Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
File:                     JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json)
Hash identifier:          2L4QBrxArjA5DyLcOUJq3ehrDZiH5o/gGk8BnOmyYR0=
Subject key identifier:   22:8F:B0:D7:50:35:20:C6:94:ED:A3:D2:61:8C:D0:CB:69:26:98:83
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Certificate issuer:       /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial:       019D25842791F4681F399300327BE8FB4F6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
Manifest number:          0D7D
Signing time:             Wed 25 Mar 2026 15:01:50 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:50 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:50 +0000
Files and hashes:         1: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: Y1xDFA6vzWAViJfSEr186XFKPQWsWgsMt7Ls3r7cyCM=)
                          2: ZOxgWvCSe4fh3G-hS8UAvVzCxPQ.roa (hash: lLIc6IlVo/BfK1oQIkM/V9OuWrsKXh4yLdug5PFaT64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:84:27:91:f4:68:1f:39:93:00:32:7b:e8:fb:4f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
        Validity
            Not Before: Mar 25 15:01:50 2026 GMT
            Not After : Mar 26 15:01:50 2026 GMT
        Subject: CN=228fb0d7503520c694eda3d2618cd0cb69269883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:b7:d0:c2:ee:af:44:16:41:52:8d:af:eb:
                    41:24:31:ee:4b:a6:d4:ed:ca:16:51:27:96:6c:07:
                    a5:68:7e:ff:86:0b:5c:47:1b:61:0c:c4:bd:35:94:
                    d0:a3:c3:5d:67:70:38:81:55:d8:30:8c:f3:1b:7e:
                    d9:5c:01:c6:e3:dc:c8:1c:bb:a9:31:5e:80:75:50:
                    c1:28:01:80:6a:30:76:b6:01:06:28:2c:90:41:84:
                    0d:c0:74:5c:40:e9:90:b9:ab:d9:2e:1b:06:b0:a1:
                    06:f1:08:dd:8a:1e:c7:76:72:56:4d:ee:77:cc:3f:
                    06:58:66:8f:f8:5a:5a:22:23:ba:16:a1:ba:cd:3e:
                    02:a4:8b:2b:49:77:3b:37:ec:18:71:43:ef:7f:f7:
                    7e:11:d5:99:53:6f:67:ea:4e:a0:b1:b7:43:ab:91:
                    37:ba:d0:c4:45:35:cb:e3:70:01:20:49:9e:c6:e7:
                    c9:80:74:7e:49:10:fc:67:b3:da:4f:0d:bb:1a:bf:
                    b2:91:44:ab:8d:13:34:fa:0f:62:4f:29:61:25:48:
                    f8:16:f9:cc:93:ee:22:92:c9:6f:8a:80:45:e6:54:
                    50:a9:6e:ff:6a:f6:54:0a:ed:28:53:1f:68:a0:49:
                    1c:96:b4:6c:1e:e9:7a:1c:80:76:e5:be:7c:a9:cb:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8F:B0:D7:50:35:20:C6:94:ED:A3:D2:61:8C:D0:CB:69:26:98:83
            X509v3 Authority Key Identifier:
                keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:6a:a8:15:42:e8:cf:ff:7b:b1:b2:85:28:62:30:17:de:e8:
         71:93:21:1b:f5:7f:e1:7e:2d:54:3e:08:7a:b4:ee:0d:8b:a6:
         0a:30:47:d2:f7:dd:bf:d2:6f:81:71:f9:d2:59:f1:cb:32:88:
         f4:34:49:25:28:c5:50:bf:da:05:9a:bc:7b:02:f9:92:7a:77:
         3b:e8:e9:af:3e:3f:ae:3b:2a:fd:bd:be:c6:24:98:e9:49:6e:
         79:2d:09:52:28:5b:9e:56:0e:fa:91:b0:c1:05:8f:4d:4f:3d:
         83:d0:76:0b:c8:e0:07:55:4e:2f:f6:a8:f7:ce:7c:b9:00:3f:
         6c:bf:ac:6d:2d:51:fe:c3:fb:88:46:7f:67:54:f3:80:38:47:
         04:97:56:71:81:af:2e:9c:0b:78:43:d4:7f:5d:b5:49:f8:79:
         4a:56:0c:52:bd:4d:33:c8:5f:18:97:9a:be:89:59:d4:14:7a:
         04:a3:b7:69:07:32:59:70:8f:03:07:ff:e4:1d:38:28:d9:8f:
         bd:6c:10:32:c1:4b:4d:8f:fa:e9:41:e7:30:2a:fb:ec:94:df:
         13:b9:fd:e2:00:48:d7:54:ca:7f:bd:aa:c2:0e:16:04:47:97:
         7f:ef:55:11:4c:22:23:1e:fc:4e:31:16:d5:25:47:84:93:c3:
         9c:ad:dd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:05:59 2026 by rpki-client