Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
File:                     jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json)
Hash identifier:          u3KMU4+iqbGn07ebQfd0YXIS9WCuB3pOImUZsfpYbqs=
Subject key identifier:   DB:0D:69:82:F6:2C:31:8F:C1:44:91:83:E9:7D:BB:67:FB:55:92:34
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Certificate issuer:       /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial:       019D2884927456203FAF24092D76FE743F09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
Manifest number:          1829
Signing time:             Thu 26 Mar 2026 05:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:09 +0000
Files and hashes:         1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=)
                          2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=)
                          3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=)
                          4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=)
                          5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=)
                          6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=)
                          7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=)
                          8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=)
                          9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=)
                          10: dNyetmWu_99kmHhkiZvcLr-cuzU.roa (hash: forzVhrHGmXFVsQJmgLEUSqJW9c/HnLATZaoS4TWk3M=)
                          11: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=)
                          12: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=)
                          13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: nEhzzFhhmPZNkXKbVtDbnQHqJ/iZIeKd3/LfXszmxB0=)
                          14: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=)
                          15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=)
                          16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=)
                          17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:92:74:56:20:3f:af:24:09:2d:76:fe:74:3f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
        Validity
            Not Before: Mar 26 05:01:09 2026 GMT
            Not After : Mar 27 05:01:09 2026 GMT
        Subject: CN=db0d6982f62c318fc1449183e97dbb67fb559234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:0b:6c:81:c2:31:4e:58:9c:48:a9:39:c4:
                    f7:7c:97:d4:dd:33:ef:1a:16:dd:1f:89:b6:83:3d:
                    b0:e0:08:31:72:ac:09:c4:b7:10:19:6a:4c:c5:d8:
                    af:fb:0c:2a:5b:30:f7:43:26:cb:2c:14:50:1a:e6:
                    5a:6c:20:fb:f8:7e:13:a8:02:be:82:bd:0e:79:82:
                    35:45:a1:88:19:5d:9e:e8:10:2a:d8:da:69:a3:f4:
                    30:56:93:84:72:ae:80:c7:ed:22:9f:5f:30:bf:5e:
                    c4:c5:1c:bd:81:9c:63:0a:42:ca:f0:4f:b5:e9:fc:
                    8d:6a:7d:7f:b6:28:a7:b8:4e:f7:03:7c:0f:75:be:
                    8f:ab:77:a0:00:cb:d9:db:2d:90:4d:eb:1d:b9:c0:
                    78:ff:67:f2:b9:b5:29:1a:f4:5a:31:bd:dc:73:39:
                    fd:18:66:4c:e9:76:eb:68:69:ad:c8:79:8f:52:c1:
                    fb:f8:60:4e:48:08:2d:ee:be:4e:72:10:b6:e6:5a:
                    7c:ff:64:5e:b4:df:a5:d5:da:bb:a4:4b:52:d0:99:
                    5c:44:81:ed:f3:15:7b:a1:53:21:49:aa:ee:fe:4f:
                    01:c4:e7:40:25:9f:a4:a7:e8:d2:79:42:88:d5:c3:
                    28:fd:83:4d:e9:61:d4:32:73:22:38:2f:f3:1d:8b:
                    a0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0D:69:82:F6:2C:31:8F:C1:44:91:83:E9:7D:BB:67:FB:55:92:34
            X509v3 Authority Key Identifier:
                keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:92:bb:74:44:53:57:1f:5e:2b:d2:c4:80:64:18:82:99:ec:
         e2:7e:c1:36:2e:05:2c:81:8f:4d:e4:13:92:39:e2:e4:45:ef:
         b7:11:68:8d:b9:c1:7a:a1:35:bf:44:0c:4f:5b:de:07:c7:eb:
         57:cd:2f:3c:15:5b:55:71:b3:cd:e8:eb:7b:59:b3:1e:b9:36:
         de:44:19:bd:a4:83:cf:64:1b:cd:8b:c7:d0:c2:2c:3f:5f:79:
         50:6d:5b:5b:65:f9:d6:11:73:c5:0b:5f:b2:1a:46:1f:12:5c:
         76:e4:66:64:e8:06:0e:50:a4:7d:42:f3:b6:63:17:d9:64:72:
         d3:f5:39:5e:46:8d:bb:54:1b:47:f3:88:05:49:b8:9a:91:95:
         bd:a7:36:61:be:f9:4b:59:0c:88:87:1a:8a:79:d4:a0:38:9f:
         d3:55:bd:15:bb:65:1d:a1:96:e5:2a:52:29:2a:68:64:ee:25:
         b8:b8:46:10:2b:50:4c:e2:d2:c9:ec:c5:92:86:ac:27:c3:c4:
         05:dc:ff:88:02:50:0a:a9:ba:2c:4a:7b:35:a7:40:2c:ae:50:
         52:15:0d:1f:f7:7e:65:58:44:a5:61:a5:14:e7:b5:1d:ab:49:
         83:97:42:e2:85:76:3c:ee:ea:49:d4:d1:19:01:82:0e:a8:ab:
         92:a3:3f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:53:07 2026 by rpki-client