Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft
File:                     Jjw1B3YMW4KVGjB875MrCk02s2M.mft (raw, json)
Hash identifier:          hcibg0NoIpn0MakQi01aXbDSXlM3TQ1ZWeKLEFokaFA=
Subject key identifier:   95:72:84:99:C8:BC:88:FD:F8:D8:AA:3F:01:63:1B:FE:DD:85:CF:88
Authority key identifier: 26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63
Certificate issuer:       /CN=263c3507760c5b82951a307cef932b0a4d36b363
Certificate serial:       019D28BB4AA77D52671B1127B3D88C85A7A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft
Manifest number:          12F7
Signing time:             Thu 26 Mar 2026 06:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:55 +0000
Files and hashes:         1: Jjw1B3YMW4KVGjB875MrCk02s2M.crl (hash: 6/JNc6dreS+vxmRYFuxtMATv1TCjxAeTUVmFVaAK57Y=)
                          2: x8mL-vw9v4JqanUK5g21jNq-H9s.roa (hash: Z0/c3iPwhP/QP58XNi4FVRIn4S8zP1M0081P8wp+joM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:4a:a7:7d:52:67:1b:11:27:b3:d8:8c:85:a7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=263c3507760c5b82951a307cef932b0a4d36b363
        Validity
            Not Before: Mar 26 06:00:55 2026 GMT
            Not After : Mar 27 06:00:55 2026 GMT
        Subject: CN=95728499c8bc88fdf8d8aa3f01631bfedd85cf88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:bc:8f:bb:01:a7:40:3c:26:f7:ad:1d:53:
                    cc:10:fb:a0:f1:d8:51:e6:d5:68:56:48:58:b8:c0:
                    08:66:94:32:c8:c0:b7:bb:35:ce:80:99:82:83:c9:
                    55:ce:2a:75:e7:1e:d0:43:64:e3:8b:f4:89:19:81:
                    ba:90:84:8f:e5:e1:f5:c6:b0:b3:80:ac:f4:4e:eb:
                    58:82:10:ef:4c:a4:e9:ea:f0:64:d0:4e:5f:47:80:
                    cf:5e:21:75:12:2e:38:0a:6d:da:bc:04:cf:04:f7:
                    c2:41:0e:10:bc:15:f1:ed:56:45:ee:96:02:8f:9d:
                    f6:36:1f:c4:9f:a5:94:58:d1:22:95:0b:1a:92:66:
                    ac:92:7e:7d:b9:6a:45:c3:5f:86:5e:64:0b:e2:7a:
                    93:ea:6c:e4:6a:bc:22:a2:6b:98:bc:76:a5:1f:ae:
                    e8:be:54:3c:8f:61:f7:37:ae:4d:c7:94:a8:ee:ef:
                    91:6c:9f:c5:38:ee:40:6f:9e:ad:03:00:0e:77:be:
                    ce:cb:20:fe:c8:84:b6:4d:d3:41:d4:9f:82:19:2d:
                    cf:45:44:cf:4f:3f:f6:bf:52:bb:33:39:11:ef:e3:
                    a4:38:a2:56:66:7b:68:5d:a6:1f:fd:6a:2d:ab:95:
                    ea:10:ea:fb:d4:b2:92:db:c9:39:97:5c:4e:eb:76:
                    68:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:72:84:99:C8:BC:88:FD:F8:D8:AA:3F:01:63:1B:FE:DD:85:CF:88
            X509v3 Authority Key Identifier:
                keyid:26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:cd:a1:39:6e:10:37:5e:2d:5f:ae:80:57:51:7d:95:9f:ea:
         77:6c:f7:ab:19:3b:81:d1:db:a6:7c:6c:22:6c:e8:cf:de:c2:
         77:20:50:32:43:3f:0a:fb:bd:58:69:cd:1a:12:d0:f1:c1:08:
         5d:20:68:59:4f:ca:da:50:f9:85:4b:90:47:10:f8:6b:3b:27:
         e8:c6:21:14:8a:65:af:a0:e3:b8:5e:97:d9:d6:f3:d2:17:7a:
         4d:5c:d0:f1:79:24:b8:d3:2d:b5:e3:4e:9c:30:99:11:46:ea:
         6d:1c:ee:05:e4:b1:ed:50:47:14:78:c5:62:af:93:a5:00:d4:
         5a:09:81:4b:f2:b5:48:71:45:50:1e:2a:77:d5:3f:74:16:7b:
         94:54:97:03:00:8d:b2:18:e6:0c:1c:7c:ef:f2:0f:48:66:b8:
         f2:23:ef:33:fc:8a:31:c0:56:7c:39:3e:1b:fa:eb:e9:32:a3:
         62:67:42:89:ef:bd:00:b5:2f:52:b8:a5:9b:3f:e0:fa:5d:72:
         ed:f3:ab:9e:e4:ba:7f:76:e1:3c:2f:9b:c3:7c:9f:e9:f0:06:
         6e:44:48:cb:6f:ae:4c:3e:36:08:78:0b:b6:c4:0f:8b:41:62:
         fe:ae:bc:13:a3:8e:db:2b:5e:e7:78:49:7d:b8:d5:9f:6e:f0:
         c0:df:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:10 2026 by rpki-client