Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File:                     JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier:          78umgB+ty2RI2Md4iKNmRpRuEmP5qnLxu4w9SsS3/Mw=
Subject key identifier:   73:5F:EF:A2:36:69:E8:4F:6B:88:98:98:0A:59:DB:14:25:A6:05:F7
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer:       /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial:       019D284E4322CC77A059296DAA48C3609B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number:          1125
Signing time:             Thu 26 Mar 2026 04:01:50 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:50 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:50 +0000
Files and hashes:         1: 68M1iA2v1hZrN-WYmwaUYqloW_k.roa (hash: Lu1vR1WuACYYOAE0lbWO8n33EaanCEqHclq+Bu+0jM4=)
                          2: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: OLnv0sk9c4qg7hkO6CA7q+eYGsw78C33tKXPprAs3cI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:43:22:cc:77:a0:59:29:6d:aa:48:c3:60:9b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
        Validity
            Not Before: Mar 26 04:01:50 2026 GMT
            Not After : Mar 27 04:01:50 2026 GMT
        Subject: CN=735fefa23669e84f6b8898980a59db1425a605f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:b5:12:03:e9:ea:ff:04:db:e6:39:70:2d:
                    7c:a1:4e:cd:c2:a8:f8:34:cf:5f:b2:a0:cc:ec:c7:
                    bd:5f:b2:0f:ec:aa:e5:1f:63:5a:87:d9:84:11:89:
                    07:ac:9e:78:ec:00:18:27:f4:06:9e:5f:22:ed:6d:
                    2d:51:91:06:65:98:ab:16:99:19:97:d4:a0:12:e8:
                    29:3f:ed:c4:12:55:b4:a6:30:17:ae:2f:cf:e8:05:
                    a0:1d:d6:ca:56:d5:68:c8:ea:29:d0:87:f6:0d:e2:
                    8a:07:f6:3b:73:40:78:8a:33:80:01:84:ca:89:80:
                    22:83:1d:28:82:d4:23:24:84:77:6c:d6:e7:50:b7:
                    11:28:f8:88:a0:46:8e:a3:90:d0:f7:e1:6f:60:01:
                    0b:e3:66:b5:c4:07:b8:82:5f:c2:cf:42:dd:e4:b1:
                    a3:7d:2c:a4:4b:c3:b4:16:ea:1f:77:e0:ae:ec:3a:
                    13:ac:4e:a1:2d:fa:b9:17:6d:47:47:50:88:41:3a:
                    45:d7:4d:e7:d3:d0:37:88:b1:44:eb:7a:4d:ca:f4:
                    ff:e8:4a:a2:98:70:d5:77:ff:cb:50:ba:ac:d4:b8:
                    2e:83:a0:b1:9b:e8:55:fc:0d:d8:45:e9:cd:3a:c3:
                    f8:7e:27:1b:1a:1f:d1:f7:56:d2:0c:b2:c0:48:f7:
                    08:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5F:EF:A2:36:69:E8:4F:6B:88:98:98:0A:59:DB:14:25:A6:05:F7
            X509v3 Authority Key Identifier:
                keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:17:49:a0:3f:46:de:67:d6:11:1b:e2:25:9d:a3:76:46:4d:
         f7:67:5b:9c:29:53:26:b6:18:67:2a:38:35:9b:bf:78:e1:bd:
         2a:6b:1f:5e:c4:65:dd:e6:a6:fd:35:be:11:1d:c6:52:e7:e9:
         b9:7f:70:79:32:b6:2f:45:25:c2:62:49:b5:01:73:72:92:3c:
         1f:df:0b:45:94:98:08:9b:50:b1:33:b7:97:35:c1:ad:ed:66:
         b5:ce:21:bf:25:66:50:d3:80:3a:70:1d:05:32:a3:ad:22:36:
         89:f1:59:38:07:4d:1a:ed:45:2a:af:c5:da:4e:96:2e:2f:e7:
         8d:85:e4:1d:f8:ab:ac:73:4b:ee:0f:bd:92:50:12:6e:66:e1:
         85:d9:35:26:ef:f3:34:8f:c8:45:1e:52:c6:21:a8:c7:27:6b:
         3f:90:20:55:ea:91:b7:8c:e7:dd:b9:87:6c:25:06:54:36:e8:
         20:fd:43:ec:b0:b5:ef:0b:bd:b3:0b:79:71:68:57:49:51:84:
         28:ae:ec:7f:f2:27:de:6b:a7:7f:03:64:f8:bc:70:eb:8a:d5:
         94:56:a9:e3:b8:2f:99:52:c9:7f:3c:35:e9:9b:a1:12:fc:03:
         5e:e5:d0:db:ce:7d:62:77:86:71:42:29:4e:44:0f:0a:3f:be:
         da:71:b6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:46 2026 by rpki-client