Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File:                     JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier:          0hesUN0ChvRZPIu58TpbMNw3m6V9FomsowpL7Ytj6Zw=
Subject key identifier:   9B:10:1B:78:3A:E7:7D:62:BF:D0:13:89:28:81:32:5F:90:99:8C:EE
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer:       /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial:       019E1D2247AFD49F289CF099C89B1E8A58A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number:          09E4
Signing time:             Tue 12 May 2026 17:00:46 +0000
Manifest this update:     Tue 12 May 2026 17:00:46 +0000
Manifest next update:     Wed 13 May 2026 17:00:46 +0000
Files and hashes:         1: A5wtuBfY6dxUh5eS44FlMqwcmog.roa (hash: tZbTVJ0vSZUIP4JV/ZEsCDLjrfqC4a0hum2qjGz/VQE=)
                          2: C6kXQbmf9ed-Rd3RlEcWQXFNlRk.roa (hash: DW0PJcH29KhjZVwZo0qWO+ll1hc593uNe8QjdzH0uYc=)
                          3: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: AD97hBl1j0U6EEumJHmLo2zWV4tZyuRdOECGxtjfwT8=)
                          4: Prtm22vbQehmnlO5aEmPr0BFZa4.roa (hash: 2TJTM+cDnTV/eFEpw6CMVHfCzUzdPWSSepuSHNmY9Qo=)
                          5: ROVyIAsBNfwBer4Npp8bVnXZW2U.roa (hash: Z2rohR1T9JeCw9lXsHTXnEJbzYMGmnxfv3f6fLAZwjY=)
                          6: SN7iUL1ZTDZriT9WldHFs3bgME4.roa (hash: KkH9Un51EAXewil4Qmtkkj2B60LR6wL89EVPG96bBUw=)
                          7: vYV80pMOfJdsEu4niWAcrkBUgNc.roa (hash: gHF1ZhItzUzKri2+egaA2O0GGW8DIyzH1CkBWVld6xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:47:af:d4:9f:28:9c:f0:99:c8:9b:1e:8a:58:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
        Validity
            Not Before: May 12 17:00:46 2026 GMT
            Not After : May 13 17:00:46 2026 GMT
        Subject: CN=9b101b783ae77d62bfd013892881325f90998cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:02:c1:f5:22:9d:b7:da:f1:c6:83:2e:b5:b9:
                    21:16:b9:79:7e:10:62:38:09:43:6e:ed:8d:c3:62:
                    f0:aa:f9:8f:31:33:ff:79:4d:3e:f6:e9:6f:87:56:
                    3d:f8:22:b4:68:51:6d:72:93:86:25:0f:be:08:8b:
                    12:5e:ab:0d:a8:98:14:17:5c:69:bb:7e:ed:62:65:
                    53:58:46:37:62:41:4c:34:5b:9c:67:6c:8b:f1:c3:
                    df:f2:cb:71:ec:d9:30:7d:a7:09:52:5b:f9:83:71:
                    d5:fd:db:3d:c1:4c:2c:a6:a9:a0:a3:2c:ce:63:4f:
                    20:40:90:ab:b3:4f:3e:4d:45:18:7a:21:31:bd:12:
                    3c:fd:fd:3b:56:5c:6d:0b:0e:3e:85:8e:99:70:8c:
                    7c:2c:1e:af:04:fe:b0:3b:9c:ba:9f:83:85:dc:a0:
                    fb:1d:40:b7:63:f4:40:53:34:e2:1f:87:85:44:d7:
                    26:1d:34:62:fa:19:4d:64:0e:b0:c1:3e:07:9f:ea:
                    f5:50:2e:b8:a6:ea:72:75:ce:0a:d1:ec:50:d3:b8:
                    9e:c3:c9:26:c6:c8:f7:2a:aa:47:85:12:74:24:be:
                    73:e2:3a:db:38:7b:b1:c7:e7:ff:1e:45:60:42:6a:
                    39:00:0f:5f:0d:42:e9:86:82:ff:32:57:2d:4b:59:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:10:1B:78:3A:E7:7D:62:BF:D0:13:89:28:81:32:5F:90:99:8C:EE
            X509v3 Authority Key Identifier:
                keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c1:99:77:49:37:b6:b3:76:d3:b2:b5:88:8d:a2:64:fb:b4:
         a3:f4:a1:f6:48:bc:d6:b1:02:e0:95:04:1d:a9:6f:67:44:97:
         14:be:40:28:48:d1:72:32:72:c3:23:46:c8:d4:cf:42:f2:8e:
         76:f4:08:09:97:75:46:37:19:91:25:31:36:cc:21:a6:4f:35:
         60:c5:f4:78:c6:b8:49:1e:fa:95:dc:c2:1d:0c:4d:18:5d:ac:
         b2:a6:cc:04:ac:b7:01:df:06:9e:64:80:30:ae:5f:71:2d:c6:
         6a:11:4d:1c:0a:32:0e:a6:80:b8:08:09:b0:9b:ca:cc:9f:53:
         b4:ae:1e:e4:4a:b6:b1:2c:df:60:9c:ad:35:aa:0c:d9:2d:e8:
         a7:fe:c3:41:b1:a8:80:bb:be:d9:ba:02:43:c4:fb:e8:d5:a8:
         82:46:ab:5e:53:29:22:9a:0a:d6:e7:ea:e0:3c:6a:be:0f:77:
         02:bc:0d:8b:e6:4d:0d:9d:0a:69:54:d5:3a:2d:83:1f:43:1a:
         df:1d:5a:49:0a:6b:27:e0:cd:bc:c9:26:dd:d0:33:bc:6d:4c:
         66:35:30:af:1a:14:c8:e1:32:3e:70:0a:cd:53:a5:ed:fd:50:
         32:b5:f4:0e:a3:a2:2b:d7:7b:78:6e:68:6c:fb:d5:57:4f:d6:
         c0:86:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:11 2026 by rpki-client