfuqm+bTkJJyGZYtQtclvtXeENN5UeuCI0aONJH8H2MSP38mLNmTnHgmkPpsOJ
NybVwHtdvyA+N0PQ73XBstLNcW/v3ckR83+Cap++/QoE6kEl+h4Io0MyLco2Apoc
gbBYM0xqTePpSFw00KuPHrqWTkKP3nguXADArieL0lI1Lzjfuer52W2ju1Y3TDs6
yckal4VZx2atf+pGF0s86PkqzI+V1FVTp/0WMG1K0I4xamJOUKWPkJ1V1IOi5pgB
ExTbXDpb602SbD6NRotjRpzNZFBkzPr3BYKeDx2Iog9SbSniqdFCzU12vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMag4q1w3Mo2MQSTCVfiKHTSrjAfMB8GA1UdIwQY
MBaAFP49I6Oe02VvmmBktgnQKi9uSjgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84ZTYyZTktNDA2ZC00YWIwLThmZGIt
ZDlhODA4ZWMxYWIxLzEvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy84ZTYyZTktNDA2ZC00YWIwLThmZGItZDlhODA4ZWMxYWIx
LzEvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyCyFfgI
Oig2yztvyihJtEyrEpPJrRuNZABm98wFcOKp176oHs1nkrINUKbluOdnAm8ROD2G
iXtHFw7FxvfU3v8baqAmjlC70V2dSFol32twOmOOzvTUNPhBzWPqBPgZF2xrqTa+
paXOonueWiwQXl+4eNQPI76BqFJH1chhEgn7g0tCCVn2YrT9T528ay+KRWc9A/ki
crGG2CM2IqlyuiVUVxnBav2gROudOLFam7Bzn+odeft91MdK6JpZ8KUtreEYqB06
O1NK9Ixu2sEdi8IlErDUsyj6ZB2ouZLMt+T0FvT2bukLHqRk3bSDlK5Ad5Ya2Uk8
cJRT+Xn1RVDIRA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:02:46 2026 by rpki-client