Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
File:                     JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft (raw, json)
Hash identifier:          1AUSE+26by8Uqe2QTVTxVAsyFx7kCczt5tAhiEtzj58=
Subject key identifier:   0E:AE:B8:09:0E:4E:07:4C:41:30:DA:1E:B1:8E:34:E8:18:7A:46:2B
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Certificate issuer:       /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial:       019DCFAC3FF1424B1E0C83CEEE0480BA7DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
Manifest number:          18E6
Signing time:             Mon 27 Apr 2026 16:01:05 +0000
Manifest this update:     Mon 27 Apr 2026 16:01:05 +0000
Manifest next update:     Tue 28 Apr 2026 16:01:05 +0000
Files and hashes:         1: 15RDhqpZZkgsTOPSNsBqQRpBKw0.roa (hash: y1ueTNG9EINspskOLQGA36UFgKcaoRxo8MZbGAJPhNA=)
                          2: JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl (hash: i75h64udjhcLt81P8szHEy3JyIZJ3FWlcbZSa7K43DI=)
                          3: eTMwYXEU18649L8hIZfY5-esqZ4.roa (hash: k/4i/a9Iw12pbxtRFEJ28+gA1SHnDyMvm6bPTt/tfsk=)
                          4: rBXpLoVrhiXy-JREV2NzjR2UY38.asa (hash: GsaRbQpDhXgltgozlo4qGNxDK4tm/0jB1zECh/53A7w=)
                          5: rbQZJjA5NxBcvnbRVnLr19kupbk.roa (hash: MpMdA4O/V52TqIWtfCvgUSyD9KDODyS4mOwO1kUKbg0=)
                          6: vxmucN7MwfwY4O7KULCcco-LMOo.roa (hash: LM+EAvwg71ia09ADFWQH++Rcqy8ftQKjbv/gLajVj5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:ac:3f:f1:42:4b:1e:0c:83:ce:ee:04:80:ba:7d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
        Validity
            Not Before: Apr 27 16:01:05 2026 GMT
            Not After : Apr 28 16:01:05 2026 GMT
        Subject: CN=0eaeb8090e4e074c4130da1eb18e34e8187a462b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f7:93:91:a6:7f:36:a6:1b:92:7f:9a:3b:bd:
                    24:ec:15:8a:31:25:f7:88:2f:9d:df:fc:de:39:4a:
                    a5:a5:d6:31:36:14:4f:bf:25:a2:35:55:31:f9:79:
                    9d:5b:4c:35:db:d7:68:54:87:f4:62:43:5c:a0:6c:
                    14:8e:f8:37:7f:79:62:86:43:af:5f:88:16:f8:c7:
                    9f:e2:a8:f4:57:06:6a:fc:bb:05:5f:bd:a8:db:a9:
                    90:2e:b6:e2:82:32:75:64:f2:ff:19:10:0e:2c:22:
                    14:7c:47:7c:a1:64:c9:12:80:e5:8b:86:0e:a7:7c:
                    dc:48:a5:2d:db:40:17:c8:63:63:fb:42:09:61:c7:
                    f4:0b:25:8f:21:43:cf:7c:3f:40:3c:77:aa:64:b8:
                    32:0b:ff:b1:9f:e2:54:93:1b:7f:d7:c6:58:10:26:
                    55:d9:3d:3e:e6:cf:c4:65:e0:9b:a5:fb:60:9d:91:
                    e1:c9:9b:1b:40:81:fe:aa:2c:ec:85:0b:e4:77:ab:
                    09:d7:16:08:b9:b9:a8:70:9b:44:d5:01:61:a8:60:
                    3a:ca:a5:e7:75:0e:31:6a:dc:3c:45:5b:9a:ba:43:
                    96:4f:ad:a8:97:7d:2b:da:0e:d3:ea:56:fd:bb:f0:
                    db:fe:2f:a4:fa:5b:eb:09:63:82:a2:a9:f1:87:ee:
                    19:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AE:B8:09:0E:4E:07:4C:41:30:DA:1E:B1:8E:34:E8:18:7A:46:2B
            X509v3 Authority Key Identifier:
                keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:72:51:fb:b0:7b:73:1c:b7:44:88:c2:07:1a:6a:a9:36:6d:
         f4:e0:23:7a:b7:dd:9f:cd:cc:cb:42:3e:1a:e4:c5:f8:14:b6:
         34:37:9d:78:6c:c1:cd:39:c7:6c:59:60:ee:0a:bf:77:1d:49:
         26:f4:b4:af:7e:f2:76:24:b2:18:b5:bb:8c:d4:fc:78:f5:85:
         b6:72:f2:e5:60:21:46:31:cd:b2:ea:b5:63:8a:72:76:76:c9:
         d9:ce:9f:06:bb:40:5c:92:b8:e3:01:82:08:7f:a9:9c:25:0a:
         65:e0:7c:15:dd:aa:3d:46:68:d4:30:cd:f0:8c:27:7e:0c:42:
         81:16:a8:c3:6a:a8:60:a1:41:01:71:9e:67:51:f2:dc:22:15:
         a6:28:83:d2:7b:77:98:3e:7a:31:f1:a6:6d:06:bb:cb:d0:8c:
         f4:dd:6b:1d:1b:c6:8d:b0:3d:e9:f9:9c:4d:40:36:62:d7:0f:
         6b:52:08:a2:98:cb:f9:04:98:fc:bf:a4:8b:1e:5a:81:f5:79:
         5f:f6:0c:d4:4d:38:a6:34:66:e7:25:76:91:54:e4:2b:36:01:
         4c:ec:c2:72:45:46:2c:f1:9f:01:b1:09:12:57:f7:65:58:9a:
         e4:8c:b2:6b:fc:ce:52:94:91:d5:4b:15:98:35:34:76:f1:66:
         af:53:04:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:12:26 2026 by rpki-client