Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
File:                     jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json)
Hash identifier:          JmMhv7zmbb3YMsroguST+b+bdrhongKdYr7c/fPKCeI=
Subject key identifier:   09:95:CC:67:6F:72:58:00:36:14:B6:9E:F5:BF:68:B8:E8:5A:CD:62
Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Certificate issuer:       /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Certificate serial:       019E1D9081AFDF9782385F054A8F8D7AC6E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
Manifest number:          045E
Signing time:             Tue 12 May 2026 19:01:09 +0000
Manifest this update:     Tue 12 May 2026 19:01:09 +0000
Manifest next update:     Wed 13 May 2026 19:01:09 +0000
Files and hashes:         1: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: Rp8o03uCR6s28jHW0OeA9eHp1V2mLkNCr6prBS+A0lA=)
                          2: ljWbO3xgpVVnVuPfMgl7G3F39B8.roa (hash: Bdl5BL0jpRyEhLx4reL1/D3qaLttRyXVouVa2c42GeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:81:af:df:97:82:38:5f:05:4a:8f:8d:7a:c6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
        Validity
            Not Before: May 12 19:01:09 2026 GMT
            Not After : May 13 19:01:09 2026 GMT
        Subject: CN=0995cc676f7258003614b69ef5bf68b8e85acd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a9:31:d0:e4:cd:9b:24:5b:ba:cd:bf:d1:58:
                    40:46:c4:5f:06:18:1f:4c:95:80:ce:a1:df:47:f9:
                    a9:1a:3a:41:8f:86:54:fd:be:60:28:37:60:2a:51:
                    83:7a:54:8e:a0:c2:2c:f2:3d:62:fd:4e:18:98:68:
                    37:b3:9a:e5:38:65:81:5d:68:e0:e0:71:4b:0f:92:
                    a4:33:0c:45:e6:d7:85:11:0d:b1:79:27:7e:12:4c:
                    bb:db:56:73:de:72:38:cb:5d:92:81:ff:db:3f:15:
                    82:ec:8c:13:ba:3f:56:15:3a:bf:1c:2c:71:76:87:
                    86:ae:37:97:f3:0e:46:c8:6c:df:e5:af:12:2a:e0:
                    61:b1:5f:27:7f:d0:54:4c:14:86:5c:6e:b3:e7:52:
                    a1:63:5e:76:46:3e:7d:79:8e:d3:ff:74:c1:7d:47:
                    e8:f6:b8:a1:15:52:c7:06:98:98:4e:fd:bb:b3:b7:
                    bc:9e:2e:da:18:0a:bc:37:24:ba:15:d6:02:8f:54:
                    f0:16:01:51:a8:a2:c7:8b:08:f7:29:d7:bb:05:31:
                    d0:4f:c0:57:fe:a4:9e:1e:4e:68:55:4d:90:0c:a0:
                    a7:71:b9:9b:8b:31:be:c2:77:ed:a9:9f:b8:44:96:
                    89:1f:c2:72:cb:c3:a9:55:dc:a9:6b:66:8c:e0:84:
                    3c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:95:CC:67:6F:72:58:00:36:14:B6:9E:F5:BF:68:B8:E8:5A:CD:62
            X509v3 Authority Key Identifier:
                keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:2a:28:25:35:28:19:11:8f:b0:89:d0:66:d6:af:b6:48:35:
         5e:a3:1b:65:84:4d:25:3c:aa:23:b2:9b:21:d6:97:e5:5a:78:
         a7:b6:3d:44:45:7b:ca:da:0c:95:88:cc:86:a1:cc:bb:2e:d4:
         b8:e9:fb:08:c2:5a:63:0d:fb:e8:40:52:93:4f:e5:5a:81:bb:
         37:dd:df:3a:8f:9c:55:2f:12:94:29:27:e8:ea:c4:ab:94:22:
         0d:4d:b1:f1:91:19:99:0f:22:76:5d:b3:ae:e1:a8:75:ca:e2:
         86:97:4b:b6:6a:60:5c:5b:27:f3:ba:cc:b4:e3:d8:98:5d:7f:
         b1:a0:25:ad:ca:ae:d2:f5:4d:47:d6:ec:76:b5:04:e8:54:2a:
         33:d7:0e:8c:ce:f6:7b:ed:43:aa:70:9b:fe:4a:f4:ff:ff:08:
         13:69:45:10:6f:15:d0:50:72:c6:b5:f6:fa:7a:ec:64:e0:64:
         13:39:99:3e:87:1d:6a:24:d4:44:18:33:5a:05:71:15:02:8b:
         c3:18:61:2b:54:ff:7d:02:b8:7f:11:24:ed:5d:8f:be:c6:56:
         e0:64:c5:d9:aa:1e:03:a3:da:0c:85:c4:01:95:18:fc:6e:ea:
         b6:fa:5e:bf:9d:9f:22:5e:b6:c3:e8:e1:76:7a:44:ae:c1:69:
         9f:f7:e8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:59:12 2026 by rpki-client