Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
File:                     jqJrRYrUHUfSYadtjF3A_I0aniw.mft (raw, json)
Hash identifier:          ge8kVTy2XwVoNWe2bJ+PXzy+l/fYIhayIoEV1JqJ+6w=
Subject key identifier:   94:B2:65:7B:FC:94:23:DB:2D:E7:43:1B:9E:83:DA:3C:BB:76:DB:EC
Authority key identifier: 8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
Certificate issuer:       /CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Certificate serial:       019D27DFFF0051F7F90FB30029B2BE960AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
Manifest number:          0938
Signing time:             Thu 26 Mar 2026 02:01:24 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:24 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:24 +0000
Files and hashes:         1: jqJrRYrUHUfSYadtjF3A_I0aniw.crl (hash: nl6KBIzyeg78HvZb0b+D5Kp9JNtAdfeuyXWPMxobubs=)
                          2: qRtuA-5EfGUFnhwE-Pb-sLFmerA.roa (hash: 2hrxhrdyC+UK6nU6rXyVs1O1PLBxtIQuQuyR5GWUyCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:ff:00:51:f7:f9:0f:b3:00:29:b2:be:96:0a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
        Validity
            Not Before: Mar 26 02:01:24 2026 GMT
            Not After : Mar 27 02:01:24 2026 GMT
        Subject: CN=94b2657bfc9423db2de7431b9e83da3cbb76dbec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9a:cf:7b:b1:4b:3a:53:fc:ef:0c:a3:5f:e0:
                    29:fd:27:78:5b:fb:95:f0:c6:9e:0d:a5:1d:6d:2d:
                    92:36:96:a0:96:d7:7e:53:0a:45:1e:36:6e:bb:fe:
                    8d:2f:63:b9:7b:61:d9:44:95:07:13:1b:b0:6b:b6:
                    04:f8:43:43:c4:5d:a5:42:d4:77:b1:10:0b:18:f3:
                    01:9e:43:ca:a1:cc:20:bc:71:30:32:9b:ad:84:23:
                    2c:d2:49:3e:c8:38:f9:98:9e:0d:9c:25:9a:86:27:
                    ce:9e:8d:78:70:16:38:47:8f:3e:c4:56:96:13:aa:
                    e5:b8:6a:3d:b1:c8:c6:65:3d:e7:ab:f0:42:ba:a4:
                    51:8f:0f:ee:60:38:19:dd:29:1b:fe:a3:88:c6:87:
                    9e:03:b8:b0:6d:72:d7:3e:94:63:b4:5b:fd:c6:59:
                    8f:71:8b:ad:3e:75:5d:f2:66:11:09:5b:25:b8:6c:
                    12:26:31:cb:77:25:64:e7:13:2a:51:9c:7d:34:d0:
                    b7:0f:b3:a8:08:45:7d:f4:a6:44:20:cf:2b:ab:37:
                    e4:d1:c1:ac:f8:b2:39:3d:01:7f:3d:8c:cd:98:54:
                    42:fc:70:e2:f2:57:3f:06:5b:c7:5a:87:94:30:49:
                    be:e6:a3:40:17:ff:f5:35:8b:56:8d:61:c4:86:a5:
                    9e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B2:65:7B:FC:94:23:DB:2D:E7:43:1B:9E:83:DA:3C:BB:76:DB:EC
            X509v3 Authority Key Identifier:
