Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
File:                     JGDLdNAZgkw0siOu1McJqFeyxgY.mft (raw, json)
Hash identifier:          xOA8KoxFMMyH0u7nCS1LqwyKEn2OyvBHYYHE4TKYffU=
Subject key identifier:   B6:9A:DB:74:14:1A:04:EF:7A:AC:EF:02:5E:73:6E:B6:8C:B3:1A:9B
Authority key identifier: 24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
Certificate issuer:       /CN=2460cb74d019824c34b223aed4c709a857b2c606
Certificate serial:       019D29617DFC0A990372DBF7E8B421F211E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
Manifest number:          0705
Signing time:             Thu 26 Mar 2026 09:02:28 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:28 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:28 +0000
Files and hashes:         1: HQKEQGzJ8V_M4AMZFBCGwcAArQQ.roa (hash: TmKJc0/C+P9Rrj+HXzJL2J/O3BBKY350jNbCd9YcASM=)
                          2: JGDLdNAZgkw0siOu1McJqFeyxgY.crl (hash: IDsSDNom3mRr9PhYd5c15YHIPa8rJ/gZ21oj2vVukWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:7d:fc:0a:99:03:72:db:f7:e8:b4:21:f2:11:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2460cb74d019824c34b223aed4c709a857b2c606
        Validity
            Not Before: Mar 26 09:02:28 2026 GMT
            Not After : Mar 27 09:02:28 2026 GMT
        Subject: CN=b69adb74141a04ef7aacef025e736eb68cb31a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:f0:33:83:98:6a:3d:fc:03:2a:1c:fc:f8:
                    18:5c:78:43:fb:2e:18:bf:01:f1:e9:73:b6:18:56:
                    72:38:02:c0:8b:8b:b3:08:f1:5e:a3:d1:01:21:c5:
                    7f:ae:8b:05:9c:43:3f:6f:e8:0b:74:9d:9a:6e:ea:
                    be:4c:16:8e:21:9c:fc:1d:4b:7b:25:f5:89:56:72:
                    4e:54:65:1c:59:4a:55:fe:cb:9c:a6:c6:d4:a7:98:
                    d7:cf:79:9e:55:3a:2d:af:a4:15:38:de:23:44:36:
                    e4:37:28:78:07:1b:d6:c7:e8:c1:d9:22:51:08:59:
                    fc:ef:f4:39:6b:90:df:c2:79:c5:e8:e5:7d:57:fb:
                    55:bc:38:05:12:9f:2f:b3:56:c1:51:f2:60:97:64:
                    69:66:9a:c0:35:9a:95:b5:f1:58:57:ee:2d:50:e3:
                    44:48:5e:c5:f6:22:11:93:dd:18:b4:86:0a:12:9d:
                    42:45:44:46:45:00:4a:3d:fd:49:30:60:b3:0b:dd:
                    35:19:2e:3f:25:7b:1e:14:42:06:c8:b6:6f:78:d2:
                    2a:32:d8:33:08:a2:9a:62:e8:18:99:e9:af:66:9f:
                    a0:1d:1f:f9:d8:e4:79:05:20:32:c5:b9:43:6b:5a:
                    45:5a:8f:0d:72:90:14:7e:d0:78:46:63:54:11:46:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9A:DB:74:14:1A:04:EF:7A:AC:EF:02:5E:73:6E:B6:8C:B3:1A:9B
            X509v3 Authority Key Identifier:
                keyid:24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:7c:ea:3e:08:cd:a9:e9:c5:f6:92:e2:b9:4c:fe:c0:7d:5b:
         98:bf:43:37:03:da:26:58:33:35:d9:a7:56:6b:fb:ad:07:68:
         ad:c2:6a:d2:55:c6:b7:52:6e:05:e3:35:3d:a0:03:67:6a:7f:
         9b:c6:c8:46:72:03:81:2c:6a:5e:aa:1a:5d:c2:dd:c3:bf:32:
         51:31:10:12:9b:46:cb:e9:21:f3:e6:04:67:03:f0:d4:e5:5e:
         9e:dc:f4:71:5f:8a:4b:4b:63:d3:e0:3a:ac:8e:95:c5:b8:e5:
         6c:6a:9a:78:79:1c:7d:3b:a9:98:83:5e:17:cb:9c:c0:29:61:
         a2:88:d7:08:33:ac:a0:b3:1d:77:8e:7f:f6:2a:d5:27:c8:d8:
         78:65:f2:fd:c0:76:fa:cb:31:28:a4:b8:c8:9c:22:2d:a7:0f:
         09:40:b1:45:a5:3f:5c:1d:c4:ef:41:33:a9:d4:27:e4:87:e6:
         52:61:39:95:14:5b:e2:2d:94:0e:a1:5a:33:65:05:cc:1d:b9:
         03:1c:c6:30:a0:11:86:5a:e2:e6:36:cb:60:7f:f7:3a:d3:63:
         5a:b8:2f:49:75:9f:30:ef:e9:9c:88:c7:46:ee:e0:3c:c6:fd:
         c0:19:15:e3:94:8c:76:94:65:a7:88:9f:70:21:5c:87:5d:cf:
         5b:2e:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:51 2026 by rpki-client