Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
File:                     jbVG3KNrwMS1s0zljYBx6HXDpG4.mft (raw, json)
Hash identifier:          067FFmOHOSh2e3IMb9rYegHm/SSmjzX47Zcpn8WE3w4=
Subject key identifier:   19:BD:5A:EB:9E:7F:60:CD:06:C1:93:C2:34:6E:CE:56:F0:08:BB:2F
Authority key identifier: 8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E
Certificate issuer:       /CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e
Certificate serial:       019D28F2C36886D38FB27A54B74542B33827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
Manifest number:          033B
Signing time:             Thu 26 Mar 2026 07:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:31 +0000
Files and hashes:         1: jbVG3KNrwMS1s0zljYBx6HXDpG4.crl (hash: 4NGpp9ueKn9qQ+pYyLWRBktKCLLQpvumHK/hzbplz/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:c3:68:86:d3:8f:b2:7a:54:b7:45:42:b3:38:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e
        Validity
            Not Before: Mar 26 07:01:31 2026 GMT
            Not After : Mar 27 07:01:31 2026 GMT
        Subject: CN=19bd5aeb9e7f60cd06c193c2346ece56f008bb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:9b:e8:cb:77:26:ef:13:6c:56:3e:a1:66:
                    54:0a:99:a6:c1:b7:b3:dc:02:61:12:f7:a8:c0:13:
                    43:41:76:37:f3:fa:96:0a:49:24:82:61:9d:63:30:
                    97:3a:98:31:d9:16:5d:6c:10:72:89:62:02:e9:d9:
                    f3:4c:34:db:38:9d:93:4e:5e:51:c8:f6:a9:93:89:
                    fb:38:f0:d9:83:c3:a8:ac:8b:f9:b8:d7:28:a3:10:
                    71:d5:ef:17:e3:f3:4b:e5:1d:a1:2d:63:85:c4:0a:
                    65:45:21:71:79:2c:0b:9d:0f:b6:3f:31:29:37:7a:
                    be:85:0f:9a:63:dd:85:63:48:93:e0:00:96:77:f4:
                    f5:6f:d1:66:a7:88:39:38:7d:94:7d:54:d2:7a:4d:
                    49:b3:60:61:3c:7b:58:33:94:a8:fa:6f:31:54:3c:
                    5e:62:13:c6:9a:28:bc:b0:d5:95:c3:e4:94:09:09:
                    bb:28:13:36:b6:b9:10:bf:9a:da:85:ab:54:e9:9b:
                    3d:da:67:c8:f7:fa:b2:ec:40:bd:25:59:6f:7e:d2:
                    19:31:24:85:78:1c:52:76:9c:a8:79:41:a3:5d:84:
                    de:b0:7f:60:b1:cd:46:71:02:28:89:f5:d3:e3:cc:
                    8a:0c:39:50:1f:94:2d:58:61:54:0e:a5:bc:6c:75:
                    0e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BD:5A:EB:9E:7F:60:CD:06:C1:93:C2:34:6E:CE:56:F0:08:BB:2F
            X509v3 Authority Key Identifier:
                keyid:8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:26:bf:a0:73:64:fa:e7:10:8d:23:27:37:50:17:54:ce:b4:
         ab:5c:a5:76:c9:3a:8a:da:e3:22:b3:87:18:f2:00:f5:e5:5b:
         77:4e:7e:f8:5e:51:7e:fb:a9:aa:2e:7b:3d:9c:b7:da:b5:19:
         24:9a:d8:6e:7c:f6:f4:fe:49:0b:fe:7e:57:ff:f0:37:bf:37:
         d6:75:2c:da:2e:0e:b6:f4:a3:20:cc:32:2a:86:87:40:3b:3b:
         e7:41:27:cf:bd:41:eb:56:b6:5a:de:33:6c:b3:7c:b5:e9:4c:
         ff:86:a5:07:a6:1a:ec:9a:87:25:82:c6:45:fe:65:73:67:e1:
         86:a1:2f:ec:06:41:f8:00:15:3b:46:ad:ea:7e:e6:12:0e:aa:
         8c:51:b6:74:73:08:65:51:61:b4:3d:9c:5c:ef:21:3e:9b:de:
         e7:70:8b:61:2f:40:13:36:0f:32:27:2f:8d:e2:c0:6e:a6:70:
         c4:d7:03:f6:95:2e:fa:07:a4:02:cc:49:7d:9c:7f:28:5b:d0:
         7f:9f:11:94:62:0c:b6:60:ba:3b:7d:2f:b8:43:a7:e9:ab:68:
         ed:f5:9c:42:2c:8b:63:44:39:28:69:93:19:c0:e4:1e:91:d9:
         ea:38:3e:93:18:ee:1a:8c:a4:a8:16:fb:fd:b0:f2:ca:32:4d:
         4a:1a:ae:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:30 2026 by rpki-client