Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
File:                     JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft (raw, json)
Hash identifier:          ebn0qhs4hWU1LTWt35EHYWzifXa//N14hPyRup/dvjA=
Subject key identifier:   10:90:38:51:50:26:76:8A:EA:C4:C8:06:53:E7:D9:B4:D3:A5:62:5A
Authority key identifier: 26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B
Certificate issuer:       /CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
Certificate serial:       019D27A8CE406B1A617861AD10849B11570F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
Manifest number:          0F66
Signing time:             Thu 26 Mar 2026 01:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:07 +0000
Files and hashes:         1: JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl (hash: QnLIdiLEOUprIGzHvN7n3zAb9Z9jtWXveOCTH+Y7xgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:ce:40:6b:1a:61:78:61:ad:10:84:9b:11:57:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
        Validity
            Not Before: Mar 26 01:01:07 2026 GMT
            Not After : Mar 27 01:01:07 2026 GMT
        Subject: CN=109038515026768aeac4c80653e7d9b4d3a5625a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:0c:df:b0:61:76:d6:6e:a7:6f:67:ba:3a:
                    93:47:54:68:40:26:1b:32:c7:58:7f:4e:bb:f5:3b:
                    ef:c5:79:46:14:56:6c:ae:0d:ec:08:55:d5:53:79:
                    07:97:93:dc:d1:e1:89:e1:c2:aa:e6:ef:a6:03:f9:
                    5e:a0:f8:4a:10:20:2a:32:ba:e6:b5:81:d3:ef:bb:
                    7d:1b:a9:6a:1b:82:01:d0:6c:5f:b2:2f:b2:02:72:
                    58:39:2a:02:23:fb:e5:c1:a5:ec:d3:5b:44:6a:33:
                    a1:e6:21:ce:ac:eb:46:3a:0a:00:bb:e5:d4:6d:ce:
                    f9:d0:4a:aa:13:32:4e:48:ba:34:9d:e7:73:d5:d9:
                    be:c3:60:9a:a2:3a:17:8e:b3:2f:0d:81:10:f9:79:
                    2d:23:73:0f:82:54:e6:85:a5:c4:84:1c:2b:11:7e:
                    aa:0c:97:ae:5e:53:cd:f6:ef:30:48:28:4f:4e:de:
                    28:27:46:1f:be:81:96:bf:54:fa:77:a9:45:03:a2:
                    45:75:1e:6e:f5:4d:e4:2b:63:90:f5:5a:b2:a7:28:
                    d3:b3:fd:4b:20:8c:25:65:c2:f6:aa:ab:f1:43:85:
                    66:02:4e:5c:87:a0:93:a5:2c:1b:77:33:f5:19:15:
                    98:f0:c1:84:0e:a9:99:85:5f:61:ec:e5:78:be:09:
                    43:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:90:38:51:50:26:76:8A:EA:C4:C8:06:53:E7:D9:B4:D3:A5:62:5A
            X509v3 Authority Key Identifier:
                keyid:26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:87:cf:d4:61:cf:3e:4b:e2:18:45:de:e5:6c:b9:e1:65:74:
         11:9e:07:66:d3:0c:9e:d8:76:21:8d:81:01:d3:fe:57:71:e5:
         85:1c:c1:79:98:ae:3b:0c:67:e0:3c:1f:b1:bb:88:fe:10:db:
         04:2d:68:86:37:d6:d8:99:4c:ea:73:88:6f:71:b6:71:19:e7:
         81:d6:5c:77:98:b9:8d:00:ab:49:86:e3:b1:da:b7:0f:4e:e9:
         88:e4:fa:2b:80:39:24:e6:66:71:04:43:72:7b:95:ac:2f:7b:
         ec:4e:3e:82:04:52:7b:2e:29:79:3f:24:17:ff:c2:38:69:ee:
         43:a2:c2:68:8d:d3:86:7d:59:6a:e5:fd:b5:1b:b9:5f:04:ca:
         4b:45:ec:6f:ee:25:23:ae:2e:ed:19:3b:a1:31:e7:0d:de:32:
         99:04:9d:29:4b:4e:86:54:09:a1:d9:50:b4:71:aa:ea:28:d7:
         5a:12:1e:2e:cc:ae:ff:df:84:d3:6a:ed:06:d3:2b:09:59:2b:
         ed:46:9c:50:d1:94:80:a4:9a:97:26:94:f2:30:cc:02:47:a7:
         0a:e5:93:22:90:83:33:5c:1d:26:78:58:6c:03:f5:3f:fe:9f:
         80:64:14:25:7e:d0:29:5e:ee:ad:83:99:6d:74:30:db:2a:3a:
         68:ff:65:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:47 2026 by rpki-client