Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
File:                     mjk-8WAn_AO8XARf-SidS7t_82Q.mft (raw, json)
Hash identifier:          y0nU69bu7uaMDvfMqmLIxfK00pos5O0yd18YXd6gENw=
Subject key identifier:   BC:78:AF:07:99:17:15:DB:40:0A:24:05:84:64:21:72:C9:E8:6B:56
Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
Certificate issuer:       /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Certificate serial:       019D29CE0A5C54642442009A07B21940B24A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
Manifest number:          14D1
Signing time:             Thu 26 Mar 2026 11:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:01 +0000
Files and hashes:         1: Vb0iGqrAQPlQmNGSdhQn2Ex6BEo.roa (hash: Etr28FcrasjMYjMvyTTIdEuz44C1hmgNsxU1F56W2gs=)
                          2: mjk-8WAn_AO8XARf-SidS7t_82Q.crl (hash: BIl3cYc1Ut5sk0HTZFgVQ+Gyog3af/gKFGkCB66HyaM=)
                          3: rc_UgEQuERXAcFu0ryqIqFlvKe8.roa (hash: dFsLxVGQ4UAiyb+zv8JS9ufJDb8KzppW9TIIyizF/Sc=)
                          4: yUv2RfMvy9R3pN_vex3UtFkR-qY.roa (hash: lPAN24qwmWZ1IkZzOetMyqpr4pK3soxRCSbkbdcczvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:0a:5c:54:64:24:42:00:9a:07:b2:19:40:b2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
        Validity
            Not Before: Mar 26 11:01:01 2026 GMT
            Not After : Mar 27 11:01:01 2026 GMT
        Subject: CN=bc78af07991715db400a240584642172c9e86b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:97:a3:c6:ea:bf:2c:2b:35:6c:92:dc:52:
                    6b:bd:01:ea:ec:3c:15:45:69:0d:12:e2:6f:9d:18:
                    7a:d3:5f:06:e9:ff:ab:55:df:44:e3:e5:72:5d:4d:
                    1b:07:61:3b:f8:7e:63:ba:e1:cb:12:ed:e2:7a:99:
                    c7:15:cc:57:be:14:86:1b:ab:84:53:8a:dc:32:11:
                    15:49:3d:31:52:52:94:dd:79:00:4f:19:2f:3d:7c:
                    81:0e:22:3b:26:16:8b:15:72:7c:37:2c:4a:cb:0a:
                    12:7a:a4:0a:65:55:c9:e8:57:ae:0c:4e:99:8c:8d:
                    e8:ff:60:13:97:36:9f:5f:db:3d:db:86:a0:f1:2c:
                    66:95:59:3c:74:8b:c3:15:a4:a9:7a:f9:fc:da:17:
                    ba:bd:15:86:c4:50:13:14:c9:57:0d:d1:24:60:bd:
                    92:36:19:bb:d5:bf:20:77:26:b5:90:8d:c7:f8:01:
                    af:1a:12:54:cd:08:e4:8f:d5:50:6e:81:93:74:c0:
                    7c:ad:09:ed:27:35:79:c3:da:24:1d:71:c9:a5:1f:
                    05:ca:46:4f:eb:b4:15:91:bf:25:cd:1e:95:b2:0d:
                    37:43:d7:b7:5e:ee:c9:19:8f:e4:cd:2b:55:a6:e8:
                    f2:5f:ad:d1:c0:29:61:02:d4:25:40:5e:37:15:4c:
