Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
File:                     JY9ajila0de0ih4RlYeQBStXolM.mft (raw, json)
Hash identifier:          CqV0Ej9OaR7vaykJDSW5OyWjqDkBh6NF7E8aUksn2kU=
Subject key identifier:   9A:AB:C2:71:CB:9E:68:F8:0C:94:9D:9A:9B:9A:B7:C0:D7:5D:29:C7
Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Certificate issuer:       /CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Certificate serial:       019D9E1B2D768408ADBAD180DAC207D41E0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
Manifest number:          181B
Signing time:             Sat 18 Apr 2026 01:01:14 +0000
Manifest this update:     Sat 18 Apr 2026 01:01:14 +0000
Manifest next update:     Sun 19 Apr 2026 01:01:14 +0000
Files and hashes:         1: JY9ajila0de0ih4RlYeQBStXolM.crl (hash: CyD80/uC0UUDyruUJGgLqSK9Lndh29rlB0UBkZKt1nM=)
                          2: XsoOkS5cVinDKGylaIEe4V2iJiI.roa (hash: yUEIW+aXADdubfFegT02HQm/MXVHfJjhRJSJMZb2fr0=)
                          3: d9SsK9JFe4erW3mFTzDPmAS0ODY.roa (hash: eDnr+btVqcRjIrpyGoGoaGlmtxJe33quRXxSlU0qhfA=)
                          4: lcmCUf_CgzeIR8L7taeEF8YZZn4.roa (hash: WXtKI31hDy0GKZrnRRKtBFDImlVMPaG1/eg9VugOcII=)
                          5: lhg5zVYrNMLRf5rtCyfanPHKWCo.roa (hash: tJ2WDHFTAECq/EoCtDCOE9Vj8E1Ebzh5Ex98VPbUM4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:1b:2d:76:84:08:ad:ba:d1:80:da:c2:07:d4:1e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
        Validity
            Not Before: Apr 18 01:01:14 2026 GMT
            Not After : Apr 19 01:01:14 2026 GMT
        Subject: CN=9aabc271cb9e68f80c949d9a9b9ab7c0d75d29c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:27:f4:e8:77:6f:cb:de:f6:6f:96:8b:35:
                    d5:ca:cf:b1:bb:bb:dc:eb:be:ca:35:7d:96:16:dc:
                    5d:6e:d4:56:42:a3:6e:5c:5e:ca:48:8a:e3:02:db:
                    2c:ae:95:72:af:3b:0e:cf:31:84:0a:ac:d3:e9:01:
                    d3:c6:d4:84:f2:3d:c6:29:c6:f4:3b:d2:49:78:fa:
                    40:c3:4b:6e:1a:3c:bb:24:49:99:23:25:86:1d:5d:
                    c4:67:5d:93:26:18:ab:15:4d:fd:fd:f9:15:67:02:
                    05:d8:97:d4:d9:c6:9e:05:29:58:26:64:7c:70:98:
                    e3:ce:c8:09:11:af:9b:19:66:41:1b:da:1a:47:b8:
                    87:9c:18:6b:8d:09:7e:d9:3b:c5:6c:0b:ee:bd:4f:
                    89:4e:3c:c8:28:e2:13:38:b7:42:48:c9:1b:fd:7a:
                    a3:64:cb:bd:bc:c0:66:4c:ba:d1:49:dc:01:e0:82:
                    25:20:8a:20:5d:79:fd:b2:d5:c2:ad:ca:42:35:a8:
                    62:68:87:64:1f:9c:31:4a:c6:7a:d7:67:c1:cb:86:
                    a1:e4:9f:a7:b1:d9:ca:24:25:b3:9d:80:2a:f7:d6:
                    5f:32:e1:0f:84:30:f1:71:a8:0c:5f:33:a8:42:58:
                    59:ac:f7:60:e1:b8:30:ca:fa:4f:8e:d0:5d:94:0b:
                    e5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AB:C2:71:CB:9E:68:F8:0C:94:9D:9A:9B:9A:B7:C0:D7:5D:29:C7
            X509v3 Authority Key Identifier:
                keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:64:33:b9:ff:01:5f:4d:23:05:12:9c:69:45:cb:bb:f8:5a:
         09:e6:ae:70:64:6b:e7:2b:50:c1:e8:a2:e5:a4:76:15:f9:49:
         f9:cc:90:44:47:56:70:f6:fb:68:e6:13:1e:dc:9e:e9:d3:17:
         27:8d:e2:a2:b2:00:cb:36:06:0d:aa:5b:cf:f1:93:2f:e0:fe:
         11:41:65:1c:e4:62:b4:e9:6b:ab:92:1b:5a:9e:4f:e2:27:ba:
         82:b9:6b:d6:fe:7f:b6:88:91:b3:84:f4:a7:8b:41:ec:2f:6a:
         57:0e:f6:2c:a1:e7:b0:08:77:7b:b0:2a:d4:91:0f:5c:84:5e:
         30:f8:63:ad:cd:fe:06:34:22:c3:a6:d8:dd:8c:21:65:7c:01:
         4b:70:4a:28:3e:33:40:1d:b0:f5:82:ed:ef:8b:40:cc:e9:56:
         0b:20:72:1b:52:8a:da:a1:2f:47:ac:b0:47:2e:13:b0:43:38:
         5b:ad:1a:a5:c4:e8:b4:23:6f:55:e5:54:44:ee:c0:77:89:28:
         61:12:8d:98:52:d2:05:7b:9e:95:29:b2:1e:68:4e:8a:b9:4d:
         b5:21:42:44:4a:89:64:bc:98:bf:e2:b6:9f:87:60:ab:db:08:
         15:76:29:46:bb:b7:8f:ab:0f:a1:96:9c:f0:b5:4e:36:03:54:
         f4:5c:5e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:07:52 2026 by rpki-client