Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
File:                     jphwObPzstubKYrg2NDrNIlprWI.mft (raw, json)
Hash identifier:          KaSirHfSviPn/odcucvgGTdoJ/R02ewjruv50zBF9Vc=
Subject key identifier:   F8:1D:85:35:08:A9:2D:43:77:EC:92:D8:FB:25:68:60:5C:D5:98:08
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Certificate issuer:       /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial:       019D2B8598C7BA3C164788D535370409087F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
Manifest number:          0F57
Signing time:             Thu 26 Mar 2026 19:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 19:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 19:01:08 +0000
Files and hashes:         1: 1Frxfbc98CPNBXlvYxNVV4HDdfw.roa (hash: zDjUPNkwFr1cypuN/i7XmbHHkWcY1mRap2kucDPhT9w=)
                          2: 82JWIomOThmW0YMHKxDPuIJNFK0.roa (hash: hC4sRPtPg3GW3YOxAj+I1bNIwfqpwHn+ecr5wb73PWo=)
                          3: GKI0oMGPc_ao96H_Pxppo6dkqjU.roa (hash: zkKvY4dzGqAm86wlj6w2FQOXQJkkmZRclubHEKVhIrs=)
                          4: UbPR__GWgCOIAb3NQc0qlqrppxU.roa (hash: lTQfU6TbcxSvADq8zAUFbLRCThmdnW+zAxZAvDh4gWQ=)
                          5: jphwObPzstubKYrg2NDrNIlprWI.crl (hash: glQE8LCw6ECSyt9rAA6LDelaZjcKPTXitC/qW/+NXOU=)
                          6: mSOb8oL2yaxSaSAqBWs5Nse1M6o.roa (hash: P4pKI4jOB/owH0H61XW01BCRPQ5A8npRT1ANcLU/gqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:85:98:c7:ba:3c:16:47:88:d5:35:37:04:09:08:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
        Validity
            Not Before: Mar 26 19:01:08 2026 GMT
            Not After : Mar 27 19:01:08 2026 GMT
        Subject: CN=f81d853508a92d4377ec92d8fb2568605cd59808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:a7:ab:5f:dd:39:70:f1:8e:a6:13:6d:1b:
                    e6:65:91:b0:16:fc:45:23:a2:4c:98:cd:ff:61:8d:
                    5e:24:46:58:14:af:83:68:73:42:80:a0:8d:37:18:
                    ae:f0:ee:d2:2a:5a:b8:cc:93:bb:94:a8:48:cc:49:
                    2b:85:22:e9:ef:56:5f:ab:a1:2c:b0:4b:a1:4f:c0:
                    29:64:ca:f4:4b:f8:c8:45:93:bf:5d:4b:41:1d:39:
                    cb:20:ff:ea:8c:49:24:75:d8:1e:87:6b:7e:15:dd:
                    2b:b3:e1:80:e5:8d:bd:2f:2d:74:61:9b:20:96:d6:
                    39:e0:30:21:df:04:cb:19:47:e1:9b:87:97:39:1c:
                    61:c9:9e:2c:fe:2f:2a:a2:51:03:18:dd:03:66:77:
                    b2:1e:75:fe:47:93:e6:d2:17:ea:8e:1a:ed:20:23:
                    42:f5:0b:9a:f1:63:d5:ac:1f:1b:95:cc:99:a7:35:
                    60:2c:00:23:d7:4b:ca:7d:dd:e3:1c:87:c8:c3:e4:
                    84:eb:10:a1:a9:93:ba:6c:07:b5:a5:cf:d2:56:87:
                    9f:64:56:26:31:dd:82:25:52:cb:db:75:e7:31:55:
                    f7:2d:98:da:0f:79:f6:61:32:e3:34:06:26:45:6f:
                    76:eb:19:d8:d8:72:d8:12:af:36:44:6d:64:6f:43:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1D:85:35:08:A9:2D:43:77:EC:92:D8:FB:25:68:60:5C:D5:98:08
            X509v3 Authority Key Identifier:
                keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:63:95:4a:00:e2:10:7b:db:7a:29:9a:36:14:2b:03:7c:
         97:9c:80:27:c6:b6:de:90:01:45:34:01:86:23:5c:24:5b:eb:
         1c:f3:08:b8:d7:fd:bd:91:8b:07:b4:8c:03:bc:05:e1:89:60:
         31:f4:a9:5d:de:7e:91:ec:90:f5:ec:fb:56:c5:16:ad:dc:cf:
         db:a1:06:d0:ad:4d:f2:32:02:5d:78:22:bd:35:9d:56:6e:db:
         c8:65:8f:09:b2:96:22:1d:61:51:a6:97:dc:37:c3:c1:eb:3a:
         97:55:3b:fb:6e:ec:b1:9d:22:89:1d:08:c7:a1:2a:0d:8b:5f:
         37:a8:7e:31:16:f9:9c:0a:f2:ca:65:bc:29:0a:1b:d7:8a:3d:
         0c:78:ef:4e:96:11:af:83:af:aa:86:66:40:99:e9:22:dc:3e:
         a1:82:d3:c0:2a:cf:8e:c1:4a:58:09:6f:e2:5a:8d:05:ce:68:
         58:29:ec:97:9c:a8:3b:a7:66:92:05:b3:a4:f0:1d:90:4c:c9:
         4f:72:56:f2:5d:bb:86:9c:c1:10:0f:6d:e3:f7:e6:a1:76:9c:
         dc:c5:77:3f:f3:d8:77:4d:0e:74:6a:0d:a9:ff:bf:5f:37:01:
         3f:d1:f0:a6:3e:ea:23:99:ca:f4:1d:92:b8:bf:59:18:48:4f:
         ae:b3:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:13:24 2026 by rpki-client