Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
File:                     JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json)
Hash identifier:          m1+gaPqvFvw8pU8gr66kjs2mfpH7Smnl/jSDp+pixn0=
Subject key identifier:   CB:C7:57:A9:74:BE:AA:C5:A1:F5:A4:FC:E2:66:E5:46:72:C7:41:4D
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Certificate issuer:       /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial:       019DB16A81B43119199F9671B56098F785C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
Manifest number:          18DA
Signing time:             Tue 21 Apr 2026 19:00:40 +0000
Manifest this update:     Tue 21 Apr 2026 19:00:40 +0000
Manifest next update:     Wed 22 Apr 2026 19:00:40 +0000
Files and hashes:         1: CE6rRh7gwkNwQsNCEV_5-qvby8o.roa (hash: +C6crj3tlveY40cfyaDLAmJKc2kjvGSJAnx+Tun2pBQ=)
                          2: H-Z-59qkp7uHQPcWeenVARkWiac.roa (hash: HKW7RkaEKR+tAOc8fjxLJQH13xKLm1JBXk6SPdfsZ20=)
                          3: J7hqwzNBUJIFCvPHnt3UCUaIkS4.roa (hash: dwuiTVtxcw0Gm8ehWtdolENkQjfHnVWwxpd27Y3PhYA=)
                          4: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: IGWe2mtbqY6mGCMvHCMiRLh/O9Au2t3R4CAAH3cuooA=)
                          5: MjvomoUdbRCYMRTivd64oJucyR4.roa (hash: cQeTekUSkTsAQzZ5llLXfmDS9liZjdYx7jCgTSy2Qs0=)
                          6: dwe_m7iK2njmUFFGe9nnrN8FZV4.roa (hash: utaiyLTsrEWxNDIzyZ7TNXdP2ryHcGA9G92URVMLgOY=)
                          7: ixjloOI87OkWVNhgbhDEEFBTJ_A.roa (hash: cx+C+iENlLKYVwuPtzW+PgZZj9Jz/VMG8suoQFDv4vY=)
                          8: j2qKFrWfusxDiFzkFOC9pNjdNeM.roa (hash: eedi82Numcyo5s6BIiJHhclTJ6KJqgbKjG36ZSW5eFU=)
                          9: m3RaVncm_gBlS4tVezr7XBZHrR4.roa (hash: NCcn02MU0AdzNYn2EHJlZXzwGScb4dWUGw8AznxeOaE=)
                          10: pxvwZ83GQsd2xDFU232Uh7bybX4.roa (hash: wTQyNgjrlPNNWRBqCTTjBvEsBojPl8WoXlgNibVwY1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b1:6a:81:b4:31:19:19:9f:96:71:b5:60:98:f7:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
        Validity
            Not Before: Apr 21 19:00:40 2026 GMT
            Not After : Apr 22 19:00:40 2026 GMT
        Subject: CN=cbc757a974beaac5a1f5a4fce266e54672c7414d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:cf:c5:5c:4f:98:ed:95:56:86:c2:55:b8:
                    e8:4e:02:8d:28:0d:95:a9:01:d6:22:7a:3e:2f:99:
                    97:c1:1e:0e:39:c7:00:93:66:f2:6b:82:c3:2c:e9:
                    b4:bc:fa:ca:cb:32:91:0e:41:03:56:a8:11:48:e3:
                    de:af:27:1a:1f:c1:cd:8b:2b:55:62:e1:76:74:6f:
                    45:3c:26:31:a0:30:47:d1:c8:1c:21:75:8c:c6:2b:
                    35:c3:f3:49:90:b0:a1:c7:c7:18:6d:c3:c6:ce:da:
                    0d:51:54:b4:81:c4:40:72:87:8d:0d:6d:a4:25:22:
                    36:4d:09:35:73:d0:b1:1a:bf:34:9d:c8:a7:47:1f:
                    cb:1d:71:1b:ee:d7:c0:61:aa:fe:0e:9a:7b:fc:df:
                    8d:7b:20:a9:0f:a7:69:70:7f:7a:61:c4:42:f8:2a:
