Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
File:                     jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json)
Hash identifier:          2ygCWm+jBwfOZruQIZBwRjXDNVxDVzFeZeq694LVVmA=
Subject key identifier:   76:6B:55:36:00:61:8A:B0:AF:B9:52:0E:92:7E:5C:86:6B:89:04:7C
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Certificate issuer:       /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial:       019E1FB58FB045C6EA38FCD95B13E96518E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
Manifest number:          0427
Signing time:             Wed 13 May 2026 05:00:52 +0000
Manifest this update:     Wed 13 May 2026 05:00:52 +0000
Manifest next update:     Thu 14 May 2026 05:00:52 +0000
Files and hashes:         1: E0AgYtmqvfWsCtuIwOtUo5wvcgU.roa (hash: w2ZEYMbSnl1r9XT320uy9sGbUhpOA37NS5yHBqC4/Fs=)
                          2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: elgnxCwznFED+Q2zy5u8h8m5zMJlUXD4ZAmbfK2u8+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:8f:b0:45:c6:ea:38:fc:d9:5b:13:e9:65:18:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
        Validity
            Not Before: May 13 05:00:52 2026 GMT
            Not After : May 14 05:00:52 2026 GMT
        Subject: CN=766b553600618ab0afb9520e927e5c866b89047c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:c0:3f:7f:dc:47:94:f8:cc:fb:cf:6d:8d:
                    20:c7:f6:79:23:5e:ef:a6:3e:ec:c1:f8:17:de:3a:
                    f7:e9:fd:f0:c7:ce:ee:27:84:63:fa:74:bd:82:97:
                    27:f6:9e:a7:90:56:7e:0c:c7:6b:bf:39:b4:09:85:
                    bf:ad:39:3f:52:99:98:f3:bb:61:5a:64:8f:51:d0:
                    39:2e:10:41:4b:b9:6d:c2:90:0a:6e:1f:56:60:32:
                    0d:7b:c2:db:b8:49:63:71:93:fd:91:8a:83:1f:96:
                    59:7d:c9:ef:f2:68:3d:2b:96:40:62:ac:7c:11:54:
                    65:4e:42:65:6c:bd:9c:98:5f:20:3d:51:1b:71:df:
                    83:ed:de:82:f1:f3:ec:6c:8d:3a:74:3a:72:87:fd:
                    30:17:96:0f:be:56:72:01:a3:01:a5:93:07:20:47:
                    b3:25:5b:99:b4:61:7f:e1:3b:1c:88:69:6f:55:ff:
                    f5:32:ef:a8:f2:85:23:ce:3b:e7:80:47:15:50:52:
                    8e:0c:53:2a:de:19:3d:4d:4b:ae:b2:75:da:57:d0:
                    5c:5b:f6:a6:9f:72:f6:1b:bd:97:0b:19:5b:ec:f8:
                    0e:e1:34:da:a2:ed:cb:ec:95:4a:b8:32:c6:e9:48:
                    b4:3f:64:d9:9d:9f:d1:04:6a:0a:d7:06:06:9f:95:
                    de:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6B:55:36:00:61:8A:B0:AF:B9:52:0E:92:7E:5C:86:6B:89:04:7C
            X509v3 Authority Key Identifier:
                keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0a:cb:02:d5:33:d3:57:c0:a1:32:fd:63:23:4d:da:f6:f2:
         d7:06:8b:34:5b:85:dd:a4:84:23:4b:fb:7f:7e:d8:49:90:14:
         45:bc:6a:cc:79:4f:71:86:83:bf:f7:d0:06:0e:5a:19:1b:b4:
         f5:63:f8:41:67:c1:76:42:6f:30:85:f1:13:5f:3b:ad:83:4f:
         73:47:ac:ac:87:ef:f5:9f:71:76:e6:68:dd:07:b3:91:1e:d1:
         4b:d3:bc:b8:be:5b:47:cd:89:27:e1:e2:d8:05:a2:eb:c3:aa:
         eb:e6:ed:f7:00:3a:8f:98:40:63:d8:05:cd:4c:b1:6c:72:42:
         05:24:a3:d0:04:2a:74:e8:45:55:fc:d1:14:f2:49:35:9e:c9:
         f3:9e:35:7b:c1:e9:96:df:5d:75:40:6f:ac:54:9b:36:fb:bd:
         8e:8b:ba:cd:3d:d7:b9:90:0f:a7:9f:cf:46:f4:dc:a7:79:27:
         8a:93:cb:e3:d7:f0:20:cf:b8:16:13:ec:ba:f2:0e:5d:f8:c0:
         c6:a1:b2:ca:d5:29:0f:fe:32:3d:af:95:5b:6a:9a:96:63:a6:
         59:7f:68:e8:3a:d6:40:1f:01:8c:3b:8c:05:34:b8:35:cd:7a:
         d8:9e:e7:57:1e:68:cd:b4:88:bd:01:90:3e:2b:dc:39:d6:31:
         2f:f5:a2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:09 2026 by rpki-client