Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
File:                     JTNYNY66UbU00_rppsuHHeY34AA.mft (raw, json)
Hash identifier:          tUWLvV+Q9/M3xQDawb65Zo5QOzxdSLicuONp8i0XCJg=
Subject key identifier:   50:32:DD:D0:42:84:9A:E4:BB:ED:1C:B8:2A:26:4A:2B:54:5D:07:F6
Authority key identifier: 25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
Certificate issuer:       /CN=253358358eba51b534d3fae9a6cb871de637e000
Certificate serial:       019D29CE006C2937837DFCA81B6F23A82E63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
Manifest number:          0C26
Signing time:             Thu 26 Mar 2026 11:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 11:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 11:00:59 +0000
Files and hashes:         1: JTNYNY66UbU00_rppsuHHeY34AA.crl (hash: CQn0qyh+aClVRi6+v8nAEUeh3e5Exl52n+RkjtSNxMw=)
                          2: UfOE-rSQQJxT5pel5hxB7CI5WyA.roa (hash: lITU3NpiQckWKnEMAb5T8z+uP9+F2438Al8BboidjZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:00:6c:29:37:83:7d:fc:a8:1b:6f:23:a8:2e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253358358eba51b534d3fae9a6cb871de637e000
        Validity
            Not Before: Mar 26 11:00:59 2026 GMT
            Not After : Mar 27 11:00:59 2026 GMT
        Subject: CN=5032ddd042849ae4bbed1cb82a264a2b545d07f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:02:38:23:2a:51:e3:54:b5:06:82:86:2b:
                    92:3c:2f:37:d4:f8:87:13:ac:66:66:40:83:1d:8d:
                    60:24:6c:c5:4c:50:57:01:2d:16:b3:ac:08:2a:e6:
                    cd:56:62:68:de:19:81:33:8e:dd:d3:e0:39:54:fe:
                    c5:36:00:d9:b2:d8:fd:c2:c3:77:65:ae:34:3e:ab:
                    99:2d:ba:fa:c9:3a:79:03:69:de:68:21:2a:37:cc:
                    7b:26:50:3b:d4:32:ab:be:c7:b6:74:85:1c:ea:0d:
                    88:2d:1f:12:ce:76:2f:a3:a9:d8:8f:0d:4a:29:f9:
                    08:35:a8:3b:69:41:6b:f0:54:52:11:fd:4b:47:2b:
                    39:34:03:9b:f2:37:ca:bd:74:60:c7:2c:8b:2e:25:
                    0e:5b:36:c5:61:00:1a:00:18:d7:09:45:01:79:70:
                    97:90:a2:59:1d:96:f4:63:33:c3:39:99:32:0a:60:
                    b5:0a:2c:3a:47:55:41:41:43:a1:2e:10:f0:4a:5b:
                    15:ab:da:22:7f:76:ac:91:78:5e:59:34:d9:87:7e:
                    92:5c:84:db:1d:7d:01:28:02:34:e3:a9:3b:41:e4:
                    8c:8c:0c:31:8b:97:02:3b:1c:e7:92:75:3d:e1:3f:
                    c7:3c:f8:72:ed:e8:f6:68:95:98:36:8f:db:d7:89:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:32:DD:D0:42:84:9A:E4:BB:ED:1C:B8:2A:26:4A:2B:54:5D:07:F6
            X509v3 Authority Key Identifier:
                keyid:25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0a:be:ee:d2:e3:fb:08:6c:e6:45:96:72:f5:c5:ee:1d:a8:
         c8:ae:25:86:da:6d:71:03:51:c6:07:2a:b1:64:60:ef:79:e1:
         dc:28:e3:05:f7:f8:e7:91:9d:af:4a:88:81:b1:68:27:1d:86:
         5d:07:9d:26:e0:94:aa:82:0f:37:45:3a:94:50:bc:27:ce:ca:
         37:e9:ac:a5:d3:d3:0d:a0:17:10:d1:8d:03:71:ea:db:eb:d9:
         86:93:a7:e1:48:83:7a:61:a3:42:78:c6:c3:3e:b4:ad:6f:8b:
         3e:a5:02:33:7e:2f:2d:15:75:01:0d:99:eb:53:8b:30:c3:ed:
         e8:5e:1a:33:50:d9:ad:b9:64:ac:0b:bb:43:de:be:81:5b:7d:
         3d:d9:c6:59:af:73:ed:b0:5c:33:b2:55:55:a5:a6:dc:74:40:
         b9:bd:52:33:ae:e1:fd:39:00:bf:0a:64:13:75:fc:6a:7d:bb:
         40:03:d9:c3:22:de:ba:9f:dc:80:77:35:48:6c:1b:7e:49:f1:
         db:dc:c3:b7:5a:46:d1:17:de:28:78:dd:c0:a6:0f:c1:fb:63:
         80:1f:23:92:1e:e4:2f:22:a6:85:8f:85:24:98:a4:ca:55:0f:
         b0:11:da:7b:6a:45:1c:7c:79:da:b3:dd:e3:54:ca:c3:7d:41:
         3d:12:d2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:21 2026 by rpki-client