Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
File:                     jworuIE7dNeCg7Fyj9ubvF1XhF0.mft (raw, json)
Hash identifier:          TUcRDOTdGybKzSszU+R8UoWXVFLsAjrVI9lJ30N9u98=
Subject key identifier:   8A:E0:5E:F3:3D:43:22:53:F0:B8:05:D8:F4:A0:64:AF:21:BA:55:51
Authority key identifier: 8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
Certificate issuer:       /CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Certificate serial:       019D2884CDE3561EFD30C7CA7907157530E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
Manifest number:          06F8
Signing time:             Thu 26 Mar 2026 05:01:25 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:25 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:25 +0000
Files and hashes:         1: 5aAt-H-NrSfKmKytWzYNSCs_1lk.roa (hash: pyFF9VTfBNSbLnwiK+bjW8VxJtVYpW2jHZxr3VVTNf0=)
                          2: DZwHMXwbO-Y69Y52Kdfxo1JSwhA.roa (hash: yGwWb/UU7XWPTrPTRm1qWs6X4Ilop1csSaOmaiZRhQY=)
                          3: JINzqyPfjhwTfkhgt83iQaH7h3c.roa (hash: 9zUgy85fdl0vhR6/qNmWtANrzog4VKETFgPB9s6IVYw=)
                          4: jworuIE7dNeCg7Fyj9ubvF1XhF0.crl (hash: +vQWFTWK6RhCPxyNT49khSKXd0vMDa6146xTlkHn+Vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:cd:e3:56:1e:fd:30:c7:ca:79:07:15:75:30:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
        Validity
            Not Before: Mar 26 05:01:25 2026 GMT
            Not After : Mar 27 05:01:25 2026 GMT
        Subject: CN=8ae05ef33d432253f0b805d8f4a064af21ba5551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4b:06:56:fe:da:85:c0:2f:1a:57:c3:26:1a:
                    57:91:a7:be:96:42:c0:71:bb:a7:4e:4d:98:9d:88:
                    f2:e3:b5:9f:0a:89:60:44:78:14:cb:06:7b:4c:5a:
                    5e:0b:9a:7a:d8:42:58:12:f3:95:05:ba:f2:8a:99:
                    f1:68:c8:7a:30:60:a2:ee:36:9e:4a:c2:8c:58:53:
                    52:cb:bc:0a:a0:5a:3b:6f:64:e7:a9:04:20:45:b0:
                    7d:7f:71:6b:4c:e5:bd:2f:41:3b:35:b4:64:51:a6:
                    98:3f:5a:55:81:84:2a:51:82:d1:22:d4:4b:0f:42:
                    29:a6:15:24:8a:67:a0:f0:cd:fd:4e:53:0a:62:74:
                    f4:7c:31:17:cf:39:c5:3b:1e:f7:ef:f9:8d:e7:4c:
                    bf:96:1b:a2:b9:9d:49:9d:2b:f1:03:9c:61:74:f3:
                    54:38:49:ef:b1:b4:6d:44:3a:1b:93:b1:2f:b8:32:
                    b7:b3:16:57:ca:fe:7c:8e:15:4e:45:d4:0f:1e:49:
                    e5:b2:0a:7d:e5:87:40:44:1f:fa:1e:08:bd:5a:ff:
                    06:5e:ec:a7:3f:3a:d5:9e:48:32:c1:4d:df:ad:64:
                    91:47:48:c2:ed:8d:50:e3:5b:1b:e1:44:d3:54:71:
                    89:68:66:00:54:ec:90:44:a9:d6:c0:33:61:aa:43:
                    69:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E0:5E:F3:3D:43:22:53:F0:B8:05:D8:F4:A0:64:AF:21:BA:55:51
            X509v3 Authority Key Identifier:
                keyid:8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:35:c3:cd:da:9d:5c:cb:2c:75:f2:ce:44:be:cc:e0:74:9c:
         6a:eb:09:79:b8:35:f4:a0:a7:88:67:1f:2e:c7:22:0a:48:6c:
         c2:6a:5d:e2:3e:51:83:02:17:cc:96:9d:51:c0:5c:51:6d:84:
         e7:9b:d9:df:c8:e0:d2:e9:a4:47:cc:6d:ac:a3:93:94:4c:68:
         fd:b4:ac:ef:12:de:a6:01:4d:cc:e3:07:cb:a7:6a:53:56:86:
         65:d9:ab:e1:29:f8:29:18:6b:99:3e:14:90:bc:95:6d:33:d6:
         de:c2:c2:8d:60:79:d0:33:04:82:a7:ce:f6:34:eb:c6:13:71:
         e6:56:44:57:5e:00:98:bf:0b:22:0f:3f:6c:48:a4:c2:42:56:
         be:67:bc:63:08:ed:cf:3e:8d:44:79:24:b6:38:a0:b4:98:7b:
         50:49:39:44:89:d4:48:88:4c:9c:5b:77:ec:8c:4f:39:e8:8a:
         f5:c3:be:06:2d:a8:34:69:af:2f:03:6d:eb:cd:16:b5:a5:8f:
         17:0e:d0:c6:0a:f4:3b:1a:9d:3e:4a:a9:b5:7a:94:36:4f:9f:
         ee:8d:34:21:0c:95:96:81:4d:1b:29:83:11:0f:9b:55:99:5e:
         8c:e0:82:d4:73:aa:78:3d:cf:8d:a3:b1:61:86:02:01:5a:91:
         88:89:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:11 2026 by rpki-client