Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
File:                     JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft (raw, json)
Hash identifier:          K6EreWCt4j9iHPjZ4RgELry7QfNkA1OFdPxAxCHiHNI=
Subject key identifier:   3C:A2:92:D0:58:A8:ED:AE:EB:09:53:A0:F2:A2:15:81:F4:F7:11:4B
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Certificate issuer:       /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial:       019D281677FEDF1DF71AC29F71713B3710B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
Manifest number:          18E1
Signing time:             Thu 26 Mar 2026 03:00:54 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:54 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:54 +0000
Files and hashes:         1: 9AbUngTypkaoNALibGKyeTkaz4o.roa (hash: 8et21MYSocigMDejcXNZOBoqIIUukvEWNLqIqh49CVQ=)
                          2: JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl (hash: SSssYHEHMh1c8b4ztySBXNfIIhX4xPpT+W4PDF/2yBU=)
                          3: RyBPSWBAyvgzI58JUex72WdudTY.roa (hash: dlQYrNWmjCNno8rPfDE7ZKBncib9oiUvaLSq8gqa3/M=)
                          4: UT5KF9vV1JL4qQULVX8xBydW-Ws.roa (hash: CZXMjETLne5/ANsavo0h/DI6L9lViMMTJK0r4r9Tp+I=)
                          5: YJKWmoUnloWqQAavfXfWWxqnJ5M.roa (hash: Ka2Kdw/WOaN1bcBViqXyM0PUv8ChNL0LTlaKVsUXAN4=)
                          6: ob6pDJB_JE3UJu9H-9gufeyselQ.roa (hash: xbSbO7r3hHkWAEnbnrsxUE2H3xriXhgsX8DyAPUq47c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:77:fe:df:1d:f7:1a:c2:9f:71:71:3b:37:10:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
        Validity
            Not Before: Mar 26 03:00:54 2026 GMT
            Not After : Mar 27 03:00:54 2026 GMT
        Subject: CN=3ca292d058a8edaeeb0953a0f2a21581f4f7114b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:93:fe:4a:5d:93:44:87:31:03:8f:3c:69:
                    02:c7:54:cf:1b:ab:93:04:23:9e:37:98:20:8a:34:
                    3d:73:57:f2:4c:c4:f0:f4:ea:fc:bd:f9:80:fe:bf:
                    9d:4a:0d:c9:ee:e7:75:5b:da:3d:9d:5d:68:36:c7:
                    84:e5:0c:b1:44:7e:da:ca:81:6c:46:10:03:8e:25:
                    eb:4c:e2:e0:e9:96:79:45:19:f8:96:aa:e7:a5:8b:
                    d4:aa:51:e6:74:fd:12:40:af:76:f7:86:1d:db:3c:
                    96:58:a0:2d:07:9b:b7:dd:37:21:b4:2d:9b:b0:12:
                    fa:f5:90:05:56:9c:bc:74:3d:c7:46:a6:68:2f:e2:
                    b8:d3:50:21:78:f1:6d:74:7f:52:8c:80:3d:3d:e7:
                    e6:38:54:8c:a5:bd:d9:8e:17:b8:cf:9a:35:f7:4c:
                    10:16:f7:de:c5:5e:52:60:50:b0:9a:9f:0c:68:16:
                    af:07:b5:e6:79:79:45:fa:f0:98:82:93:ff:7b:ce:
                    03:64:c2:80:1a:9e:95:cf:4a:e0:65:cc:43:f2:84:
                    b0:93:19:d9:1f:18:b7:c2:7c:9e:25:1f:85:46:a1:
                    8b:59:f2:f3:03:57:32:95:b6:a3:0a:9b:3f:d5:d0:
                    a3:b3:0f:82:c2:ad:a8:ad:33:0d:d3:21:f4:4c:f2:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A2:92:D0:58:A8:ED:AE:EB:09:53:A0:F2:A2:15:81:F4:F7:11:4B
            X509v3 Authority Key Identifier:
                keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2c:58:f6:45:e7:54:7f:2a:68:85:b1:62:da:cf:ce:2c:48:
         ed:92:e5:a8:fc:cc:d3:e7:7d:88:39:b2:63:8c:40:64:03:ac:
         c7:0e:69:ed:4e:92:91:a1:68:bf:a6:5f:23:97:8d:85:b0:d3:
         03:24:65:f7:cb:b8:be:43:d4:92:99:7b:ac:76:bd:83:61:86:
         da:f7:01:91:01:b0:4b:25:97:75:44:54:c5:9d:c6:6d:c2:b8:
         ae:de:36:15:50:ba:b5:8e:aa:0e:71:49:ab:ae:ad:aa:01:dd:
         a0:0e:5a:77:5a:2b:f9:45:dc:86:5f:ea:3f:b6:24:46:b2:f2:
         c0:ba:56:18:1a:72:2d:55:2a:e5:20:dd:40:7e:cf:26:54:c1:
         70:80:7d:82:d7:60:c3:8c:5c:a7:f3:3f:cd:a9:01:28:2a:68:
         ff:89:fd:a8:fe:70:b3:37:37:9e:fd:2c:e2:a5:1e:0d:0d:f3:
         b1:6c:2f:8f:af:5a:d5:29:19:83:0d:8f:f6:48:3b:e5:f6:c8:
         f4:1a:31:9f:14:65:ed:5c:69:e3:66:01:b9:b7:94:00:9e:32:
         56:c3:3b:f4:46:85:01:43:c3:13:80:c1:00:a3:89:16:1e:01:
         62:3a:4c:31:7a:d3:47:71:47:42:f0:d0:14:c2:c2:21:17:69:
         58:a2:02:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:12 2026 by rpki-client