Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
File:                     k-JyYRE58V0DfXpL5UVpbNKFOGc.mft (raw, json)
Hash identifier:          mJsLktRMniAbk93mZqMIRJExB89ILmWZCm2Flj4+pKg=
Subject key identifier:   7A:42:8D:AC:2E:F7:BD:5A:5C:C9:F8:6D:FE:96:DB:2C:61:E4:EA:FB
Authority key identifier: 93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
Certificate issuer:       /CN=93e272611139f15d037d7a4be545696cd2853867
Certificate serial:       019D265F96E52D35DA0AE712E0F6B5EE2748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
Manifest number:          3B
Signing time:             Wed 25 Mar 2026 19:01:31 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:31 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:31 +0000
Files and hashes:         1: 4g2sjyOA2S88ULGM_X6L9fja_a4.roa (hash: T/G8ygcKFjJNJsjuU7faDGLDHIo+LXS8+f+JHgj88Xc=)
                          2: OS9El_lE1YFidGkD6u7b5PW_Swk.roa (hash: kc1xeHQSX9yaoh8FDTkRuRX1sg9TtwB9rWtzmmLQbkU=)
                          3: WRfWp6HbqiLrJdTcEFqGTR_haxY.roa (hash: zRStM1z0fS/dDt32gvvFhDITrhGZhwjd4CFo2EuaBzY=)
                          4: aaGSMdmUu7lmi2q6LH83_Ly6zKs.roa (hash: A224Fi88Z16gKVHH9nuUS3y5SW086IEgBsWyXTJRCgM=)
                          5: k-JyYRE58V0DfXpL5UVpbNKFOGc.crl (hash: PBP+YT3cq5LStEJ/kmAmFoaACx8xNVJDzg7JTPUNAWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:96:e5:2d:35:da:0a:e7:12:e0:f6:b5:ee:27:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e272611139f15d037d7a4be545696cd2853867
        Validity
            Not Before: Mar 25 19:01:31 2026 GMT
            Not After : Mar 26 19:01:31 2026 GMT
        Subject: CN=7a428dac2ef7bd5a5cc9f86dfe96db2c61e4eafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:fc:a1:d6:55:55:d2:12:e3:01:f3:2d:9b:
                    74:44:a0:70:27:45:f6:67:6e:2e:f6:f0:8f:00:2c:
                    6d:83:23:0c:96:c2:ae:93:0c:e7:2a:58:5e:34:f7:
                    17:0c:b4:3d:d1:97:d9:7a:cf:5b:ff:bc:24:f1:8a:
                    0f:70:25:1b:5e:7f:90:ec:8f:96:6a:3d:10:82:84:
                    97:17:d7:6b:e9:14:d7:fc:e4:10:1c:36:ca:b4:f4:
                    c3:ea:cc:42:27:b2:c5:c0:ea:81:a5:09:15:a7:fa:
                    62:8d:75:52:da:6e:03:04:33:63:2c:2a:66:5f:bf:
                    0b:e2:f1:f6:55:9e:fc:eb:4a:ec:22:1c:47:9e:9f:
                    b3:ef:66:9e:c1:f6:6d:c5:3b:c4:2a:a3:ba:ed:81:
                    54:c3:51:2c:b7:88:66:e3:f4:bb:47:2d:90:6b:7b:
                    ca:f0:69:48:9f:ad:c1:31:97:a7:e7:98:9b:fe:9c:
                    90:d2:80:50:1e:9e:26:6d:bb:70:7c:eb:23:4e:fe:
                    06:56:10:68:07:c7:95:b7:fc:e5:01:1c:41:5e:ab:
                    7d:42:af:90:42:ea:69:0f:a3:2a:7d:2a:8b:0f:24:
                    95:36:d7:37:05:08:cd:3d:4f:46:bc:40:86:7c:f5:
                    c1:06:a3:7b:44:0d:f2:b9:71:58:59:b9:44:77:91:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:42:8D:AC:2E:F7:BD:5A:5C:C9:F8:6D:FE:96:DB:2C:61:E4:EA:FB
            X509v3 Authority Key Identifier:
                keyid:93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ec:a5:c1:0c:9b:3d:0e:66:fa:15:34:89:41:55:a0:1f:5d:
         a0:2d:70:bd:73:04:2b:7f:e2:67:11:e6:83:3f:9f:01:a5:3a:
         41:2a:33:20:54:5f:3f:c4:12:23:9b:cb:fe:d2:ff:6b:0a:2f:
         e9:6e:39:64:5a:ce:5b:67:3f:33:a9:c0:5e:0c:91:f4:cb:3e:
         02:78:91:69:60:41:59:39:70:20:8a:1f:0c:5a:e1:7b:2d:6a:
         ec:40:9d:6b:48:82:e4:2e:e9:5a:00:4b:0f:7e:45:94:0d:c0:
         b2:4f:f7:2d:16:60:07:d8:03:b5:24:11:50:d8:fa:e5:a6:b1:
         76:bf:9a:5e:c4:db:97:47:e8:ee:25:5d:f5:ec:10:e8:39:f4:
         29:06:80:81:fc:82:43:72:27:57:00:7c:03:48:46:3c:75:c1:
         42:f2:5c:18:04:93:57:ca:af:ad:f2:1c:86:b8:d8:60:f0:fb:
         30:c1:40:40:3d:c6:bb:26:09:8b:b8:83:03:ad:da:ff:74:06:
         2d:23:f1:70:bc:68:72:2c:ff:1a:9a:24:a8:e3:c0:b9:24:68:
         76:e9:7a:b9:81:b5:c3:ee:65:37:7f:67:41:cc:26:50:d0:13:
         87:eb:39:7a:31:16:b5:47:41:73:6c:96:5c:32:5e:b7:84:fd:
         46:24:17:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:49 2026 by rpki-client