Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
File:                     jnruNVn8wxv-137s6LdHnI6Fals.mft (raw, json)
Hash identifier:          Vb/gytTVULnFv34MvmENmcOUxeeaxwgiHOEG+G3wVTY=
Subject key identifier:   50:D7:6E:71:B9:A7:81:41:C1:0A:7F:1D:04:4B:CE:A7:17:1D:E3:4F
Authority key identifier: 8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B
Certificate issuer:       /CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
Certificate serial:       019E20919EEAB85C67A2DEBA9C4AB18C12CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
Manifest number:          1905
Signing time:             Wed 13 May 2026 09:01:14 +0000
Manifest this update:     Wed 13 May 2026 09:01:14 +0000
Manifest next update:     Thu 14 May 2026 09:01:14 +0000
Files and hashes:         1: 4bTXmGhsxtuFXj4LFcQly9l8q-g.roa (hash: vtBxAeTUSDqb7QyMrleFLdTGUG4t5qmz9DhHOiNE2wM=)
                          2: jnruNVn8wxv-137s6LdHnI6Fals.crl (hash: +bzYv0TrT5u1YlzHCCVicW3XnJjlmAJR1094jxahhpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 09:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:9e:ea:b8:5c:67:a2:de:ba:9c:4a:b1:8c:12:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
        Validity
            Not Before: May 13 09:01:14 2026 GMT
            Not After : May 14 09:01:14 2026 GMT
        Subject: CN=50d76e71b9a78141c10a7f1d044bcea7171de34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:39:e5:5d:ea:ec:e8:72:7a:68:a9:14:71:00:
                    52:f4:1e:2c:bf:18:00:91:5c:03:1e:ad:ab:dc:a6:
                    cb:3c:60:1c:5b:22:3b:5a:00:e5:91:31:7d:35:3c:
                    55:a5:ec:e0:a3:37:10:e3:37:83:20:b3:c7:4f:99:
                    24:93:8a:16:93:6d:f7:56:8b:6c:dc:60:a8:26:69:
                    b4:ca:66:df:ee:f8:de:8b:d4:4f:db:a9:f4:11:a9:
                    c5:df:c0:b4:b1:1a:f9:27:df:04:20:05:c1:43:64:
                    67:eb:43:1f:ae:8f:a7:2b:3f:76:3d:a7:34:f2:c2:
                    78:f1:f1:31:fc:4c:f2:17:82:53:dd:07:4d:85:ea:
                    f9:1f:56:7a:19:39:05:fd:7c:c1:b5:bb:2a:4c:e9:
                    70:93:f3:4d:a6:f6:11:1f:a4:03:20:f8:ee:f1:6d:
                    21:2a:e0:53:3a:eb:8e:dd:b6:5d:8c:8c:a8:e1:7b:
                    c2:96:a1:cc:83:bd:c8:16:37:7c:72:ba:14:82:38:
                    c7:b6:05:b8:a7:54:99:cb:11:f9:7d:ed:c5:8b:40:
                    8e:27:35:8e:c7:f3:05:d9:d1:d1:7b:9d:ae:77:2d:
                    3d:24:0d:4a:98:ff:1e:06:2c:3b:e3:3e:c1:d4:74:
                    4f:df:f6:80:ec:7b:5f:dc:0d:31:43:d7:26:68:71:
                    17:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D7:6E:71:B9:A7:81:41:C1:0A:7F:1D:04:4B:CE:A7:17:1D:E3:4F
            X509v3 Authority Key Identifier:
                keyid:8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:42:49:3a:5c:97:02:a9:0a:9d:5a:3e:4d:eb:a2:5b:10:70:
         68:b7:6d:27:7c:74:fc:ef:cb:93:09:bd:c0:eb:f2:69:63:e2:
         b0:61:df:c7:3c:3b:28:3f:41:2c:d3:1e:1b:2f:95:70:8d:65:
         c8:98:52:5b:09:db:b9:e9:c8:da:e8:1c:c1:a2:d7:9a:66:5c:
         7b:50:e3:b6:b6:f8:94:67:24:c6:d5:66:77:e4:c1:06:57:d9:
         7f:4c:5a:ab:17:ab:df:8d:2e:b3:7f:7b:fb:01:37:80:ef:59:
         74:7f:d1:80:a0:34:65:7a:d4:54:38:fd:b7:17:75:3f:68:dc:
         e3:60:8d:5a:b3:e1:15:a3:e9:66:89:0c:bf:2d:81:55:02:b1:
         28:f8:0a:f1:79:1b:53:a0:ce:02:8a:03:55:cf:f5:55:d5:14:
         a5:73:9c:36:d3:c1:61:21:92:27:bf:09:79:d3:f6:0f:35:af:
         8e:c6:7e:5b:d4:95:08:ce:2e:d2:91:87:58:c6:29:e4:bb:ee:
         a6:ec:cf:7c:f5:08:33:10:68:7e:ee:ca:eb:b9:de:76:90:5d:
         b8:44:1a:c4:e8:51:ba:ad:96:c8:07:7c:e0:3d:35:6b:d7:6e:
         03:e8:cd:be:64:9e:ef:70:de:08:7e:55:c9:d3:cd:32:0e:a1:
         4d:a7:48:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:57:31 2026 by rpki-client