Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File:                     jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier:          +6HZiBmOFZGzGOP/X6juIRTfDYc6LVKTeEi+oNO1BrI=
Subject key identifier:   43:A4:AD:75:DC:35:D4:AC:70:7C:97:B7:D0:6C:5C:2D:AF:3D:A3:9F
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer:       /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial:       019E55FF6644DF994D86D92E41BB31F5D173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number:          1508
Signing time:             Sat 23 May 2026 18:01:01 +0000
Manifest this update:     Sat 23 May 2026 18:01:01 +0000
Manifest next update:     Sun 24 May 2026 18:01:01 +0000
Files and hashes:         1: 0yWPvFtMAYIcTAg5JfApwnsaFGI.roa (hash: 1p9eIfwmhKokMGTrk5iOiVMk3FImaB8EaoWESHMvCLQ=)
                          2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: wWj0SsAtSDmaXLxfiFO37rrAX5LTgnPGleoO4J4Bqfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 18:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:55:ff:66:44:df:99:4d:86:d9:2e:41:bb:31:f5:d1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
        Validity
            Not Before: May 23 18:01:01 2026 GMT
            Not After : May 24 18:01:01 2026 GMT
        Subject: CN=43a4ad75dc35d4ac707c97b7d06c5c2daf3da39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:25:4f:35:41:52:ff:ec:57:f8:e0:60:f0:6f:
                    cf:55:47:49:7e:1e:82:32:d1:da:1e:ad:10:cb:c3:
                    c3:b2:3b:68:7d:87:b3:26:6e:45:67:dd:b2:a3:20:
                    6c:6b:47:63:1a:ff:23:01:bd:12:42:59:82:4d:8d:
                    a1:10:d4:ad:a0:d8:05:e3:a5:c7:9f:65:7d:fc:50:
                    7f:bd:84:99:36:39:1e:31:42:72:96:df:c1:24:1b:
                    41:ed:ed:eb:f7:eb:80:ec:90:12:a3:d0:5f:eb:ff:
                    54:d6:f3:df:02:f7:a7:ae:ef:da:72:e0:64:1c:78:
                    66:db:34:73:7d:80:91:00:ee:39:43:fa:30:3e:8c:
                    66:60:1a:e3:49:de:04:d1:7f:2d:7a:97:44:e3:a0:
                    33:fc:85:79:3f:ed:ac:f5:12:18:b3:6a:96:d2:3e:
                    93:09:af:df:ba:7d:79:d6:f5:21:78:de:ac:f1:96:
                    f4:dd:0a:73:b9:60:34:8c:ac:37:84:80:83:0c:18:
                    8e:33:3b:91:53:af:da:ce:2d:bb:ab:63:ad:88:66:
                    7a:bb:00:28:c7:e8:6b:e1:bd:18:1f:2f:81:3a:00:
                    4f:41:c9:90:b9:ba:fe:a7:f0:de:15:5c:12:80:55:
                    46:90:58:3a:15:f5:a3:bb:22:51:42:e9:06:2a:73:
                    90:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A4:AD:75:DC:35:D4:AC:70:7C:97:B7:D0:6C:5C:2D:AF:3D:A3:9F
            X509v3 Authority Key Identifier:
                keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:cc:1b:c1:d0:20:53:67:e0:63:cf:a3:02:28:12:36:1e:8c:
         68:17:ca:f8:de:ae:90:e6:fa:54:a6:a1:54:50:ed:2b:c0:00:
         ee:31:bc:db:57:3b:ee:fe:ac:af:2f:0f:49:9b:e0:59:da:5f:
         87:14:1f:4e:e3:ce:25:72:ec:80:78:8c:d1:d3:66:e0:34:4f:
         37:ab:91:9b:ed:61:5b:c9:ea:3f:72:b0:86:80:f0:f3:5c:0d:
         28:2a:52:51:fb:ff:ac:29:db:64:23:e2:7c:8f:25:fc:76:21:
         cf:80:03:d0:39:f4:98:ee:fd:9d:ac:db:58:6c:8c:22:f0:92:
         a0:d5:ca:e0:d5:71:bd:5e:78:ff:a0:8f:6d:ae:4c:89:14:2a:
         6c:98:32:f6:d2:f7:a5:a1:f1:42:63:3c:cc:48:ed:a0:9a:17:
         f1:76:af:ee:9d:52:30:42:d4:89:9a:ab:f1:ca:39:39:17:27:
         3b:20:fe:b4:76:4e:11:b8:e7:b0:59:23:e4:c3:5e:43:f4:d9:
         1e:ad:2d:56:b4:21:61:1b:ba:29:25:18:e5:7c:01:f9:b8:fb:
         b4:b4:0e:f2:c1:13:5c:ca:46:34:e0:a7:81:3c:3c:59:2f:00:
         05:ea:b1:3d:be:e0:8d:e8:6f:d0:46:87:8a:7a:37:c7:57:43:
         29:e0:fa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:37:19 2026 by rpki-client