Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
File:                     jVqxQkxBKz-_Tvrprh5o42wr7oE.mft (raw, json)
Hash identifier:          jjntbF65YAu1J/nzcxO9XgUxAoUT7MtIxgkxdiBaWyk=
Subject key identifier:   73:71:8F:35:53:AF:5F:B9:FD:BA:D3:6A:60:A3:22:C0:E3:BB:1D:5D
Authority key identifier: 8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81
Certificate issuer:       /CN=8d5ab1424c412b3fbf4efae9ae1e68e36c2bee81
Certificate serial:       019D26282A95F1BE59C956800C07BC675F21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
Manifest number:          01EE
Signing time:             Wed 25 Mar 2026 18:00:59 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:59 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:59 +0000
Files and hashes:         1: jVqxQkxBKz-_Tvrprh5o42wr7oE.crl (hash: pk4CZOzblAHhisjtCrBM9iANK2nclO/hj1R32Q3fS0Y=)
                          2: p4hBn6CYtn1VKDaiKsyhOMqHgsQ.roa (hash: haUohiyH5mbkoLGOMq3EZCD2dc1b/l0VJe9Q5+fs1Ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:2a:95:f1:be:59:c9:56:80:0c:07:bc:67:5f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d5ab1424c412b3fbf4efae9ae1e68e36c2bee81
        Validity
            Not Before: Mar 25 18:00:59 2026 GMT
            Not After : Mar 26 18:00:59 2026 GMT
        Subject: CN=73718f3553af5fb9fdbad36a60a322c0e3bb1d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:98:34:f4:96:1a:55:d0:55:e6:ee:2e:d7:
                    73:d8:6a:19:c1:83:f0:7c:4d:c1:e3:2a:6e:f6:b0:
                    a5:87:26:c8:ef:a9:b7:f7:51:89:b7:d9:13:38:74:
                    da:ef:af:3e:89:01:f3:93:e2:a1:f3:95:20:e8:57:
                    5d:ab:b2:bd:9f:66:c2:3f:70:55:74:0e:05:b7:2f:
                    75:2a:14:c2:04:68:57:b1:85:43:e4:85:44:f3:00:
                    ce:e6:0c:42:26:0c:58:83:1c:f5:ef:60:84:80:93:
                    90:7b:73:e0:10:01:8b:ef:5b:2a:5a:91:c9:69:31:
                    81:36:2f:20:55:ee:99:14:c9:29:78:72:0f:c2:84:
                    4a:51:67:d3:3d:ac:cc:d2:57:de:0b:3c:45:29:93:
                    17:b3:73:d2:ad:7c:4f:2f:3f:2c:1d:10:12:87:b1:
                    15:56:98:3b:91:21:55:82:a4:23:90:91:32:ca:30:
                    fe:dc:4a:4c:03:bb:01:20:97:c1:50:6c:81:fc:8c:
                    7a:13:5f:df:2c:59:0b:8c:3c:8f:70:4e:7b:1a:67:
                    58:2a:82:16:35:b9:d5:64:21:4d:f2:7a:f3:3f:29:
                    d5:4a:65:ef:7c:08:66:28:05:e6:e3:58:b1:8a:2e:
                    46:d8:2d:8a:42:cf:1f:12:25:5b:ff:b8:4f:76:f0:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:71:8F:35:53:AF:5F:B9:FD:BA:D3:6A:60:A3:22:C0:E3:BB:1D:5D
            X509v3 Authority Key Identifier:
