Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
File:                     jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json)
Hash identifier:          NaTAM25JCun5qkbYCSFPxf64F1yWWt5eiGXa4EySIFk=
Subject key identifier:   CD:A1:E4:1B:67:D2:EF:4C:45:9B:7C:0D:09:5E:0C:2A:E3:B6:20:01
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Certificate issuer:       /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial:       019D2884823A4B6252DAF1FD238D8D72C7C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
Manifest number:          1473
Signing time:             Thu 26 Mar 2026 05:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:05 +0000
Files and hashes:         1: 0Q-Zfa5EM9tNo04k8RE6e6TtkfU.roa (hash: RGjdNXoSFFGrfTu/Ti51Lk+K5F2xhb4depOlZwB8FXE=)
                          2: 1-VHrB2ftFgG1R7rW9e965VrbOgs.roa (hash: e22B3XhTvj7ENfOUB059RvQemhyhAgeNVsH6G1GtXTY=)
                          3: 1qpX2cPG5_nkbMnEo1efuLPeHZ8.roa (hash: spDyNX8ekUn+reTXNALqP0weIlhwk99TCbZoof+/3iU=)
                          4: 7YQDZucpbsxyTF1dG-WSopyYoD4.roa (hash: AZ+p2vdqGYxqTemz9H7WmkXG8urZ++JrwB5Ra4yemqo=)
                          5: Dw29NJ_ctrOpeieGYBgCqVAOqqY.roa (hash: JIVZInEs3qX488BMPJFD+ldY4NUedBvpDHZsEFrw4pk=)
                          6: Pnj_vmQa0ZunkGDFw9_ItsuwDa0.roa (hash: 0Ghl85pIQUjr9ungl4JN/VBPTNlFSKD8oMqKbzB0zRU=)
                          7: ZpiZYChv03XcXjWFsXMCV1QM0HU.roa (hash: wmoSAUcGUPypcaj5YjtRFn3oVWGJ3KsONwwVdodfB08=)
                          8: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: tCXKBUcuTsAyXsQ/2/VNrcrW0pdIF7MUbbBxdyakkUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:82:3a:4b:62:52:da:f1:fd:23:8d:8d:72:c7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
        Validity
            Not Before: Mar 26 05:01:05 2026 GMT
            Not After : Mar 27 05:01:05 2026 GMT
        Subject: CN=cda1e41b67d2ef4c459b7c0d095e0c2ae3b62001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:91:2b:f3:1d:9f:87:68:a3:1a:38:29:6f:
                    51:eb:e2:48:48:fe:2c:e3:a5:2e:9e:f9:52:c9:f4:
                    2d:d7:44:ae:9d:03:ba:eb:3a:fd:82:ec:13:d4:14:
                    ff:9a:51:73:1e:12:eb:bb:de:d7:b0:5b:02:8d:b5:
                    b4:45:d3:e0:b6:20:91:03:80:13:8b:eb:5d:ba:db:
                    dd:55:b1:9f:a0:fc:27:df:87:cd:9b:36:d7:1d:65:
                    34:39:10:91:be:49:9a:a0:c3:57:8c:39:7c:ae:df:
                    f1:07:4c:57:20:d5:ee:c4:82:1b:d4:52:2f:6f:c0:
                    e7:3d:c4:4c:4b:e3:59:f6:e2:e8:ab:d8:ca:c1:5e:
                    d2:38:03:1e:8a:01:2f:75:2e:8d:75:c5:5f:38:bd:
                    f0:cb:85:1d:f9:28:02:38:69:ee:8a:96:73:6c:59:
                    2d:d4:74:5b:2e:ac:35:de:55:7f:4d:f7:5e:41:bd:
                    9e:a2:52:c4:db:2e:36:9a:69:59:27:a0:26:0c:df:
                    d0:4f:fd:80:dd:53:dd:1d:a3:59:e4:5b:a0:6c:4f:
                    5e:16:bf:b0:b6:17:50:65:69:87:5c:cb:13:d3:33:
                    f4:e7:22:7f:f0:05:6c:1b:70:9d:b1:e6:bc:4a:c8:
                    58:8e:9e:a1:f5:6b:fd:62:0e:dd:c4:6f:52:57:32:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A1:E4:1B:67:D2:EF:4C:45:9B:7C:0D:09:5E:0C:2A:E3:B6:20:01
            X509v3 Authority Key Identifier:
                keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:3c:1b:5e:bf:1e:5b:7e:72:62:77:a1:ee:49:dd:7c:a1:fb:
         b9:4f:cf:d5:07:fd:45:76:74:87:a5:36:5b:58:6d:69:c0:ae:
         83:f3:b8:89:d8:58:8b:2e:dc:35:d0:3b:32:67:8a:4d:bd:49:
         f7:f7:dd:49:0f:3b:a2:1c:6a:81:e4:c9:8f:cc:eb:19:12:cc:
         96:3d:8e:a0:93:d3:83:b0:8d:aa:11:a0:c0:c2:8f:f0:74:a0:
         11:f1:38:e5:e3:b5:36:22:c2:b5:8c:27:e6:e5:06:41:64:a5:
         bf:67:3b:3b:c6:b4:9c:41:3f:c0:b4:22:4f:b1:4c:f8:51:12:
         ff:cd:dc:04:79:92:ed:39:b7:22:a4:8e:a0:bb:ef:1a:78:16:
         62:e7:b0:c5:83:1b:3a:c0:d0:76:98:52:d2:0c:be:6d:78:82:
         48:f7:18:ce:bd:8b:d4:48:48:7c:21:e3:5d:e4:01:77:34:c3:
         60:65:78:1f:8b:cf:8c:6f:38:88:9e:86:19:cd:7f:87:6b:7d:
         ba:9c:b4:e2:ed:58:1a:23:55:27:49:82:09:40:53:94:5d:93:
         d3:39:2a:05:0d:ad:6c:a0:79:17:dd:ce:3e:5e:ea:d8:a3:fc:
         4a:2e:a5:a6:d6:c7:54:e0:78:8d:d7:aa:c1:6a:a5:87:c3:23:
         ce:4f:7e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:08 2026 by rpki-client