Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft
File:                     Jq19NWATTgqK5G_Fsyxay2Hd45w.mft (raw, json)
Hash identifier:          brzQMG/XZnc5QPR/TxRymBK65o/lB/7xsdk8iTvh3jE=
Subject key identifier:   21:E7:7B:02:7D:4E:5A:A6:54:72:E6:26:1D:7B:28:1B:A1:A7:22:90
Authority key identifier: 26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C
Certificate issuer:       /CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
Certificate serial:       019D27DFBA435A75EEF0EC65E2F9F267F42E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft
Manifest number:          13B1
Signing time:             Thu 26 Mar 2026 02:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:06 +0000
Files and hashes:         1: Jq19NWATTgqK5G_Fsyxay2Hd45w.crl (hash: tqL/j95egodJUbnVqyLZuxNVkQ1l0IFTBlzvDAPZhh8=)
                          2: wkHctLvdsJaCxOWaekPpSlsFo1o.roa (hash: 62uOxIFMIJj4gV6OQmk4HcKVN0NAehpTp48LJq+Xir8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:ba:43:5a:75:ee:f0:ec:65:e2:f9:f2:67:f4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
        Validity
            Not Before: Mar 26 02:01:06 2026 GMT
            Not After : Mar 27 02:01:06 2026 GMT
        Subject: CN=21e77b027d4e5aa65472e6261d7b281ba1a72290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:b2:ce:e4:38:7a:d3:99:5f:4d:aa:cd:0a:
                    79:29:85:ba:a9:62:de:7c:ad:fa:59:5c:9c:6f:f9:
                    59:5d:33:be:90:f7:b6:fd:64:88:9b:33:82:dd:10:
                    e0:37:cd:95:dc:2f:a3:dc:6b:87:2f:8e:46:ea:f4:
                    4b:1b:ec:49:85:5d:ea:69:b6:09:e0:18:6c:b2:19:
                    f3:2e:4e:0a:1e:76:d8:93:1b:3b:2b:d2:f8:6b:2b:
                    5b:c1:61:75:85:fa:04:04:77:6b:7e:e5:66:bb:b8:
                    cf:54:9a:d9:93:62:56:85:0a:26:73:b6:86:85:73:
                    f3:89:48:09:46:ad:2c:c5:48:ad:14:34:75:6f:51:
                    cf:ef:1e:a9:ac:a2:74:d3:69:9b:96:3b:fc:2a:59:
                    d9:cc:f2:c2:85:d7:62:3b:9f:5f:2a:c2:df:73:31:
                    97:69:2e:e1:ce:10:a3:90:7b:a8:28:ae:f6:a7:2f:
                    34:90:3e:65:16:9d:24:95:24:5f:36:a8:50:21:7c:
                    5d:6d:34:23:3a:f2:24:eb:0c:a8:0d:30:49:0b:4b:
                    8f:10:a6:05:9d:47:55:1f:4b:8d:ce:e1:ab:ef:2f:
                    ff:00:ad:9b:a3:b3:9e:de:38:6e:ae:5b:37:85:f2:
                    9a:e5:ce:da:b3:fd:e4:57:3e:8a:2c:12:4d:6f:83:
                    4d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E7:7B:02:7D:4E:5A:A6:54:72:E6:26:1D:7B:28:1B:A1:A7:22:90
            X509v3 Authority Key Identifier:
                keyid:26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b4:16:fd:35:42:5c:d8:f1:b1:9a:40:b7:ac:a5:21:3f:9e:
         1e:4d:5e:56:4c:de:06:e8:74:7d:40:fc:46:e7:eb:f7:f3:78:
         64:3d:d8:a3:3a:5b:54:82:8d:aa:2e:06:07:ae:84:4d:e6:47:
         81:17:5c:f1:ae:f1:48:6c:a6:3c:26:ae:7e:9e:09:50:ec:01:
         72:79:9d:49:5b:84:db:f4:95:37:1a:a4:9a:dd:69:c0:10:9f:
         c2:60:fd:37:e1:42:34:ef:df:f3:92:b9:cf:a7:69:03:dd:e0:
         68:77:7c:c2:d9:6f:43:f9:f9:46:42:29:9b:93:21:50:ff:40:
         21:87:9b:af:5f:50:73:26:ab:4b:74:e9:19:77:b8:fb:b8:05:
         d1:63:2e:b0:4a:eb:0a:b2:af:3d:d0:a7:d6:d3:88:d7:ea:53:
         b7:06:f3:0a:27:21:b5:cc:a7:66:46:a6:a3:72:78:cc:bd:60:
         0e:e3:ec:86:fa:97:bd:4f:54:3f:49:1a:c7:74:c8:a1:f6:d7:
         ab:ad:51:3a:1b:c6:99:87:ad:61:f1:d4:cd:94:de:bd:8c:50:
         c9:99:ba:d2:00:c0:3a:97:d8:c7:d7:27:49:dc:ee:da:f1:30:
         09:74:ce:5e:7c:9d:df:04:69:83:90:45:75:c8:81:09:f3:5b:
         d0:43:03:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:45 2026 by rpki-client