Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File:                     JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier:          Ii10uz5p6YCvT/g4cSmIS6jgn5eCul4QvxweMroIUC0=
Subject key identifier:   ED:D2:19:6E:63:42:0C:CA:13:09:37:C7:A4:69:44:2F:F2:E9:19:2D
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer:       /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial:       019E1E6CC18068A964DDA8CC9093C9916302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number:          0627
Signing time:             Tue 12 May 2026 23:01:44 +0000
Manifest this update:     Tue 12 May 2026 23:01:44 +0000
Manifest next update:     Wed 13 May 2026 23:01:44 +0000
Files and hashes:         1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: ez3JzI5wJYxR/C8O+6MktwCGw7Bx8OgIP5XUDIyBO1Q=)
                          2: gUQyWeEpQgGbTNbqg5fkirZYaTk.roa (hash: Uag44MrYWD7AlqlTHqDCPjaMLMN6/SqLUtWcxqj+gh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:c1:80:68:a9:64:dd:a8:cc:90:93:c9:91:63:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
        Validity
            Not Before: May 12 23:01:44 2026 GMT
            Not After : May 13 23:01:44 2026 GMT
        Subject: CN=edd2196e63420cca130937c7a469442ff2e9192d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:df:c1:c1:76:91:e4:fc:d6:00:fe:15:df:
                    d7:c0:a0:81:5f:98:4c:26:a7:25:5a:fa:61:23:94:
                    50:6b:2b:62:63:5c:55:48:08:97:aa:f8:7d:70:b8:
                    f2:5a:ae:6d:c8:79:6f:f6:d5:48:c8:5e:fe:23:f1:
                    03:2a:e7:bb:d9:22:0b:7c:ec:ca:8b:12:85:ec:59:
                    a1:a8:2c:93:58:be:a7:94:2c:02:cf:e5:25:c7:26:
                    2d:7d:38:0d:ce:c1:9b:f3:ba:b4:d4:c5:06:8b:9d:
                    85:84:d2:87:b2:e4:92:44:95:76:fb:65:3d:96:3d:
                    39:6a:6a:fa:e8:b4:b8:79:55:69:f8:ab:25:2f:20:
                    4b:e0:75:cd:e0:d6:2b:cc:b5:72:20:03:93:b4:d1:
                    3b:9c:1c:c5:bf:b1:c6:ed:f1:39:b4:49:73:05:8b:
                    08:dc:ce:21:06:24:3a:2c:59:55:92:97:8f:da:3c:
                    13:7e:09:2f:ad:9f:82:49:36:cd:5f:d8:71:1e:e8:
                    7c:d9:21:bd:53:2e:86:15:3e:f4:d5:f2:e6:05:44:
                    a3:ce:de:3f:c4:39:ba:61:d7:38:5f:02:73:d5:cc:
                    ca:50:d4:fd:de:cf:02:11:22:d6:f4:8c:25:2a:8f:
                    ab:c1:91:dd:be:32:99:92:f0:79:8f:80:05:c7:2f:
                    e8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D2:19:6E:63:42:0C:CA:13:09:37:C7:A4:69:44:2F:F2:E9:19:2D
            X509v3 Authority Key Identifier:
                keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ad:43:97:36:18:07:83:fe:0f:26:6d:04:fa:2a:d0:83:6b:
         2e:99:a2:83:3c:62:b7:e1:20:01:0f:6f:47:82:4e:fd:ac:d7:
         c4:58:15:54:01:f9:9a:e9:7c:ee:27:f7:a4:0a:9e:a2:44:76:
         37:6f:6d:ca:70:ca:89:b5:8b:0f:d7:4a:07:2f:58:de:03:fd:
         77:e0:47:30:3a:e9:1a:86:5e:ce:39:9e:37:9b:78:12:2c:04:
         e8:98:af:8a:87:3b:0b:da:e7:08:83:7f:47:66:21:6f:dc:e9:
         cc:d3:46:7a:2d:9c:10:44:ac:66:13:c2:91:14:97:54:90:97:
         9d:6d:e4:a0:68:a2:3d:80:46:fa:4b:5d:0d:42:63:39:d1:1f:
         c0:f2:71:c5:d3:fd:a8:b4:ed:f2:cb:1b:de:3a:46:66:36:4c:
         8b:22:83:c5:dc:56:78:c4:01:7d:cf:7d:df:79:bb:77:f9:be:
         71:a8:3d:af:61:6d:a4:aa:16:11:b8:cd:bc:10:0e:9c:ed:13:
         11:24:7d:8d:f6:4b:00:5d:65:96:c9:a0:e8:56:3e:bf:86:22:
         7a:61:c3:a3:72:25:ff:2c:aa:eb:f9:58:b0:bb:ca:bd:4c:07:
         a3:17:08:7d:b3:84:e7:6c:80:7a:cf:0a:b1:8f:c8:a0:94:5a:
         46:e3:fb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:26:37 2026 by rpki-client