Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
File:                     JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft (raw, json)
Hash identifier:          PfcmdSLq2emWPByhhsMpck+KMU2IEKTtCkYkiYKWIyw=
Subject key identifier:   D9:32:5A:A9:87:14:4F:0F:C8:D7:8A:4F:49:36:19:A7:74:05:77:E0
Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
Certificate issuer:       /CN=261b941dbe59651fafbba9724a12775e07edb635
Certificate serial:       019D2A726855F494B53F879A52714B5A8F28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
Manifest number:          0E76
Signing time:             Thu 26 Mar 2026 14:00:33 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:33 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:33 +0000
Files and hashes:         1: CBT9EvNLviREuaFnuwBtsjNjvqQ.roa (hash: L5VKNlWuWtfLWO7jL8F9Y4m0nbimopTGF6Y2mOItvHc=)
                          2: JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl (hash: d9U9PaNM1K/+f2xpXQC05FwpdzXftTk3e2V5SosLs74=)
                          3: T2MyCYDe8ZVj6MHLOpPsRFQaLyc.roa (hash: 2HMXQDaERD47LVw7adtPSZsCeqM+FdyN2voYgfm3nq4=)
                          4: TrZbLVY0iXqlw78jA1uMduH-vUQ.roa (hash: KRDdhAasvGi+XoVP5w8RcZgsqXheZXBgHtl6x/DPy1c=)
                          5: WWUJ0b2mKsJU4aWCDcCYWe3B3Q8.roa (hash: OR5UXYV6xuApBIfkbkR4RJywXInN6wryK+o2woE8n2A=)
                          6: fKuK4GhJoW5W0MgtH6V8djfpAh4.roa (hash: oBGCf3nVEKmFy2gQfXUwhx5LHxw9ggGPk7GHfDrKscM=)
                          7: zxx_FfKkmmxvyeDvkRu2znFf5T8.roa (hash: MOimrkmJ3AqYEjrbALlR+YXtLYVrKH4fVxKgTuqxIeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:68:55:f4:94:b5:3f:87:9a:52:71:4b:5a:8f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635
        Validity
            Not Before: Mar 26 14:00:33 2026 GMT
            Not After : Mar 27 14:00:33 2026 GMT
        Subject: CN=d9325aa987144f0fc8d78a4f493619a7740577e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:f2:d8:c0:b0:60:b2:e6:f8:43:99:a5:ba:
                    dc:4e:69:96:08:81:cc:27:34:38:03:6c:0a:f4:21:
                    78:60:ed:8d:36:27:3c:7f:0a:8f:9f:dc:14:e9:81:
                    d3:af:d1:7d:3c:e5:d8:ee:21:9c:f6:16:4f:80:06:
                    69:6d:49:de:59:bf:d2:2f:bb:a8:b3:39:46:a1:0e:
                    af:cb:78:9a:74:bb:39:1a:46:a0:66:7e:51:56:8d:
                    12:4e:ef:a0:d3:fd:7f:db:9b:ff:08:20:6a:6f:7c:
                    b1:8e:48:e9:4d:6f:29:52:ad:68:f9:8f:d5:06:71:
                    c3:60:0d:ae:bc:19:b1:e3:a6:ab:5a:a6:f5:69:a7:
                    9e:99:6f:eb:41:a2:2e:7c:99:65:6a:03:58:01:88:
                    71:ef:3b:26:9f:6e:26:7f:9c:bd:bb:d8:58:ca:1e:
                    4c:2d:a4:08:d0:3c:5a:5a:40:fc:3a:e2:8b:40:e2:
                    62:c5:a4:66:89:52:4f:5b:0e:2a:d5:15:32:60:ae:
                    8f:1d:20:a6:b5:b7:d9:9e:dd:50:a2:a1:20:eb:75:
