Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
File:                     Jw__IYVmW535AIyeG-YmARiafXw.mft (raw, json)
Hash identifier:          NjuaQogHamg5kPsp7T10u2zXg+E0nan2FbZTG2p/y1I=
Subject key identifier:   50:BA:68:BC:F1:80:93:85:27:30:4E:66:69:99:C5:50:4F:6B:6A:31
Authority key identifier: 27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C
Certificate issuer:       /CN=270fff2185665b9df9008c9e1be62601189a7d7c
Certificate serial:       019E1F10E4BE893EEE2C8ACCA73EB9F9D456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
Manifest number:          0CB0
Signing time:             Wed 13 May 2026 02:01:01 +0000
Manifest this update:     Wed 13 May 2026 02:01:01 +0000
Manifest next update:     Thu 14 May 2026 02:01:01 +0000
Files and hashes:         1: Jw__IYVmW535AIyeG-YmARiafXw.crl (hash: mq339otR4Dr+EmpXBYMKyl8HN6ABM4Sf0nANsyQDg/I=)
                          2: iedupfr9QK50wIN0wozy7_kWP9g.roa (hash: 9oaIzU1IMMqazdot348K8ie6tvqf50Lv+z07QI0mEXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:e4:be:89:3e:ee:2c:8a:cc:a7:3e:b9:f9:d4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270fff2185665b9df9008c9e1be62601189a7d7c
        Validity
            Not Before: May 13 02:01:01 2026 GMT
            Not After : May 14 02:01:01 2026 GMT
        Subject: CN=50ba68bcf180938527304e666999c5504f6b6a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:c8:dd:95:30:45:ad:7a:32:92:5c:f5:ec:
                    08:bb:72:f9:28:51:52:37:dc:bc:64:cd:eb:af:c9:
                    d5:ca:ac:3d:ab:d3:dc:75:d3:82:2e:ee:50:a6:e6:
                    0f:a0:86:ff:72:c2:03:da:52:fc:f6:0d:a0:3c:cc:
                    f1:2e:af:0d:87:88:58:24:66:b2:c6:cf:89:3f:a4:
                    ef:6c:b5:b0:9d:e9:07:c5:80:9f:42:00:81:8f:57:
                    47:3c:63:bd:82:26:40:34:c6:40:fe:17:a3:9f:4f:
                    6d:56:c3:eb:d2:3a:5a:6f:79:be:83:f1:32:91:cc:
                    02:cd:a8:e3:51:b6:c7:72:c4:7b:de:fc:e3:45:01:
                    db:3e:98:38:c6:53:11:40:e4:3f:39:ac:7f:c5:43:
                    46:55:f9:b1:f3:a9:f8:bc:c8:01:97:52:0a:09:6c:
                    59:f2:ad:7e:58:24:77:cc:d0:e5:58:9a:6c:6f:1d:
                    ce:56:dc:f5:7c:d2:fd:a0:2e:af:cd:96:00:05:c7:
                    0d:8a:c4:2a:f4:7c:9b:55:24:86:36:2d:b1:77:e4:
                    d5:a6:07:1c:a1:12:b4:00:7b:94:d1:7d:14:9b:29:
                    a2:76:60:e3:64:84:98:59:04:d1:67:ed:6e:42:a0:
                    03:b3:8f:a4:1f:81:55:2c:35:db:5a:81:9b:c8:86:
                    bb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BA:68:BC:F1:80:93:85:27:30:4E:66:69:99:C5:50:4F:6B:6A:31
            X509v3 Authority Key Identifier:
                keyid:27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:05:68:a3:8b:03:31:15:51:93:ed:f3:26:80:25:a5:83:f5:
         9a:e8:97:c1:c2:e2:93:88:10:c1:52:73:fc:6e:02:d1:ff:e7:
         34:a6:06:b6:3c:2b:cf:37:1b:ba:09:38:94:4f:f1:ea:76:79:
         41:85:c1:ed:d8:2f:66:19:aa:6a:30:b4:26:23:c8:c1:f8:84:
         ff:65:94:4f:3f:d5:46:74:2a:89:42:13:35:de:e1:bb:49:58:
         8a:b4:f0:dc:ca:e9:30:59:07:c7:c7:b2:71:bb:91:97:03:01:
         cd:c8:3e:97:94:90:a9:fa:c2:81:e1:8b:bd:41:0b:8d:4f:c0:
         38:a9:42:d4:02:1d:6d:f9:99:0d:d7:f2:08:0e:45:ca:14:40:
         5f:ce:ce:02:c8:58:2d:6f:92:79:31:00:84:20:1a:46:01:52:
         74:ed:78:3b:e4:fe:2f:95:30:27:d2:c4:17:72:0d:be:c9:1e:
         d5:8a:c9:5d:2b:f2:1d:4c:8e:4b:41:f2:6b:b1:5e:26:02:e8:
         fe:f0:90:80:7b:7a:32:a7:a5:61:ed:cd:c2:7b:ff:32:57:76:
         93:89:64:35:dd:e3:4d:ef:ea:a3:91:01:e8:63:9a:80:ca:42:
         b6:1c:05:3c:72:f8:b5:d7:f3:3a:7b:75:cf:10:94:94:0f:1a:
         ff:b6:d4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:03:14 2026 by rpki-client