Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
File:                     J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json)
Hash identifier:          j1lPEnBX66//byziRKD7PDthvRRfDcADHmSjQ642lRI=
Subject key identifier:   A3:46:B4:99:E6:10:86:E8:14:21:50:0D:0C:3E:5B:4C:E8:92:BF:02
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Certificate issuer:       /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial:       019E1FB5F2CD6B27462E09ADE16303B1A7C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
Manifest number:          14B0
Signing time:             Wed 13 May 2026 05:01:18 +0000
Manifest this update:     Wed 13 May 2026 05:01:18 +0000
Manifest next update:     Thu 14 May 2026 05:01:18 +0000
Files and hashes:         1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: sgmTEi6UJSqSDN3I4BY/PM/HCqB7mvD3hDbschMUYhU=)
                          2: hv5F2fKm7cZ-fqlTGhS4HLwa_Mo.roa (hash: 3e8QQ5wpWIE1xn2kF+A/CiSMbxQICMGVp/zM+nv9PN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:f2:cd:6b:27:46:2e:09:ad:e1:63:03:b1:a7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
        Validity
            Not Before: May 13 05:01:18 2026 GMT
            Not After : May 14 05:01:18 2026 GMT
        Subject: CN=a346b499e61086e81421500d0c3e5b4ce892bf02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:3d:4e:cb:30:03:dd:9e:fd:99:30:66:51:
                    2c:8b:c0:be:32:8c:5e:0c:1f:16:cc:5b:73:d6:4b:
                    87:b7:a5:69:a0:7e:17:0c:21:cc:83:01:7c:09:82:
                    06:ef:81:a8:11:53:ac:62:c9:85:89:de:16:ae:ec:
                    7d:64:b0:d1:a0:ae:ba:cd:a9:33:d0:fd:81:9c:dd:
                    0c:68:f5:c1:75:a2:b2:49:fc:2e:6f:b0:62:f9:f3:
                    ed:a6:f2:89:1e:77:e1:0b:e9:c3:12:21:48:d1:79:
                    4f:c9:a2:fb:34:40:61:d2:58:eb:c0:b1:68:49:b5:
                    58:47:bc:35:1b:f9:4e:ab:4b:26:a6:f8:97:e5:e2:
                    0d:c3:7e:05:26:5b:ad:a7:1f:8d:56:52:b6:34:91:
                    f3:5d:d3:b1:77:87:a7:3b:cf:d6:ee:a6:1d:2b:d0:
                    ab:f6:76:c2:eb:99:8a:56:47:eb:e7:ab:64:35:f8:
                    de:30:cd:1c:99:5c:f2:1c:22:35:fe:89:dc:7b:0e:
                    37:01:fc:45:7b:88:b6:56:23:38:38:b7:29:ab:74:
                    42:f3:44:c2:42:a9:f0:38:fc:da:3d:ef:9d:3f:f9:
                    41:82:2e:fd:6a:49:db:4a:bb:50:d0:78:e8:50:cf:
                    79:7e:89:d1:cb:1c:9c:af:e1:c9:2b:1e:39:0b:fd:
                    3b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:46:B4:99:E6:10:86:E8:14:21:50:0D:0C:3E:5B:4C:E8:92:BF:02
            X509v3 Authority Key Identifier:
                keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:fd:4e:e1:9b:03:99:36:92:9b:17:11:db:be:11:19:ae:d1:
         d6:de:b3:6a:16:09:71:7a:fe:d5:ff:d3:ce:db:48:b6:ed:43:
         fb:b1:78:2c:98:4a:07:18:c1:a9:43:42:2a:21:14:83:d1:81:
         14:b1:a1:ca:7b:27:58:62:2f:6a:95:33:56:e3:aa:65:ee:4a:
         f3:15:ea:f2:b2:73:93:92:ae:ce:0e:5d:d4:30:47:d8:17:15:
         0b:ba:10:53:cc:f8:b6:11:67:c6:47:6e:97:2f:e9:8a:ed:3d:
         0d:df:ab:f6:02:1d:87:18:58:52:a6:a3:d9:95:18:00:06:1f:
         7d:f4:e7:6a:27:e6:4d:85:a7:fb:75:27:4a:b6:fa:00:69:57:
         bc:64:8a:53:b9:fd:69:05:8f:55:6e:d7:6b:34:80:0a:9c:60:
         ec:02:fd:b5:ef:da:17:1c:75:d7:75:9b:f1:cb:82:8c:e9:af:
         7b:df:13:9e:2e:25:64:1d:dd:f5:6a:f3:b3:e7:e8:ad:57:86:
         6c:0a:f9:1b:7d:80:77:0c:0e:0f:76:f3:e7:18:03:9c:e9:e9:
         ab:54:42:17:49:2b:fc:1c:15:59:67:27:2d:34:15:81:75:3d:
         dd:37:60:ab:7b:09:37:a8:c5:c3:09:cb:8c:e1:c6:70:f9:7d:
         3c:f9:4b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:24 2026 by rpki-client