Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
File:                     jQtYT2A1_loofFZ_HjhUuPvCoMI.mft (raw, json)
Hash identifier:          5nWGBFkaGqjvuuT++wtNWM693Lr4iv9apOAX9s8Eoc4=
Subject key identifier:   41:1A:60:A8:84:DE:17:04:BA:AE:65:A2:CF:F8:B4:2A:B3:0A:00:D2
Authority key identifier: 8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
Certificate issuer:       /CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Certificate serial:       019D2A3C853A378CD48FDA1600E8B7E2D5A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
Manifest number:          1885
Signing time:             Thu 26 Mar 2026 13:01:42 +0000
Manifest this update:     Thu 26 Mar 2026 13:01:42 +0000
Manifest next update:     Fri 27 Mar 2026 13:01:42 +0000
Files and hashes:         1: DDF4rHCyTUZ_JMqtFhQdlljmwdA.roa (hash: Wq2lfDQVze8aM27jqQxiGGAz6kfK87E03BpeKAOD1OA=)
                          2: jQtYT2A1_loofFZ_HjhUuPvCoMI.crl (hash: wUXm8CIIzWQ19cq3Hs8ix/9C7kf1pA+1qinZ6fJD6K0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 13:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3c:85:3a:37:8c:d4:8f:da:16:00:e8:b7:e2:d5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
        Validity
            Not Before: Mar 26 13:01:42 2026 GMT
            Not After : Mar 27 13:01:42 2026 GMT
        Subject: CN=411a60a884de1704baae65a2cff8b42ab30a00d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:82:53:a9:46:b4:f8:72:a4:30:e1:a9:e2:72:
                    7b:8c:72:e2:89:63:09:03:2b:68:59:f8:11:bc:8c:
                    bf:ba:26:04:61:b3:03:45:89:53:b7:99:2a:32:52:
                    ee:17:26:21:53:43:56:95:7f:f5:d4:6d:39:5d:86:
                    62:37:fc:fa:77:63:53:b9:e9:d5:2a:27:b5:92:d1:
                    03:21:5d:99:08:63:38:5f:69:d4:7c:15:b1:21:9d:
                    28:0f:0c:da:21:1a:c0:3e:42:d3:fe:27:c8:1b:d2:
                    f7:7f:50:60:16:99:f2:3a:6b:38:20:5a:99:e2:1c:
                    ff:7f:9a:97:57:fa:5b:8c:c8:1c:e9:0e:e8:f1:59:
                    30:2c:be:83:d7:cb:e8:85:36:60:06:93:79:2e:e2:
                    a7:8b:2d:a1:23:2f:d4:96:a1:51:f4:f9:fc:aa:0f:
                    b5:4b:44:e7:e3:f7:df:8c:52:f9:1f:00:b5:21:94:
                    da:18:4e:d6:bf:a5:7f:94:7f:50:cc:30:27:eb:70:
                    ce:83:ff:b3:f0:3c:5f:36:3e:83:fc:2c:07:03:70:
                    71:2f:ba:d8:72:7a:bf:94:e2:d6:30:55:4e:ca:7c:
                    39:f7:27:3d:1e:09:f6:ae:df:60:55:a8:e9:9b:13:
                    42:ce:bc:6d:46:83:5f:1f:c6:a2:c5:0b:6e:7b:ff:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1A:60:A8:84:DE:17:04:BA:AE:65:A2:CF:F8:B4:2A:B3:0A:00:D2
            X509v3 Authority Key Identifier:
                keyid:8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:dc:24:4a:ee:bf:ff:3e:bf:7a:3e:1f:b3:95:c0:d8:bd:cd:
         00:4b:a5:d2:76:86:b9:61:84:4f:d5:cd:16:be:0f:40:48:ad:
         1f:fd:44:59:07:ab:32:12:40:69:96:5b:1d:6b:ea:b3:8d:d7:
         0a:26:4f:95:5f:6b:b8:4f:23:46:8b:ba:16:9b:66:7e:74:1f:
         45:3a:08:0f:48:52:57:06:e5:c2:6b:d7:d1:06:8f:e0:b0:aa:
         23:1e:40:9b:e6:f7:53:3d:97:bf:0d:d6:bc:32:f1:42:bc:ec:
         aa:39:1e:02:ab:be:c0:41:20:01:ff:72:1c:e1:8d:b5:75:65:
         65:6d:f3:b8:33:bc:da:d1:79:4e:92:04:da:bf:0c:cf:b6:81:
         65:92:f7:4a:ca:9b:4b:4b:68:34:89:a8:36:35:2d:c4:7b:40:
         c5:1f:69:4b:c0:2e:ad:53:a4:fe:89:a9:b5:9a:4a:43:be:4e:
         61:ca:c0:8e:d6:18:8c:1d:a0:b8:0a:6b:35:b9:1a:5a:99:d0:
         2b:86:d7:9c:0e:63:7a:9a:4c:f4:dc:9d:2a:80:a1:be:45:89:
         2a:b2:4a:a3:41:ef:95:89:d9:22:85:6e:d9:20:3b:00:35:9f:
         28:f9:fe:6e:38:9d:7f:4f:9e:2c:0b:15:e1:ee:3c:ef:4b:1f:
         ea:ef:cb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:08:37 2026 by rpki-client