Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
File:                     J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft (raw, json)
Hash identifier:          Rbk2WqPtjlC66KLaY4dYx+sW8wgde0UuqF2ckx8Xh+8=
Subject key identifier:   A6:07:51:42:42:76:7D:63:56:05:D2:BD:C3:68:4A:26:4E:C3:78:01
Authority key identifier: 27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B
Certificate issuer:       /CN=2783790350870fdb5b2674bc61c8d8fd62d7719b
Certificate serial:       019DA3AED43796010EDABDDF629C52AC6491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
Manifest number:          0923
Signing time:             Sun 19 Apr 2026 03:00:36 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:36 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:36 +0000
Files and hashes:         1: J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl (hash: KEq0xnj+MaaYotUTTMRnSFjBEs1hvu82X00ZJnPqPTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:ae:d4:37:96:01:0e:da:bd:df:62:9c:52:ac:64:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2783790350870fdb5b2674bc61c8d8fd62d7719b
        Validity
            Not Before: Apr 19 03:00:36 2026 GMT
            Not After : Apr 20 03:00:36 2026 GMT
        Subject: CN=a607514242767d635605d2bdc3684a264ec37801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6e:41:5d:d8:53:9e:69:03:6b:26:3f:c8:81:
                    37:9c:c3:69:31:aa:24:46:fe:de:0b:62:3b:dd:86:
                    d4:cc:6f:29:21:aa:cb:1b:7e:7f:e9:e8:3c:cb:8c:
                    12:ab:c9:8e:44:e3:8b:e7:03:d3:8d:23:ce:a5:8e:
                    77:02:7f:9d:67:59:0c:92:d5:be:79:09:eb:d3:a7:
                    f1:62:a2:19:33:16:33:89:7b:15:a2:e1:b1:8b:f2:
                    22:15:2c:31:e2:cb:e9:b8:96:18:a0:b3:53:96:96:
                    57:64:2e:1e:7a:1d:08:54:25:fc:5d:df:dc:67:5b:
                    7a:7a:93:af:ba:ca:c4:fd:43:dc:36:b5:e7:a8:3d:
                    ae:6b:64:47:3a:9a:98:8b:5b:a0:d7:9b:1c:81:1d:
                    a9:fd:74:9d:52:0c:65:af:f4:72:0f:b7:24:61:7a:
                    86:97:3a:b5:c8:30:54:52:77:23:17:ac:8f:75:11:
                    a5:b1:b6:52:65:7f:4b:8e:3f:3f:2e:b5:d3:d6:be:
                    cd:e0:a1:31:4e:33:16:48:7c:00:74:ab:ce:ab:d6:
                    94:d2:fb:9f:a9:93:13:b6:a4:f8:1a:0e:d9:03:84:
                    79:af:81:8e:00:4c:e0:80:ec:1c:f8:e0:10:3e:eb:
                    27:9c:12:b4:fb:38:ce:07:98:50:67:cc:0a:58:09:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:07:51:42:42:76:7D:63:56:05:D2:BD:C3:68:4A:26:4E:C3:78:01
            X509v3 Authority Key Identifier:
                keyid:27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c7:88:16:5e:ac:ef:ed:89:d6:82:87:8d:b5:ba:8e:9e:76:
         75:2b:2f:07:3f:a8:07:60:76:07:f6:84:d5:bd:1a:08:e6:09:
         b1:93:26:a0:76:32:21:2f:78:10:58:62:ff:e6:96:41:c3:09:
         52:c3:3a:e2:ce:b5:18:81:c2:a3:55:b6:d5:b1:60:95:81:5e:
         05:67:ef:f6:7d:f8:f9:11:a2:ea:39:cc:13:32:80:86:bc:13:
         c4:52:47:01:23:03:64:00:57:d3:b0:77:14:3c:94:72:42:ad:
         70:8a:00:7f:4c:f2:29:94:05:28:84:2a:14:ef:d7:3f:ba:be:
         03:fe:6b:84:5d:e9:8c:17:6c:31:b0:f8:0e:08:e8:7d:f3:d8:
         cf:d2:ce:2d:ba:7a:cf:19:ea:f3:c3:63:d7:ad:ba:9c:36:ee:
         2b:2f:6f:4e:85:39:66:66:3b:ff:be:bc:23:2e:f4:f2:27:2b:
         0c:a5:8b:ec:47:2d:f7:49:10:3c:f6:2c:7a:62:a8:ec:b0:1e:
         d3:5b:ce:9d:00:5f:0b:e4:a6:63:a6:9f:cb:17:53:b7:27:98:
         3a:af:da:6e:71:c9:87:ee:be:ff:07:f4:84:29:c1:c4:64:ec:
         d0:31:b4:33:46:b8:a3:b8:08:34:50:9a:6b:18:06:e6:50:5a:
         50:5e:e5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:02:09 2026 by rpki-client