Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File:                     jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier:          eR48x/PFImGih47UfZXF1JDC1/PAJC8/af9+VuMSWNQ=
Subject key identifier:   61:80:39:8C:CF:A5:56:F0:1C:DA:45:49:05:74:21:FA:B2:F3:A4:4C
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer:       /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial:       019D284DDAA166E56F1074E50925D2007F7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number:          18D2
Signing time:             Thu 26 Mar 2026 04:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:23 +0000
Files and hashes:         1: 7M11WAr8ASMmTsOpEXXftqbLZKI.roa (hash: Hy7iKCS/PTOuaQ4Hy/XwhYj+Mf9Lpbiz3nTqAU+v+KA=)
                          2: IPD7v-J9c376oyXeNIKc_aWnNmQ.roa (hash: EEItVG+CeXn/JupxjY6OK4AdQvnwdrYLgxk2U0ldhpY=)
                          3: _gRsaSao0vaUMwc0x3LyFobrYg8.roa (hash: NuZeEvpoAsVGvJOhf6lMpbCZ6vhyLjtVLY0IuaaWnsk=)
                          4: gpd1mhOHXiMRj4sBD1YUlIe0OKY.roa (hash: Mp1A6bnLjG6e+iNvqlRY2Pi1q3kKD3uoZO/De04Jgqw=)
                          5: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: ZLNl0ruQNXO59Dm4fYzMhmUEIrw/o595xhWLzsnaOdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:da:a1:66:e5:6f:10:74:e5:09:25:d2:00:7f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
        Validity
            Not Before: Mar 26 04:01:23 2026 GMT
            Not After : Mar 27 04:01:23 2026 GMT
        Subject: CN=6180398ccfa556f01cda4549057421fab2f3a44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7f:cd:98:90:c1:9b:00:2a:24:8f:e3:56:bf:
                    49:6a:0f:0e:70:2a:b1:a1:1a:b9:b5:74:06:18:54:
                    73:d3:b5:24:f4:31:6c:3d:20:27:05:87:a1:3b:af:
                    89:8b:b5:d9:69:eb:6f:ff:db:65:2a:56:5c:81:15:
                    96:84:37:8a:e4:91:04:18:cf:92:30:fa:0a:f1:0f:
                    eb:8b:33:0a:0f:49:c8:9b:86:ee:2a:2b:57:86:02:
                    62:30:2d:6d:67:16:fb:6b:20:7f:de:da:88:84:8b:
                    bf:85:ab:04:a4:43:ff:cc:a1:73:8f:0a:c8:d3:bf:
                    ac:59:2e:5f:40:f2:aa:ec:b6:26:66:86:0d:06:bf:
                    0d:da:14:d7:92:77:0a:4b:06:98:e0:e9:3c:a1:9e:
                    83:52:98:76:5e:8c:9f:8d:0b:e0:48:7c:3b:25:42:
                    e6:df:c0:60:15:e7:88:3b:b8:70:1a:5c:97:69:c8:
                    3c:b9:86:50:4f:c4:ff:24:a4:80:1a:ad:37:3c:b5:
                    e7:34:8f:5e:95:77:01:e2:12:08:b3:b5:1e:70:49:
                    b9:91:41:7a:b5:c5:ff:e0:0e:e9:77:5f:e3:cd:86:
                    32:b6:6d:b0:1d:5f:9d:d1:80:39:e3:2e:32:e9:e2:
                    99:a8:48:af:00:21:cb:bd:61:e6:72:8c:80:35:0c:
                    cd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:80:39:8C:CF:A5:56:F0:1C:DA:45:49:05:74:21:FA:B2:F3:A4:4C
            X509v3 Authority Key Identifier:
                keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:32:5f:ad:02:b8:37:d4:ce:4f:82:50:1a:f6:7a:c4:cc:92:
         32:43:39:98:16:c6:e0:86:05:7b:b8:bb:09:42:3f:10:ba:d4:
         e0:9b:51:0b:88:79:2c:57:32:3a:43:12:2a:1f:99:e8:1e:1b:
         3c:9c:5d:ba:cd:2e:9c:26:f4:9c:8a:cc:47:9d:c7:cf:60:f5:
         66:d1:ad:fd:15:67:02:01:b2:30:58:0f:0a:1d:5f:93:71:fe:
         4c:4e:18:46:5e:23:52:eb:ab:a1:96:e4:40:86:6f:65:8e:22:
         d7:9a:e8:71:7f:7b:01:64:ae:27:cb:86:ad:be:c9:ba:42:cd:
         83:60:17:6a:76:ae:29:2e:81:d2:e6:40:39:ce:c9:21:d4:0a:
         2e:ed:95:1e:d9:32:41:0a:dc:89:f4:e2:48:e1:2e:e0:fa:d3:
         ae:d0:eb:3f:9d:66:e1:f5:fa:ee:eb:d1:0f:2c:4b:a3:ac:b9:
         ed:25:69:53:d1:9e:a2:29:4c:fa:a7:a5:45:f7:f2:99:3b:38:
         0c:51:c0:c6:9c:a9:eb:18:db:dc:2b:0a:c5:d2:fe:5d:24:50:
         ae:ee:2d:77:97:cd:72:bb:aa:d2:f8:59:7c:67:51:4f:11:e1:
         51:53:49:64:2b:e3:e2:ac:34:c4:60:fe:c9:2c:f2:63:ec:28:
         e3:6f:0d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:25:42 2026 by rpki-client