Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File:                     jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier:          9laglsSyBuAokRnaz2O8JsVwYcGl80b5KxBono0Iuv8=
Subject key identifier:   AE:E4:D7:2D:DF:AA:7D:80:E9:26:64:1A:B3:E0:3A:B9:A3:6C:BF:CE
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer:       /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial:       019E1F109019E6C01B7F56E16B13812F97B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number:          17BB
Signing time:             Wed 13 May 2026 02:00:39 +0000
Manifest this update:     Wed 13 May 2026 02:00:39 +0000
Manifest next update:     Thu 14 May 2026 02:00:39 +0000
Files and hashes:         1: iufQHL1rrp5XzvULdBkr0SPCCu8.roa (hash: o7Un0OaNswzLrJGI0RBqiK6v18+B62LAaKhklEYedo4=)
                          2: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: CjuT+PytgTKjSJXx8bZE/iBKfN60LYvQfe1ZZTIEcng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:90:19:e6:c0:1b:7f:56:e1:6b:13:81:2f:97:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
        Validity
            Not Before: May 13 02:00:39 2026 GMT
            Not After : May 14 02:00:39 2026 GMT
        Subject: CN=aee4d72ddfaa7d80e926641ab3e03ab9a36cbfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4d:43:61:1f:8a:e0:27:7e:af:89:27:3d:aa:
                    af:df:ba:9b:6e:19:f7:fc:07:8d:a6:54:a3:03:36:
                    c6:24:db:ac:02:f4:4b:75:5c:b5:1c:69:b7:a2:63:
                    8f:16:56:b1:2f:e5:dc:41:fc:07:7f:bc:1b:91:74:
                    7f:ed:8a:f2:8f:79:2b:e1:19:76:3d:94:fc:a7:f3:
                    45:3b:58:a5:f0:c9:92:d7:25:2a:65:8f:a3:93:48:
                    7c:52:ad:fc:71:47:99:ea:cb:a6:8b:41:17:da:10:
                    a4:1a:82:e2:96:05:9c:6a:fc:6d:f6:64:5b:ad:e7:
                    a0:dc:e2:69:a1:5b:ec:2b:01:e1:59:e8:ed:2d:70:
                    db:74:53:9c:1b:14:63:20:c0:9d:cc:fb:13:90:3a:
                    e7:76:33:b8:ee:b1:c3:ad:ac:46:5f:71:c1:42:42:
                    f2:6e:45:d1:f7:79:f8:79:0f:b3:7a:36:f6:b1:51:
                    19:25:df:ca:cc:da:be:5a:66:5a:36:03:57:77:ba:
                    8c:cc:bc:29:1e:3f:2a:4f:4c:2e:51:71:35:88:66:
                    c9:4c:b7:4c:63:c3:f8:23:d5:84:c8:60:62:05:a7:
                    cb:51:8e:41:9a:ef:d8:29:ed:c1:cd:3d:91:cc:34:
                    74:21:f7:65:86:90:58:c5:9d:f2:73:86:d3:57:7b:
                    ba:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E4:D7:2D:DF:AA:7D:80:E9:26:64:1A:B3:E0:3A:B9:A3:6C:BF:CE
            X509v3 Authority Key Identifier:
                keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a8:42:44:15:93:f0:7d:1b:18:6d:b6:b2:71:b6:72:f5:70:
         93:bb:10:a3:66:34:09:dd:b0:28:e8:35:e5:10:62:d5:c1:39:
         f9:3b:67:67:22:35:76:ff:fd:61:a6:30:e2:84:95:b3:c9:5c:
         51:ad:87:24:3e:ed:86:77:ea:4c:ce:4a:5e:7f:81:9c:a5:cd:
         23:24:fe:19:9a:13:a0:bc:de:ac:c1:99:e8:88:33:d3:79:25:
         99:50:12:72:f3:57:e1:e5:32:ef:c7:f4:45:ca:25:17:33:22:
         89:ae:56:d8:73:3f:37:23:1a:af:82:a8:cd:38:b2:3d:1e:5f:
         f6:83:04:0b:aa:93:18:d6:a5:82:c5:21:de:84:42:88:6b:3d:
         a8:8a:fd:cd:49:b6:1a:7b:d8:d6:ef:ac:f4:4e:d1:62:be:68:
         ab:92:35:e9:d6:16:04:0c:97:00:a8:7f:b9:4f:7d:f6:b0:62:
         b4:f3:13:77:a2:08:57:e2:84:05:4d:09:68:14:31:a6:14:69:
         67:73:f5:1d:ea:30:2e:62:7a:b2:46:b7:27:74:f2:48:69:76:
         7d:43:3a:b5:10:a3:32:7b:0f:99:2b:04:07:83:ed:bb:be:77:
         f0:d2:22:4d:04:dc:a4:54:87:54:84:79:15:2d:d5:31:af:b8:
         85:67:a7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:20:31 2026 by rpki-client