Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File:                     JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier:          vbn3zxPjDJZmogQIsuUepApihsR0kgmG9dN5+sJ4Kzg=
Subject key identifier:   17:7B:3A:28:87:CF:00:71:12:25:8D:83:64:71:CD:7A:85:56:59:70
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer:       /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial:       019E1D2319CE872F2E582FECACB07D47B485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number:          10EB
Signing time:             Tue 12 May 2026 17:01:39 +0000
Manifest this update:     Tue 12 May 2026 17:01:39 +0000
Manifest next update:     Wed 13 May 2026 17:01:39 +0000
Files and hashes:         1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: 2MqtCMB6FkBT11vKuDnJ76Do3mbLP0TLyVGtKDCEu5E=)
                          2: egsIufM9DiHj_9SSdU6nff71R8Y.roa (hash: e9a1PO48oO66qDrGOo9Li3VvtXwHdcVqPnuihXWNVoQ=)
                          3: wSDNzntcWhNUBixkb6aX20BeB6s.roa (hash: jjJjLDXdJiAxkXQhCjVcOuaYUcxyHYmIDSfSBzcXqDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:19:ce:87:2f:2e:58:2f:ec:ac:b0:7d:47:b4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
        Validity
            Not Before: May 12 17:01:39 2026 GMT
            Not After : May 13 17:01:39 2026 GMT
        Subject: CN=177b3a2887cf007112258d836471cd7a85565970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:33:2d:df:50:84:19:97:5e:06:ee:cf:b3:
                    ee:50:39:54:97:fa:bc:72:4f:2d:51:17:c2:e6:52:
                    65:9d:c9:35:4a:5a:63:3f:32:fa:16:56:0a:a7:66:
                    04:65:ce:46:d5:f1:6a:dc:1b:fc:71:8b:32:a6:81:
                    02:b1:ea:f8:81:a1:6b:4b:2f:99:c3:db:42:78:58:
                    88:6f:62:4c:2d:65:78:0a:85:0b:1c:d9:ed:a6:c7:
                    31:4c:25:c8:e2:01:72:d7:94:03:fa:d7:6e:f6:07:
                    be:62:93:b6:8e:34:ab:35:b0:7d:4b:ba:77:e9:4f:
                    32:d8:7a:e9:e7:0e:64:67:20:92:f3:f0:fd:dd:89:
                    f0:17:d0:17:19:67:9f:7b:7c:cb:1b:69:d9:5f:70:
                    d2:1b:2a:98:3b:79:90:82:26:cb:50:29:95:99:e6:
                    e3:5f:7a:6b:34:24:d7:79:c2:c6:03:68:9f:25:8e:
                    0d:14:db:d5:61:68:a8:8b:b1:76:e3:7d:d5:bb:36:
                    55:f9:a8:ca:48:8e:cd:62:53:41:f3:b3:66:a0:24:
                    d6:96:ea:e4:56:01:9f:58:32:1e:9e:e2:92:8d:8a:
                    0c:d1:cc:d0:6a:54:2f:df:20:d9:d3:4b:25:d9:4a:
                    42:6d:ea:75:15:82:a6:61:d6:e4:95:f7:03:75:ed:
                    d4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7B:3A:28:87:CF:00:71:12:25:8D:83:64:71:CD:7A:85:56:59:70
            X509v3 Authority Key Identifier:
                keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ea:96:83:d8:90:0c:bd:5b:9c:f4:9b:3d:4f:94:b3:02:7e:
         dc:6c:ac:b3:5e:d3:a2:47:40:15:44:0f:c2:c3:ab:0f:0f:3f:
         4b:a7:40:c0:71:02:2c:22:3f:c6:b7:5a:9e:52:6a:24:c6:c3:
         42:84:c3:49:79:f8:db:90:d7:57:e0:e5:5a:08:da:10:b6:9b:
         4b:d1:b4:b4:d8:46:a4:47:44:88:bd:8a:92:f6:93:de:a5:0c:
         7a:9e:17:03:33:47:2b:d9:30:68:54:e1:1f:7b:6f:9f:36:da:
         37:fe:9e:cc:fc:1a:8b:e2:78:e8:c4:4d:b3:70:42:87:56:d5:
         3a:68:92:45:1a:36:50:ae:fc:18:bc:8d:5d:ce:a8:de:4d:9c:
         7c:e2:d0:b3:b0:72:4e:f9:1f:66:d1:7b:48:75:80:e3:23:cd:
         ba:5c:b1:3d:97:81:cb:e6:f5:18:9e:46:30:4d:e9:71:93:4f:
         95:45:d1:1b:ec:2e:7a:66:c8:9b:ba:8b:51:40:25:d8:26:6f:
         63:e5:71:07:69:1e:4b:2c:45:5f:b6:38:59:d8:af:a1:d9:1f:
         a0:8e:49:46:24:78:fe:52:0f:ca:38:e5:bb:fd:06:15:1f:96:
         b7:df:82:67:5d:bf:bf:09:dc:86:4d:80:81:2d:0c:47:b8:c0:
         29:b6:cc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:26 2026 by rpki-client