Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
File:                     jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json)
Hash identifier:          L0rPeXH7J8biXITO/WY87GNiCp5KUTQE1m8jltWcpO4=
Subject key identifier:   C3:E6:DA:7A:C2:07:1B:0F:78:7D:E7:F6:0A:D3:12:7F:4F:68:32:A7
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Certificate issuer:       /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial:       019E3117433075F518D18F5FA204CE1748F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
Manifest number:          0430
Signing time:             Sat 16 May 2026 14:01:08 +0000
Manifest this update:     Sat 16 May 2026 14:01:08 +0000
Manifest next update:     Sun 17 May 2026 14:01:08 +0000
Files and hashes:         1: E0AgYtmqvfWsCtuIwOtUo5wvcgU.roa (hash: w2ZEYMbSnl1r9XT320uy9sGbUhpOA37NS5yHBqC4/Fs=)
                          2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: /4zq2MaXwH+555WgKl2nsw5jJvCTMcUmZZ2tPRc7Jf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:43:30:75:f5:18:d1:8f:5f:a2:04:ce:17:48:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
        Validity
            Not Before: May 16 14:01:08 2026 GMT
            Not After : May 17 14:01:08 2026 GMT
        Subject: CN=c3e6da7ac2071b0f787de7f60ad3127f4f6832a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:1c:d6:89:8f:86:1d:81:c5:95:c1:4a:43:
                    5b:b5:f0:ae:83:bd:7d:5f:7d:9b:8e:8f:b8:a6:72:
                    65:21:4f:e3:8e:55:eb:9d:6c:d0:e4:d1:d7:ed:70:
                    6e:d0:1e:2e:1a:c3:bc:9d:30:d9:b8:d7:1b:25:1e:
                    c6:48:d2:b4:53:8c:22:ee:f3:95:2e:80:b4:eb:17:
                    b4:29:18:91:19:17:bc:c0:ee:29:75:40:1a:be:d0:
                    1e:13:b8:95:40:9c:cd:15:b2:fa:fc:f9:61:ad:9f:
                    60:44:4a:bf:10:67:00:72:bb:1e:03:6f:84:7a:36:
                    c8:20:2e:21:b7:b1:1f:27:db:8e:17:cf:96:69:83:
                    3a:02:8d:44:c8:46:6a:59:c4:d6:b9:95:28:3d:58:
                    b6:b2:41:24:ad:88:61:03:83:22:ea:47:32:09:0d:
                    5a:6e:43:b5:24:1b:5e:7c:95:7a:df:ca:44:d4:11:
                    4d:b6:0d:3c:fd:8e:49:3f:a1:15:b5:d5:24:85:20:
                    f4:2c:28:4d:19:22:44:07:a6:77:07:15:8c:33:3d:
                    76:c5:db:65:44:48:db:d6:20:1e:ec:7b:54:45:a6:
                    17:d0:c1:20:b8:44:df:bb:6a:17:96:86:2c:ef:fa:
                    99:54:eb:d3:af:e0:9b:e1:24:d0:89:b4:b6:e4:19:
                    e3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E6:DA:7A:C2:07:1B:0F:78:7D:E7:F6:0A:D3:12:7F:4F:68:32:A7
            X509v3 Authority Key Identifier:
                keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a9:41:cb:dc:2f:74:e4:42:b5:47:47:40:fb:f8:66:22:c0:
         95:4e:fd:fe:83:d5:88:cb:64:dd:c4:6b:97:bf:5b:01:e0:a4:
         cc:aa:c9:12:01:3b:5f:23:7b:35:bb:c3:e8:61:1f:d4:84:33:
         4e:ef:00:3f:64:1c:af:71:6b:cd:56:4b:b2:a1:18:48:f0:83:
         68:c1:d4:46:97:d6:db:d5:dc:7e:a0:5f:fa:b0:26:f1:89:90:
         ba:77:13:fb:32:f4:7e:ec:3a:7f:be:72:22:58:e7:6f:67:ce:
         c2:81:51:e0:79:23:fd:21:61:e0:25:f1:3e:65:10:8c:30:47:
         90:5b:bd:f9:3e:c9:b8:cb:f6:c7:39:6c:b0:12:c7:bb:2a:a0:
         87:ee:8c:8b:b1:1a:0d:01:b7:a6:58:35:73:4e:c8:fd:46:b3:
         82:e7:50:69:19:4b:21:c0:a3:55:c1:30:bb:9b:d4:f7:d7:75:
         bc:94:bc:31:77:e8:dd:08:ba:60:03:dd:b4:2e:79:9a:07:ba:
         13:a8:08:81:0c:96:f7:73:2c:ce:f1:cd:5e:16:22:15:93:9d:
         bc:81:7a:fe:bf:86:35:6f:7f:80:a7:01:4a:2f:0d:4a:5d:12:
         21:fa:64:b7:b7:12:5c:25:eb:7d:48:62:8f:6d:45:af:77:ba:
         0d:43:d1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:29:21 2026 by rpki-client