Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File:                     Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier:          Dq3PBq3d4nAkzrsE7DHTCj/k72ogpEouD7wHCnb8rig=
Subject key identifier:   EC:79:18:BA:70:47:0C:B4:BA:0B:76:9F:9B:CF:52:98:04:49:D3:C3
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer:       /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial:       019D99D06B510432CAA07893DA57655C4FF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number:          1814
Signing time:             Fri 17 Apr 2026 05:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:06 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:06 +0000
Files and hashes:         1: 8yYMhh0gMT6CiQOLVp2cTc5vVZ0.roa (hash: 7gaVBUF1/eBBpHyrZMX3iYaRP7VQvzONGdsKY6mhoPg=)
                          2: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: wSaQ41Y7L7BeMO/A99AaWf7oLxugE/IchGdq1egbhOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:6b:51:04:32:ca:a0:78:93:da:57:65:5c:4f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
        Validity
            Not Before: Apr 17 05:01:06 2026 GMT
            Not After : Apr 18 05:01:06 2026 GMT
        Subject: CN=ec7918ba70470cb4ba0b769f9bcf52980449d3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6d:28:7a:90:d7:8b:0b:35:b3:04:ca:1a:90:
                    1c:a6:1f:9c:10:8f:a6:5f:26:aa:32:5b:68:65:c6:
                    36:d4:6e:dd:b1:06:23:42:18:17:3b:41:58:83:89:
                    4c:44:d4:8c:26:f6:47:c3:2c:c9:ed:6b:20:ce:08:
                    44:b3:b3:ee:a5:e1:75:31:b8:60:39:aa:e9:05:73:
                    79:64:82:8e:08:3d:3c:1b:0e:ab:38:13:46:76:d3:
                    55:41:1f:19:8f:67:4e:09:29:10:19:8d:06:f8:ef:
                    aa:f4:2b:80:ed:73:53:f8:7a:36:37:a4:e8:01:11:
                    94:e9:4f:db:a2:99:33:fa:8a:24:a5:34:51:7f:db:
                    b0:38:61:17:e5:9c:7e:5f:05:5d:b7:b5:d7:5d:27:
                    b2:a9:84:ab:ac:1f:e8:e7:4f:b6:85:9d:4a:5c:94:
                    91:78:f7:a1:4b:bc:1d:d9:86:09:c0:c9:5a:a6:b7:
                    4e:45:9b:11:0f:de:74:d1:4a:39:59:5b:67:4f:3b:
                    6c:f6:55:c4:c9:91:d0:d2:d0:ff:c2:19:22:9c:f4:
                    91:8c:96:0e:2b:be:72:76:5c:a4:d2:b3:51:68:3c:
                    ce:74:bb:99:73:a5:be:85:11:9a:eb:4d:50:00:32:
                    68:4d:d7:2e:83:50:ed:47:6a:88:70:92:4d:5b:35:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:79:18:BA:70:47:0C:B4:BA:0B:76:9F:9B:CF:52:98:04:49:D3:C3
            X509v3 Authority Key Identifier:
                keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:39:75:7b:24:40:03:1f:33:8e:56:5e:6e:b4:5a:6b:64:36:
         e3:e7:00:7f:98:db:65:1a:8d:de:82:58:3e:b2:58:1f:09:84:
         c6:2f:95:7f:7f:96:b5:63:bb:fb:c8:e5:c5:f8:25:3a:8d:0f:
         20:5d:cf:64:6e:c4:75:f2:8a:ac:2f:8e:47:f4:2c:d8:bf:67:
         7f:93:61:aa:9f:0f:34:ca:ee:85:af:d7:6b:fe:75:ed:a5:51:
         0c:75:42:9c:8f:16:28:12:13:3b:1c:b9:f6:38:d0:6b:cc:b4:
         7d:14:16:c0:f9:45:ac:cc:f8:35:13:4a:18:0c:b8:c8:97:07:
         74:19:90:53:33:53:43:e6:c6:d7:12:70:9d:f2:34:4e:00:7f:
         d6:e6:84:e4:9d:5c:1e:38:e3:21:6b:1f:00:fb:97:ba:fb:8d:
         b0:8f:22:82:8b:fb:16:6b:40:d5:90:a9:f3:5c:57:67:ab:e7:
         79:ee:8c:5c:43:9c:c2:1d:d2:72:48:88:0a:fa:c2:1c:7a:6e:
         82:79:49:50:f3:4c:0e:f2:ac:26:1f:d6:da:30:94:28:67:2b:
         c0:41:42:50:24:f3:09:24:6d:a0:cc:41:57:f5:8d:34:01:8a:
         2c:65:e0:c0:dd:a7:39:1d:bd:19:dd:ab:1c:a4:9f:66:31:dd:
         d1:fa:c2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:01 2026 by rpki-client