                    38:66:d4:8c:53:5a:55:8c:3c:3b:ad:96:42:f2:31:
                    e9:f0:47:44:1a:50:0f:e6:d0:28:c1:e6:ea:20:22:
                    12:cb:34:cb:34:4a:05:fa:b9:66:fa:c8:72:9c:cc:
                    a3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:32:5A:A9:87:14:4F:0F:C8:D7:8A:4F:49:36:19:A7:74:05:77:E0
            X509v3 Authority Key Identifier:
                keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:5b:3e:89:bb:5a:b5:54:b7:98:4f:9c:f4:30:d9:b4:f4:56:
         0a:7a:2a:9d:9f:1a:a8:0e:47:db:8f:41:39:7e:f8:6b:8a:28:
         16:b3:28:55:bb:9a:5d:f3:e1:4b:92:27:63:ec:a1:a5:39:99:
         34:3b:38:45:c5:24:6d:f3:41:f6:17:c6:c6:00:d7:a9:5b:d7:
         30:c5:26:93:98:70:cd:97:4d:63:3d:c3:62:db:04:f5:a9:de:
         9a:59:32:e3:4f:fe:9f:78:13:d3:a2:19:21:ff:46:6e:b9:b2:
         d5:53:e3:ab:0c:ce:4e:9d:46:72:b5:77:a5:60:57:4e:c9:0f:
         d8:30:d1:04:a1:26:c3:cf:fd:ec:05:50:8a:51:53:bc:a6:d7:
         8e:12:5e:8c:60:fb:56:63:dd:77:60:88:2e:a0:8f:a6:0b:8a:
         b3:bc:5e:01:35:23:38:da:43:a8:1d:34:9b:ab:c7:3a:f2:a2:
         ef:1e:bb:c2:b8:e7:34:e8:fd:4d:3c:3e:76:b1:54:41:b7:46:
         67:33:30:ae:60:7a:7f:c8:3d:58:5c:7a:17:e3:2e:b8:db:9c:
         1c:c8:05:59:92:92:36:c2:30:a8:98:5d:5e:81:56:20:0f:1c:
         9e:74:a0:03:69:6b:0e:83:7f:ca:9f:aa:97:4f:11:d1:ee:a2:
         5c:32:66:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcmhV9JS1P4eaUnFLWo8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MWI5NDFkYmU1OTY1MWZhZmJiYTk3MjRhMTI3NzVlMDdl
ZGI2MzUwHhcNMjYwMzI2MTQwMDMzWhcNMjYwMzI3MTQwMDMzWjAzMTEwLwYDVQQD
EyhkOTMyNWFhOTg3MTQ0ZjBmYzhkNzhhNGY0OTM2MTlhNzc0MDU3N2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZny2MCwYLLm+EOZpbrcTmmWCIHM
JzQ4A2wK9CF4YO2NNic8fwqPn9wU6YHTr9F9POXY7iGc9hZPgAZpbUneWb/SL7uo
szlGoQ6vy3iadLs5GkagZn5RVo0STu+g0/1/25v/CCBqb3yxjkjpTW8pUq1o+Y/V
BnHDYA2uvBmx46arWqb1aaeemW/rQaIufJllagNYAYhx7zsmn24mf5y9u9hYyh5M
LaQI0DxaWkD8OuKLQOJixaRmiVJPWw4q1RUyYK6PHSCmtbfZnt1QoqEg63U4ZtSM
U1pVjDw7rZZC8jHp8EdEGlAP5tAowebqICISyzTLNEoF+rlm+shynMyjIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkyWqmHFE8PyNeKT0k2Gad0BXfgMB8GA1UdIwQY
MBaAFCYblB2+WWUfr7upckoSd14H7bY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yZjgzMGYtYWY0ZC00ZDMzLWEzMDAt
Yjk4ZGY1NDRiYzIwLzEvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8yZjgzMGYtYWY0ZC00ZDMzLWEzMDAtYjk4ZGY1NDRiYzIw
LzEvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsls+ibta
tVS3mE+c9DDZtPRWCnoqnZ8aqA5H249BOX74a4ooFrMoVbuaXfPhS5InY+yhpTmZ
NDs4RcUkbfNB9hfGxgDXqVvXMMUmk5hwzZdNYz3DYtsE9anemlky40/+n3gT06IZ
If9Gbrmy1VPjqwzOTp1GcrV3pWBXTskP2DDRBKEmw8/97AVQilFTvKbXjhJejGD7
VmPdd2CILqCPpguKs7xeATUjONpDqB00m6vHOvKi7x67wrjnNOj9TTw+drFUQbdG
ZzMwrmB6f8g9WFx6F+MuuNucHMgFWZKSNsIwqJhdXoFWIA8cnnSgA2lrDoN/yp+q
l08R0e6iXDJmAw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:55 2026 by rpki-client