Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
File:                     JxnUEBB2de7YtizK1DUzb4GeCm0.mft (raw, json)
Hash identifier:          3FIyY6mOwzgDdOgPqcvP6ilMH1aT7+CZqZr6GuCdT5Q=
Subject key identifier:   43:17:E6:CD:E8:30:B1:A7:27:E6:CB:C1:8F:9E:FF:48:C3:6E:D7:AF
Authority key identifier: 27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
Certificate issuer:       /CN=2719d410107675eed8b62ccad435336f819e0a6d
Certificate serial:       019E1FB55AD2E9E42A456DE536791D1C80B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
Manifest number:          0B47
Signing time:             Wed 13 May 2026 05:00:39 +0000
Manifest this update:     Wed 13 May 2026 05:00:39 +0000
Manifest next update:     Thu 14 May 2026 05:00:39 +0000
Files and hashes:         1: JxnUEBB2de7YtizK1DUzb4GeCm0.crl (hash: TVYy2GDGBst9tAzIy8oP25sgs5p9I2rCuONqBF1tgHk=)
                          2: topvI4u_yc05Ro-Wd1LgO-ILlDM.roa (hash: YcyOx4QELjJwJBph+m+FjlEMDtBjOHDtaRK96fGlHwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:5a:d2:e9:e4:2a:45:6d:e5:36:79:1d:1c:80:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2719d410107675eed8b62ccad435336f819e0a6d
        Validity
            Not Before: May 13 05:00:39 2026 GMT
            Not After : May 14 05:00:39 2026 GMT
        Subject: CN=4317e6cde830b1a727e6cbc18f9eff48c36ed7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:78:97:71:7b:8b:a6:aa:5f:a0:4d:b8:48:
                    c4:01:9f:ee:4c:d6:4d:85:73:4f:37:d9:39:c4:db:
                    47:6b:e0:ca:2c:87:12:bd:da:20:ce:de:be:15:9d:
                    64:41:22:f3:6a:3e:55:bf:b4:75:80:29:01:04:44:
                    8f:17:ef:3d:ed:de:81:bd:c7:cd:02:ae:b7:d9:17:
                    8e:76:04:d2:6c:95:ab:a8:8b:28:57:fa:1e:d5:9e:
                    59:04:db:34:74:f4:35:99:fe:1d:de:26:63:ab:28:
                    91:41:36:05:50:56:52:29:2c:44:28:1c:4e:eb:d3:
                    5b:17:f7:f1:43:9d:4c:c4:11:b9:11:58:09:6f:10:
                    69:31:63:21:89:58:f6:17:a5:3b:d8:30:29:82:4b:
                    b8:45:1a:74:49:db:78:35:9c:6e:03:2e:fb:2e:25:
                    05:6e:34:45:15:27:8f:69:81:72:66:19:ea:36:36:
                    31:61:c6:a0:a0:46:3e:17:c0:f1:f8:00:1f:0e:7b:
                    7e:17:f8:1e:d1:2e:01:9a:4c:3d:34:f0:ad:ca:98:
                    df:df:fe:0f:6f:c5:bb:3b:92:31:0d:fe:c7:65:3e:
                    d9:df:08:92:ba:01:8b:44:c8:be:a2:9f:7f:3d:80:
                    63:64:f1:57:cb:69:76:84:38:b6:94:9c:8d:e9:86:
                    3d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:17:E6:CD:E8:30:B1:A7:27:E6:CB:C1:8F:9E:FF:48:C3:6E:D7:AF
            X509v3 Authority Key Identifier:
                keyid:27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:49:f8:0e:98:d3:91:19:20:3f:ba:00:ab:d3:6d:18:42:4b:
         29:9e:6d:c2:96:5f:b9:d6:6a:3a:cd:e1:ca:7c:a7:8c:32:fd:
         f6:4e:fb:3b:18:7d:c8:e0:3d:46:98:3f:13:86:b4:34:32:b2:
         43:c7:90:f9:08:ba:06:c2:af:ac:45:bc:3c:72:0b:ea:df:df:
         e0:a2:e5:ac:35:c3:b4:0b:67:bf:43:05:59:41:10:95:54:f2:
         6d:31:83:97:c1:da:f8:bd:a2:e2:00:d0:f9:11:2f:39:aa:e0:
         70:ae:6b:2d:16:e5:5d:11:4c:b4:ad:35:13:df:d2:3b:28:a3:
         58:2d:8e:ef:39:f9:09:c1:fb:fb:46:33:c9:81:c2:6f:d5:23:
         a3:45:0f:63:ad:fa:b0:a4:b5:1a:db:8e:a5:a1:c5:8b:ec:05:
         1d:e7:e8:fa:cd:01:f5:c3:ee:cc:e7:f6:c5:08:43:77:fa:f6:
         27:08:dd:c0:a9:bf:4d:de:98:91:6b:0d:11:9b:89:d4:f6:00:
         d4:a5:ba:94:bf:b0:cf:a3:95:1d:82:ac:54:dd:06:f4:e0:72:
         46:5a:26:78:af:2f:4c:1e:89:f7:67:ad:53:3b:6b:cf:52:09:
         e3:73:e5:d9:3e:fb:5f:44:25:11:ff:20:df:96:f6:d8:25:2f:
         4c:5d:8a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:48:54 2026 by rpki-client