Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
File:                     jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json)
Hash identifier:          P20z4nT8kdJqQ3fUXJndhsreOOBKh2E1raPqgDyKp2w=
Subject key identifier:   C8:29:73:B5:80:A9:9C:37:7C:E6:F6:6B:0C:1C:E8:FD:A8:78:C0:1F
Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Certificate issuer:       /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Certificate serial:       019DFCBC10607C3B3900106ED3680B8E015D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
Manifest number:          044D
Signing time:             Wed 06 May 2026 10:01:16 +0000
Manifest this update:     Wed 06 May 2026 10:01:16 +0000
Manifest next update:     Thu 07 May 2026 10:01:16 +0000
Files and hashes:         1: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: Cu9JasVWMBoEbXkGkgBQByLbrlcF5co+IHvdFHPMScg=)
                          2: ljWbO3xgpVVnVuPfMgl7G3F39B8.roa (hash: Bdl5BL0jpRyEhLx4reL1/D3qaLttRyXVouVa2c42GeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fc:bc:10:60:7c:3b:39:00:10:6e:d3:68:0b:8e:01:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
        Validity
            Not Before: May  6 10:01:16 2026 GMT
            Not After : May  7 10:01:16 2026 GMT
        Subject: CN=c82973b580a99c377ce6f66b0c1ce8fda878c01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:86:4b:3b:50:56:fc:2f:50:c2:28:98:e7:73:
                    6b:06:e2:1d:d7:01:6d:9e:c3:d9:61:ce:d4:5a:1d:
                    77:da:1f:a4:56:21:e2:b1:19:10:f4:f1:9d:78:5a:
                    d9:6b:90:9b:5c:05:9e:6b:45:3c:58:ef:60:9a:5a:
                    20:55:a1:d7:ff:47:6e:dc:d9:84:42:37:5e:e4:d7:
                    f1:9c:45:81:67:70:de:d1:a3:58:27:37:c7:54:47:
                    38:ea:25:f8:52:58:68:7b:b3:78:1e:12:04:e2:a2:
                    82:66:f0:50:2a:1d:8e:c3:4b:4a:7b:06:73:b3:73:
                    87:6e:f1:28:06:a8:66:90:da:08:ae:20:78:b7:43:
                    54:3f:1f:39:92:6d:26:80:d2:eb:7a:df:07:ac:9e:
                    d1:f7:92:e1:47:7c:99:ce:3d:1e:dc:23:c0:b6:85:
                    e2:31:58:de:33:55:b5:69:56:44:fb:1a:93:85:ff:
                    17:fb:0f:ab:82:51:37:72:8c:0a:5e:0a:d2:3b:cd:
                    21:f2:f7:15:db:04:cd:e0:79:1e:2a:95:d1:da:39:
                    58:24:5f:c2:98:df:ae:a2:f1:48:17:b2:08:ff:24:
                    bc:95:63:f3:dd:65:e7:66:2f:58:00:3c:aa:33:38:
                    df:97:b4:f7:bc:1b:8a:dc:4d:8c:d6:0c:3e:e0:fb:
                    ff:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:29:73:B5:80:A9:9C:37:7C:E6:F6:6B:0C:1C:E8:FD:A8:78:C0:1F
            X509v3 Authority Key Identifier:
                keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:dc:36:69:56:a0:ca:34:0c:3e:1c:75:fe:49:23:d4:92:ea:
         c8:20:5d:a5:4a:75:dd:f6:3d:e1:3e:96:63:ef:ed:d9:14:67:
         4c:9a:70:89:58:8f:44:01:3b:bf:e5:52:6e:78:77:a1:ae:6f:
         43:a5:47:11:35:47:06:3f:6f:65:62:91:a8:b8:2d:2d:a6:f4:
         c4:c9:56:d3:43:bd:4d:a2:c5:ea:c2:ba:b8:73:42:cf:8a:f4:
         d6:f4:8b:a7:a3:93:a1:df:a2:23:e8:d9:55:a6:67:0e:cf:11:
         b7:58:66:62:62:3f:8b:38:41:6d:ee:f8:30:5c:82:20:05:47:
         70:96:e9:2c:63:77:1c:51:24:06:59:36:f9:98:bc:07:59:fb:
         f4:da:43:77:d0:10:09:c5:77:84:3f:e0:52:eb:18:25:93:32:
         f5:ed:f3:fb:80:b5:06:78:bf:05:15:63:74:16:35:f6:13:cc:
         b3:01:44:2a:fc:0b:8f:e7:b4:b3:7b:7c:6b:ca:9a:f1:cc:df:
         88:1e:6a:1d:0c:1f:67:e8:e0:38:4e:84:ff:e1:b3:76:4a:11:
         76:91:fd:be:e4:1c:0a:25:89:4e:ac:91:30:c1:36:fc:d4:8c:
         6e:d0:af:2e:4c:b5:10:9d:8b:f1:a9:e9:02:b0:52:bb:9e:2d:
         c5:31:c7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 13:24:13 2026 by rpki-client