Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
File:                     JavmeyHTI7KytELGsGrjLMKANY0.mft (raw, json)
Hash identifier:          9Fz+kKmUMtOmRCrhPRrMfW7T7nKYBbowmeQbM+uokU8=
Subject key identifier:   E0:F1:23:0A:EA:07:82:A1:2B:8C:A2:6D:C4:46:EA:A3:4D:7B:4C:D3
Authority key identifier: 25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
Certificate issuer:       /CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Certificate serial:       019E1EA3CC790893481A696F45C653022A5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
Manifest number:          0C3A
Signing time:             Wed 13 May 2026 00:01:51 +0000
Manifest this update:     Wed 13 May 2026 00:01:51 +0000
Manifest next update:     Thu 14 May 2026 00:01:51 +0000
Files and hashes:         1: Du-XM-c7cfjHmKd00CKR9makRlg.roa (hash: bZdNBjpYg86yMRtuooKH77vDZynRPwu50M4bVcyHluQ=)
                          2: JavmeyHTI7KytELGsGrjLMKANY0.crl (hash: XUVuu28xMlSP2ICZgkfaCP6U6qxUQW65uidVzZ9gKHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:cc:79:08:93:48:1a:69:6f:45:c6:53:02:2a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
        Validity
            Not Before: May 13 00:01:51 2026 GMT
            Not After : May 14 00:01:51 2026 GMT
        Subject: CN=e0f1230aea0782a12b8ca26dc446eaa34d7b4cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:f1:8f:24:51:a4:05:ca:af:0d:83:6e:63:
                    50:18:13:81:16:97:9a:d3:b7:55:8b:70:19:37:cc:
                    1f:74:7a:51:1f:bd:ed:de:76:4c:63:06:51:13:e1:
                    6c:0c:59:e1:72:36:e7:89:d0:ab:0b:29:8f:9d:0d:
                    f3:34:18:ca:2a:3c:0e:c1:e3:15:89:50:a8:67:95:
                    b0:7a:3e:51:f1:d9:c2:1d:74:b5:03:4b:15:7d:a4:
                    e7:a0:f6:40:8c:b7:e7:d9:40:a5:ff:be:b6:c4:d3:
                    a0:6b:77:14:35:97:be:67:ac:c3:6a:ae:55:9f:57:
                    e7:b4:9a:69:0a:2f:e1:7a:f6:81:08:40:81:9a:cb:
                    92:4c:fb:e2:41:d0:d1:e2:b5:83:c8:89:b2:cd:89:
                    fb:51:bf:46:a9:ba:93:cf:f1:db:ad:87:f2:27:52:
                    e4:c1:27:2d:1b:28:60:89:96:76:f8:ba:93:32:88:
                    94:2a:13:9f:b0:20:f3:60:60:d5:e7:57:99:bb:12:
                    ee:fd:91:5f:de:b7:89:c0:7b:a0:11:5f:17:59:7b:
                    d7:92:f5:b9:8b:80:17:40:76:13:82:16:df:e0:68:
                    05:fa:b3:4d:9f:7d:a3:fe:73:a5:a9:04:a7:dc:50:
                    41:d2:4f:f0:43:9b:62:ab:ec:98:8f:f7:bf:c0:94:
                    82:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F1:23:0A:EA:07:82:A1:2B:8C:A2:6D:C4:46:EA:A3:4D:7B:4C:D3
            X509v3 Authority Key Identifier:
                keyid:25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0c:5d:0e:3f:94:a9:2d:43:78:9f:e3:56:b7:e7:c9:73:e1:
         5f:a2:b7:30:08:09:a8:dd:95:f8:36:4f:e5:1a:42:87:72:80:
         df:6e:95:de:6d:97:c3:f2:75:c2:22:fb:31:d3:34:f4:ea:58:
         8b:b9:11:97:a0:c7:40:4b:bc:9d:db:90:f2:70:79:ff:9b:d9:
         99:6a:99:6e:a4:46:2f:75:99:ad:67:b7:2c:57:35:ab:ba:87:
         ac:eb:59:90:81:8d:3c:c5:c7:61:0c:84:a1:9b:94:50:87:08:
         fe:cc:bd:7a:41:5f:10:5f:5d:8c:4a:7b:d1:4e:05:de:42:34:
         9f:1c:3e:81:a1:41:69:95:cc:fd:01:bb:ed:d4:f0:51:12:74:
         e2:fb:75:3a:0a:41:98:31:e0:1a:13:4b:8a:e2:91:a7:71:71:
         45:a3:d1:86:c2:22:aa:ae:1b:0c:28:00:3a:6d:44:cf:80:3e:
         be:a5:b7:b5:64:29:d3:48:d3:9d:33:30:75:e8:3a:57:8a:22:
         f6:4b:f5:74:b4:a9:46:fc:39:f4:21:f8:ae:c9:79:32:cb:2b:
         0a:2a:a0:bc:18:bf:ee:75:17:81:59:9b:01:76:35:5b:34:c7:
         3a:ae:d8:b1:90:c1:61:4b:ec:6f:62:3d:f4:e4:1f:a6:f4:d4:
         25:99:33:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:04 2026 by rpki-client