Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File:                     j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier:          TR/Mx5KLrB+ARQBd+vt4boFpUcZLGqYLZO9JYGXUYvc=
Subject key identifier:   79:6F:70:2D:50:5A:CF:AF:73:41:84:66:DB:33:6A:C5:81:B5:98:A1
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer:       /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial:       019E1DC77CC53EAB1869241B73294CFEDBDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 20:01:13 +0000
Manifest this update:     Tue 12 May 2026 20:01:13 +0000
Manifest next update:     Wed 13 May 2026 20:01:13 +0000
Files and hashes:         1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: zz1Pz7wbeHQXX25e8mpWtEukxd9nPVcqCGgtCHUILSk=)
                          2: psZNmPYVql98KxRd5_J9v8TyFDo.roa (hash: 83pmxITkPLNCEyrAljxQNeti1DcWIEULoY0Jkfv3Y08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:7c:c5:3e:ab:18:69:24:1b:73:29:4c:fe:db:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
        Validity
            Not Before: May 12 20:01:13 2026 GMT
            Not After : May 13 20:01:13 2026 GMT
        Subject: CN=796f702d505acfaf73418466db336ac581b598a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:35:09:b7:07:c7:5c:8d:cb:21:bb:0a:1a:90:
                    47:c9:18:9a:99:19:8f:8f:fa:b3:86:dc:b7:27:ff:
                    d0:d1:fb:75:35:6c:98:38:05:8c:77:e8:f7:21:ca:
                    b4:d6:26:7a:dc:31:64:9b:90:1e:d8:40:9d:0f:49:
                    c8:e3:47:26:bd:c3:fb:68:c7:d1:e4:dc:4c:99:8c:
                    57:78:86:c6:71:ef:ba:ba:85:6b:3f:08:cd:85:ed:
                    d0:ea:4e:1b:49:2b:00:63:d5:bd:9e:32:5c:8f:7d:
                    22:c3:1d:e1:37:31:eb:b1:2a:00:28:7d:c7:4b:f5:
                    e8:6a:d1:8f:57:40:9d:4e:91:3b:a5:88:0a:11:f8:
                    9b:2c:6b:e6:67:3b:ea:49:c8:a3:d6:be:b6:5e:08:
                    4e:88:19:79:6d:76:a2:42:49:b2:b9:9f:5f:92:a6:
                    9d:4d:34:96:77:28:d5:52:af:87:7a:f8:d1:ee:de:
                    b9:53:b6:a9:79:3b:a7:42:a7:7a:0d:a9:ba:ee:93:
                    42:c7:5d:b2:26:c4:83:14:eb:84:84:a9:99:68:22:
                    ce:b4:11:bb:5d:e5:c0:48:52:e0:8a:91:b8:44:a5:
                    31:29:34:02:7e:37:35:08:b4:7f:24:c8:d5:02:5c:
                    e3:10:28:3e:c5:4f:fc:75:ff:6f:6a:0f:76:90:e3:
                    c0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6F:70:2D:50:5A:CF:AF:73:41:84:66:DB:33:6A:C5:81:B5:98:A1
            X509v3 Authority Key Identifier:
                keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:dd:f7:4f:ff:3f:2b:e9:3a:9f:37:80:8d:8e:c5:8b:8e:c6:
         b2:48:af:51:a1:8b:cd:4c:ca:06:44:af:f6:3e:25:ad:d4:74:
         48:2a:6a:f3:f3:ad:5f:af:96:cd:70:c7:dc:fe:02:2f:be:b5:
         3d:74:5a:c5:d9:e2:a4:f3:18:68:b6:c0:6e:cd:63:c2:33:41:
         aa:55:a9:23:71:67:6c:8b:02:3c:ae:73:ae:96:ba:18:dc:4c:
         01:2b:f0:7f:15:1c:77:9b:32:92:ce:1b:fb:c5:78:c3:8e:82:
         46:aa:3f:a2:55:c2:e6:eb:9a:18:2a:a9:94:fd:2e:81:6a:d2:
         b5:ed:b2:4d:58:2c:1f:d4:0c:28:d4:3c:ef:51:f9:e6:92:8d:
         47:aa:15:61:1b:27:91:1f:23:16:e7:c2:42:b7:bf:86:4a:5a:
         96:b9:2f:b1:9e:f5:25:18:1f:44:25:63:57:1c:1b:ca:df:e5:
         92:61:03:c7:60:ce:bc:6c:df:32:78:6b:de:cf:1c:97:e0:51:
         f8:89:74:c6:30:58:cd:75:3d:42:04:f8:61:a6:92:fd:9e:0d:
         24:34:17:d3:5c:28:b1:ab:75:8b:04:f6:5c:de:10:60:60:a2:
         e2:85:8c:6e:a5:3f:45:62:89:e7:f3:c1:8b:eb:db:30:09:97:
         4c:33:79:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:56 2026 by rpki-client