Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
File:                     JijMfwbqCaJH9r6enldMTze06bY.mft (raw, json)
Hash identifier:          PI6pas5AJiIEQtvgTO7KmHGkzBPDkEtQCs4XqVuZVpg=
Subject key identifier:   F7:A4:96:FC:C1:8A:41:E8:3D:3C:7A:43:41:63:93:DA:FF:4B:F1:9E
Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
Certificate issuer:       /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Certificate serial:       019E1EDA311BDDD60B3BF56446F08C590094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
Manifest number:          1905
Signing time:             Wed 13 May 2026 01:01:16 +0000
Manifest this update:     Wed 13 May 2026 01:01:16 +0000
Manifest next update:     Thu 14 May 2026 01:01:16 +0000
Files and hashes:         1: JijMfwbqCaJH9r6enldMTze06bY.crl (hash: Xn4LoQMDWpQw80oRAol+S2L1ly/TZ5MxTuhbNi1y7BQ=)
                          2: waZwL5p70K3eubkjn4rt16lrpmo.roa (hash: Yb1Set22MMS78/VHLDK1SdDRV6cNd11Qc3kiWPaHjXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:31:1b:dd:d6:0b:3b:f5:64:46:f0:8c:59:00:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
        Validity
            Not Before: May 13 01:01:16 2026 GMT
            Not After : May 14 01:01:16 2026 GMT
        Subject: CN=f7a496fcc18a41e83d3c7a43416393daff4bf19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fb:9d:31:c2:5e:9c:5a:cd:fd:ec:f9:1a:56:
                    71:e1:81:b8:c4:9f:34:36:ae:df:db:35:2e:0b:11:
                    b9:d6:df:e8:53:2c:48:ae:bf:89:f1:f8:9a:dd:e3:
                    23:ee:e0:3f:82:68:02:c2:b1:9f:da:66:1a:a9:1a:
                    86:e0:a5:b9:4d:0c:61:7f:52:67:54:94:32:67:af:
                    1a:ee:c1:2b:a1:08:a6:ff:c9:94:c1:04:85:d4:c3:
                    73:26:fb:98:c2:b5:83:1e:79:b0:f3:5b:e0:dd:09:
                    09:7b:19:97:e8:19:ae:ca:cc:3b:24:09:64:7e:9a:
                    fb:c5:da:9e:e1:d0:ea:87:31:f6:b1:a2:96:88:af:
                    05:58:1e:2c:77:1d:53:59:0c:5a:5d:33:00:95:cc:
                    ef:99:35:89:65:67:9b:e5:04:97:a5:1c:3f:31:94:
                    3b:7c:34:ef:33:80:51:75:e9:0f:26:71:53:46:c7:
                    58:e0:66:d3:0b:e4:e7:4c:86:d8:49:f0:be:e5:ce:
                    53:08:78:9f:ac:65:16:7f:a5:c5:21:44:fd:4a:fd:
                    34:8e:62:e1:34:be:2a:cc:d3:77:20:54:ca:3a:66:
                    db:33:0d:fc:86:1b:b8:95:e4:56:53:bc:ea:13:cc:
                    07:c9:ed:47:65:bd:ea:1f:12:67:97:5b:a2:49:62:
                    62:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A4:96:FC:C1:8A:41:E8:3D:3C:7A:43:41:63:93:DA:FF:4B:F1:9E
            X509v3 Authority Key Identifier:
                keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:bb:42:0d:20:d3:92:39:1a:ed:35:89:30:c8:cc:86:79:3a:
         cc:0b:3e:db:54:de:df:4f:67:41:ce:94:b5:78:02:2f:c4:b2:
         ed:fb:fe:75:c8:b9:d2:a4:54:24:45:9b:58:c5:e0:23:53:ad:
         b8:d4:84:85:26:e2:b4:2c:7b:53:19:31:c9:c2:45:db:69:6e:
         f8:21:18:51:64:d9:df:9b:29:22:96:02:76:4c:e0:f9:51:67:
         79:97:08:03:53:c4:eb:5d:ce:31:70:28:f2:99:c6:42:4a:d9:
         6e:86:57:07:be:7c:90:c2:67:c2:8b:9c:8a:6b:b9:e4:76:0a:
         cd:4c:d3:80:75:35:c9:0f:07:5b:89:fb:0c:e8:72:a2:bb:08:
         8a:74:35:45:77:ad:55:f9:ad:d5:89:b9:9e:6d:94:33:83:db:
         d6:aa:50:20:fd:b3:dc:d3:36:90:f8:9a:99:a2:60:92:e6:76:
         f5:1a:ab:b1:f2:51:48:79:6b:d2:16:f0:22:05:68:2f:91:3d:
         1e:32:89:1a:ad:06:1f:22:8a:b2:53:b3:d9:b2:0e:ea:d2:71:
         75:51:cf:4e:d2:c6:94:a0:e7:22:0a:8a:13:68:75:7e:ff:82:
         f7:a9:f0:e0:e7:6e:40:6b:9f:68:b5:c0:40:77:6c:12:f0:d6:
         73:1e:ab:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:46:33 2026 by rpki-client