Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
File:                     jvZFdw0pFEAtbJW42vUff_4Sdys.mft (raw, json)
Hash identifier:          mcX5MwimhrM6FY3G0pzhmR1f+X14BIF26HCZjHN6i7s=
Subject key identifier:   63:BD:00:48:B3:72:6B:6A:BF:51:9A:EC:77:75:1A:34:6E:1E:30:7A
Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
Certificate issuer:       /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Certificate serial:       019D25836629B122A44F99DFF71DEF9D014F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
Manifest number:          0C72
Signing time:             Wed 25 Mar 2026 15:01:01 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:01 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:01 +0000
Files and hashes:         1: Ze7KRAUjPeqGh8cPqUx4LdDwghM.roa (hash: 9nj7uwXDpwi4IaoN4BLsfOwzpOwzS34nmfQiM2vUZE0=)
                          2: jvZFdw0pFEAtbJW42vUff_4Sdys.crl (hash: M/hmuZMtm7x5ShevIrS9+iiQ7fjwslLmqQdCYQ04KNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:66:29:b1:22:a4:4f:99:df:f7:1d:ef:9d:01:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
        Validity
            Not Before: Mar 25 15:01:01 2026 GMT
            Not After : Mar 26 15:01:01 2026 GMT
        Subject: CN=63bd0048b3726b6abf519aec77751a346e1e307a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:64:86:99:65:2c:d4:ea:70:ca:78:1f:ea:
                    d8:d6:28:3b:06:15:14:bd:1f:d6:51:7e:33:a2:84:
                    6d:39:a9:d2:16:49:9c:18:d1:79:10:84:f4:4d:1b:
                    d1:12:76:bd:10:56:41:7c:b5:ea:24:1f:de:ff:0d:
                    57:eb:67:8e:ef:b4:61:a1:b5:4b:1a:05:7b:1f:22:
                    dc:4a:a0:63:53:56:a0:e4:11:6a:52:b2:e5:47:41:
                    63:3e:48:a9:79:4c:67:23:fa:c8:18:a6:1a:49:a7:
                    83:7f:04:26:e2:5a:02:69:53:b2:a4:6e:91:5d:76:
                    dd:d4:c9:91:6d:62:19:b6:73:97:ee:88:7f:06:5d:
                    ec:59:17:7a:f9:c4:dd:8e:31:1b:fa:7e:d9:bd:81:
                    aa:29:0d:9f:91:98:97:e8:ab:c0:79:75:96:86:5d:
                    de:1b:48:a6:1b:e9:1e:ae:66:cd:f4:66:08:9b:9e:
                    e0:b6:0f:cb:9e:7e:d1:ad:b6:27:3e:4f:6f:fa:8d:
                    91:4f:29:6a:b7:07:6b:d8:10:2e:35:a9:f5:a8:0c:
                    39:39:c9:7e:9f:d6:eb:31:f8:b0:fa:af:8b:05:82:
                    26:65:46:5f:0a:de:83:a9:08:9a:f6:18:87:78:cb:
                    7e:ae:c1:18:f9:10:b7:e7:61:86:ca:c8:a0:25:e0:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BD:00:48:B3:72:6B:6A:BF:51:9A:EC:77:75:1A:34:6E:1E:30:7A
            X509v3 Authority Key Identifier:
                keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fe:06:71:70:9f:28:4e:eb:30:f4:ec:dc:1c:e7:d3:6b:50:
         49:5c:dc:09:4c:ae:7a:ce:ee:db:f8:49:75:c8:86:8e:05:40:
         57:42:4b:57:a0:3b:e8:16:c4:cb:99:15:46:81:86:ad:0d:cb:
         6c:74:ed:de:a0:13:e4:05:aa:a8:dd:89:74:4c:0c:da:25:c2:
         dc:b9:ef:79:6b:b8:88:87:37:24:56:98:45:21:16:7c:e0:40:
         9a:41:26:4f:2e:72:70:36:45:94:36:b7:b0:63:1d:ed:bf:98:
         9f:09:62:83:2b:38:d3:94:fc:98:52:53:77:15:15:39:00:05:
         5e:06:72:d2:c2:50:3a:76:e5:b5:6b:65:97:0b:3a:4e:16:86:
         6b:05:a3:0d:8e:e1:a6:d8:8f:7d:91:64:94:5a:58:1b:ae:8a:
         bb:f3:3d:71:29:fe:62:e9:80:d4:a0:8a:18:bf:30:7b:54:57:
         1a:9f:a0:24:dd:c3:33:47:ba:08:d4:5a:0d:fa:fd:0f:a8:95:
         39:db:cc:f9:f7:70:ee:40:f5:ab:1d:ca:7f:7e:b7:5a:1a:e5:
         66:26:e4:68:e6:7a:35:ea:1c:66:50:2c:b8:fd:31:de:71:87:
         44:a7:e9:5f:5f:cc:8c:1e:bc:9a:c3:a7:72:c8:dd:c4:66:53:
         32:c7:57:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:53:19 2026 by rpki-client