Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File:                     JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier:          fJDbZ669prVU+bDIBUM9rtKEBK5XafVe5ihC4rUU2jY=
Subject key identifier:   73:17:91:17:04:5B:CE:09:DF:86:60:A5:EC:A3:FA:82:98:76:E4:FD
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer:       /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial:       019D284E6710B2F0AE76559775D7D4564020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number:          05B6
Signing time:             Thu 26 Mar 2026 04:01:59 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:59 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:59 +0000
Files and hashes:         1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: bWTLXTvDenzwsldih352I1b6ZANwxwwyLkMHrm6d8E8=)
                          2: _Y_601F6eAt7O-baCpdg3BQDJXc.roa (hash: vyG9YG54wVQIAnIU/YKZPIrIY0HUdh61Oh6KNWA0bnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:67:10:b2:f0:ae:76:55:97:75:d7:d4:56:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
        Validity
            Not Before: Mar 26 04:01:59 2026 GMT
            Not After : Mar 27 04:01:59 2026 GMT
        Subject: CN=73179117045bce09df8660a5eca3fa829876e4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:03:c7:c4:81:7d:bf:c6:84:39:dd:f1:16:
                    d4:2d:82:61:b6:52:83:b1:43:b1:c8:73:1a:be:46:
                    84:ef:db:c5:a0:eb:d4:b8:2b:d2:c0:b2:04:90:e6:
                    29:47:94:c8:0c:d6:a6:c2:27:86:66:42:96:bb:34:
                    ef:fe:8a:80:e2:f0:4d:ff:9e:45:39:a6:43:21:f4:
                    20:c8:a6:4b:ff:f6:72:a5:42:76:ec:cc:f6:20:51:
                    6f:74:22:f5:2c:71:52:64:2b:f5:9d:a0:1e:28:55:
                    f9:a5:62:63:bc:40:cd:f4:f5:8a:54:0d:70:5b:8c:
                    ac:f8:b1:4f:b4:3a:9e:3e:50:d2:5a:3b:02:54:c0:
                    16:13:ee:0a:4a:b9:cb:4a:26:6d:8c:6b:c7:28:fd:
                    ee:a8:cf:c9:42:96:e3:88:d4:70:1a:14:96:26:26:
                    f3:56:9c:3a:f3:8f:48:ce:04:fc:01:94:9b:2a:f9:
                    ab:8f:36:ff:fc:87:5e:6f:35:7c:0e:14:3e:2b:39:
                    3b:dd:32:f8:c3:21:49:94:10:35:f2:3a:22:ef:90:
                    25:25:f2:cf:0f:2f:2b:73:b1:f9:12:af:52:a1:d6:
                    9a:ef:ff:08:fd:a7:6e:11:7d:c0:7e:bf:07:34:6b:
                    0d:e3:62:13:d1:db:d9:29:06:7e:a9:e3:9f:f4:d1:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:17:91:17:04:5B:CE:09:DF:86:60:A5:EC:A3:FA:82:98:76:E4:FD
            X509v3 Authority Key Identifier:
                keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:77:dc:de:77:ae:b7:1b:75:a4:8a:f4:99:c4:11:2f:8f:71:
         4c:d3:6a:bc:f9:e1:ca:26:36:a5:78:ce:77:8a:9e:dd:3c:aa:
         a0:fc:f0:b5:29:a6:60:98:db:16:80:07:a9:e2:43:94:6a:5b:
         a4:ae:6d:2e:83:e2:d0:b4:f4:68:03:c9:32:0b:a0:8e:92:f2:
         0b:41:ea:03:21:13:50:7c:48:d9:04:51:a1:9e:9b:cd:af:83:
         5e:8a:91:66:c7:c9:9b:4a:7a:c9:2f:13:9d:b9:ce:48:03:d7:
         b5:d9:6e:06:31:69:f0:3a:97:db:49:6c:77:34:23:47:4c:52:
         a9:43:eb:dd:be:c4:11:8a:98:93:d7:ca:75:17:3e:d9:18:06:
         44:17:bd:2f:ed:eb:3f:02:ec:c4:7b:aa:55:c6:ce:c3:03:1b:
         27:da:0f:4c:92:37:9d:54:32:7d:0a:77:ec:77:6b:a9:e1:24:
         45:01:ad:14:48:ac:de:26:35:25:de:d4:52:dd:13:bf:8f:6d:
         11:db:dd:56:13:70:a4:5c:e5:97:0e:1b:59:7e:4f:11:0f:7e:
         c2:7a:26:b7:cb:38:1f:00:c8:65:60:23:64:bb:d7:72:c2:ef:
         f0:6d:d7:d1:f7:50:08:b0:6b:ea:db:4a:78:32:f5:a8:3a:0d:
         8c:64:45:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTmcQsvCudlWXddfUVkAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YjE1MjRlYzAxZGNmNDA1ZjQ0MTcxODI5ZWQ2N2EyOTky
YWE0MmQwHhcNMjYwMzI2MDQwMTU5WhcNMjYwMzI3MDQwMTU5WjAzMTEwLwYDVQQD
Eyg3MzE3OTExNzA0NWJjZTA5ZGY4NjYwYTVlY2EzZmE4Mjk4NzZlNGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEYDx8SBfb/GhDnd8RbULYJhtlKD
sUOxyHMavkaE79vFoOvUuCvSwLIEkOYpR5TIDNamwieGZkKWuzTv/oqA4vBN/55F
OaZDIfQgyKZL//ZypUJ27Mz2IFFvdCL1LHFSZCv1naAeKFX5pWJjvEDN9PWKVA1w
W4ys+LFPtDqePlDSWjsCVMAWE+4KSrnLSiZtjGvHKP3uqM/JQpbjiNRwGhSWJibz
Vpw6849IzgT8AZSbKvmrjzb//IdebzV8DhQ+Kzk73TL4wyFJlBA18joi75AlJfLP
Dy8rc7H5Eq9Sodaa7/8I/aduEX3Afr8HNGsN42IT0dvZKQZ+qeOf9NEL9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMXkRcEW84J34Zgpeyj+oKYduT9MB8GA1UdIwQY
MBaAFCaxUk7AHc9AX0QXGCntZ6KZKqQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNTY1NjMtZTYxYy00YjhhLThkNmUt
NzY2YzgyNzU4MDY1LzEvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wNTY1NjMtZTYxYy00YjhhLThkNmUtNzY2YzgyNzU4MDY1
LzEvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArXfc3neu
txt1pIr0mcQRL49xTNNqvPnhyiY2pXjOd4qe3TyqoPzwtSmmYJjbFoAHqeJDlGpb
pK5tLoPi0LT0aAPJMgugjpLyC0HqAyETUHxI2QRRoZ6bza+DXoqRZsfJm0p6yS8T
nbnOSAPXtdluBjFp8DqX20lsdzQjR0xSqUPr3b7EEYqYk9fKdRc+2RgGRBe9L+3r
PwLsxHuqVcbOwwMbJ9oPTJI3nVQyfQp37HdrqeEkRQGtFEis3iY1Jd7UUt0Tv49t
EdvdVhNwpFzllw4bWX5PEQ9+wnomt8s4HwDIZWAjZLvXcsLv8G3X0fdQCLBr6ttK
eDL1qDoNjGRF8g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:58 2026 by rpki-client