Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
File:                     JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json)
Hash identifier:          CcU17Fx2ZBqMmQ7627aexi6FcSFPPTK8x2364R1YPAM=
Subject key identifier:   95:BF:0D:17:9A:A7:8D:D5:18:79:87:FB:0B:1F:7A:09:18:D5:AB:AF
Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
Certificate issuer:       /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Certificate serial:       019E1FECE8546005C403EA40D153A258C48E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
Manifest number:          164D
Signing time:             Wed 13 May 2026 06:01:20 +0000
Manifest this update:     Wed 13 May 2026 06:01:20 +0000
Manifest next update:     Thu 14 May 2026 06:01:20 +0000
Files and hashes:         1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: Lk+BSDORgx8p7CAFjScwxI6dEUsRaRvyaY0Q0qI9OHI=)
                          2: rc_J4XOHhixLylCcfyExPkYQnWs.roa (hash: kaE6EoD8hyc9JZvUwXOFpWk4FxFp7L/CsoCCjqyPHoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:e8:54:60:05:c4:03:ea:40:d1:53:a2:58:c4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
        Validity
            Not Before: May 13 06:01:20 2026 GMT
            Not After : May 14 06:01:20 2026 GMT
        Subject: CN=95bf0d179aa78dd5187987fb0b1f7a0918d5abaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:b3:70:3a:74:a3:b3:80:0d:8c:d0:a0:ea:
                    20:7c:7b:15:f3:1e:e5:20:24:d2:94:68:c5:50:00:
                    25:19:e2:29:87:51:21:a6:9d:1c:bf:47:1f:8b:45:
                    bb:4e:83:e1:63:6d:ce:ca:4d:cb:4c:6d:af:83:35:
                    7c:74:f3:ab:f1:7b:5f:0e:b9:09:27:ef:40:41:65:
                    06:0c:ee:af:fd:35:22:c6:8f:82:89:5f:08:1d:76:
                    23:e9:c8:7a:0c:12:e0:de:24:83:67:6a:94:97:77:
                    0e:04:4c:09:97:39:90:a5:4a:f4:dd:7d:90:6e:12:
                    33:73:3d:74:82:df:92:dd:03:c5:a3:fb:37:ca:22:
                    6f:64:70:bb:96:84:aa:2f:6e:ed:2e:c5:f6:03:61:
                    cd:c9:42:7f:c1:15:4a:8d:c0:21:d3:3c:a1:1d:fb:
                    0c:c3:e6:e2:81:97:7e:2b:99:a3:b4:b8:31:2b:11:
                    8c:e5:a8:5a:46:c4:00:f5:36:a7:68:20:f6:5b:2a:
                    56:0a:c2:63:9b:58:c9:3e:b3:89:f0:bc:bb:26:fc:
                    27:e6:72:e2:af:08:82:39:59:74:79:83:d0:88:39:
                    04:0d:71:b4:31:44:4d:78:6e:e9:22:d9:a4:44:10:
                    7e:06:d5:f6:14:31:9c:5a:d1:c7:9d:04:1c:7a:4c:
                    9a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BF:0D:17:9A:A7:8D:D5:18:79:87:FB:0B:1F:7A:09:18:D5:AB:AF
            X509v3 Authority Key Identifier:
                keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c9:30:79:df:44:20:f0:b9:49:e3:a8:72:c8:06:01:06:eb:
         32:3c:8e:ef:b1:b9:41:90:34:3f:0e:c0:ad:f0:da:93:29:41:
         ae:48:a6:f6:82:96:02:7b:62:7c:c5:17:9f:ad:ba:97:6e:00:
         70:db:72:e9:08:62:31:40:7d:14:d8:eb:4e:2d:c0:80:09:73:
         f4:84:b1:6c:d2:7c:06:57:01:16:6c:be:4f:f4:55:68:2d:40:
         fc:a7:10:f5:0e:eb:ee:b2:a1:29:04:7f:9b:15:15:ca:a6:c1:
         59:bd:ee:c5:92:7a:1f:05:b5:cf:7f:01:69:ca:d1:c6:f8:4d:
         d9:fa:6c:c7:88:06:07:94:04:7d:99:8b:87:4d:8b:d0:ac:b6:
         78:3e:4f:67:f2:60:c5:b2:ac:bb:38:f0:1f:20:5c:71:91:de:
         a4:5b:83:6b:dd:e2:64:b6:ad:c8:3f:9e:3f:65:65:67:51:98:
         62:3d:c4:9d:b7:5f:17:8c:19:a7:11:51:01:75:10:43:96:b5:
         b8:10:e9:85:3b:6e:50:dc:c4:c5:f4:04:c6:45:5d:22:9d:ca:
         79:80:7f:9f:18:e7:2e:34:1a:96:21:a0:c9:f8:d0:a9:99:ba:
         62:64:6e:ed:b5:2b:e5:d3:3a:69:a4:00:7e:97:d5:04:97:3d:
         ce:3d:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:09 2026 by rpki-client