Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
File:                     jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json)
Hash identifier:          Wnhg6zqsJ83fpQ8y5/GIfhOWt3Q4lzUMUfGj5yA1T4Q=
Subject key identifier:   98:5B:F7:A7:E1:C8:FE:FD:D4:F1:42:D9:6B:D0:2B:B3:57:5D:C5:5D
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Certificate issuer:       /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial:       019D26CCC86DCAE9A426ED8D4CB3218676D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
Manifest number:          1488
Signing time:             Wed 25 Mar 2026 21:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:48 +0000
Files and hashes:         1: DDNpOrAqAOY0hs2uDPL3iCWLdnM.roa (hash: 8faJdkXXJZqTecw2oUQhwrCEcBbQjYDmWPFG/2WQ35U=)
                          2: YTLyjD8Zm08JN9ilWwpHNjSNOgM.roa (hash: ctWafbXvuy+Ew0x5ejjfVIYon0eWDnM21tPyQNTYZdQ=)
                          3: jhwcBBc8oOvXs_IDaLwdciLIw5g.roa (hash: 2wOw67KJ6XBImFQRXWSqni2LckUYvmgNYdwa7nlm6bU=)
                          4: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: JKIB1wHJuBJEeZvAkaqWK9xszNfztSu7usMWKw2uoFc=)
                          5: oVTQSnnZbgxF4uVxhrTKvTjBHlc.roa (hash: EHUZVTErWURFxtqmqMqxx38zSEmivlq5W8eBCUAE6Hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:c8:6d:ca:e9:a4:26:ed:8d:4c:b3:21:86:76:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
        Validity
            Not Before: Mar 25 21:00:48 2026 GMT
            Not After : Mar 26 21:00:48 2026 GMT
        Subject: CN=985bf7a7e1c8fefdd4f142d96bd02bb3575dc55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f0:62:13:c5:e4:9b:e8:67:51:6b:88:91:82:
                    c2:71:78:fa:c4:57:9d:e2:59:df:87:8e:17:f7:6c:
                    25:65:12:bc:5c:c5:eb:e9:7e:f2:78:bb:28:48:4a:
                    de:ff:49:af:1b:8d:b4:e5:b4:01:35:df:59:2d:9d:
                    75:30:37:89:e3:71:6c:35:0c:a5:a4:28:8a:55:78:
                    55:20:a3:f7:00:e3:5d:2d:66:18:a1:4a:71:1f:44:
                    c6:c0:4f:91:9c:0f:9b:f4:b7:2c:56:73:fe:c0:9e:
                    2c:48:35:c9:66:1d:0a:64:78:cf:78:2d:96:8c:0f:
                    1a:d9:60:85:9d:5a:1d:0a:ca:2c:7e:ab:a9:6b:c9:
                    15:4c:83:24:7c:6e:c7:46:53:14:5d:71:1d:eb:4d:
                    37:ad:d3:b5:ec:e2:80:4c:9a:0b:8f:3e:9e:07:db:
                    fb:55:e4:fc:f6:49:59:d6:93:45:02:a7:3d:52:b8:
                    7f:f6:5a:c5:b8:15:90:8f:2e:63:e3:e5:dd:4e:9f:
                    67:c1:92:aa:55:aa:38:9b:63:b8:67:23:01:41:d7:
                    d4:48:d8:ce:b8:ca:ab:3f:79:19:7f:c7:ce:0f:50:
                    3f:b1:20:3c:47:37:6a:d2:61:6e:c8:1b:59:86:ee:
