Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File:                     CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier:          p/9kX/D7hUPbnk2dNjxh0b+XdTY9rN+7dybcpGI959g=
Subject key identifier:   80:A6:2A:89:36:B6:23:43:23:72:83:B6:4F:10:20:CC:E5:5F:D4:FC
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer:       /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial:       019E1CB4D834A43DCE82D7F4AC7A8BD8765D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 15:01:14 +0000
Manifest this update:     Tue 12 May 2026 15:01:14 +0000
Manifest next update:     Wed 13 May 2026 15:01:14 +0000
Files and hashes:         1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: JIveBVzgdBO2JL4VkMCIXth+OH8sUsJvQqpp9TfYtw8=)
                          2: OHiJ9XzBUi42gNdFbFSonns_rq0.roa (hash: 5izRR616Szlh4ynpWzSXWkX0E9KgDJBqg2wIQA5yWeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:d8:34:a4:3d:ce:82:d7:f4:ac:7a:8b:d8:76:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
        Validity
            Not Before: May 12 15:01:14 2026 GMT
            Not After : May 13 15:01:14 2026 GMT
        Subject: CN=80a62a8936b62343237283b64f1020cce55fd4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:ea:aa:3a:70:22:30:00:54:6e:81:4e:1a:
                    63:74:66:49:46:61:f1:ef:e0:40:58:e1:77:76:0f:
                    e2:bb:fd:d0:13:31:63:f2:a8:c2:c4:d9:73:5d:2f:
                    cd:16:e7:25:15:8a:6e:8b:bc:8a:2b:8c:24:75:79:
                    15:41:75:c3:ca:0a:20:e1:53:e7:cc:47:4e:ac:3a:
                    83:87:af:4a:10:36:37:2c:ed:d2:3c:e7:ca:f2:f1:
                    74:ec:e2:4d:54:a2:85:9c:3a:eb:94:58:34:ac:e7:
                    24:50:45:bc:77:09:e6:b7:31:55:00:8e:aa:df:5e:
                    bc:e3:8d:ae:12:6d:d0:84:a2:bf:67:22:b2:1d:a5:
                    88:b5:36:76:2a:5f:f1:7d:0f:a6:37:a0:ba:a9:50:
                    32:0b:32:99:af:5a:f1:d8:8c:90:43:d2:08:c0:6c:
                    60:b6:37:d1:75:18:08:2d:6e:32:3e:31:f5:0f:d6:
                    1f:85:3b:ba:57:44:8a:a4:38:55:44:f2:25:3d:96:
                    87:1f:8a:83:f8:e1:7a:05:a4:b1:6e:af:fe:cf:b9:
                    fa:9f:fc:dd:fe:c5:64:61:87:87:9e:cb:49:91:50:
                    5c:9e:80:55:e7:1a:c2:c0:7a:1c:99:df:f1:d0:63:
                    bb:6f:f2:56:dc:28:4e:a9:95:f1:2f:10:4d:d7:fb:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A6:2A:89:36:B6:23:43:23:72:83:B6:4F:10:20:CC:E5:5F:D4:FC
            X509v3 Authority Key Identifier:
                keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:06:ab:71:bf:3c:75:04:c3:50:3f:5a:f2:55:78:23:44:54:
         ac:4e:f7:2c:4b:4c:69:26:65:a5:27:71:c1:2c:2d:78:83:fa:
         f5:13:9e:01:7e:2f:00:f2:29:28:f2:e8:f3:a4:7d:dd:4d:b7:
         3f:e4:95:de:4c:94:39:91:f7:c8:78:6d:fd:ad:c4:e6:d4:b9:
         f1:52:8c:4d:2d:2a:6a:e6:ba:28:8e:69:82:b9:0c:92:f6:26:
         e1:ab:b1:d2:95:aa:dc:e7:f8:e3:20:c8:70:39:97:1d:56:03:
         cd:62:f2:0a:58:09:99:2a:4f:87:dc:13:33:2a:13:14:33:e9:
         6c:4e:99:47:3e:fb:88:76:78:69:95:32:56:d1:48:53:7e:da:
         f1:8d:5f:da:71:86:74:55:65:3e:98:c4:58:b1:b0:39:a1:83:
         5c:2a:c2:29:2d:7f:04:9a:13:0c:8a:67:30:2a:20:c2:8e:37:
         e9:7e:15:41:30:95:e5:aa:f3:9f:1d:8e:a4:83:2e:23:f1:3b:
         d0:08:96:42:20:c6:31:b9:f2:9c:f0:60:ff:15:dc:bf:93:cb:
         79:00:02:c3:c8:4b:26:11:a3:ed:7a:be:10:65:f1:a9:1b:c5:
         c2:2a:a6:89:04:87:fc:3c:8a:71:7e:7d:06:e5:b2:82:d4:ad:
         53:d4:29:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:42 2026 by rpki-client