Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
File:                     jgo5Gq64_HyDP4JX16nnSlWzOv4.mft (raw, json)
Hash identifier:          3JsVR7HA7rQIr0xXdTexecnIcHeDCNl8I6T+UGzuK/c=
Subject key identifier:   19:23:69:78:78:97:89:DE:86:A4:76:7A:33:F7:B7:AF:AF:31:50:26
Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
Certificate issuer:       /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Certificate serial:       019E30A8F61E2630375099820B6210E0E073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
Manifest number:          1855
Signing time:             Sat 16 May 2026 12:00:39 +0000
Manifest this update:     Sat 16 May 2026 12:00:39 +0000
Manifest next update:     Sun 17 May 2026 12:00:39 +0000
Files and hashes:         1: jgo5Gq64_HyDP4JX16nnSlWzOv4.crl (hash: YR8nF0RaUkv/rfgPVnqW9Xq7IVQ8SEokMTToLX5ta/c=)
                          2: wBtREldvDjl4K9_Eyc6xek7-RYI.roa (hash: z4RdhE9lhhi0tt8aHo4p1WawqFAV7GTzx2aHrOIBbVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a8:f6:1e:26:30:37:50:99:82:0b:62:10:e0:e0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
        Validity
            Not Before: May 16 12:00:39 2026 GMT
            Not After : May 17 12:00:39 2026 GMT
        Subject: CN=19236978789789de86a4767a33f7b7afaf315026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:05:94:ca:a8:95:fd:e0:dc:46:f7:db:08:03:
                    9b:17:b9:68:a1:75:7b:57:15:ea:2a:c3:35:eb:ff:
                    8d:e6:db:e6:b8:7e:59:b9:ae:99:a8:dc:db:3e:47:
                    d1:03:a4:bd:a5:39:fb:de:7a:e9:94:3d:08:aa:46:
                    b7:3b:3f:23:42:62:a2:fb:49:4b:39:47:b1:fd:e9:
                    55:55:56:8d:82:86:f1:eb:5a:31:1b:d6:3d:96:fd:
                    16:fa:06:23:49:cf:9a:48:18:98:63:0c:a4:0f:43:
                    5a:01:1c:62:4a:e0:71:3f:91:04:b7:2d:7a:03:c3:
                    23:2a:1d:62:99:d0:e5:a7:78:58:0e:75:d2:72:be:
                    69:07:a0:19:49:d9:a7:78:12:53:1b:58:37:e2:7b:
                    4e:21:a4:4c:c9:7e:b9:4d:eb:eb:9f:c6:7f:12:86:
                    c1:51:14:c8:aa:59:49:b7:78:9f:b3:a6:34:33:39:
                    2a:c3:50:01:82:11:00:ef:df:99:ea:9b:a1:8d:7c:
                    37:d3:9d:ba:ef:bb:7d:e9:51:fc:89:03:62:0d:f2:
                    71:78:59:98:87:39:43:72:df:29:15:30:d7:ff:d1:
                    42:4f:45:b4:44:b9:32:6a:c5:82:5d:00:53:2e:ad:
                    65:36:3b:11:b6:47:1d:65:17:69:52:7f:b0:db:d5:
                    7e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:23:69:78:78:97:89:DE:86:A4:76:7A:33:F7:B7:AF:AF:31:50:26
            X509v3 Authority Key Identifier:
                keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:97:ff:fe:bc:c7:23:bb:69:64:3d:22:eb:68:f4:06:54:6b:
         88:51:49:fa:02:ee:89:f2:b9:84:d6:90:81:bd:e5:23:0d:3b:
         b4:2c:72:c7:00:db:6e:16:09:ab:07:07:8c:9a:84:6e:24:21:
         24:09:f6:3a:d2:9f:4b:f4:b6:59:a8:dc:29:86:8a:d7:62:b9:
         71:75:93:08:e9:a2:02:eb:eb:10:ad:3e:fc:4e:72:f9:e7:91:
         66:8b:9b:03:45:48:3c:3a:b5:a9:d6:5c:ad:2b:47:90:20:d8:
         01:ed:2b:40:0a:88:f7:4e:fb:e5:da:40:78:3a:f2:d3:08:c3:
         c2:18:05:54:be:76:12:d0:64:8a:6a:dd:c0:10:9c:7d:50:c4:
         eb:04:1e:5a:34:1b:26:37:e7:68:b4:74:d6:86:c7:01:24:24:
         3d:23:db:d9:92:84:6f:5b:05:4e:05:0b:b3:47:c4:e6:e8:6a:
         24:cc:bd:44:dc:e4:04:88:40:aa:ee:ba:e3:a6:fc:f7:ab:27:
         01:a4:30:ec:c4:72:7a:c7:c1:7f:f6:8a:e5:f8:45:7c:1e:78:
         69:42:8e:1f:c6:cb:7b:7b:03:8d:61:1b:39:0e:1d:1e:ee:dd:
         2f:c4:2d:cf:49:3d:00:86:b9:e3:db:38:eb:0d:be:53:71:a9:
         6c:63:ca:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:12:48 2026 by rpki-client