Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
File:                     jJ3M-eLzfrEHSWp6rxOJTsR243U.mft (raw, json)
Hash identifier:          DOIRa3dNFNC9bO6QDDDCRE86+crJVknA71a67ciA3Dw=
Subject key identifier:   75:97:BA:C5:CF:BA:CA:81:ED:FA:8B:9B:95:36:ED:67:49:CF:1C:89
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Certificate issuer:       /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial:       019E4E45F31445C4D833646E5B5E5DAB3022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
Manifest number:          0F4E
Signing time:             Fri 22 May 2026 06:01:07 +0000
Manifest this update:     Fri 22 May 2026 06:01:07 +0000
Manifest next update:     Sat 23 May 2026 06:01:07 +0000
Files and hashes:         1: UIv6jVS0p5268_XYhub9OHb_bA0.roa (hash: KT5y+HpZ43GmqDM+m5jLP788GzijAuuEants3+erKgY=)
                          2: jJ3M-eLzfrEHSWp6rxOJTsR243U.crl (hash: ZD1EuwwtIqAAeZ9dR4pXa1jhLr3+hnuTw4KwJth6WL8=)
                          3: lP0Otoi5FEsx4Sjn_XQp3w7krL4.roa (hash: qcCySn5tj9h14UpAI2UnCKnAlV7VQfAi0DGrUD+71GM=)
                          4: v9kA4OCGrHclzg_4NvmtIc2Yk_A.roa (hash: tSlWesgG1ectPhUdMe7kuRGZ0HEk92YblgLL18UTzMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4e:45:f3:14:45:c4:d8:33:64:6e:5b:5e:5d:ab:30:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
        Validity
            Not Before: May 22 06:01:07 2026 GMT
            Not After : May 23 06:01:07 2026 GMT
        Subject: CN=7597bac5cfbaca81edfa8b9b9536ed6749cf1c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:97:74:45:f9:7e:03:46:30:0e:1b:4e:d3:
                    0d:e3:08:18:71:dd:52:83:fd:28:c2:7f:bf:c9:72:
                    24:9b:9d:22:9e:35:bb:50:a2:25:d4:a5:b8:52:b7:
                    4e:5d:9a:37:b7:5c:79:5e:cf:de:6b:94:7a:fb:fc:
                    6b:ee:30:68:1d:47:cf:69:f4:a4:4c:fe:53:f3:01:
                    d8:ad:43:f2:31:cf:75:64:2f:b3:f9:33:58:b9:b8:
                    a7:f1:9c:ef:95:db:cf:20:39:0b:1d:af:fe:26:f9:
                    bc:77:f7:1f:0f:d8:33:0b:ea:70:37:b0:4e:b6:b1:
                    fa:12:9b:8f:5b:fe:ba:05:f9:82:ea:62:b2:9e:0e:
                    27:9c:d5:0d:76:60:c6:5b:fd:c5:4c:26:8e:fd:d9:
                    dd:2b:6f:d2:9e:33:14:7b:9d:41:0e:86:32:1d:e1:
                    4f:b5:cb:b4:75:7b:21:bd:f2:ae:ef:24:31:4e:8a:
                    c3:fe:12:ad:bb:09:da:7e:95:42:0d:ea:c5:e3:26:
                    29:af:09:1d:26:5a:9e:26:75:6e:4a:29:b0:df:4c:
                    97:ec:c8:a8:e3:e3:7a:c3:f3:c6:2c:f6:c5:88:5a:
                    23:79:d6:b7:50:69:14:33:4f:43:f7:d3:84:e7:63:
                    e9:70:60:3c:8f:4c:f8:f0:9a:90:8b:0f:65:6d:d8:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:97:BA:C5:CF:BA:CA:81:ED:FA:8B:9B:95:36:ED:67:49:CF:1C:89
            X509v3 Authority Key Identifier:
                keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:fb:b0:31:10:89:12:97:5a:04:11:10:be:27:85:72:ca:ea:
         eb:a6:fe:0a:9e:1b:1e:86:3e:21:71:b9:00:d2:28:f0:ca:ef:
         72:19:7e:44:02:4c:14:b6:e7:79:1c:00:d1:86:df:2b:f8:5e:
         1e:49:21:d0:70:9f:03:75:f9:4b:f9:3d:ee:60:00:73:ff:01:
         ba:9e:e4:7c:fb:82:d1:45:86:a5:9f:55:48:30:bb:43:61:87:
         69:e3:1b:0d:3f:75:b1:f2:09:69:72:77:d9:36:00:dc:bf:04:
         54:1e:98:47:b7:72:89:b5:db:fe:2c:ae:e7:00:9c:20:03:7e:
         97:09:29:df:e6:d6:fd:2e:a2:e0:26:27:cc:ce:40:bd:fe:54:
         da:fe:20:07:a8:a7:99:25:76:98:50:40:1f:5a:42:19:80:bd:
         a3:55:0b:1e:23:ac:7a:cf:0a:64:0e:1d:4a:6f:1b:10:84:83:
         ec:ce:bf:5a:1b:a4:0e:53:6d:63:9d:4b:fd:06:3d:11:6e:2e:
         a2:58:00:4c:d1:dc:7c:6e:e5:74:22:c9:c6:4d:4e:4d:f5:ea:
         b9:98:59:e1:18:60:03:12:3c:b8:16:eb:ac:d8:3c:ee:7f:88:
         68:a4:4b:d9:4c:4a:21:52:08:32:11:25:d5:0f:84:bc:5d:e1:
         43:91:f6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:16:55 2026 by rpki-client