Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
File:                     jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft (raw, json)
Hash identifier:          cqGDdGtSLy/gU2p76xJTNoKOPabYot2Q1tM4G4YtYfI=
Subject key identifier:   44:93:E6:63:40:DD:5F:C8:34:F6:53:32:13:F9:1B:D6:B2:75:EF:D5
Authority key identifier: 8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9
Certificate issuer:       /CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
Certificate serial:       019E1F7EA8CD72C4806138518C9664E0716F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
Manifest number:          011C
Signing time:             Wed 13 May 2026 04:00:54 +0000
Manifest this update:     Wed 13 May 2026 04:00:54 +0000
Manifest next update:     Thu 14 May 2026 04:00:54 +0000
Files and hashes:         1: gBhIlR2Vy9wZybBnJlISzDPwKZ8.roa (hash: 1heXPqmld/OvbyWoLXACStGWieBaqsBslRtSrtYIOUw=)
                          2: jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl (hash: m36Lo6HCEiVkRixmZF75PzNhLWJeKDTQAaaj3T6Yx3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:a8:cd:72:c4:80:61:38:51:8c:96:64:e0:71:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
        Validity
            Not Before: May 13 04:00:54 2026 GMT
            Not After : May 14 04:00:54 2026 GMT
        Subject: CN=4493e66340dd5fc834f6533213f91bd6b275efd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:6c:3b:55:56:a9:b6:83:03:38:1d:33:4d:
                    38:47:9e:5c:17:f3:eb:ab:99:66:d4:bf:e7:0e:2a:
                    4f:60:d6:f2:00:92:7a:61:b8:e5:9b:22:7a:4d:57:
                    f4:49:47:c6:f8:66:c4:84:72:50:f0:b0:47:69:26:
                    7e:bc:22:3c:38:94:1c:fe:a2:20:3b:79:d1:fd:ea:
                    62:a0:31:a4:e8:cf:40:0e:6d:09:64:2b:a0:e2:d8:
                    fa:b7:00:9c:ed:4d:2f:b9:41:98:78:71:e5:ef:3c:
                    c0:75:52:9c:2b:98:c4:0b:b5:fd:d9:41:54:1b:4d:
                    10:2b:86:9a:1c:ea:b4:c4:ab:3f:5a:cc:77:59:37:
                    35:7c:78:82:e9:a2:00:4d:f6:7a:d6:7f:80:9b:71:
                    92:f0:b7:91:4e:95:ef:69:b5:56:e7:69:da:ee:4d:
                    85:95:79:fb:6f:d5:33:21:73:16:e2:ea:ce:a3:fb:
                    45:db:7a:b6:44:86:a5:de:2f:f6:f7:b5:89:ec:22:
                    59:62:c2:f4:32:31:c2:d7:ff:69:6a:c0:26:a7:d5:
                    6a:f0:9c:f0:6d:ee:e9:63:2d:1c:b0:3d:d9:7e:fa:
                    ab:80:b4:dc:3e:96:86:fb:f3:61:a0:c0:93:57:33:
                    12:89:75:30:55:ce:da:72:2a:32:5f:53:55:bc:96:
                    02:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:93:E6:63:40:DD:5F:C8:34:F6:53:32:13:F9:1B:D6:B2:75:EF:D5
            X509v3 Authority Key Identifier:
                keyid:8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c8:31:20:ea:0e:0a:ea:67:b7:ae:b2:c8:77:9d:68:88:2d:
         db:95:42:47:9c:b3:d2:2f:03:a3:e2:d4:82:26:a8:cd:43:1a:
         3f:e5:04:c0:22:a4:d3:8f:50:fa:d6:ae:f3:c4:e0:72:8f:29:
         96:2a:0a:07:ef:1f:4b:bd:cf:d7:8f:c3:9c:c9:75:59:91:a2:
         03:85:6c:53:ca:44:d5:bb:4c:5f:52:90:62:16:3f:8b:02:8d:
         93:2f:f6:9f:bf:ea:c9:75:b2:61:04:00:38:af:11:7b:9b:89:
         d8:a3:ff:78:82:6e:dc:0b:60:4a:97:ce:a5:84:4f:79:27:4a:
         fd:78:b1:cc:be:ea:24:a2:5c:0a:90:1d:02:19:2b:5b:75:15:
         d2:1f:40:5c:24:5e:82:87:96:9a:25:2a:fa:cb:c7:40:d8:27:
         54:1f:93:ab:a6:9a:6e:2b:4f:12:2e:84:6b:f0:31:7e:b8:96:
         18:97:5d:72:6c:67:ee:9e:ab:6d:19:13:59:ad:7d:4f:02:c9:
         55:3f:b4:e9:c2:68:cd:07:83:bc:9c:1a:83:cf:19:fb:9d:b0:
         a3:60:44:72:91:e0:5b:bf:f3:a0:27:fa:2f:59:be:d5:98:8a:
         1c:77:e9:f5:90:77:56:7b:c8:43:54:bc:c8:c9:d0:61:1a:f9:
         3e:bb:87:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:19 2026 by rpki-client