                keyid:8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:2c:98:00:47:00:cd:c3:4c:4b:7d:44:e4:f2:00:53:05:e0:
         d8:5b:4c:25:b6:7d:a1:20:ea:c1:88:38:59:9f:9d:7d:a6:c1:
         86:3f:20:25:68:82:a1:ef:37:6d:25:6a:a3:9a:8a:98:9b:82:
         d8:e4:3a:59:37:db:26:81:00:8c:a8:b3:ea:17:89:5a:8f:83:
         4c:49:83:c6:f7:6f:72:15:e3:dc:11:31:c6:ec:3e:b3:8b:db:
         a6:e5:cc:74:a4:68:c1:cd:8e:49:a1:e6:e6:2d:5c:2f:4b:a5:
         68:99:f9:f6:47:2f:17:c5:44:c8:16:72:68:96:27:b0:54:53:
         5a:71:6b:24:9b:84:48:6e:9e:1f:6c:79:f0:95:96:f6:0b:7e:
         13:7a:55:ce:69:86:87:ce:c9:fc:45:61:83:82:fb:2b:3d:d2:
         59:f3:0f:92:23:e1:f8:9d:5f:24:0c:2b:f5:22:81:2a:53:12:
         54:93:05:b8:b9:29:96:14:bb:b1:14:6f:42:ac:1e:09:a7:ce:
         2c:a1:28:24:87:37:97:b9:9c:cb:61:20:52:72:79:9f:4f:f2:
         58:75:29:db:d1:14:31:9a:a1:24:ec:40:71:11:4b:a4:f4:bc:
         29:72:2b:47:20:83:9a:fd:fd:37:ad:e7:61:50:25:5c:03:bf:
         23:61:ae:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKCqV8b5ZyVaADAe8Z18hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNWFiMTQyNGM0MTJiM2ZiZjRlZmFlOWFlMWU2OGUzNmMy
YmVlODEwHhcNMjYwMzI1MTgwMDU5WhcNMjYwMzI2MTgwMDU5WjAzMTEwLwYDVQQD
Eyg3MzcxOGYzNTUzYWY1ZmI5ZmRiYWQzNmE2MGEzMjJjMGUzYmIxZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKuYNPSWGlXQVebuLtdz2GoZwYPw
fE3B4ypu9rClhybI76m391GJt9kTOHTa768+iQHzk+Kh85Ug6Fddq7K9n2bCP3BV
dA4Fty91KhTCBGhXsYVD5IVE8wDO5gxCJgxYgxz172CEgJOQe3PgEAGL71sqWpHJ
aTGBNi8gVe6ZFMkpeHIPwoRKUWfTPazM0lfeCzxFKZMXs3PSrXxPLz8sHRASh7EV
Vpg7kSFVgqQjkJEyyjD+3EpMA7sBIJfBUGyB/Ix6E1/fLFkLjDyPcE57GmdYKoIW
NbnVZCFN8nrzPynVSmXvfAhmKAXm41ixii5G2C2KQs8fEiVb/7hPdvAViwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNxjzVTr1+5/brTamCjIsDjux1dMB8GA1UdIwQY
MBaAFI1asUJMQSs/v0766a4eaONsK+6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZxeFFreEJLei1fVHZycHJoNW80MndyN29FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85ZGRhZmQtMDM0Ni00OWExLWFjM2Qt
ZjEwMDJmNTQ4NjE1LzEvalZxeFFreEJLei1fVHZycHJoNW80MndyN29FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85ZGRhZmQtMDM0Ni00OWExLWFjM2QtZjEwMDJmNTQ4NjE1
LzEvalZxeFFreEJLei1fVHZycHJoNW80MndyN29FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSyYAEcA
zcNMS31E5PIAUwXg2FtMJbZ9oSDqwYg4WZ+dfabBhj8gJWiCoe83bSVqo5qKmJuC
2OQ6WTfbJoEAjKiz6heJWo+DTEmDxvdvchXj3BExxuw+s4vbpuXMdKRowc2OSaHm
5i1cL0ulaJn59kcvF8VEyBZyaJYnsFRTWnFrJJuESG6eH2x58JWW9gt+E3pVzmmG
h87J/EVhg4L7Kz3SWfMPkiPh+J1fJAwr9SKBKlMSVJMFuLkplhS7sRRvQqweCafO
LKEoJIc3l7mcy2EgUnJ5n0/yWHUp29EUMZqhJOxAcRFLpPS8KXIrRyCDmv39N63n
YVAlXAO/I2Guew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:38 2026 by rpki-client