Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.mft
File:                     JaizJB9Uy4zEo2EkJxnto1ALWPM.mft (raw, json)
Hash identifier:          RBESeowgcTWdcGXNDlbn1U7Ho9V2g1cellzo6PRWLVc=
Subject key identifier:   A7:4C:28:2D:C5:B0:66:68:50:71:23:FD:F8:64:74:97:22:86:43:D1
Authority key identifier: 25:A8:B3:24:1F:54:CB:8C:C4:A3:61:24:27:19:ED:A3:50:0B:58:F3
Certificate issuer:       /CN=25a8b3241f54cb8cc4a361242719eda3500b58f3
Certificate serial:       019E1D59915BE85C4DB066A398B79049E8E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaizJB9Uy4zEo2EkJxnto1ALWPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.mft
Manifest number:          46
Signing time:             Tue 12 May 2026 18:01:09 +0000
Manifest this update:     Tue 12 May 2026 18:01:09 +0000
Manifest next update:     Wed 13 May 2026 18:01:09 +0000
Files and hashes:         1: JaizJB9Uy4zEo2EkJxnto1ALWPM.crl (hash: MLVr87dxa5nnB7Hd2IOhhB1eT6J88hps86TMGMzLw0M=)
                          2: f8IMUeFD4nC8SZ-FnXMVQXrQOmQ.roa (hash: 4sDgm+XOigmig9qbzZKlgtnrz0wx8lArACN7Tm+Zbek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaizJB9Uy4zEo2EkJxnto1ALWPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:91:5b:e8:5c:4d:b0:66:a3:98:b7:90:49:e8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a8b3241f54cb8cc4a361242719eda3500b58f3
        Validity
            Not Before: May 12 18:01:09 2026 GMT
            Not After : May 13 18:01:09 2026 GMT
        Subject: CN=a74c282dc5b06668507123fdf8647497228643d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fc:ea:6d:50:d4:0a:48:cf:14:ed:31:4e:64:
                    80:10:e0:8f:a5:f3:d1:75:bb:25:7a:22:4c:05:48:
                    9d:7f:a6:0b:d5:90:70:bb:80:51:f4:7b:06:b2:14:
                    d5:e8:5e:31:d6:cf:56:15:09:df:bd:a9:ca:b0:26:
                    1b:06:8f:4f:44:77:d6:ae:b6:9a:95:e1:70:e1:62:
                    e4:b8:2d:4f:ad:40:24:35:a2:90:67:1c:1e:e2:d9:
                    7e:f2:7d:8a:5e:f7:75:dc:82:4a:07:c3:fa:5a:99:
                    c8:73:ba:0b:1e:8e:99:b1:b4:d1:ad:02:f0:49:7d:
                    b4:94:bd:9b:0b:18:5f:38:39:18:f3:2b:51:24:e8:
                    b1:d8:5f:e4:5e:f3:4b:0d:ac:41:00:b1:b2:01:bf:
                    b2:73:4b:8a:d9:ed:a0:0d:23:78:d9:53:cf:66:9e:
                    3d:c3:76:65:8f:3e:fb:df:0b:47:88:8c:06:e5:50:
                    c1:eb:62:d8:29:39:90:37:43:33:e5:76:f5:53:66:
                    b1:96:9a:25:94:35:97:1c:fc:ac:dd:61:6a:e8:1f:
                    8f:fe:cc:02:c3:bd:61:97:a6:8c:bb:85:5a:e7:a5:
                    88:fe:9d:12:9d:f8:af:72:2d:0f:07:dc:e8:88:15:
                    68:30:de:3f:3c:58:57:89:0c:ca:84:e8:c0:2c:92:
                    93:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4C:28:2D:C5:B0:66:68:50:71:23:FD:F8:64:74:97:22:86:43:D1
            X509v3 Authority Key Identifier:
                keyid:25:A8:B3:24:1F:54:CB:8C:C4:A3:61:24:27:19:ED:A3:50:0B:58:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaizJB9Uy4zEo2EkJxnto1ALWPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7a:20:7a:f7:0a:18:bb:f1:c0:c1:04:80:92:1e:16:71:2a:
         8b:5b:b6:ba:3d:c9:a0:f3:26:ef:28:ab:0e:8e:af:3d:37:65:
         3f:ba:69:4e:42:67:ff:9f:07:a2:75:7d:ec:4c:08:35:7c:0b:
         43:82:d0:de:7d:a5:48:ee:3c:34:92:6a:c6:9c:ac:83:94:76:
         e4:86:5e:31:36:50:2e:c4:82:8e:e7:37:dc:30:e0:e2:e8:38:
         1e:c0:e8:fb:21:75:7d:49:27:d7:41:71:7b:35:2d:24:cb:d9:
         f6:9c:2a:82:df:a0:18:c9:a7:7c:85:22:ae:7a:a4:f0:29:93:
         2e:33:a1:0d:86:f7:f5:83:52:d8:35:43:80:b1:25:05:9f:e2:
         87:8b:c8:64:14:be:70:4c:7e:90:32:9a:74:b0:04:ef:ab:e4:
         46:54:0c:3c:af:c7:05:3c:5b:10:af:ab:0a:e9:1d:a3:92:45:
         25:dd:0e:1d:0e:22:e4:0c:d2:80:f3:f4:4a:e8:95:1c:f4:c1:
         b8:d8:89:f5:37:95:ff:13:aa:7c:6d:5e:32:35:1c:4e:3d:5f:
         3b:0f:be:bf:f0:5c:92:12:e8:13:6b:b0:b5:2f:eb:29:28:52:
         13:4c:4d:d2:82:68:3e:15:d0:cf:57:16:26:e7:ef:26:00:a3:
         b8:6c:f2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:19 2026 by rpki-client