                    bf:72:09:16:47:5f:87:1a:59:3f:af:4c:6b:31:6a:
                    00:c4:66:ae:75:54:ea:9b:fe:25:bd:52:b0:ae:84:
                    06:3a:18:ba:f5:69:b7:b5:d3:82:37:de:5f:92:8f:
                    1e:8d:3b:34:7b:82:a8:a4:f2:5d:a7:dc:c3:ba:c8:
                    05:36:b6:9c:7b:1b:5d:d8:cb:9d:4e:d7:c8:dd:c1:
                    1e:19:99:fd:94:f6:d8:96:d3:57:3f:58:63:de:56:
                    ef:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C7:57:A9:74:BE:AA:C5:A1:F5:A4:FC:E2:66:E5:46:72:C7:41:4D
            X509v3 Authority Key Identifier:
                keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e2:55:67:bc:0f:a9:f4:d7:6f:5c:4c:0e:da:91:4c:9b:5a:
         f7:bc:5e:80:6e:50:d9:37:1a:af:b1:f6:5b:0a:d2:14:85:24:
         94:43:9c:cb:58:79:e6:29:46:4f:83:40:15:ed:05:62:fe:e2:
         48:83:f8:3d:07:02:82:3d:69:40:db:f3:25:cf:f9:e9:7b:90:
         55:db:a5:c3:b9:6a:e5:f3:6e:c2:8f:8e:21:43:84:13:9d:84:
         db:bd:15:81:79:c2:07:1f:27:3c:af:72:9e:89:9b:6c:0e:19:
         48:f9:44:82:95:fd:e3:b5:2b:bd:ab:34:c8:58:76:37:48:5a:
         22:00:6d:43:9e:3c:91:5c:f4:1e:44:a0:50:17:c9:22:d1:75:
         20:af:4d:5b:e4:a9:be:f9:40:02:6d:d5:27:05:ad:56:08:99:
         69:d2:89:84:0a:e6:b3:26:3c:f6:6c:3e:c8:da:3e:f0:89:11:
         05:aa:80:c7:59:0b:6c:2d:b0:99:5c:bd:49:8c:a1:4b:e6:bb:
         f9:26:1a:c9:90:35:1c:12:7f:86:d7:78:b9:e8:02:6c:b9:c1:
         6f:e8:b0:52:b0:53:d4:f0:51:51:b9:dd:d5:de:70:56:cf:5d:
         3d:ba:57:7d:82:e3:21:14:3b:4f:89:c0:56:59:7c:22:c4:fa:
         3a:27:d5:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2xaoG0MRkZn5ZxtWCY94XAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MzExNjZkZTc4NWEzNTMxYmRjODM2MWYxMTkwYTgzNjlh
N2VkNmEwHhcNMjYwNDIxMTkwMDQwWhcNMjYwNDIyMTkwMDQwWjAzMTEwLwYDVQQD
EyhjYmM3NTdhOTc0YmVhYWM1YTFmNWE0ZmNlMjY2ZTU0NjcyYzc0MTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjrPxVxPmO2VVobCVbjoTgKNKA2V
qQHWIno+L5mXwR4OOccAk2bya4LDLOm0vPrKyzKRDkEDVqgRSOPerycaH8HNiytV
YuF2dG9FPCYxoDBH0cgcIXWMxis1w/NJkLChx8cYbcPGztoNUVS0gcRAcoeNDW2k
JSI2TQk1c9CxGr80ncinRx/LHXEb7tfAYar+Dpp7/N+NeyCpD6dpcH96YcRC+Cq/
cgkWR1+HGlk/r0xrMWoAxGaudVTqm/4lvVKwroQGOhi69Wm3tdOCN95fko8ejTs0
e4KopPJdp9zDusgFNracextd2MudTtfI3cEeGZn9lPbYltNXP1hj3lbvUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvHV6l0vqrFofWk/OJm5UZyx0FNMB8GA1UdIwQY
MBaAFCYxFm3nhaNTG9yDYfEZCoNpp+1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUt
Yjg5YTI2MTk5OTc2LzEvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUtYjg5YTI2MTk5OTc2
LzEvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+JVZ7wP
qfTXb1xMDtqRTJta97xegG5Q2Tcar7H2WwrSFIUklEOcy1h55ilGT4NAFe0FYv7i
SIP4PQcCgj1pQNvzJc/56XuQVdulw7lq5fNuwo+OIUOEE52E270VgXnCBx8nPK9y
nombbA4ZSPlEgpX947Urvas0yFh2N0haIgBtQ548kVz0HkSgUBfJItF1IK9NW+Sp
vvlAAm3VJwWtVgiZadKJhArmsyY89mw+yNo+8IkRBaqAx1kLbC2wmVy9SYyhS+a7
+SYayZA1HBJ/htd4uegCbLnBb+iwUrBT1PBRUbnd1d5wVs9dPbpXfYLjIRQ7T4nA
Vll8IsT6OifVpg==
-----END CERTIFICATE-----
Generated at Wed Apr 22 03:01:48 2026 by rpki-client