Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File:                     J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier:          qJ+r0knbyzaONAHQDNcfMJI+kF22iocLldylxxDdqfM=
Subject key identifier:   CE:88:D8:CD:73:97:DB:91:8E:08:57:A7:16:5F:49:47:DB:0B:1D:92
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer:       /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial:       019E2C28B456B28C69982BAC059D7B85FF7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number:          1586
Signing time:             Fri 15 May 2026 15:02:05 +0000
Manifest this update:     Fri 15 May 2026 15:02:05 +0000
Manifest next update:     Sat 16 May 2026 15:02:05 +0000
Files and hashes:         1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: I/QSyuElD/OqKhxhcpOHi3MNcjeR3w89VHIUzYQ1DQ0=)
                          2: h53oA3SujEDr4ELckr6UN9W2NOk.roa (hash: EVBN35qoptKAigPRFwoWW6G0+97b+KvRqgyf+bRb3+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2c:28:b4:56:b2:8c:69:98:2b:ac:05:9d:7b:85:ff:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
        Validity
            Not Before: May 15 15:02:05 2026 GMT
            Not After : May 16 15:02:05 2026 GMT
        Subject: CN=ce88d8cd7397db918e0857a7165f4947db0b1d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:41:23:04:21:f4:41:40:5a:ae:4f:d2:35:
                    de:cd:03:73:72:c7:42:19:97:cd:43:d9:cc:55:b4:
                    1a:7f:98:58:af:14:6a:47:ed:fe:0e:b3:38:0c:5d:
                    71:a7:0a:d5:93:81:fc:26:2b:2f:9c:e0:c7:54:09:
                    d1:8c:d7:26:6d:1a:73:b3:d7:be:c7:f5:be:6a:f9:
                    57:bb:75:9b:cf:78:cd:81:c1:17:9c:5b:5a:6c:34:
                    0b:4f:c3:ae:62:b9:23:59:7f:60:6a:ae:2f:eb:bd:
                    7f:50:72:d8:ff:b7:78:cd:ea:86:6e:f5:7b:43:a8:
                    82:b5:fe:77:60:2a:1d:cf:ff:ff:28:ab:0c:4a:25:
                    49:d9:ed:d1:a4:32:38:f9:77:4b:b9:1d:f4:f1:6e:
                    10:8f:03:11:9d:65:e2:de:07:ed:79:5f:d5:0f:b1:
                    79:66:07:e3:f1:4e:4b:d4:fd:6d:72:13:e4:06:dc:
                    dc:91:fe:bf:42:2c:ce:6a:19:51:05:07:8d:58:82:
                    c1:3d:88:ed:03:27:af:71:d8:99:a3:fa:dc:03:9d:
                    92:b1:c3:9a:93:3d:59:50:39:2e:91:e5:8e:e6:0a:
                    bc:89:f5:81:a1:f1:dd:e0:d7:07:b6:22:a1:94:ff:
                    57:05:0d:85:05:3b:81:e9:86:67:9e:34:58:43:b2:
                    10:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:88:D8:CD:73:97:DB:91:8E:08:57:A7:16:5F:49:47:DB:0B:1D:92
            X509v3 Authority Key Identifier:
                keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ed:aa:9c:ea:9e:4c:57:df:e8:90:2a:81:ca:ab:1a:78:e6:
         11:0c:87:7a:95:8c:af:83:c3:8c:85:ad:3f:ca:cd:dd:ed:30:
         eb:11:a9:51:61:6e:32:fa:ef:91:d7:39:6e:14:11:24:9d:f4:
         7f:18:7c:5d:9a:d8:fd:dd:30:d4:4b:11:36:77:e7:3b:47:de:
         35:bd:62:63:32:23:12:51:7b:15:bf:6d:79:d3:c3:e2:c0:32:
         31:1b:77:a3:1b:45:cf:50:1c:48:0b:15:bb:93:e5:84:02:13:
         23:0b:0a:2e:4e:ae:39:a7:1d:86:57:14:3d:1b:0c:3c:ee:5e:
         a0:d2:a9:a7:1e:25:43:cc:a0:86:3f:44:88:02:97:c5:9d:57:
         4e:0e:b8:00:c6:ed:18:f4:0a:dd:e3:ca:f6:2c:59:9a:48:0a:
         23:1b:11:63:e6:c2:b7:46:0c:80:43:87:26:01:bb:39:8e:69:
         1a:61:ec:8e:4c:cb:22:a5:ca:b0:93:75:eb:ce:13:c7:f3:04:
         2b:5f:32:28:61:d3:c1:02:42:92:ff:6c:91:db:d7:da:5f:a8:
         9d:2c:9b:58:30:d3:81:3b:ba:ab:b1:83:3f:b3:50:fc:30:9e:
         83:f7:01:09:3d:d7:43:f0:61:ed:8a:e5:eb:af:3a:85:a2:d5:
         13:a5:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:08:32 2026 by rpki-client