Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File:                     j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier:          KyYl7UjAPdu/p2sefVA566jG2mP7sV1ZAmvLpZ5qWLI=
Subject key identifier:   9A:E3:64:C6:C2:26:B3:79:EF:DB:8A:0D:7C:E0:32:1C:F6:F7:8E:F6
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer:       /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial:       019E1EDA3164A30D244F0103A6A6620932DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number:          0FE8
Signing time:             Wed 13 May 2026 01:01:16 +0000
Manifest this update:     Wed 13 May 2026 01:01:16 +0000
Manifest next update:     Thu 14 May 2026 01:01:16 +0000
Files and hashes:         1: S3xjSwjayGWQbrifgsC5G7Sh0Xg.roa (hash: tQnt0AxldpTLTefUEnKzHOLj+HzmMNDMI0YZ04Hh8vg=)
                          2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: c/LlouMBRCBgCPc97YOvVMGCkdnPwOdGAezs48rHyOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:31:64:a3:0d:24:4f:01:03:a6:a6:62:09:32:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
        Validity
            Not Before: May 13 01:01:16 2026 GMT
            Not After : May 14 01:01:16 2026 GMT
        Subject: CN=9ae364c6c226b379efdb8a0d7ce0321cf6f78ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:f9:5f:2c:12:5a:da:ef:2d:05:fe:19:c5:
                    31:70:3b:7a:d5:bd:a7:15:5d:a8:8e:fa:55:cf:40:
                    86:2b:fb:83:34:dc:47:f6:09:ef:83:9a:bb:bc:a5:
                    c4:0c:b9:14:f9:ff:68:90:89:cb:e6:b3:92:17:9a:
                    0c:30:18:39:9f:63:1e:4f:7d:ed:17:5e:60:0f:18:
                    65:1d:66:ae:48:54:42:0d:07:08:13:d1:5b:ce:ae:
                    40:6e:31:cb:72:f3:1a:df:04:f2:66:3a:31:ae:83:
                    6a:bc:2e:ba:4d:d2:01:b8:13:cf:97:5f:09:42:e4:
                    6e:05:35:e9:a7:4b:a2:3d:84:ae:e8:1f:64:59:24:
                    c4:44:68:b2:34:73:e8:0b:c8:bc:f5:58:ff:b8:2f:
                    2a:88:64:db:6a:89:a4:70:de:35:48:cb:43:24:f2:
                    aa:06:6f:35:39:ef:be:c7:56:85:84:06:0b:a4:21:
                    50:26:1d:eb:b0:87:f8:f6:ae:ff:f8:2d:5a:26:c6:
                    5c:4d:99:a3:bc:11:5d:7a:f2:cf:4c:1a:54:6f:32:
                    c4:2f:3f:d2:8a:12:45:9c:8b:38:76:db:fc:5d:4b:
                    5d:03:1f:c3:10:c6:ca:ca:07:a9:8a:bd:10:f5:9b:
                    63:88:8c:05:a7:be:2a:9b:b5:24:da:73:ae:a9:c2:
                    c6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E3:64:C6:C2:26:B3:79:EF:DB:8A:0D:7C:E0:32:1C:F6:F7:8E:F6
            X509v3 Authority Key Identifier:
                keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:4b:3b:04:b2:b9:c1:34:d4:c5:e2:4a:3c:5f:8b:7c:78:4e:
         b9:41:de:ec:df:40:91:0d:6b:66:8c:de:5b:e5:fa:47:b1:00:
         f4:1d:91:ac:7b:06:36:f7:90:1c:1d:3a:1c:71:b6:f7:c9:8c:
         18:0e:ac:77:87:df:ec:af:3c:78:db:51:04:33:3a:49:a5:18:
         df:47:c8:23:21:5a:0a:38:69:ee:12:e8:ac:f0:d6:55:7e:14:
         85:33:e2:cd:73:31:33:ab:8b:36:9b:9a:1c:d0:d3:60:0f:54:
         a3:c9:a4:8e:68:94:a1:c9:c3:2c:fd:67:45:a1:0a:b8:7f:59:
         92:41:87:25:38:59:e2:a4:e6:04:c5:a4:f8:02:52:8f:9f:df:
         a2:5c:cc:88:18:da:68:ac:06:d2:72:f7:49:88:bf:0b:94:28:
         2f:ff:46:21:c7:59:e6:53:a9:08:39:dd:9b:0d:da:46:e4:81:
         3a:d0:68:3e:0a:a8:29:12:87:70:44:42:50:18:91:48:65:ea:
         16:f3:b6:c4:fe:52:8c:c9:14:85:10:9f:cc:47:74:c0:c4:89:
         52:53:ea:ea:04:d0:f7:52:26:1f:c7:f9:f6:e8:30:02:34:23:
         5d:30:4e:2c:9d:07:31:b3:23:10:aa:a4:ef:02:18:6c:0d:ac:
         50:32:63:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:28:37 2026 by rpki-client