Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
File:                     Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json)
Hash identifier:          rNPag4BtpCM7Ks/EXrIjwzFirsjgCVoDdSIRIu6p5Oc=
Subject key identifier:   8C:D9:99:B0:E1:C9:7A:A8:4E:9B:51:E9:B4:4C:56:11:39:15:DF:5E
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Certificate issuer:       /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial:       019E1CEBADFA744B7060927B0FE910E2937A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
Manifest number:          1753
Signing time:             Tue 12 May 2026 16:01:07 +0000
Manifest this update:     Tue 12 May 2026 16:01:07 +0000
Manifest next update:     Wed 13 May 2026 16:01:07 +0000
Files and hashes:         1: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: VTGXB4xqbotrQpkXEgckGkF++Daoogjbxv2XiOSl+0Y=)
                          2: Yj8wjFZpgFB7N8QVvr8_EZtHm74.roa (hash: VttLajARZj1VpP60iZ08cMDJLdMSXXWBBP02KPI/yEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:ad:fa:74:4b:70:60:92:7b:0f:e9:10:e2:93:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
        Validity
            Not Before: May 12 16:01:07 2026 GMT
            Not After : May 13 16:01:07 2026 GMT
        Subject: CN=8cd999b0e1c97aa84e9b51e9b44c56113915df5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:6e:9d:61:8b:fb:58:52:60:87:6e:46:04:
                    23:3c:6e:06:9f:9e:9a:6b:27:7d:dc:9e:43:80:fe:
                    5b:09:18:99:76:b4:c9:ca:89:0c:3a:74:46:23:b8:
                    ce:99:68:ad:66:f7:22:ac:d4:ca:8a:5a:ba:31:47:
                    6f:f5:24:4e:aa:6f:58:10:89:7b:6a:b2:7c:91:6e:
                    68:b9:ce:3d:9f:f1:a2:4b:06:38:f2:62:a0:d2:e1:
                    1c:89:2b:36:a3:b8:00:16:f3:d6:fd:a6:58:5d:e4:
                    9a:03:6e:46:cc:1c:2b:48:a4:c0:9a:b1:e1:18:23:
                    f6:20:7b:6b:ef:6c:6c:a8:d0:88:49:ba:a7:62:63:
                    d8:08:6e:1d:ca:57:29:9f:40:cc:fd:fb:ae:32:04:
                    4e:54:1d:28:57:8a:43:27:87:d5:07:3b:b4:71:be:
                    11:43:37:38:d8:19:53:46:f3:d5:c1:58:ab:01:ce:
                    31:19:5f:60:d6:c6:49:ef:32:04:e1:aa:c3:08:70:
                    02:47:9c:b9:a3:8e:1e:e0:6d:41:07:89:7f:1c:af:
                    db:40:d7:89:6f:91:ba:00:e1:26:2e:56:32:b6:45:
                    51:2e:19:af:1d:49:25:2a:78:a2:31:c7:c4:86:20:
                    ad:f5:af:47:6c:8e:5a:c6:14:3a:d0:28:dd:5b:74:
                    d8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D9:99:B0:E1:C9:7A:A8:4E:9B:51:E9:B4:4C:56:11:39:15:DF:5E
            X509v3 Authority Key Identifier:
                keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f9:05:c7:34:29:a0:f8:31:9e:2e:a4:ab:5f:27:3b:2c:60:
         97:bd:62:93:74:2a:cd:7b:6b:43:7a:75:55:07:c8:66:2f:be:
         46:51:de:ad:69:b2:08:ff:5b:08:77:b7:c2:4b:cb:ea:70:57:
         9c:8a:83:79:9f:37:b0:87:c7:84:23:da:14:75:44:9e:af:f0:
         9b:57:a5:97:c0:ba:27:d8:da:5e:c9:f9:6e:77:a6:40:37:b0:
         8e:7e:53:f5:bd:8e:f2:95:a2:e6:1a:c0:1f:60:9a:9f:24:d4:
         7e:2e:57:65:5f:5d:82:ce:61:b6:af:10:4c:c0:65:91:be:d1:
         94:74:5a:fc:de:f1:a4:6d:35:bf:02:a7:28:e6:c4:31:9d:65:
         c5:3e:4c:31:90:b7:f4:36:50:dc:4c:17:f7:ca:35:0b:42:6c:
         13:5d:12:f5:9e:96:34:46:c8:85:e7:2c:cc:a8:f3:45:ed:9f:
         4a:61:1a:74:c3:bd:c9:95:25:cf:31:81:31:5b:ff:61:9a:73:
         62:c6:57:d0:66:84:bc:a3:9a:65:f8:e6:9e:14:06:97:0a:62:
         ad:69:3b:5a:a2:f2:7b:8f:17:a8:f2:3b:59:fb:e1:12:6d:3e:
         38:22:21:18:c7:f2:ad:f3:94:d7:44:df:a4:68:65:9a:81:65:
         80:57:e5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:29:28 2026 by rpki-client