Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File:                     JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier:          TeKJw2hfC1+fJ2MOtAxpAO2PCSBWajEYZHGiNZ2SN3k=
Subject key identifier:   EA:E0:E6:01:87:F3:99:32:39:59:31:5B:92:7B:84:38:41:87:48:07
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer:       /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial:       019D273B1DB92D81BB15A423986D272D6EF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number:          0B12
Signing time:             Wed 25 Mar 2026 23:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:18 +0000
Files and hashes:         1: 7CXGDptf2okcN_TUuRa0vGLyCaQ.roa (hash: uAwFHhRb6M0iaad5i6SJTir06b/xHTrf77HmrAGNoN0=)
                          2: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: X++uAtvsGwpsL09QHK01FNZeoLoL3vIk/4DDMOZr/M4=)
                          3: mp7eBUGX1B69vxK-CwJzFulzqZk.roa (hash: yIxwbLnT118Vwlqh6tg/BfTUPJnypGV001BfjuX6b44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:1d:b9:2d:81:bb:15:a4:23:98:6d:27:2d:6e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
        Validity
            Not Before: Mar 25 23:01:18 2026 GMT
            Not After : Mar 26 23:01:18 2026 GMT
        Subject: CN=eae0e60187f399323959315b927b843841874807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:da:30:c0:90:43:f9:5b:42:04:07:ec:45:b0:
                    df:c0:8f:aa:2c:30:3e:f9:87:bb:93:e2:f1:63:5f:
                    20:59:de:50:19:fe:3e:18:fa:18:5c:23:95:91:5d:
                    ee:5a:66:5c:25:09:b0:2a:5d:b0:c1:f7:04:68:08:
                    65:5d:7e:a8:34:a3:70:bb:79:51:33:14:97:c6:74:
                    0a:b6:fc:e7:ae:0a:16:a6:a1:c9:69:4b:f8:53:df:
                    6c:fb:98:67:ea:73:cb:06:8a:91:09:a7:cb:2a:ad:
                    8e:d2:c1:6b:82:d7:33:c2:08:c7:36:a8:1b:88:47:
                    da:14:ff:07:e9:ab:cc:e3:7d:5d:b3:e6:58:7c:39:
                    ea:4b:92:18:ae:37:6c:c5:a1:5c:58:aa:1c:52:82:
                    ad:4b:21:4e:53:21:d7:f7:5d:b7:15:a3:e3:59:c6:
                    2a:f4:bb:c3:6f:e1:67:09:ec:d4:f4:24:ef:ef:da:
                    e1:ab:4c:b6:ce:19:06:dd:6f:f5:3a:12:a9:e3:3b:
                    07:65:86:52:cf:6f:26:a7:60:aa:51:cc:94:eb:43:
                    5a:0b:c8:5f:fd:a0:fc:6d:25:92:cc:ad:ac:df:c9:
                    44:a4:9d:57:3f:ee:4e:16:53:ec:04:40:56:87:0f:
                    01:c8:17:11:31:64:69:52:80:79:d2:a7:ff:22:2e:
                    b8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E0:E6:01:87:F3:99:32:39:59:31:5B:92:7B:84:38:41:87:48:07
            X509v3 Authority Key Identifier:
                keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b4:77:5c:cf:51:f1:59:9c:95:28:85:f8:4d:34:6a:1d:00:
         62:32:df:c0:15:19:67:2b:77:c3:4d:68:29:3f:fa:73:3b:30:
         fa:3b:d9:7a:bd:29:7b:65:96:e4:c7:11:24:3a:96:b5:ec:52:
         88:33:f8:83:cd:52:b4:e0:b7:51:00:d2:08:40:8e:1c:9a:56:
         a5:62:7d:2d:d0:e3:45:13:58:e1:7f:85:cb:ae:f4:44:57:94:
         dd:b0:d2:f1:ee:e4:bd:9f:e8:50:cb:45:ab:2c:82:f9:cd:ad:
         22:7b:78:22:e8:eb:cc:72:90:d8:5d:9e:d5:32:38:24:52:cd:
         00:81:e7:7f:6b:b5:df:2f:71:14:2b:1a:ea:2a:c0:b5:a3:0f:
         42:bb:29:fc:d4:d0:2b:cd:c5:36:fd:3b:c8:93:11:b6:da:34:
         1e:c8:9f:7a:16:cd:00:75:bb:0f:fc:98:1c:cf:f1:01:9c:8a:
         38:db:60:c9:ba:94:a7:d7:e9:55:f0:e7:d6:13:4f:85:0f:8d:
         a3:c1:70:c6:20:da:a4:be:7e:22:85:9f:81:74:df:c5:5b:71:
         07:21:f1:40:86:fe:9f:06:a9:da:ab:ed:4c:f0:f8:fe:90:eb:
         2d:02:fa:70:ff:6b:a5:f3:41:b4:9d:3c:1b:3b:2e:d2:19:bc:
         57:77:e2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:16 2026 by rpki-client