Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File:                     JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier:          9kMhR7W6dSi7syhrDfSagGmbp5XMoZWMUG1Vv9cH/2s=
Subject key identifier:   01:99:D3:F3:D9:5E:7C:A0:0F:40:5C:84:77:E9:5D:31:07:45:60:D3
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer:       /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial:       019E1DC7A9BBF30BF1F82BA699A8394C271F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number:          1778
Signing time:             Tue 12 May 2026 20:01:24 +0000
Manifest this update:     Tue 12 May 2026 20:01:24 +0000
Manifest next update:     Wed 13 May 2026 20:01:24 +0000
Files and hashes:         1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: AYXtjIQWK5Msu4X5iA8JHiZlmyzZXguhezJIRfi9Iq0=)
                          2: QT5YaQtwh10kjLMseFaZ5StOfCw.asa (hash: mXFjq/NajihGSXsqBXu5vBTGi2iI8iMdEQGHWiYPM84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:a9:bb:f3:0b:f1:f8:2b:a6:99:a8:39:4c:27:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
        Validity
            Not Before: May 12 20:01:24 2026 GMT
            Not After : May 13 20:01:24 2026 GMT
        Subject: CN=0199d3f3d95e7ca00f405c8477e95d31074560d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:79:ec:04:10:a8:fe:26:aa:a2:ec:15:2e:01:
                    e9:70:69:a0:cf:c9:41:99:ec:82:7a:8e:d2:ea:78:
                    4b:09:9e:1c:45:9c:39:f8:45:5a:de:47:52:16:ba:
                    88:20:3d:8f:69:ec:7d:54:5c:50:a6:76:82:bb:ef:
                    6f:b2:e8:55:14:ea:ff:00:22:5b:f1:5b:2a:cd:5c:
                    91:61:b8:3e:3a:58:5a:25:4b:71:50:0c:69:68:65:
                    ca:bc:ce:5a:a9:92:d6:a7:8f:16:a8:71:d7:74:31:
                    6e:34:4b:36:b1:c5:fb:b5:11:11:1d:12:66:40:bd:
                    93:aa:f4:f5:33:33:21:52:47:43:56:85:c6:0a:37:
                    b1:32:39:7d:10:7a:4a:46:08:83:d5:3e:60:81:83:
                    e2:01:6b:2e:f0:e4:30:3d:b6:27:bf:5a:8f:86:19:
                    e0:75:14:25:79:d4:66:34:e8:78:80:b9:ff:50:a8:
                    67:1d:3e:7f:44:bd:cf:71:e0:31:04:fb:7f:9e:8a:
                    95:71:f4:a8:4c:4b:14:89:d3:c4:24:cd:68:10:6b:
                    2c:3b:b5:e2:5e:2d:8d:61:c0:f5:21:87:1d:6c:b0:
                    c4:2c:ae:01:71:66:5c:e4:4d:57:18:4c:3b:1f:c7:
                    57:ea:06:87:17:8e:4d:36:b1:94:3e:18:da:97:d8:
                    f8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:99:D3:F3:D9:5E:7C:A0:0F:40:5C:84:77:E9:5D:31:07:45:60:D3
            X509v3 Authority Key Identifier:
                keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:de:31:34:10:4f:7c:3d:7a:4c:4c:0b:bf:bc:b7:6a:07:79:
         20:24:bf:1a:5a:6d:f9:22:15:67:53:88:67:7d:c9:4b:51:da:
         8a:2f:a4:d0:af:93:b6:5c:d3:24:69:54:23:ca:8c:a0:52:75:
         0e:72:5e:6d:4d:67:a2:60:c3:40:6c:77:85:76:81:e7:44:8b:
         f4:04:1b:a6:53:7b:42:75:c5:f8:3d:87:5b:39:48:af:d6:cf:
         f0:cc:3d:84:0e:2b:2d:24:4d:89:dc:a6:fe:77:8e:78:8e:29:
         ec:9a:16:56:cc:3d:1b:d3:ee:46:02:5b:bc:68:32:07:68:95:
         49:bb:e6:e3:d2:20:97:8b:cc:37:e3:39:84:a5:4d:89:8e:11:
         06:ff:c0:5b:4d:0c:9f:51:51:1a:be:47:d8:d5:c7:69:96:98:
         4f:23:09:ae:13:f4:42:b5:2f:d4:d3:66:72:73:15:50:66:cf:
         43:3c:b4:23:54:0c:82:48:f8:d7:d8:b6:81:2c:37:40:01:59:
         57:3e:e9:84:ad:1a:0f:b1:c0:9b:b0:ae:73:b8:09:15:35:6f:
         0f:c8:0e:86:cf:01:3f:08:4c:64:41:df:78:0e:98:a6:3e:c7:
         30:92:1d:ef:9a:c5:7b:84:cb:0b:27:2d:b5:94:c0:0a:92:2b:
         52:f7:d2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:14 2026 by rpki-client