Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
File:                     _j0jo57TZW-aYGS2CdAqL25KOCc.mft (raw, json)
Hash identifier:          cFshQG28C0DINFFqDazinmqsxmhcwxcO8MdZjvtokX0=
Subject key identifier:   A2:53:45:B2:EA:1A:F5:43:FB:7C:F4:3B:23:0B:87:BE:32:E5:12:72
Authority key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
Certificate issuer:       /CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Certificate serial:       019E1DFE54622CC94290EFFED3A15C759557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
Manifest number:          07E7
Signing time:             Tue 12 May 2026 21:01:07 +0000
Manifest this update:     Tue 12 May 2026 21:01:07 +0000
Manifest next update:     Wed 13 May 2026 21:01:07 +0000
Files and hashes:         1: _j0jo57TZW-aYGS2CdAqL25KOCc.crl (hash: tON1EjoGYJakqaPVLlBaBmCXB5zqpVaXbH5taNB5MfI=)
                          2: obQSThMDI54tnVCG6iwWlU2d5xA.roa (hash: fWHmiFl72Qtr24MSIZkfu38dOhvU6zUrAoirFatj96E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:54:62:2c:c9:42:90:ef:fe:d3:a1:5c:75:95:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
        Validity
            Not Before: May 12 21:01:07 2026 GMT
            Not After : May 13 21:01:07 2026 GMT
        Subject: CN=a25345b2ea1af543fb7cf43b230b87be32e51272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:9e:b7:49:75:8a:25:f4:07:e0:b4:45:87:
                    be:a4:8e:df:e1:4d:a9:50:a8:a2:27:bd:a6:63:c8:
                    d9:91:cd:60:47:2e:76:09:5a:e3:e5:db:0a:8e:c2:
                    07:7c:99:69:df:41:66:a5:c6:a7:0c:82:e1:b8:07:
                    91:3d:79:e4:b3:e2:60:bf:4d:b6:29:0c:8d:f2:0b:
                    bc:cc:c5:c7:59:8a:cb:ac:84:c2:41:68:e8:ed:95:
                    4c:1d:fb:fa:41:5a:be:fa:43:f2:8f:54:1e:65:0d:
                    fb:37:f1:65:76:2b:39:f8:9f:23:8e:4a:99:9d:bd:
                    78:65:d7:7f:b0:b0:ed:c9:b4:b1:e9:b9:43:b7:53:
                    f2:84:8f:aa:18:59:aa:6a:44:51:a2:7e:ae:8b:27:
                    48:95:9b:69:ec:b9:fa:f9:8e:e7:88:2f:bf:8d:80:
                    6a:c7:dc:c1:bf:f7:c9:38:20:3f:e8:c7:65:4c:b3:
                    a5:7a:c5:ba:d1:bc:f9:1b:22:10:6b:f3:91:89:b8:
                    f4:ce:bc:5c:a5:f9:7e:12:fd:48:9f:08:5b:28:88:
                    63:89:08:14:d3:15:e5:97:17:28:8f:3a:27:25:36:
                    b1:01:52:4e:c0:06:85:6f:d6:98:1d:ff:59:12:0f:
                    4d:7b:ca:66:0c:5b:09:39:e9:e4:73:aa:24:ea:64:
                    db:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:53:45:B2:EA:1A:F5:43:FB:7C:F4:3B:23:0B:87:BE:32:E5:12:72
            X509v3 Authority Key Identifier:
                keyid:FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:16:2f:56:06:88:90:6c:6f:99:da:6c:f7:42:ea:cd:2e:5a:
         2f:bf:3b:9c:3a:49:61:bb:1b:af:bb:3a:28:be:b1:a1:dc:cd:
         7c:28:0c:c3:05:ac:c1:c0:3f:b6:20:1d:3a:4a:eb:6d:b3:af:
         0e:aa:c8:86:da:c2:23:4f:8f:e5:d6:19:dd:20:a3:88:37:ac:
         20:f4:81:92:b6:ad:b3:39:a4:ae:b8:51:b0:7e:b9:25:12:42:
         4a:e1:75:84:aa:1a:77:2e:42:52:12:13:cb:5a:3e:2e:98:6e:
         ee:c2:70:f4:53:f7:bc:f4:2a:48:eb:8c:6e:7c:8f:3b:9e:b5:
         29:d1:09:90:6c:6b:ca:99:78:c0:bd:87:14:0b:3b:31:30:17:
         02:2d:08:54:b8:fc:5f:18:79:cc:dc:05:72:e1:42:43:f4:6d:
         75:a3:fb:d0:78:bf:25:13:82:49:9e:20:29:b3:ad:9b:c1:09:
         05:78:c7:d1:7a:a9:0e:d8:ea:cf:02:e2:cc:4e:72:73:a8:4a:
         63:9f:da:33:23:c1:dc:77:89:c2:46:68:64:19:81:54:c7:72:
         c2:e9:f9:b2:9d:46:07:96:37:38:0b:47:d1:bc:9f:73:86:5b:
         3d:45:a9:bb:c9:aa:43:8d:4b:a6:d3:df:56:2c:c3:1e:80:c5:
         dd:10:5a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:34 2026 by rpki-client