Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
File:                     Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft (raw, json)
Hash identifier:          YDzfV/52dwArUGeTOWUhnml8UE1FoZ1MqSNNw8MtXhI=
Subject key identifier:   F5:58:7E:4D:E6:EC:54:A4:E3:09:49:01:6C:07:8B:0B:B5:0E:9B:98
Authority key identifier: 26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E
Certificate issuer:       /CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
Certificate serial:       019DC0028AB20504749DC1393FDBFA2F8736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
Manifest number:          1866
Signing time:             Fri 24 Apr 2026 15:01:25 +0000
Manifest this update:     Fri 24 Apr 2026 15:01:25 +0000
Manifest next update:     Sat 25 Apr 2026 15:01:25 +0000
Files and hashes:         1: Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl (hash: dqJH/OZcxUfxmj+SWAKBgkWm+TUs52TQ2pILUrnNBJE=)
                          2: apgFIZZ2kNrAvx4UT-WLtpzNCTA.roa (hash: Kr/qYxPomhktonhz5Ep98c+wnNlvv7s4Ib91hHUnMsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Apr 2026 15:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c0:02:8a:b2:05:04:74:9d:c1:39:3f:db:fa:2f:87:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
        Validity
            Not Before: Apr 24 15:01:25 2026 GMT
            Not After : Apr 25 15:01:25 2026 GMT
        Subject: CN=f5587e4de6ec54a4e30949016c078b0bb50e9b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b6:4b:21:15:88:ab:6d:79:db:3d:73:a7:35:
                    77:4f:10:0c:bf:8e:3a:18:7e:ce:34:3f:32:ec:0b:
                    2f:60:05:76:33:42:8e:dc:04:6f:24:0a:a6:5d:54:
                    e8:04:40:2a:0b:d8:da:ba:bd:63:19:22:da:02:ac:
                    46:88:43:82:cb:97:23:4b:be:17:66:99:10:0e:50:
                    86:ac:e7:9e:6d:1e:1d:e5:2a:09:12:48:e9:c5:e0:
                    74:b4:39:ea:02:f7:84:f5:81:f1:58:76:aa:eb:83:
                    11:a3:32:7e:58:eb:2d:f9:ec:38:4d:b4:53:8e:32:
                    0a:20:d7:c7:88:6c:d2:f9:04:40:3c:73:28:08:8b:
                    69:1b:8a:3b:b7:2e:b8:ea:b6:de:09:36:12:c1:65:
                    b6:53:02:fe:0f:ca:95:4d:cc:ed:8d:55:4f:cb:59:
                    cc:97:b4:89:da:8f:d8:e2:a5:87:48:fb:f5:b1:78:
                    f7:e6:e1:92:61:36:88:43:df:83:f8:73:e5:04:f6:
                    5a:a4:00:57:24:88:a6:44:25:24:db:cf:24:89:31:
                    2b:f4:2b:0e:1a:ff:71:bd:ad:92:d1:40:e0:d9:ff:
                    4a:f8:90:7d:6c:2d:17:48:95:68:76:35:27:1b:31:
                    eb:8d:42:76:af:0e:22:62:1e:13:c3:a0:64:b3:6c:
                    7a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:58:7E:4D:E6:EC:54:A4:E3:09:49:01:6C:07:8B:0B:B5:0E:9B:98
            X509v3 Authority Key Identifier:
                keyid:26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:dc:c8:93:c8:ff:4c:fb:fa:72:05:9e:33:09:88:e1:46:dc:
         04:22:6f:3b:f7:69:94:a4:ec:67:ce:44:8d:cc:e5:c1:20:c2:
         c5:7a:92:7e:c7:30:24:05:5d:56:e0:b2:c7:2a:a3:f7:6b:31:
         ae:a8:6b:db:c5:ce:72:b8:4d:b7:38:fc:2e:8f:9c:47:a0:62:
         63:a2:8e:60:2e:7c:0a:9f:1f:a1:92:d1:d1:81:47:08:c1:1f:
         ae:66:e6:83:32:52:7f:c0:a1:ce:c3:99:1f:f8:e9:2b:28:ff:
         29:2a:20:b8:ae:1d:b7:a5:ee:6b:72:da:0f:09:2c:d6:e3:97:
         13:48:ed:cf:93:aa:34:cc:be:c7:55:08:7e:f2:5d:c0:4c:f0:
         bb:53:c4:68:60:da:c8:d1:97:53:06:7a:82:70:b9:95:74:c0:
         9f:9c:bc:33:58:e9:03:7c:e7:02:a8:3f:28:4e:c4:fe:e8:9f:
         5e:de:7b:ee:d7:80:18:bf:36:48:12:ff:c4:37:13:7b:39:1f:
         17:d7:82:f0:1e:60:32:9d:ba:1a:11:3a:ef:47:26:dd:dc:ce:
         28:55:07:d9:e6:0b:79:49:13:74:f2:08:d6:4b:62:66:e4:07:
         9b:1e:f5:d6:d9:8e:f7:93:56:bd:ff:39:05:33:57:11:bd:ba:
         53:77:46:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 01:52:27 2026 by rpki-client