Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
File:                     jeQsVg_CKLW7T0zwDt4t_ibGYws.mft (raw, json)
Hash identifier:          r1oxYzvGWAcykjeNapSyzoQoRf4LrpWhO+ak4gJxyTI=
Subject key identifier:   E7:44:3B:55:8A:84:99:06:26:59:47:E3:79:5A:9A:08:56:F0:E2:B6
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Certificate issuer:       /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial:       019D27040035698E806A66AED9E9F6B09BE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
Manifest number:          1962
Signing time:             Wed 25 Mar 2026 22:01:06 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:06 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:06 +0000
Files and hashes:         1: 6ALUAX_BlS5KlbgFgt-VADKUCoo.roa (hash: 6rsnp+qxPv9UYEyzzteDX/UyFa/laFrdA7bE3B5gdhE=)
                          2: SEZ6fU5AhjTcT-v2AF7aa1Lk33I.roa (hash: nyDU2awTDtLEQn8KT2rzLnNR5fVOBeEGOrOK5V7gTs8=)
                          3: YVVa8qXq8lG3mkbmd2P3XRnWZu8.roa (hash: /hcrN2c7yYYNROlrx3P8uAt7fQlO7FXIyMlqkaVFXbY=)
                          4: YW3dbYMvMGpRlXCgljvs9WEA8II.roa (hash: 0QFB4Z6/oF+6LZXj3qGwOBveMLWnuMyB/KPTEoXelQI=)
                          5: jeQsVg_CKLW7T0zwDt4t_ibGYws.crl (hash: 4dnQXELt2Qn/w3hSDYywjlPEnIYitmwKay7mTHYjfyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:00:35:69:8e:80:6a:66:ae:d9:e9:f6:b0:9b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
        Validity
            Not Before: Mar 25 22:01:06 2026 GMT
            Not After : Mar 26 22:01:06 2026 GMT
        Subject: CN=e7443b558a849906265947e3795a9a0856f0e2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:5c:76:3c:33:f8:bc:32:38:fa:6e:8c:3a:
                    bf:e6:f7:75:2e:22:c0:ac:49:96:e5:8c:97:36:2c:
                    b9:c5:34:8c:0e:02:04:2c:bf:e2:8f:44:1a:b0:95:
                    c9:10:15:89:05:a3:99:26:78:69:9d:59:c2:54:f0:
                    30:40:f0:36:dd:eb:77:af:38:bc:83:9b:e1:da:f3:
                    56:44:51:6d:51:d6:91:4e:69:82:57:0d:9e:8f:9d:
                    4d:82:8c:9a:84:0b:24:d5:17:c2:1f:86:fc:19:1f:
                    7d:a4:95:9e:a2:2f:b6:ba:62:26:62:70:cc:2b:bd:
                    d9:e4:f9:22:82:20:fa:6d:e3:2a:2a:86:ac:94:af:
                    b1:88:35:6d:1c:ea:99:84:ac:6f:73:00:bc:95:d8:
                    d5:34:f3:e3:04:af:ef:8e:44:8d:55:bf:32:57:a0:
                    b1:81:0b:a4:ac:9d:c5:4a:b9:4d:70:9f:b1:36:f3:
                    78:00:38:48:e7:f3:8f:1e:6a:20:84:70:48:73:3d:
                    cb:9f:36:74:be:bf:50:bc:8b:e6:0d:c5:3d:d0:b1:
                    d9:5d:b8:bd:24:27:65:d9:92:17:90:93:34:da:4b:
                    ce:75:26:6f:fe:a4:f3:4d:80:9b:69:0d:d1:08:a9:
                    d2:a9:42:1d:52:ed:ed:40:64:2b:4f:1d:3e:41:c4:
                    4a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:44:3B:55:8A:84:99:06:26:59:47:E3:79:5A:9A:08:56:F0:E2:B6
            X509v3 Authority Key Identifier:
                keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:77:4d:39:94:97:0e:0a:3e:14:0d:dc:bc:29:33:13:23:29:
         49:1d:aa:e0:da:a1:2b:7e:b7:fc:c2:be:29:26:d9:6c:33:d3:
         9b:9a:f6:24:c3:7b:d6:98:9e:55:2e:4c:70:a7:c7:88:76:20:
         1e:f6:17:85:c0:e4:03:17:ae:d4:87:be:89:b4:93:29:1b:43:
         d2:09:9d:5a:ca:1a:93:36:61:62:75:81:bc:22:aa:64:d5:f1:
         ec:1d:95:fb:22:b3:12:32:24:37:ef:ba:77:8e:58:7a:c4:e1:
         ef:f9:ed:01:43:15:4e:a2:22:52:36:9b:f4:00:c5:be:40:9e:
         cb:d2:cf:3f:ed:64:0a:a6:9b:c1:9f:8e:6d:2d:2f:ca:1a:59:
         08:16:af:5a:eb:35:00:05:cb:37:f7:bd:69:1c:bb:ad:13:05:
         02:cd:b0:81:94:f3:0d:c4:87:09:14:33:29:49:b4:1c:5c:fc:
         37:ad:2c:ca:bf:62:ff:3c:da:af:16:7b:e4:87:6d:77:7b:c0:
         8c:1a:89:af:e3:28:fa:0b:ae:7f:eb:12:ca:83:11:7a:98:fe:
         37:c5:c7:7f:8e:46:b2:a0:3a:20:9f:ef:ff:87:11:f2:c3:15:
         bb:18:26:f1:23:b5:9c:5e:09:ad:a7:9a:62:56:bc:aa:fa:0f:
         d9:77:f6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:11 2026 by rpki-client