Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
File:                     J0zEEJs00UTL604gpr08B1kYIbU.mft (raw, json)
Hash identifier:          iEAoF2D2tcO9Zx/aZvyWHIbRMtvmjsrLSfEshQGrg0k=
Subject key identifier:   02:65:9D:06:91:28:A5:20:2B:3A:8F:6E:A9:7A:75:AA:66:D4:D0:0E
Authority key identifier: 27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5
Certificate issuer:       /CN=274cc4109b34d144cbeb4e20a6bd3c07591821b5
Certificate serial:       019D277275F2B6DC68EDBF8AB377FD2C2E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
Manifest number:          1885
Signing time:             Thu 26 Mar 2026 00:01:45 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:45 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:45 +0000
Files and hashes:         1: 1YV-n6eVDyBMy2lAG2BB0xXnzzk.roa (hash: W+GPGe5q5iuYl+QBGPJokCqY2QUI29XV5EWynoVR34s=)
                          2: J0zEEJs00UTL604gpr08B1kYIbU.crl (hash: pkkjUo9yCyJKJVpTbDZf2/uR8gX8sSjA+b28rDraC84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:75:f2:b6:dc:68:ed:bf:8a:b3:77:fd:2c:2e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274cc4109b34d144cbeb4e20a6bd3c07591821b5
        Validity
            Not Before: Mar 26 00:01:45 2026 GMT
            Not After : Mar 27 00:01:45 2026 GMT
        Subject: CN=02659d069128a5202b3a8f6ea97a75aa66d4d00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:d2:df:d6:0d:87:0e:f5:96:5d:8e:2d:f7:
                    0d:bd:90:0a:90:ee:fa:1b:85:ad:7e:be:d3:61:37:
                    58:27:a1:9f:80:0f:5b:09:95:dc:26:51:9e:24:f9:
                    a7:02:7b:a7:ef:14:71:27:31:e1:9f:54:04:40:94:
                    c1:1f:63:a1:ba:fc:8d:97:3b:f9:f9:21:0a:eb:30:
                    43:e5:4e:23:7e:55:bb:f1:50:cf:6c:93:a9:9a:0c:
                    00:e8:fb:7e:1f:22:46:9b:70:d9:3c:6b:66:dc:7c:
                    1b:a9:89:cc:d5:04:33:61:6f:73:e1:86:a3:0b:c1:
                    f9:e8:3e:d6:be:74:45:16:37:cb:bc:e3:2e:36:c8:
                    63:b3:ba:12:fa:d1:a7:8e:d8:da:5f:32:18:54:c6:
                    d6:d4:d2:36:bb:92:54:c1:2a:c1:76:7d:41:87:c5:
                    9c:d8:09:83:9f:00:59:f5:e0:4a:eb:b8:d4:db:6b:
                    3c:49:e3:6b:92:df:fc:84:07:81:5a:01:e8:1a:64:
                    6d:92:32:79:2f:5f:80:31:8b:b8:b1:84:61:ef:da:
                    4d:44:26:bf:20:f3:59:d0:e8:55:9a:ea:74:d1:89:
                    05:9a:7b:be:69:6f:d4:4f:c9:86:03:6c:01:4e:30:
                    c0:04:73:38:ee:3a:17:c0:1d:e9:c9:51:ef:c3:ba:
                    63:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:65:9D:06:91:28:A5:20:2B:3A:8F:6E:A9:7A:75:AA:66:D4:D0:0E
            X509v3 Authority Key Identifier:
                keyid:27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:4a:7b:07:42:31:96:ae:80:03:64:54:76:4f:0f:77:62:e0:
         7e:58:ba:cc:80:dd:06:af:c1:30:8f:f3:66:f7:7f:77:da:a8:
         b6:58:d8:10:3c:78:2b:97:1d:e8:dc:12:de:a7:d4:62:9d:23:
         a4:a2:a0:e4:9d:bd:e4:f1:8c:f0:65:9f:02:a7:73:93:f6:99:
         6a:ea:01:b2:20:c0:56:cc:20:a2:63:e2:0f:50:7f:55:7d:bd:
         dc:7e:14:41:15:b8:cd:bb:bf:7d:f1:83:9c:be:18:c9:40:ec:
         7c:30:64:06:7a:27:32:0b:9c:f0:91:f6:18:1a:16:b8:dd:4c:
         6c:3c:6c:f4:e0:36:1c:f0:98:74:e5:0d:b0:59:23:4b:10:7e:
         ec:1a:d9:84:31:26:b5:21:35:7f:74:a3:12:ce:20:b8:cb:5f:
         58:cc:5d:46:9f:44:07:6d:75:3d:2a:7d:1d:6d:fc:2c:87:00:
         b2:a3:d6:77:fa:6b:d6:8c:26:a6:6d:d8:dd:cb:01:7f:cc:ca:
         69:ab:d6:d0:63:b0:9c:06:88:ff:e8:d5:b3:86:98:13:31:64:
         76:11:4f:51:31:da:d5:a2:3c:80:65:aa:23:1c:6f:c0:ab:19:
         9a:1a:80:0b:27:68:53:b0:06:ad:3b:fd:f2:8f:d4:e0:c1:57:
         85:44:29:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:40:19 2026 by rpki-client