Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft
File:                     JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft (raw, json)
Hash identifier:          7rlwFVP4TQOvrU5I1g/MTj2BOjirOFNMWVbD1PU67Ek=
Subject key identifier:   E4:98:89:FD:D8:93:7B:EA:98:4A:A5:A7:FC:20:BF:C9:28:26:54:86
Authority key identifier: 25:46:7F:2D:5B:B2:35:5A:F7:5F:B4:7F:11:60:6D:81:58:9F:76:38
Certificate issuer:       /CN=25467f2d5bb2355af75fb47f11606d81589f7638
Certificate serial:       019E1DFE4D2098F395B6FE4C4A85FC133499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUZ_LVuyNVr3X7R_EWBtgVifdjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft
Manifest number:          90
Signing time:             Tue 12 May 2026 21:01:05 +0000
Manifest this update:     Tue 12 May 2026 21:01:05 +0000
Manifest next update:     Wed 13 May 2026 21:01:05 +0000
Files and hashes:         1: A-DXg-M5jvEoV7mt-5nVIAB_Z0g.roa (hash: SrntviZ4+NLJCPuFucg/3YO9L4f5luqtxUvspbJaNHI=)
                          2: JUZ_LVuyNVr3X7R_EWBtgVifdjg.crl (hash: 3HBOZXm+h/Lw+ou0JJzvW8r/eJueyCNEy6EP06Gv7rU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUZ_LVuyNVr3X7R_EWBtgVifdjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:4d:20:98:f3:95:b6:fe:4c:4a:85:fc:13:34:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25467f2d5bb2355af75fb47f11606d81589f7638
        Validity
            Not Before: May 12 21:01:05 2026 GMT
            Not After : May 13 21:01:05 2026 GMT
        Subject: CN=e49889fdd8937bea984aa5a7fc20bfc928265486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:a3:12:9d:ca:86:a4:00:18:12:25:95:82:
                    58:95:cc:36:bc:ec:37:44:82:75:af:77:c8:1d:c5:
                    6a:3c:5c:bc:c3:c3:c0:d0:30:3c:e1:0d:ec:c2:ef:
                    28:52:3e:ff:c6:c5:28:f4:6f:2a:4b:46:9d:25:5a:
                    dd:fe:e9:5f:ed:71:d5:9e:8c:bd:41:c4:83:76:ed:
                    43:aa:fe:d6:81:15:4c:33:e2:eb:af:05:37:70:b8:
                    6a:01:54:13:d9:a3:5d:10:b7:59:5f:62:fc:43:d4:
                    db:1e:5a:2c:63:c1:ea:34:b8:f7:e2:49:70:7b:97:
                    8e:56:00:72:c0:ca:c2:21:a3:dd:95:ba:ba:ef:e7:
                    27:9b:3a:77:aa:87:f4:9d:8f:68:a8:66:75:15:61:
                    b2:df:55:c6:16:84:21:c3:0a:2d:a2:49:a6:3b:d1:
                    30:f2:f0:af:8d:c0:a5:bb:38:93:18:a4:d6:cc:92:
                    63:c8:46:8e:66:e6:68:53:37:8b:05:0e:8c:3d:5e:
                    a1:5d:44:08:f1:35:2c:50:36:7c:3a:7b:2c:cd:ab:
                    0d:ac:00:0d:f6:bc:cc:c8:d4:38:c5:01:45:7e:26:
                    48:2a:db:ed:f2:fb:45:79:6b:b7:7c:9b:c0:d7:ce:
                    47:fc:56:49:15:e3:e1:19:d9:51:75:7e:b5:52:49:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:98:89:FD:D8:93:7B:EA:98:4A:A5:A7:FC:20:BF:C9:28:26:54:86
            X509v3 Authority Key Identifier:
                keyid:25:46:7F:2D:5B:B2:35:5A:F7:5F:B4:7F:11:60:6D:81:58:9F:76:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUZ_LVuyNVr3X7R_EWBtgVifdjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f8:62:ad:d5:4a:25:3c:57:76:eb:f2:3a:88:db:33:80:57:
         3c:cb:86:a6:75:93:17:64:bb:49:f9:fe:29:14:af:55:d5:ba:
         ef:ba:27:b9:85:48:6c:39:6e:06:ac:c0:04:a3:3b:27:66:1e:
         de:40:4a:74:fc:7c:eb:4a:ec:28:58:bf:20:34:74:07:3b:ad:
         3e:5b:dc:e0:d8:f1:f3:67:44:63:b9:c2:9f:49:07:d0:4d:f9:
         62:47:43:59:05:f8:c6:e0:a0:17:1a:b5:48:6d:7e:e3:d1:e0:
         f9:9e:1f:64:50:54:09:6f:ac:99:70:70:e9:a3:6b:be:87:a6:
         ba:ff:5e:b6:f0:03:44:28:67:e0:4a:bf:d2:96:3d:ce:cd:b9:
         b6:fa:11:95:87:d3:6b:70:3d:dd:b6:f4:73:d6:35:56:23:65:
         b8:f8:89:63:71:c2:e5:4b:04:42:2e:66:c5:24:16:1f:a0:65:
         5b:8a:8d:c8:4a:38:90:60:e8:da:3e:de:a4:29:dd:37:d3:7d:
         e0:88:a9:71:f2:f7:cd:52:0a:96:d5:cd:32:37:eb:29:6d:6f:
         d1:8e:da:20:07:51:85:3c:ec:1f:a3:d8:a4:81:68:6e:1a:e2:
         51:74:7a:c8:31:4c:83:df:d6:14:ad:11:e2:cb:f9:48:d1:04:
         5e:29:d3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:28:04 2026 by rpki-client