Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
File:                     jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json)
Hash identifier:          ejc15r+lERjcYO8KPq0ljtWkdOrU/Z9be166UwMB5Xo=
Subject key identifier:   F3:21:E8:1E:71:14:40:A9:6E:BC:B8:7C:73:12:EF:27:DF:58:04:B9
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Certificate issuer:       /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial:       019E2B1590BE25D3CAE7B61195726B6DDFC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
Manifest number:          091F
Signing time:             Fri 15 May 2026 10:01:34 +0000
Manifest this update:     Fri 15 May 2026 10:01:34 +0000
Manifest next update:     Sat 16 May 2026 10:01:34 +0000
Files and hashes:         1: e8Mv-HJ6D8Tr1tz4yMVlKW7nQ9M.roa (hash: 402UQjBKMqttHbRWH1YuGzDMxZFt0fOcnfUAAp+5oTg=)
                          2: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: 0h5M80iCs3/l/n1VXSzgY4S0zUYvmQx5NS0dx/xNLio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:15:90:be:25:d3:ca:e7:b6:11:95:72:6b:6d:df:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
        Validity
            Not Before: May 15 10:01:34 2026 GMT
            Not After : May 16 10:01:34 2026 GMT
        Subject: CN=f321e81e711440a96ebcb87c7312ef27df5804b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e4:15:9a:94:ff:92:44:e6:f0:41:94:9a:f9:
                    82:51:17:72:56:f8:a0:ad:83:ea:5c:45:d6:b6:6a:
                    d1:d5:fb:b1:99:84:a5:29:83:16:e4:36:d0:68:55:
                    c5:cb:f7:91:a5:c6:82:08:81:5c:d3:42:c8:98:a8:
                    32:15:40:4d:e2:d3:c5:f0:68:7e:dd:f3:2c:0a:b4:
                    da:53:7a:bd:ef:25:79:e5:5f:e5:99:c8:f7:37:bc:
                    e0:b5:f9:26:96:7e:23:7b:54:5e:cc:e0:b3:7a:fb:
                    17:51:13:39:ce:fd:47:c9:2d:be:d9:9c:11:a6:98:
                    64:fa:7a:7e:83:83:85:46:a0:7e:ac:b0:91:89:58:
                    f7:41:e5:12:21:8a:98:13:28:25:42:9e:28:7f:85:
                    75:53:79:80:af:75:17:75:9c:c7:20:a8:4d:4b:5d:
                    37:83:ea:d0:7a:a6:51:54:b1:aa:ee:80:93:a9:54:
                    18:0b:be:9e:ad:4d:f6:51:13:2d:4a:e9:77:1b:aa:
                    9f:01:3c:63:45:b2:a5:84:bb:02:a6:43:ff:52:87:
                    ae:c9:fa:47:85:c1:6a:d6:f4:c7:2e:89:da:8f:11:
                    6c:44:a0:1a:d6:ba:f9:02:2e:f9:94:be:4c:1d:bd:
                    cc:33:15:23:a6:c2:45:1d:f3:d9:b7:28:74:a8:5b:
                    13:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:21:E8:1E:71:14:40:A9:6E:BC:B8:7C:73:12:EF:27:DF:58:04:B9
            X509v3 Authority Key Identifier:
                keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a4:07:68:1a:25:4e:56:79:3b:ec:46:a6:8e:a2:fc:40:0e:
         10:4e:bb:9a:cd:a2:af:6c:7a:d6:b8:ca:95:1a:52:24:72:c2:
         11:2a:a0:0d:2f:c4:5f:76:8d:db:88:b7:e3:e7:70:f5:57:5c:
         fc:9e:ba:2c:63:d0:29:71:9b:dd:54:35:7d:22:28:6c:28:30:
         44:14:8e:e3:04:9b:e1:2c:be:a0:3a:e6:77:0e:ec:19:3a:e8:
         f1:c4:fe:4f:ad:1c:b9:cf:b7:a7:a2:36:03:b9:6f:f5:06:fb:
         37:ab:5d:b3:7e:e1:0c:a4:4d:24:a6:44:1e:88:67:2a:13:a1:
         55:1a:cf:b6:4b:83:e5:0b:f1:64:b0:41:c0:52:0d:8e:3c:10:
         16:f6:30:38:3f:85:0d:0a:9d:cc:78:2c:89:4a:aa:a1:84:94:
         1c:58:39:4e:b6:d4:22:21:d4:e0:ce:6f:98:fa:d3:48:7e:24:
         c9:f3:34:f4:af:74:05:d1:2a:2a:3a:11:d8:ee:d9:32:a3:71:
         ad:d7:a2:92:7d:02:b6:84:e9:f6:e5:5d:96:d3:f4:1e:e3:07:
         82:4b:25:c4:68:40:1f:6c:c2:35:25:91:a4:4d:62:fa:f6:c9:
         de:73:14:ec:1b:ee:70:63:8e:90:87:af:d2:66:58:a9:e0:95:
         f4:63:0e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 12:45:38 2026 by rpki-client