Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File:                     JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier:          pJysTI2iTG44s8KLHPirGk7yTINLT6Tj8MtFaDdTDHo=
Subject key identifier:   24:A2:90:8D:73:03:F7:40:5D:77:08:FB:E4:74:7C:12:D8:6C:57:34
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer:       /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial:       019E1F7F2786635953B4F228F9606FB5FDC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number:          0636
Signing time:             Wed 13 May 2026 04:01:27 +0000
Manifest this update:     Wed 13 May 2026 04:01:27 +0000
Manifest next update:     Thu 14 May 2026 04:01:27 +0000
Files and hashes:         1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: G1Q/o96kUAFH5dKYPGYAWLOeVLmKcuhSa0EbIQ03Lbg=)
                          2: _Y_601F6eAt7O-baCpdg3BQDJXc.roa (hash: vyG9YG54wVQIAnIU/YKZPIrIY0HUdh61Oh6KNWA0bnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:27:86:63:59:53:b4:f2:28:f9:60:6f:b5:fd:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
        Validity
            Not Before: May 13 04:01:27 2026 GMT
            Not After : May 14 04:01:27 2026 GMT
        Subject: CN=24a2908d7303f7405d7708fbe4747c12d86c5734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:ce:7a:04:5f:d7:b3:b5:9e:93:d9:15:4e:
                    e5:be:78:6c:fb:05:4b:54:28:29:bf:ed:cd:61:05:
                    d7:39:cf:05:8a:02:27:ea:52:ce:4d:84:d3:f0:72:
                    fc:7f:3f:2f:d7:17:a9:62:22:d0:a5:fc:91:d6:a3:
                    51:24:be:f6:c3:25:4a:46:a0:08:31:df:d2:2d:9b:
                    5e:36:9b:49:33:1f:76:66:a2:d1:7f:4a:02:fb:dc:
                    0b:25:6e:4d:b9:74:04:9f:95:55:c7:62:49:d1:81:
                    cd:62:4f:76:de:68:97:6e:11:42:4d:04:72:37:01:
                    88:35:60:4b:33:52:77:37:37:06:3d:80:ff:b5:4e:
                    40:9c:38:9b:18:bc:97:15:2d:7e:c3:1c:b6:f3:22:
                    38:38:3d:7b:05:d0:06:e6:b4:45:94:ef:aa:44:52:
                    22:8d:10:fb:b2:6e:2c:45:55:52:f6:68:dc:f2:24:
                    73:bf:c8:51:c3:8b:b5:17:bd:aa:15:34:38:de:6c:
                    18:62:3f:31:e7:53:a5:b7:bd:48:f2:1f:4c:b0:37:
                    6d:bb:fb:a3:9c:87:25:18:74:13:22:db:79:14:57:
                    91:53:da:56:51:fe:21:16:2f:3a:84:88:94:bd:b1:
                    92:b6:56:4f:0d:f7:57:cb:c1:29:8f:bf:a4:0a:a3:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A2:90:8D:73:03:F7:40:5D:77:08:FB:E4:74:7C:12:D8:6C:57:34
            X509v3 Authority Key Identifier:
                keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:72:ba:35:5a:f6:c4:f8:cd:c1:0f:18:b4:99:38:c8:66:3d:
         60:d4:b3:50:83:e2:17:7b:2c:e8:84:70:ad:48:c8:ff:18:64:
         aa:44:71:e8:43:bd:62:e9:5f:52:e5:d6:90:25:92:26:da:d7:
         60:e3:8c:1d:b4:3e:f5:69:cd:4f:37:98:0e:14:cd:85:db:e9:
         5b:78:7f:82:00:12:b9:84:97:37:8f:a0:5f:16:91:a5:56:4a:
         48:46:8c:0c:e2:f5:0f:39:e3:21:ef:9e:39:e7:d1:fe:aa:4a:
         9e:34:a4:a4:65:90:36:ff:b0:87:12:ad:ea:1d:d2:20:fa:95:
         73:38:d7:ff:4e:c6:ef:8a:7d:ee:35:91:b9:a1:03:29:09:ef:
         35:1f:87:b8:44:93:48:5c:2d:50:5c:5c:23:9f:09:a2:d8:23:
         a0:da:cd:f1:2e:71:0f:49:e3:78:96:83:96:12:84:10:db:93:
         6e:a9:69:eb:70:af:1a:39:3f:5c:2a:ae:e1:ea:d9:ca:73:45:
         d0:0e:b6:bc:a0:df:93:46:3d:75:e3:18:56:a4:6e:c1:9c:3c:
         df:71:d7:b2:1b:e7:54:d5:7b:2e:54:ea:80:7c:ac:08:00:a8:
         ee:4b:0c:f0:4f:fd:4e:8e:46:f9:50:dc:aa:14:99:7e:d5:1d:
         1c:6e:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:20 2026 by rpki-client