                keyid:8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:fb:17:76:13:64:5b:cb:3d:03:02:6f:0e:df:bf:05:dd:f5:
         ab:24:39:a1:fe:82:b3:fd:b5:c6:8c:8e:6d:bb:24:65:66:b8:
         ad:6a:87:71:b9:56:58:6b:3e:e7:a2:8d:52:4c:af:b1:7f:d7:
         ef:cb:5f:78:82:e0:b1:00:0c:c2:df:3b:00:7d:fd:88:36:1d:
         c4:6d:55:97:f9:dd:39:fe:10:9f:3e:f2:f9:98:1e:d9:ee:d5:
         b5:a5:b9:c8:1d:fe:2a:a0:cd:08:d7:90:2d:ea:85:56:07:b6:
         54:4f:51:75:8a:91:8b:2e:35:a3:3b:89:d0:60:93:ec:ad:a4:
         f8:e9:03:bb:13:06:c8:f4:54:fc:e2:ac:29:d3:19:c8:72:55:
         89:d7:a7:08:38:b9:da:1b:1e:e4:1e:79:e6:fe:73:4d:01:46:
         37:cd:e6:41:f2:c2:a3:2a:0b:8b:ad:22:56:82:25:d9:fe:76:
         f3:14:be:ed:5c:d6:49:1e:b6:7c:98:bd:70:a6:cb:46:0e:f7:
         11:37:55:fd:1e:73:da:8d:50:d8:4f:c9:52:dd:92:d5:7d:d4:
         82:ec:89:77:d8:bb:eb:68:71:d4:4f:e0:f7:96:88:32:09:68:
         3d:d6:b6:93:dc:7f:0e:48:12:e4:44:94:54:eb:f0:cd:4d:9d:
         21:ad:18:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3/8AUff5D7MAKbK+lgr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYTI2YjQ1OGFkNDFkNDdkMjYxYTc2ZDhjNWRjMGZjOGQx
YTllMmMwHhcNMjYwMzI2MDIwMTI0WhcNMjYwMzI3MDIwMTI0WjAzMTEwLwYDVQQD
Eyg5NGIyNjU3YmZjOTQyM2RiMmRlNzQzMWI5ZTgzZGEzY2JiNzZkYmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0prPe7FLOlP87wyjX+Ap/Sd4W/uV
8MaeDaUdbS2SNpagltd+UwpFHjZuu/6NL2O5e2HZRJUHExuwa7YE+ENDxF2lQtR3
sRALGPMBnkPKocwgvHEwMputhCMs0kk+yDj5mJ4NnCWahifOno14cBY4R48+xFaW
E6rluGo9scjGZT3nq/BCuqRRjw/uYDgZ3Skb/qOIxoeeA7iwbXLXPpRjtFv9xlmP
cYutPnVd8mYRCVsluGwSJjHLdyVk5xMqUZx9NNC3D7OoCEV99KZEIM8rqzfk0cGs
+LI5PQF/PYzNmFRC/HDi8lc/BlvHWoeUMEm+5qNAF//1NYtWjWHEhqWeiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSyZXv8lCPbLedDG56D2jy7dtvsMB8GA1UdIwQY
MBaAFI6ia0WK1B1H0mGnbYxdwPyNGp4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanFKclJZclVIVWZTWWFkdGpGM0FfSTBhbml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kZGNiYjktOGZkMi00ZGMxLWJiZDYt
Mjg5MDA1NTkxNGM1LzEvanFKclJZclVIVWZTWWFkdGpGM0FfSTBhbml3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9kZGNiYjktOGZkMi00ZGMxLWJiZDYtMjg5MDA1NTkxNGM1
LzEvanFKclJZclVIVWZTWWFkdGpGM0FfSTBhbml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvsXdhNk
W8s9AwJvDt+/Bd31qyQ5of6Cs/21xoyObbskZWa4rWqHcblWWGs+56KNUkyvsX/X
78tfeILgsQAMwt87AH39iDYdxG1Vl/ndOf4Qnz7y+Zge2e7VtaW5yB3+KqDNCNeQ
LeqFVge2VE9RdYqRiy41ozuJ0GCT7K2k+OkDuxMGyPRU/OKsKdMZyHJVidenCDi5
2hse5B555v5zTQFGN83mQfLCoyoLi60iVoIl2f528xS+7VzWSR62fJi9cKbLRg73
ETdV/R5z2o1Q2E/JUt2S1X3UguyJd9i762hx1E/g95aIMgloPda2k9x/DkgS5ESU
VOvwzU2dIa0YOw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:22 2026 by rpki-client