Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
File:                     jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft (raw, json)
Hash identifier:          AFTTrY2MY50qOxZvtoPVz2+g1n8s0mO6q+5lw20kT/c=
Subject key identifier:   FC:A5:2C:01:28:AF:98:6C:BE:D1:18:80:2A:6C:46:90:E1:64:61:BB
Authority key identifier: 8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
Certificate issuer:       /CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Certificate serial:       019E1F111502495D48FE48621375A9990950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
Manifest number:          0581
Signing time:             Wed 13 May 2026 02:01:13 +0000
Manifest this update:     Wed 13 May 2026 02:01:13 +0000
Manifest next update:     Thu 14 May 2026 02:01:13 +0000
Files and hashes:         1: 08TX7zGJM_9SDvXsn_IRwc2BjrU.roa (hash: jT+EKCy6Js0nlHIQwG+OyzWgM7mgDMvpygyb2+ijALI=)
                          2: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl (hash: mza//L/z062m+fLfGQQ+9A7fChPIYzSPWDUi54L/76Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:15:02:49:5d:48:fe:48:62:13:75:a9:99:09:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
        Validity
            Not Before: May 13 02:01:13 2026 GMT
            Not After : May 14 02:01:13 2026 GMT
        Subject: CN=fca52c0128af986cbed118802a6c4690e16461bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:62:63:8e:fd:74:9b:a5:bc:08:22:ad:b5:00:
                    be:d5:f2:21:4b:6e:0d:4b:1c:84:06:91:fa:ca:63:
                    8b:f0:54:e5:aa:2e:15:60:b4:42:0f:6d:46:c5:80:
                    da:18:ff:ac:f0:c7:8b:4e:2c:71:95:8f:27:0f:8d:
                    20:94:f5:46:7c:6d:5f:ba:5c:7d:0f:14:64:03:5d:
                    75:30:c6:84:df:b4:49:05:ab:c7:e5:d9:8c:4c:5b:
                    d9:1f:c6:f5:b4:34:e2:df:fc:1a:98:4a:15:a9:9e:
                    99:03:bf:ab:d8:f6:62:60:3f:ee:89:1a:61:82:a0:
                    26:9f:fe:b6:16:ed:f6:f4:c0:48:b4:fd:2c:ba:36:
                    b7:14:a3:9e:f9:1b:87:4e:e5:94:c7:f3:c8:59:26:
                    9a:f1:5f:de:a8:a4:bb:a6:66:df:67:0c:4d:26:97:
                    23:b1:cb:55:25:90:8d:bf:3e:18:97:54:a4:f3:04:
                    08:a8:c0:24:63:d1:ef:27:b4:08:06:4d:dd:bb:0c:
                    75:ae:99:3a:07:d6:fc:4f:e1:76:7d:20:aa:30:97:
                    5a:1c:7f:64:f7:62:1e:29:4a:9b:cd:35:51:72:c8:
                    a5:ab:94:e6:11:47:d0:34:d7:4b:0e:24:87:31:a0:
                    aa:c5:e7:43:59:9b:cc:b9:b2:62:f9:00:ab:5c:74:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A5:2C:01:28:AF:98:6C:BE:D1:18:80:2A:6C:46:90:E1:64:61:BB
            X509v3 Authority Key Identifier:
                keyid:8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:2c:5a:0d:ff:df:49:94:02:27:ce:a6:d0:c5:db:a9:d7:0a:
         77:b6:60:f1:b2:f3:71:96:b0:7c:15:d6:98:30:34:a2:31:3f:
         84:9d:55:bb:0a:0d:fe:dd:1f:65:58:15:8f:e6:a2:71:93:5e:
         ca:49:80:12:e8:28:d7:26:80:b9:ad:22:52:a6:f5:8f:40:ee:
         00:cb:9f:17:71:19:d3:b4:dc:05:90:e7:f4:5c:c6:2b:d1:2e:
         e8:13:57:4a:f0:fa:d5:f6:c7:bf:10:93:81:f9:ff:3c:b7:62:
         e7:78:13:3c:61:fc:a4:f3:eb:55:6a:04:2f:82:18:06:40:67:
         dd:f7:3d:01:10:a5:cc:0e:bc:a6:50:c7:1a:d2:94:9c:d6:91:
         c3:f6:c8:1f:bd:b7:0d:63:0f:f7:87:bd:51:40:f1:63:a8:bb:
         63:af:06:c4:9c:f7:4b:8d:8f:7d:76:1b:62:e7:7e:97:28:8f:
         d2:28:2c:18:ec:95:97:0c:60:0a:fa:67:d7:59:af:f9:16:7b:
         c6:9d:4f:1a:66:66:07:41:c0:b0:5e:d1:a8:2b:12:a5:f9:13:
         9b:4a:a9:ff:90:9b:30:02:a0:56:01:89:d2:62:fa:be:12:e9:
         2a:5a:e5:69:ba:2c:76:1b:4f:72:fd:dd:91:a4:7f:79:a1:04:
         ea:b8:3d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:56 2026 by rpki-client