Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File:                     jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier:          gi9hBsLkgng3OpPc3/rAhxndNhyQgj0/1cIyuhLBcRY=
Subject key identifier:   7C:A6:AB:AA:64:C8:91:60:11:1C:C5:A6:B6:2C:17:28:F1:E6:F6:5C
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer:       /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial:       019D2B4E3676759F8E0403318979DFE46D43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number:          0F47
Signing time:             Thu 26 Mar 2026 18:00:39 +0000
Manifest this update:     Thu 26 Mar 2026 18:00:39 +0000
Manifest next update:     Fri 27 Mar 2026 18:00:39 +0000
Files and hashes:         1: dsLdJMOUiI7q_-APyIwy34yOW5E.roa (hash: POXZCn3rwMGKOplLlMfSl2cF5aSp/HWGstxXZUZFABo=)
                          2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: BUxzWWo/43e/TMWWne7JtdrtuVq1yXps9s+ciwjeAKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:36:76:75:9f:8e:04:03:31:89:79:df:e4:6d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
        Validity
            Not Before: Mar 26 18:00:39 2026 GMT
            Not After : Mar 27 18:00:39 2026 GMT
        Subject: CN=7ca6abaa64c89160111cc5a6b62c1728f1e6f65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:fa:bd:d1:a7:f9:83:24:a7:16:02:a4:48:
                    87:9b:40:f3:9c:0b:46:20:e3:db:4b:20:c0:8f:45:
                    00:7e:9a:cb:d4:ab:76:5f:a5:27:c3:3d:51:e9:75:
                    ce:04:26:94:a9:76:ae:96:d4:23:1c:dc:26:be:55:
                    31:b5:71:95:17:34:5c:a9:47:73:1d:0c:39:d2:10:
                    72:6f:99:bf:44:54:4d:80:6a:33:c2:55:d1:06:7f:
                    b4:d0:15:34:8b:d0:ca:59:09:f9:13:41:8b:b7:02:
                    f4:cc:86:b5:b2:06:4c:14:0f:59:08:78:2f:1f:50:
                    84:47:24:e1:f7:47:ae:d1:01:16:2d:41:28:23:1b:
                    22:32:dc:4d:0c:80:e4:a6:18:c8:b7:65:e6:ce:a0:
                    94:fb:fc:7e:38:7b:54:8c:7a:f4:9f:85:18:18:5d:
                    8f:e5:32:37:ce:f6:97:54:db:1c:e2:ff:6d:6c:92:
                    ea:06:e2:6f:43:de:b5:07:9e:0a:fd:61:c2:3f:6f:
                    00:8d:55:75:81:8c:ae:e3:52:b4:69:bb:07:4d:00:
                    5c:ba:95:09:89:f5:91:75:1e:cd:e4:db:5a:10:47:
                    dc:d9:ec:f7:fd:2d:00:27:00:a3:33:24:94:13:e7:
                    31:b5:b2:2c:a1:2a:27:10:64:20:7d:d8:2f:e2:f4:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A6:AB:AA:64:C8:91:60:11:1C:C5:A6:B6:2C:17:28:F1:E6:F6:5C
            X509v3 Authority Key Identifier:
                keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:de:52:44:63:a3:b3:ae:d0:d8:57:ca:d4:ba:1c:29:19:ae:
         59:98:b2:1c:db:2e:06:97:14:f8:50:f8:86:9e:35:b4:a1:a8:
         6f:e5:11:e1:4f:cf:bf:a9:88:fa:a6:55:b4:f3:a3:c2:d4:3f:
         b2:3c:27:0d:ce:ad:df:01:93:f3:25:d2:e5:ba:80:5c:b1:e5:
         7d:6f:52:0f:dd:5c:f0:0b:23:7d:fb:3e:38:b2:6f:68:0b:8b:
         5a:9f:7d:61:39:c7:5f:20:dc:76:4d:6e:8d:15:19:bd:55:d6:
         a2:06:a3:ae:4f:82:be:c6:d6:74:cf:69:2f:b3:a4:99:b0:ea:
         2e:1b:36:73:d9:43:42:19:1a:40:5b:d2:43:75:ce:42:55:1e:
         67:03:57:40:b7:c8:12:1d:b5:ac:92:15:f9:60:d2:b7:e0:6d:
         7a:e7:ab:30:08:2c:53:51:52:3a:7c:a1:29:a4:d6:f1:cb:3f:
         52:30:c1:07:a3:dc:0f:df:46:6e:ae:cb:10:35:6b:ab:0c:79:
         15:32:7a:a3:e9:aa:40:8e:21:7a:8d:3d:ea:c6:4a:37:68:7f:
         2e:a8:97:4c:f4:a6:01:45:25:3a:bd:a4:67:5b:df:87:b2:51:
         c8:b8:b4:67:90:37:a8:4c:d4:86:4b:5b:a4:13:f9:cd:b2:10:
         a0:52:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:09:32 2026 by rpki-client