                    e5:f3:cb:65:7a:be:1a:a0:ff:81:2d:5e:e9:6e:52:
                    f4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5B:F7:A7:E1:C8:FE:FD:D4:F1:42:D9:6B:D0:2B:B3:57:5D:C5:5D
            X509v3 Authority Key Identifier:
                keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ce:b0:b3:7c:9f:da:a2:a2:b6:df:c1:a4:39:c2:4d:01:41:
         38:46:b2:9d:27:1b:73:b7:3e:2f:0e:a3:07:cf:b0:74:b7:a4:
         5b:3e:f9:31:dc:f4:a5:2c:1e:0c:d5:f8:3f:89:f3:9c:10:0c:
         85:e2:1b:69:32:32:f8:50:10:99:b1:15:b2:a6:34:b2:1a:e0:
         3d:a8:33:59:3b:fa:e9:16:3c:e2:c4:8b:ac:41:d4:f9:68:37:
         17:3f:46:2e:9b:19:84:6f:ce:9f:9d:00:d0:54:14:66:66:71:
         1a:16:31:2c:8f:ed:bd:b4:b3:69:11:cd:41:99:67:21:80:f7:
         80:3f:20:21:bb:24:e6:7d:57:07:31:f5:10:34:fb:fd:85:d0:
         fd:a9:9f:18:96:83:8b:ba:12:23:c8:d5:f5:c6:17:4c:28:89:
         34:67:30:42:6e:2c:a8:8b:db:db:e5:17:c7:28:41:d7:f0:95:
         9f:6d:5c:8d:f2:b2:57:e0:62:67:37:ff:b7:ef:31:8b:25:76:
         76:4d:1f:69:b7:11:5f:ec:13:03:1d:45:20:06:f0:aa:e9:50:
         1c:e8:d8:28:1c:a4:a5:e3:4a:ec:35:d2:77:cd:45:41:78:76:
         18:f6:22:ca:b8:49:8d:80:0d:bc:50:0e:f9:93:fe:c6:49:53:
         b0:00:13:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzMhtyumkJu2NTLMhhnbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjgyNGM2MTM1N2RjMzQ0YmJkZjM1YjgzNTc3NDU5Yjlk
M2ZjNDQwHhcNMjYwMzI1MjEwMDQ4WhcNMjYwMzI2MjEwMDQ4WjAzMTEwLwYDVQQD
Eyg5ODViZjdhN2UxYzhmZWZkZDRmMTQyZDk2YmQwMmJiMzU3NWRjNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vBiE8Xkm+hnUWuIkYLCcXj6xFed
4lnfh44X92wlZRK8XMXr6X7yeLsoSEre/0mvG4205bQBNd9ZLZ11MDeJ43FsNQyl
pCiKVXhVIKP3AONdLWYYoUpxH0TGwE+RnA+b9LcsVnP+wJ4sSDXJZh0KZHjPeC2W
jA8a2WCFnVodCsosfqupa8kVTIMkfG7HRlMUXXEd6003rdO17OKATJoLjz6eB9v7
VeT89klZ1pNFAqc9Urh/9lrFuBWQjy5j4+XdTp9nwZKqVao4m2O4ZyMBQdfUSNjO
uMqrP3kZf8fOD1A/sSA8Rzdq0mFuyBtZhu7l88tler4aoP+BLV7pblL0wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhb96fhyP791PFC2WvQK7NXXcVdMB8GA1UdIwQY
MBaAFI8oJMYTV9w0S73zW4NXdFm50/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzIt
M2FlNzExYWYwMzRiLzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzItM2FlNzExYWYwMzRi
LzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOs6ws3yf
2qKitt/BpDnCTQFBOEaynScbc7c+Lw6jB8+wdLekWz75Mdz0pSweDNX4P4nznBAM
heIbaTIy+FAQmbEVsqY0shrgPagzWTv66RY84sSLrEHU+Wg3Fz9GLpsZhG/On50A
0FQUZmZxGhYxLI/tvbSzaRHNQZlnIYD3gD8gIbsk5n1XBzH1EDT7/YXQ/amfGJaD
i7oSI8jV9cYXTCiJNGcwQm4sqIvb2+UXxyhB1/CVn21cjfKyV+BiZzf/t+8xiyV2
dk0fabcRX+wTAx1FIAbwqulQHOjYKBykpeNK7DXSd81FQXh2GPYiyrhJjYANvFAO
+ZP+xklTsAAT9Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:59 2026 by rpki-client