Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File:                     JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier:          cwp+mtE0pOa7wHjUNisv5Axk8Aam47/hoIBYdSRtpZ0=
Subject key identifier:   E6:0E:EB:8A:32:BB:3A:4C:BE:1E:3F:E6:58:8E:40:B9:27:81:06:39
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer:       /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial:       019E1D59CAF5816B0F84B9F0B76308C1511B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number:          15DD
Signing time:             Tue 12 May 2026 18:01:24 +0000
Manifest this update:     Tue 12 May 2026 18:01:24 +0000
Manifest next update:     Wed 13 May 2026 18:01:24 +0000
Files and hashes:         1: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: eIxIuoYSCzptcCmQBqq+bQo3LqrBE+roYyxu8edJHL4=)
                          2: M2jHykXP5tshdup3cmW0BBbfpFc.roa (hash: GerABurddckbNTOvcsAmSJXKIfhdD87hJkB99cOoWFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:ca:f5:81:6b:0f:84:b9:f0:b7:63:08:c1:51:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
        Validity
            Not Before: May 12 18:01:24 2026 GMT
            Not After : May 13 18:01:24 2026 GMT
        Subject: CN=e60eeb8a32bb3a4cbe1e3fe6588e40b927810639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:c2:3e:10:7f:e6:7b:90:dd:7f:ac:b0:ad:
                    91:dc:f7:fc:80:5a:7c:5a:04:3c:89:96:7f:65:b6:
                    2b:ff:c4:4b:1e:be:b5:8b:8b:95:ea:4b:4c:8d:f1:
                    42:3f:72:91:05:2a:98:41:3e:9f:a1:d0:d6:08:38:
                    6c:19:34:8a:69:5a:eb:69:ad:ec:ee:43:f5:d7:e5:
                    9b:4a:39:bb:a1:3b:d7:e0:21:77:c2:e4:6e:7d:67:
                    a6:97:e4:2c:8e:f8:16:a1:76:c9:fb:bd:3d:68:39:
                    fe:2f:b2:82:a1:1b:de:ea:7a:93:0c:63:dd:95:c7:
                    6f:34:3a:1e:4a:77:e9:f8:be:b7:a6:32:b9:20:09:
                    cb:69:00:08:23:be:88:5d:54:a6:2b:bb:5a:79:95:
                    54:ec:b9:f2:cc:a4:bb:09:13:95:4c:37:5a:35:99:
                    8d:37:43:fc:74:7e:e1:6d:d6:f4:b7:b7:7a:37:52:
                    41:7b:a3:ba:99:2d:10:6c:01:b3:8c:2f:c1:db:5b:
                    0c:61:c7:b6:31:b7:13:0f:ec:d8:03:bc:04:ec:fe:
                    98:2e:5b:14:8a:5f:8b:34:bc:b7:46:01:81:14:f1:
                    96:45:9b:0f:86:a0:0f:75:f6:56:2e:a7:6e:0b:ff:
                    9a:9a:21:73:72:05:1f:9f:33:13:28:1b:e3:21:9e:
                    b4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0E:EB:8A:32:BB:3A:4C:BE:1E:3F:E6:58:8E:40:B9:27:81:06:39
            X509v3 Authority Key Identifier:
                keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:83:71:ea:54:6a:47:8c:43:6a:82:8f:db:10:16:a8:2c:f7:
         be:ad:72:06:80:0f:4d:95:d2:a8:94:4a:01:c3:b4:62:06:f0:
         38:ee:3a:d6:5e:48:99:57:bd:92:db:b6:3e:6a:31:c2:fd:e9:
         12:d1:36:a1:3c:a8:13:e4:31:71:d9:89:12:98:e7:b8:04:68:
         f1:21:11:1c:57:d5:34:cd:53:9b:27:c4:00:38:8f:a9:12:31:
         44:43:1c:a2:66:51:0e:4a:93:57:e6:84:a2:2b:86:5c:36:62:
         90:ff:e3:e7:ea:e2:1c:dc:43:b8:75:32:dd:c3:6d:36:f9:5a:
         1a:b0:e3:bf:59:3b:91:22:25:4f:24:41:fb:e4:53:32:03:fa:
         a4:4e:b1:8f:82:87:22:e0:c0:cc:94:bf:a9:4d:42:7c:ca:92:
         62:3a:98:c2:97:fb:72:f0:bb:ea:16:8e:4f:f2:72:2f:79:ef:
         bb:ee:31:fe:a8:d9:2d:8f:2c:69:6b:28:38:1d:f0:5b:a9:ae:
         52:6b:33:68:37:98:ab:f8:51:2b:e5:38:92:50:26:e1:54:8b:
         6b:ee:3e:13:24:ee:27:68:87:c8:ac:9a:fb:43:fd:7e:a2:91:
         c1:d4:80:45:be:49:aa:e0:99:8f:94:45:6e:67:e4:ad:0e:ce:
         42:6e:c9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:43 2026 by rpki-client