Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File:                     1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier:          F7e6GENoU2VbJhxJjmMBodXCuYFJfyXWcV4qs82nEQA=
Subject key identifier:   B2:E5:BD:78:8B:08:E7:16:20:1B:E7:A4:FE:23:4C:8A:9E:06:DC:A7
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer:       /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial:       019D27DF64BA1B659335EA164EB0172B2515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number:          0765
Signing time:             Thu 26 Mar 2026 02:00:44 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:44 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:44 +0000
Files and hashes:         1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: oqNe8REGCXpNnqSh42Twq72jtxA4M676MW5FOcWpBJc=)
                          2: JpIB4nkPEhTLh9OLsKFtaIBTfLs.roa (hash: pRfl+oPO95G6GyCTV4Tx86Y6/zpSH8wEr4yMBAKE3Pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:64:ba:1b:65:93:35:ea:16:4e:b0:17:2b:25:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
        Validity
            Not Before: Mar 26 02:00:44 2026 GMT
            Not After : Mar 27 02:00:44 2026 GMT
        Subject: CN=b2e5bd788b08e716201be7a4fe234c8a9e06dca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:98:60:e8:44:af:08:32:ad:15:e5:bc:f6:
                    91:22:d1:c4:d3:6b:e7:56:f3:7e:e5:02:ae:58:97:
                    f0:6a:2b:74:d3:44:14:a2:96:3e:be:57:32:52:b4:
                    ee:56:e3:d4:1c:57:7a:a7:9e:11:d5:f0:7a:ee:5c:
                    f4:6e:69:64:01:44:fd:29:e6:a0:64:d1:98:e5:76:
                    95:a2:a0:e6:a2:29:c3:28:ea:6b:b0:27:4e:6c:bb:
                    c9:9a:0f:bb:69:63:36:67:5b:f6:3c:00:d5:ad:c6:
                    47:fa:fc:ae:40:77:67:03:78:7e:8e:c3:7e:22:19:
                    88:c2:9d:7f:56:21:54:d4:2d:0a:f2:a8:59:ed:e7:
                    99:3c:e6:96:c3:b9:5e:7a:2e:2f:1c:41:67:48:1b:
                    aa:0d:2f:d1:44:1a:71:48:75:e5:d8:51:4b:a0:54:
                    7a:29:dc:e7:a5:95:ed:19:24:08:81:d8:12:bf:6e:
                    08:3c:33:8a:6c:51:11:00:af:b1:50:68:78:09:01:
                    24:30:8e:cb:81:1e:34:05:29:8a:4a:97:9f:54:c9:
                    d1:74:02:f3:37:dd:67:97:e6:27:4b:e2:6a:07:56:
                    a5:44:34:42:95:e2:dd:b7:3c:ba:96:ef:2f:95:6f:
                    85:0c:e5:ee:d1:61:89:99:df:d0:ba:44:78:cf:c3:
                    f1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E5:BD:78:8B:08:E7:16:20:1B:E7:A4:FE:23:4C:8A:9E:06:DC:A7
            X509v3 Authority Key Identifier:
                keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:17:ae:dd:c8:33:84:7d:49:f0:16:41:16:41:08:1f:9b:36:
         91:30:f0:8f:ff:78:84:1f:bf:80:6a:eb:e7:8d:cc:34:a0:f7:
         ed:6c:cc:30:1c:27:68:05:b7:e9:8e:37:8e:0a:ab:3a:e8:5d:
         5c:47:d3:59:98:38:7f:4b:8b:83:d8:51:1a:3b:0e:bb:ee:79:
         b3:5a:1c:53:7c:86:cf:2f:e0:39:92:dd:06:20:24:79:6d:de:
         62:c7:06:72:21:47:3c:7b:d6:49:cd:0a:36:38:e4:f8:69:b3:
         db:5f:4a:ec:88:cf:3f:1c:40:c1:3b:95:00:3a:2b:b3:db:a7:
         2b:7e:9d:9c:88:ea:dc:b1:3a:3c:55:8f:b7:da:ce:f3:62:29:
         f7:48:a7:2f:36:ab:f6:b3:87:4e:47:79:cd:0f:d4:53:84:5d:
         73:7e:3c:19:2b:52:38:e1:4c:7d:c2:1e:a3:44:be:a8:5d:8b:
         61:48:c1:81:71:3a:33:a4:5c:75:53:35:ac:75:a7:f1:91:74:
         9a:9f:c4:b9:24:e4:e0:e0:68:06:f4:36:0f:42:63:3b:51:a4:
         2e:0c:c4:a2:df:83:a4:a3:08:80:4b:3f:49:ce:69:35:da:87:
         cb:31:7f:a3:e9:76:54:73:9a:42:10:62:8a:ca:dd:7d:5e:7d:
         06:ac:83:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:41 2026 by rpki-client