Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
File:                     J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft (raw, json)
Hash identifier:          KcjziDyLpyXHw0gDSxg6CaJgilxzweexV4Uh613l0M4=
Subject key identifier:   08:9E:FF:26:54:D9:CB:5E:96:F5:F1:EA:88:04:1A:95:EB:7E:AB:DB
Authority key identifier: 27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75
Certificate issuer:       /CN=27618505d3b4c000217590f7b7b59bf61ff2f375
Certificate serial:       019D98BD1E372B8A9E6DBB543EC8867AF1A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 00:00:23 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:23 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:23 +0000
Files and hashes:         1: I1qBnna-xusJzzZmxCgqlsyjSyg.roa (hash: 4PSkpuSjGWN0BhwNTLO3ZVEoWd47i6kcp7EoG/5Ntw0=)
                          2: J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl (hash: wIn1C6F9r1WblXh0w1UneR6VoHtInhtFS1J3tIhwTMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:1e:37:2b:8a:9e:6d:bb:54:3e:c8:86:7a:f1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27618505d3b4c000217590f7b7b59bf61ff2f375
        Validity
            Not Before: Apr 17 00:00:23 2026 GMT
            Not After : Apr 18 00:00:23 2026 GMT
        Subject: CN=089eff2654d9cb5e96f5f1ea88041a95eb7eabdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:e2:21:92:62:87:54:28:18:d0:d7:12:54:
                    e9:28:ee:d7:3f:57:5c:39:ed:22:e1:53:da:dd:bc:
                    1a:0a:0f:cb:6b:58:b3:f7:60:84:0f:6e:e6:e7:0f:
                    96:d6:00:02:fa:ab:62:16:46:4d:fc:70:a8:0d:e4:
                    13:a3:7a:9e:e2:60:ba:e0:21:f1:9b:52:b3:1e:4e:
                    f5:5d:5c:08:db:4c:aa:99:c0:dc:5d:17:a1:09:de:
                    f3:36:99:d0:7f:22:6e:4e:d3:be:c5:2f:0d:3d:78:
                    52:4c:7b:67:b0:be:65:13:0e:3a:2b:6d:ff:be:f9:
                    41:e3:48:6b:ee:ca:ed:e6:31:cf:b3:a2:ca:45:5d:
                    4a:44:33:cb:88:0f:13:bc:23:24:62:a5:cb:86:38:
                    79:7e:e7:03:6a:62:8b:85:0c:72:af:87:2d:cf:71:
                    6a:d1:64:09:c1:1f:05:2b:d8:17:f5:65:a6:c4:da:
                    74:0e:61:8f:f3:5a:d6:a7:c2:a9:18:47:18:bf:9e:
                    b1:b2:c9:ee:c2:90:e2:7e:4b:b1:49:a1:76:ee:77:
                    01:16:84:5f:f5:a4:0e:b5:9a:b4:68:9f:3d:27:49:
                    d5:01:2a:ec:14:ee:b0:17:f7:34:ca:dc:5f:f7:b2:
                    69:28:f9:e1:a9:dc:7d:cd:d4:77:82:83:01:4c:f6:
                    95:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9E:FF:26:54:D9:CB:5E:96:F5:F1:EA:88:04:1A:95:EB:7E:AB:DB
            X509v3 Authority Key Identifier:
                keyid:27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:1c:60:13:8b:53:c8:f2:23:7c:4b:25:37:2b:a2:35:20:11:
         a6:79:d8:39:2e:79:ed:2b:8e:70:69:79:a3:72:3b:e3:60:0a:
         9f:0a:d9:b6:38:de:10:7c:e6:96:01:ca:02:dc:16:ec:53:2a:
         5d:2d:dc:fc:99:4a:63:47:1b:cd:90:14:33:ca:87:46:22:4c:
         2d:d1:61:7d:cc:a4:7b:80:2f:7e:40:83:bb:a6:a4:6e:b5:59:
         64:83:43:42:7a:b9:ec:38:10:94:f4:84:cf:ef:00:75:64:bd:
         96:5b:2b:35:c9:d3:78:38:6d:c1:85:a2:93:69:b8:8c:4a:63:
         d9:cb:47:f0:39:a0:58:95:9b:58:17:be:fb:d2:e0:03:fc:48:
         01:7b:05:da:53:86:47:59:7f:11:cd:84:bb:04:9e:c1:f3:02:
         80:23:df:b4:a2:22:65:3b:a4:f0:3b:09:db:e0:91:7a:dc:c0:
         2e:ab:8b:b9:b1:1e:ff:cc:07:d0:47:f2:0d:c4:b4:a4:26:f0:
         43:d4:a5:a3:a0:55:b5:41:53:0a:1b:a4:77:0e:20:0f:43:49:
         67:82:07:55:4f:72:21:a8:14:f8:43:c3:7b:12:fe:b7:51:b6:
         5a:e8:10:db:6c:4b:c6:ff:82:7b:bb:d8:25:d0:02:8c:80:e2:
         d7:0d:f9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:23 2026 by rpki-client