Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
File:                     jVhAatOLFVwZjjhanC9iG84h-Hc.mft (raw, json)
Hash identifier:          hUKuN7zpPhupgmPJEdnm1uADqT9ZybkAEjgxUcvPGTI=
Subject key identifier:   77:01:96:C8:9E:77:44:D9:B8:D2:0F:CE:D0:9A:85:6C:C0:AA:F2:C4
Authority key identifier: 8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
Certificate issuer:       /CN=8d58406ad38b155c198e385a9c2f621bce21f877
Certificate serial:       019D2628435F384328D2D4DD25A2530EA874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
Manifest number:          074A
Signing time:             Wed 25 Mar 2026 18:01:06 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:06 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:06 +0000
Files and hashes:         1: LQCD1a310r8RRpwvbfHKbk-NqOI.roa (hash: rJtj6vg2DW3RfQFAwIjSKnotnH35ji/MjqYPvAqYeiQ=)
                          2: jVhAatOLFVwZjjhanC9iG84h-Hc.crl (hash: XWy7A3N2rYeYK1Qqvc+pH0jO8bAOevOcIkW+nllrF70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:43:5f:38:43:28:d2:d4:dd:25:a2:53:0e:a8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d58406ad38b155c198e385a9c2f621bce21f877
        Validity
            Not Before: Mar 25 18:01:06 2026 GMT
            Not After : Mar 26 18:01:06 2026 GMT
        Subject: CN=770196c89e7744d9b8d20fced09a856cc0aaf2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:4f:a9:25:24:b7:fe:d5:aa:19:b5:9e:07:
                    c2:29:68:d9:39:bd:b9:a9:00:b0:4d:39:4e:21:7b:
                    97:cc:3c:dd:09:8e:53:74:c8:97:71:aa:bb:b2:5a:
                    a5:07:6c:f8:8b:c9:1f:59:ff:b3:c2:8c:4a:d1:5f:
                    7d:88:4f:64:56:3a:f4:d0:c0:c1:c8:dc:98:20:73:
                    f0:21:93:8d:d7:a3:2a:af:0e:43:41:82:50:6d:17:
                    15:2f:0e:7e:35:05:23:e2:30:30:4e:f6:a5:1d:55:
                    d1:98:91:a9:f5:00:5c:c0:65:be:1b:d0:0d:b1:97:
                    7d:53:b3:5b:a0:74:c3:d0:4e:68:75:4b:68:64:d9:
                    b6:f0:64:72:5d:fa:d5:7b:1f:0c:e6:63:d4:25:eb:
                    7e:ba:56:fe:cb:17:2e:7b:b7:16:71:82:18:6d:30:
                    b2:08:70:ae:f9:5e:05:85:47:47:41:e6:26:cf:bd:
                    94:26:59:42:42:0d:5f:8c:8b:c3:af:5b:fc:fb:42:
                    ce:b8:77:e8:11:e5:72:b5:03:6e:bb:54:cf:3e:34:
                    51:ce:bf:2c:93:85:52:a8:39:e2:3e:d5:7a:32:0d:
                    38:56:05:16:aa:12:4e:bc:59:11:6a:85:ba:d3:51:
                    60:71:fa:cd:59:82:e7:7e:a4:0b:e7:03:2c:47:22:
                    10:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:01:96:C8:9E:77:44:D9:B8:D2:0F:CE:D0:9A:85:6C:C0:AA:F2:C4
            X509v3 Authority Key Identifier:
                keyid:8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ad:34:6c:5e:3b:40:48:ab:03:f0:71:4e:b0:6b:82:11:a2:
         3c:d1:a5:e8:d8:ac:eb:5d:f5:94:ea:69:1f:b5:2f:8f:9f:27:
         27:62:f0:4a:3d:b0:9b:e9:87:4e:ef:81:ac:c0:4b:13:32:af:
         3e:cb:ed:57:1e:34:ee:e4:24:39:08:c6:59:d2:70:dd:37:6a:
         58:8f:5f:06:e8:dc:a2:c2:eb:2f:9f:bc:23:85:63:69:b4:a7:
         24:1f:68:77:cb:e7:1b:ef:ab:c1:2b:b5:4c:38:65:47:3d:39:
         a2:a1:de:26:33:f9:de:70:d4:ee:b3:33:2f:e6:a2:ce:e6:f3:
         9a:82:52:c4:db:19:44:f2:13:87:d0:c7:f7:14:a9:b2:78:25:
         67:f7:23:2c:87:1f:55:33:bb:ca:0d:67:bf:83:64:d6:88:63:
         46:68:2b:bf:4b:13:1f:e6:b1:d8:d4:2b:45:41:80:06:cb:20:
         c8:59:cb:93:de:19:48:7e:ff:af:72:fc:76:f1:bf:f4:69:60:
         50:d2:55:7d:48:63:6a:49:eb:30:ec:c6:c4:72:bb:6c:26:e4:
         51:a8:87:ab:4b:cc:91:ff:ca:b0:43:15:51:f1:84:5f:e2:b8:
         7c:0d:24:e6:b1:25:48:58:dd:4b:47:0c:87:43:97:bd:c6:48:
         8a:46:d7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:53 2026 by rpki-client