Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
File:                     jvjEceg7FPxsbMfPyWwaw-MIfq4.mft (raw, json)
Hash identifier:          gckKAm1zahAM7ktxdtaWuEtDkKAdBoRheZYN8ZsiOB0=
Subject key identifier:   E0:52:9A:AA:76:9B:D6:E5:D6:2B:F7:9B:5B:2F:BA:AB:BF:67:24:13
Authority key identifier: 8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
Certificate issuer:       /CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Certificate serial:       019D273ACB8A766476FF5398ABE626EBC071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
Manifest number:          094C
Signing time:             Wed 25 Mar 2026 23:00:57 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:57 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:57 +0000
Files and hashes:         1: P4VkZniabsXu9hktkMw5Rd09dnk.roa (hash: +FF/Pni07tJQAzAxFJf4U5q4pGsraFiqwIiXTi9fUSo=)
                          2: bzbw6ZQQlgZG-VDctSbAwKD0loI.roa (hash: XGHU1Qq/9SW+uBsv+/TnL48HjuX/R8vTB0lxCS9rZSk=)
                          3: jvjEceg7FPxsbMfPyWwaw-MIfq4.crl (hash: k3eo+YS8a0ExeDJMTSnwZuF2nphS96k2uVtKB7o56Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:cb:8a:76:64:76:ff:53:98:ab:e6:26:eb:c0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
        Validity
            Not Before: Mar 25 23:00:57 2026 GMT
            Not After : Mar 26 23:00:57 2026 GMT
        Subject: CN=e0529aaa769bd6e5d62bf79b5b2fbaabbf672413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:35:ed:35:37:96:b6:a6:85:d9:5b:a2:d8:a5:
                    80:a5:ca:90:a4:07:70:4d:74:25:bf:34:d6:56:7f:
                    84:69:f0:db:fa:97:96:04:61:bc:6e:6f:c4:fc:80:
                    3c:73:df:17:a6:6d:f7:76:c9:03:b1:55:db:bb:bc:
                    29:4f:b7:f1:f4:37:eb:33:22:2d:07:3e:a4:8d:7b:
                    c6:e2:b0:f9:44:8e:02:a6:3f:4d:72:ab:ce:4b:b5:
                    c4:98:9c:a0:97:8d:d1:d7:b0:61:03:0c:69:ba:1f:
                    0f:9a:94:3e:0e:0b:d7:73:6a:3f:c0:36:4c:dc:c8:
                    a9:bd:7a:de:68:42:3e:47:65:2b:77:d7:75:43:31:
                    bb:d1:cb:74:0e:aa:ac:ef:c3:b5:09:f2:4d:78:26:
                    1b:7e:9d:d1:a6:b5:46:71:53:5b:dd:50:2f:f6:da:
                    10:fe:c1:ed:c1:d2:3d:24:47:28:9d:07:2b:0d:fc:
                    02:8a:64:22:a1:ae:06:82:42:96:6b:c0:2a:e7:a1:
                    2b:87:2b:18:17:45:65:90:d5:a4:ea:32:62:38:ce:
                    c0:2a:de:e7:3e:20:d8:1b:48:b7:f5:5e:06:a4:71:
                    32:83:0e:8a:a7:92:78:ca:a1:0b:c7:a0:d5:ce:8c:
                    29:14:f1:c7:bc:45:1e:f7:38:33:57:6f:6e:9a:64:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:52:9A:AA:76:9B:D6:E5:D6:2B:F7:9B:5B:2F:BA:AB:BF:67:24:13
            X509v3 Authority Key Identifier:
                keyid:8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b1:80:42:60:a5:a7:78:ab:83:52:ce:3e:f3:c1:eb:d6:ca:
         7b:40:05:aa:6c:a0:d5:77:8f:bb:ef:d9:59:ff:a1:dc:e2:75:
         f5:7b:d8:d1:4f:6b:86:52:18:54:de:cf:ce:a8:53:11:c8:08:
         ce:4a:de:e7:44:77:04:9a:b4:76:41:d2:29:52:56:e5:29:88:
         52:3d:f1:89:0a:1d:43:bc:48:f3:31:54:fe:f1:34:69:20:0b:
         0e:a4:23:02:f3:4d:31:3c:21:22:c1:62:3f:8e:fd:4f:11:e9:
         89:8c:eb:94:01:1e:65:cf:4b:91:b3:c8:1c:e7:b2:93:dc:af:
         6d:93:fe:b0:d7:7c:da:7c:60:68:47:03:cf:b2:36:d3:f4:b9:
         d7:01:e7:c3:e8:23:ab:0b:b5:98:1b:d8:37:79:9b:4d:f5:72:
         5c:0c:cc:7d:91:8b:dd:a0:fe:97:80:a8:18:0f:6b:02:42:38:
         0f:69:b1:ac:7c:1d:ab:e3:6d:18:51:38:52:7c:3c:c9:c4:ab:
         72:d1:ac:7f:ff:b2:64:ef:32:cf:2b:04:66:06:9b:51:22:93:
         bd:d7:49:8a:79:05:22:9a:86:f0:60:41:f1:75:39:c7:bd:bc:
         f0:7c:7e:d4:92:56:4c:cc:89:15:e6:82:53:75:79:18:b6:35:
         88:7b:eb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:13 2026 by rpki-client