Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
File:                     _Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft (raw, json)
Hash identifier:          8N7PR7pXWqFlFuKih9MamWfZtY8UBkHjiGXN05tzxfU=
Subject key identifier:   90:67:8A:06:A6:D5:4F:29:A1:17:0E:FE:4C:65:E3:EB:D8:7E:12:02
Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
Certificate issuer:       /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Certificate serial:       019D99622945E74F5096A419B3226A7A2693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
Manifest number:          1855
Signing time:             Fri 17 Apr 2026 03:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:40 +0000
Files and hashes:         1: 9h49lJWwF1PdYlUFcV2QXMYgM9o.roa (hash: GCIawhjOg95GqWKJazHKfaZHhHNmcBK7aJ3Mw2UEcAc=)
                          2: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl (hash: A/Vnj6AcgDNJ/D+IIXX0g6spKbMVGuYduW2MtXSpW3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:29:45:e7:4f:50:96:a4:19:b3:22:6a:7a:26:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
        Validity
            Not Before: Apr 17 03:00:40 2026 GMT
            Not After : Apr 18 03:00:40 2026 GMT
        Subject: CN=90678a06a6d54f29a1170efe4c65e3ebd87e1202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:48:55:8d:c4:53:17:c8:1f:86:80:81:96:
                    66:55:e6:b9:83:fd:5e:37:0b:06:b5:66:34:1b:ae:
                    3a:0f:eb:e9:68:13:2d:72:5a:b5:b0:b8:e7:b5:1c:
                    cf:14:48:ca:41:b0:bc:f6:7d:1d:e6:f0:77:a5:98:
                    43:97:5e:6f:f1:19:f8:b8:1c:c1:87:01:cb:47:0d:
                    48:be:bf:04:de:3a:e1:c1:b6:07:f3:18:fc:c9:69:
                    f9:dc:1a:37:fa:41:ec:f6:6c:d7:52:c2:d7:2f:87:
                    0a:b5:8a:f6:04:9e:a9:3d:c3:54:7f:48:64:a5:e1:
                    96:79:d6:12:de:28:e6:c2:6f:36:a8:3d:e6:81:9a:
                    a5:98:2e:0e:ee:82:38:a1:6c:63:dc:ed:4d:bd:e6:
                    e2:ce:30:e4:8b:11:d7:37:cc:29:33:38:28:97:0a:
                    df:89:14:5c:7a:76:3b:52:bc:37:07:76:72:31:6e:
                    db:25:a3:b2:52:f6:00:5b:38:e9:31:8e:09:7e:d0:
                    70:84:7a:3e:06:e1:fb:1e:10:ad:5d:62:ca:b7:44:
                    79:6c:bb:97:10:33:3f:d0:35:8a:92:c3:62:e6:11:
                    78:43:3f:c3:a4:b5:e9:fd:c5:17:46:48:a2:ae:ba:
                    64:30:1e:5f:41:b3:3d:0a:1d:c6:19:05:5d:7d:3e:
                    7a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:67:8A:06:A6:D5:4F:29:A1:17:0E:FE:4C:65:E3:EB:D8:7E:12:02
            X509v3 Authority Key Identifier:
                keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:a4:f4:9c:16:d2:fd:fd:4f:f3:67:ae:c0:bb:f7:e8:17:0e:
         f5:97:a3:44:c4:6b:0c:3c:80:5f:23:06:59:90:9d:5f:dd:1a:
         7d:e8:ab:e2:53:2a:95:93:05:fc:27:e6:8b:db:be:f1:02:92:
         64:dd:f3:3f:25:0c:23:fa:96:1a:2b:e3:a0:39:01:c8:20:84:
         9a:f9:17:a2:eb:d9:34:a3:6f:e5:3b:04:5b:72:78:10:0b:79:
         c8:09:a7:76:33:aa:1e:62:d3:98:21:ff:10:45:1c:8e:98:3b:
         df:ad:ea:37:8c:07:bd:57:da:ff:5d:ed:72:b0:08:a0:7d:07:
         1e:cb:4e:94:98:ea:4f:ae:85:c5:78:50:eb:90:69:27:c3:61:
         43:03:f9:33:27:29:e0:fa:d3:87:88:5b:44:bb:b9:fb:af:99:
         38:5f:2a:ff:c7:6b:4c:83:ca:73:3b:67:cf:34:6c:ff:5f:eb:
         db:42:ff:3c:1e:9c:a5:b8:43:27:8e:de:d9:18:d2:9c:77:0f:
         a5:3f:0b:fb:75:cd:bd:a9:d7:1d:00:36:c1:b6:5d:92:c6:55:
         ee:d1:06:a4:81:25:da:c8:47:3b:24:10:90:b3:98:2b:9f:82:
         a4:13:eb:1f:53:b5:32:7f:29:b1:7d:ef:d8:8d:a0:d7:cb:d0:
         96:1c:f1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:20 2026 by rpki-client