                    55:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:78:AF:07:99:17:15:DB:40:0A:24:05:84:64:21:72:C9:E8:6B:56
            X509v3 Authority Key Identifier:
                keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:e3:c1:82:58:cf:36:a7:46:ec:cc:0f:de:a4:56:2c:9d:0e:
         62:02:c8:aa:09:a4:32:c0:31:10:b8:2c:d1:79:4c:7c:67:ed:
         7a:e3:b6:3d:09:de:6a:fa:d4:86:5f:33:44:b5:42:c4:76:50:
         0c:9d:b2:1f:86:93:61:fd:47:26:61:b1:1e:88:8e:f5:1b:bb:
         87:43:ff:3c:58:84:b8:5f:51:06:96:c2:ef:f7:a0:b6:be:4f:
         2f:1f:e9:86:7d:4e:cf:42:2b:93:d3:58:f1:af:94:87:0c:22:
         e6:cf:85:25:91:b9:c6:d9:1f:56:df:8d:51:9c:23:3c:08:f7:
         ef:be:4f:c3:27:7b:08:0e:94:ec:e1:bc:67:a1:e4:61:7f:4f:
         84:e3:3c:50:57:14:e2:bf:31:e2:bb:af:67:5e:aa:d0:72:11:
         68:31:5b:31:c3:91:f3:ae:ed:71:25:23:ce:42:5e:2f:15:0a:
         3b:cb:3f:a5:97:90:aa:33:57:78:6f:48:94:1f:31:c9:c0:d1:
         93:7b:79:4f:f5:48:e1:6e:1e:be:28:0c:bc:10:7f:fb:3b:36:
         ab:56:db:d5:b7:3a:01:36:dd:d1:f1:cc:e0:61:2b:6e:5a:4d:
         e7:e5:55:f1:56:78:e0:f5:d3:c6:5e:ec:d1:35:fc:7c:dd:89:
         af:6c:17:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzgpcVGQkQgCaB7IZQLJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMzkzZWYxNjAyN2ZjMDNiYzVjMDQ1ZmY5Mjg5ZDRiYmI3
ZmYzNjQwHhcNMjYwMzI2MTEwMTAxWhcNMjYwMzI3MTEwMTAxWjAzMTEwLwYDVQQD
EyhiYzc4YWYwNzk5MTcxNWRiNDAwYTI0MDU4NDY0MjE3MmM5ZTg2YjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS+Xo8bqvywrNWyS3FJrvQHq7DwV
RWkNEuJvnRh6018G6f+rVd9E4+VyXU0bB2E7+H5juuHLEu3iepnHFcxXvhSGG6uE
U4rcMhEVST0xUlKU3XkATxkvPXyBDiI7JhaLFXJ8NyxKywoSeqQKZVXJ6FeuDE6Z
jI3o/2ATlzafX9s924ag8SxmlVk8dIvDFaSpevn82he6vRWGxFATFMlXDdEkYL2S
Nhm71b8gdya1kI3H+AGvGhJUzQjkj9VQboGTdMB8rQntJzV5w9okHXHJpR8FykZP
67QVkb8lzR6Vsg03Q9e3Xu7JGY/kzStVpujyX63RwClhAtQlQF43FUxVrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLx4rweZFxXbQAokBYRkIXLJ6GtWMB8GA1UdIwQY
MBaAFJo5PvFgJ/wDvFwEX/konUu7f/NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgt
YWIyZDVlN2Q0YTdiLzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgtYWIyZDVlN2Q0YTdi
LzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvuPBgljP
NqdG7MwP3qRWLJ0OYgLIqgmkMsAxELgs0XlMfGfteuO2PQneavrUhl8zRLVCxHZQ
DJ2yH4aTYf1HJmGxHoiO9Ru7h0P/PFiEuF9RBpbC7/egtr5PLx/phn1Oz0Irk9NY
8a+Uhwwi5s+FJZG5xtkfVt+NUZwjPAj3775Pwyd7CA6U7OG8Z6HkYX9PhOM8UFcU
4r8x4ruvZ16q0HIRaDFbMcOR867tcSUjzkJeLxUKO8s/pZeQqjNXeG9IlB8xycDR
k3t5T/VI4W4evigMvBB/+zs2q1bb1bc6ATbd0fHM4GErblpN5+VV8VZ44PXTxl7s
0TX8fN2Jr2wXjQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:32 2026 by rpki-client