Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File:                     J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier:          JGzwJbN6qQLsiEkzFmn23PrGm6xJCdEwdlcuC3NHJ40=
Subject key identifier:   DC:CB:4F:7E:E6:E2:7F:A3:BC:1B:44:82:9D:C3:54:7B:19:29:96:8B
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer:       /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial:       019E20238C6DDD2EFDD0AD8F423F29AB6DA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number:          10C5
Signing time:             Wed 13 May 2026 07:01:00 +0000
Manifest this update:     Wed 13 May 2026 07:01:00 +0000
Manifest next update:     Thu 14 May 2026 07:01:00 +0000
Files and hashes:         1: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: lj2o+pchau7UnZAmShe/4PhUAOSg3MeWT/uOtUprOHM=)
                          2: zpBvr7D0ZTnk2RASjPjWwuPCBo4.roa (hash: 6ihXuEihTvHi2kmbZX2/h+YBlObaB/XzKmiIBYoX2XQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:8c:6d:dd:2e:fd:d0:ad:8f:42:3f:29:ab:6d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
        Validity
            Not Before: May 13 07:01:00 2026 GMT
            Not After : May 14 07:01:00 2026 GMT
        Subject: CN=dccb4f7ee6e27fa3bc1b44829dc3547b1929968b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fa:13:80:b2:0d:64:aa:80:5b:3d:ee:72:13:
                    8e:e8:11:9c:72:f9:83:eb:3d:cc:55:ff:ba:4f:81:
                    1c:97:3f:53:0d:cf:78:22:89:a6:f4:eb:a0:e2:80:
                    12:a1:42:1c:f9:85:34:82:2f:04:14:f7:c9:ec:19:
                    72:6f:3a:0b:d1:ac:10:fd:af:c8:61:5f:83:ed:84:
                    bc:95:e5:4e:57:bf:7d:62:fc:d0:07:83:6e:c9:ae:
                    85:7e:c4:db:68:68:ef:9c:58:17:a0:34:6b:fa:4f:
                    35:81:f3:0c:98:ba:21:f1:49:98:0d:e5:41:6a:c0:
                    c6:2f:9b:de:da:84:f5:b5:13:e0:f6:54:7c:87:5e:
                    98:77:24:4c:96:58:d0:90:d0:92:93:5b:db:d9:15:
                    1d:3f:07:fb:23:a4:93:d7:e3:6b:31:78:13:16:91:
                    ad:11:b0:48:cf:ba:11:c6:87:80:84:57:2e:25:c8:
                    56:c4:fa:cd:ff:c2:fa:08:5e:fc:05:35:d9:b4:50:
                    f9:c6:34:52:3b:4a:20:bb:b7:dc:1a:ec:96:9f:8a:
                    6c:1f:2c:a1:eb:3f:83:5f:94:8e:0a:1d:e2:a2:4e:
                    09:50:34:5c:98:3b:7c:4a:2a:15:bf:9e:e5:84:81:
                    a3:e4:96:f1:83:6f:5b:73:79:54:10:dd:f8:b3:16:
                    18:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CB:4F:7E:E6:E2:7F:A3:BC:1B:44:82:9D:C3:54:7B:19:29:96:8B
            X509v3 Authority Key Identifier:
                keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:df:33:99:b2:ca:8a:ef:fd:ae:f5:ef:4d:b3:22:20:ed:11:
         bc:36:ed:42:7f:42:80:20:ce:d8:6b:99:07:dd:04:8a:e8:ba:
         5d:ec:41:d8:22:40:3c:eb:e5:de:6d:2f:34:8d:41:ae:32:0c:
         28:36:ba:ba:cc:45:21:1b:5c:b9:6d:9d:00:c8:29:b8:f4:53:
         5c:c0:b2:70:77:bb:d7:fc:ef:9f:50:dc:5a:a4:d2:79:6e:3c:
         37:85:e3:a5:0a:d3:43:61:02:a0:7e:d3:b3:28:bb:11:c0:54:
         d4:5d:71:f0:62:6d:7c:b8:55:41:d4:ec:e6:82:6c:10:fc:38:
         e1:46:36:47:1d:0c:ba:81:ec:3e:2a:f4:20:f2:dd:3e:a6:b8:
         3a:90:64:61:79:ae:15:ee:ac:7f:2b:db:04:37:ba:c5:42:49:
         1f:04:34:5f:4c:ba:00:16:e3:30:85:ec:e4:16:35:bf:1f:e5:
         06:cc:a4:3b:6a:9d:06:7e:56:34:55:4f:7a:93:71:b4:d4:91:
         69:2e:c0:6c:6e:ab:c9:07:52:5e:6d:df:64:7e:c1:3c:82:d5:
         ab:69:b9:24:f6:1e:7b:a2:2f:f1:82:19:cb:71:40:b2:b1:04:
         de:da:2a:23:31:9b:b0:c7:4d:6d:5b:42:6f:d1:22:b1:a5:8f:
         33:18:c8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:47 2026 by rpki-client