Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
File:                     jo6Xer76Kh-ZXonJR_79Rja3lhw.mft (raw, json)
Hash identifier:          /aYPlBq0g3FNuTXVVLwyIwRB7Nz4R2GIiudIntw1qMI=
Subject key identifier:   45:9E:62:4B:ED:1A:90:68:A7:06:71:16:76:56:29:E7:48:67:A1:5A
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Certificate issuer:       /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial:       019D28BB1DDB6E95F1D825FBF0D86CCD48DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
Manifest number:          01AF
Signing time:             Thu 26 Mar 2026 06:00:44 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:44 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:44 +0000
Files and hashes:         1: 85WCcONItIMRuSMaOxRM44ohzIg.roa (hash: /TIQDAXeA50QelIx61Q5b/Z25D6OyfrLynQ4VaudkRU=)
                          2: eJxTub2nURvlz2j40yWd1xTSiqE.roa (hash: QGoAgA9UwHv2M3PrJjmaC35k17I6lqvqOagw7/jlHdU=)
                          3: jo6Xer76Kh-ZXonJR_79Rja3lhw.crl (hash: 4wEEXHtE72wksT98hhETARjlP5o7JWO/oBIK6fWEfPQ=)
                          4: rA6VNsR6jroVmSktiBRw1rIhqrU.roa (hash: wXe4q97uD3eOmJG7Qhu7qR3Oh0Q+VQy4RtGB+wIv/0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:1d:db:6e:95:f1:d8:25:fb:f0:d8:6c:cd:48:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
        Validity
            Not Before: Mar 26 06:00:44 2026 GMT
            Not After : Mar 27 06:00:44 2026 GMT
        Subject: CN=459e624bed1a9068a7067116765629e74867a15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:51:0a:64:d6:77:2f:d5:0e:5d:36:1b:a0:
                    19:4a:2c:23:3c:4a:41:95:49:98:1c:3e:d0:38:21:
                    58:0f:ff:cb:9d:4a:3b:59:ec:35:a0:87:e1:05:30:
                    5b:3b:66:9d:3e:b7:ac:7a:cf:6f:c7:d7:64:ab:f1:
                    92:e0:3b:a2:67:5c:64:3e:df:e7:18:ad:f3:cf:d3:
                    b2:97:6e:30:3b:aa:f9:68:fe:e8:01:3e:33:c2:43:
                    d0:70:f8:76:fe:94:91:f4:13:76:c9:33:f7:43:92:
                    8f:b3:e2:04:d9:cb:ea:0a:42:5d:4f:0a:83:f9:4b:
                    b5:40:fa:d9:8b:3e:cc:3f:dc:72:79:fe:d8:bc:0b:
                    b0:5e:3e:74:a2:15:df:92:ec:ec:cb:e3:32:be:64:
                    d6:02:06:0e:40:f4:6e:f0:af:c0:07:6d:f5:a6:19:
                    72:cf:92:69:0d:f2:f8:a9:6c:a3:1c:8d:95:ae:4d:
                    e0:bb:39:e0:fd:3d:b3:f3:f2:33:98:ab:d7:db:64:
                    1a:23:e9:c1:e7:8c:71:6b:35:b6:b6:c3:aa:95:35:
                    a0:98:83:2c:3f:78:f8:b3:75:e6:51:ae:bf:12:02:
                    73:b4:d5:ca:3b:f2:5a:33:12:5d:5c:ee:4a:63:b9:
                    74:5e:16:95:e8:c1:c0:2b:dc:1f:e2:4d:41:b4:4c:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9E:62:4B:ED:1A:90:68:A7:06:71:16:76:56:29:E7:48:67:A1:5A
            X509v3 Authority Key Identifier:
                keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e7:02:4f:f4:66:38:4f:6c:30:c2:65:f0:b1:84:a1:0d:67:
         32:9c:eb:5f:49:42:fd:5b:56:65:3d:44:f8:2a:d7:ad:c0:1b:
         b6:a7:22:67:ee:4e:9a:19:15:29:25:a2:ee:82:b8:28:04:f4:
         c5:ce:e8:c7:37:86:12:83:4e:c8:66:5a:8f:c0:2f:d3:f4:eb:
         a4:c9:0a:71:8b:ec:0d:c9:d6:e0:a6:ac:6a:47:db:8e:e8:18:
         a2:d3:1d:c9:50:9e:04:fd:68:1d:07:a8:4e:ab:4f:30:67:66:
         ab:81:31:e3:d5:07:88:7c:ce:6a:c7:db:6f:36:b1:56:51:b5:
         86:c0:05:64:47:39:75:75:22:d4:56:42:dc:3e:14:b1:77:9e:
         49:86:34:cc:d9:a5:ca:09:56:50:7d:01:21:b3:23:64:33:77:
         0d:ae:ac:ba:b0:f2:3f:e9:59:53:73:44:c6:86:5a:c0:6e:ae:
         f2:4f:44:cf:80:20:75:ec:0e:24:fb:c8:b4:0f:68:44:16:a3:
         08:fc:90:67:7b:a3:6a:35:ba:ae:52:d7:97:9f:92:6d:ad:c5:
         2d:0c:2e:93:11:c7:00:a4:e6:81:66:2d:23:b8:31:ff:17:8f:
         9c:04:10:ab:5a:d5:e8:25:e5:9f:f1:48:0a:0c:00:9f:50:2f:
         80:1f:b5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:43 2026 by rpki-client