Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
File:                     JtOCk_Zp20i20L0QNq3972vT03U.mft (raw, json)
Hash identifier:          uzApsCFprWQFS77X43BsJY4vUDea72QkYlVUGCI4yRc=
Subject key identifier:   FA:6E:79:E3:60:5F:3D:FB:2D:3B:92:38:14:F9:2E:30:B2:F9:BC:CF
Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
Certificate issuer:       /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Certificate serial:       019D29290F3529294ADECF2078DDF8DE44C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 08:00:49 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:49 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:49 +0000
Files and hashes:         1: 8wb-NwIWx_2gv_9rr5Dl3p3Xqdc.roa (hash: 32Fi6nwUZX9CqosBIo6WurIihzlTBMG77RVVRRD5m4A=)
                          2: JtOCk_Zp20i20L0QNq3972vT03U.crl (hash: njrV5xjAMn22RtGvRILwjN1qRLREurczoFT23OUZNPo=)
                          3: OLaCsdQ4sg-u5_SUOVqiRzJngxw.roa (hash: LbFlyjzKtWZ1y7kJgj0oynVYxTM3x3eGRVvy4xZ47Q0=)
                          4: QYCJdzvA_R6ZOVcD5qshTwEZ9p8.roa (hash: y87bUDl5fpfIu0/tcrwXPFrdyosHyMwLLF9BcN/7EKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:0f:35:29:29:4a:de:cf:20:78:dd:f8:de:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
        Validity
            Not Before: Mar 26 08:00:49 2026 GMT
            Not After : Mar 27 08:00:49 2026 GMT
        Subject: CN=fa6e79e3605f3dfb2d3b923814f92e30b2f9bccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:80:bb:69:8f:ad:48:49:af:7a:ee:49:67:
                    6e:f7:5d:2a:a2:63:62:76:62:94:50:74:6b:28:3e:
                    c1:fe:25:61:6b:eb:92:93:49:cb:19:06:eb:0f:d0:
                    70:2b:33:e5:44:e4:ba:b6:51:47:46:b5:27:3f:ae:
                    d3:f7:77:e2:b9:60:05:6a:a6:8d:0d:78:02:b1:43:
                    b2:48:74:7a:da:8b:8f:4c:a1:17:f1:e6:db:1b:61:
                    7c:29:12:eb:1c:a0:8f:42:56:2b:a8:44:06:ea:26:
                    4c:2f:be:6e:31:dd:2e:b6:64:f9:2f:49:cc:89:42:
                    39:eb:f0:a5:b0:cb:a3:ec:a7:fb:b6:7f:89:41:8d:
                    a1:b5:3f:6e:a1:8a:76:1f:d1:02:64:ac:4d:06:c0:
                    f9:f6:63:f6:be:c5:2b:51:a8:a4:82:51:aa:ce:b6:
                    0e:50:11:09:de:00:03:70:1a:3d:c8:df:dc:93:35:
                    ff:a6:0b:f6:6a:f3:28:4c:1a:72:48:9c:ac:6c:be:
                    6e:28:cd:19:80:69:6d:0b:03:4e:1e:da:7b:4b:27:
                    0d:9c:7c:00:34:60:82:19:61:af:dd:b7:ec:53:0c:
                    79:dd:e5:29:29:6b:94:8d:65:9b:b3:ae:1d:a0:16:
                    f1:c5:50:62:b1:9f:dc:46:c2:dd:c8:a2:25:dd:97:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6E:79:E3:60:5F:3D:FB:2D:3B:92:38:14:F9:2E:30:B2:F9:BC:CF
            X509v3 Authority Key Identifier:
                keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a1:95:a0:51:e7:11:6c:b0:f2:17:d3:61:52:c1:fe:6b:49:
         78:b5:1f:60:07:a2:1d:b0:cd:de:4b:b0:74:14:1d:13:90:b0:
         8c:4e:53:74:4f:07:bd:9c:a6:2b:72:ae:07:6b:7a:f7:b2:a4:
         5c:8e:0e:03:3d:f4:a8:a1:e3:96:de:5d:d9:27:37:25:0a:e7:
         4c:c3:bf:9f:47:66:65:54:53:01:32:03:cd:76:ca:29:27:51:
         7a:5b:b6:98:14:ce:8a:bd:de:61:4a:04:61:85:2c:eb:b1:c5:
         b5:d3:74:57:5e:a7:e6:02:43:e8:e9:ac:ad:e1:42:9b:f2:c4:
         ce:ab:f7:61:59:41:4b:e3:34:74:ff:28:de:8b:cc:fb:30:19:
         60:09:e1:09:09:be:46:86:cf:a8:83:ad:42:78:21:04:a8:47:
         74:f3:b4:04:a0:ef:19:c9:26:5a:48:fa:26:a6:42:bb:0f:08:
         bc:7d:af:bf:5d:6a:d1:aa:c0:b7:9f:08:5e:c1:1a:de:8f:68:
         61:3c:f5:52:02:28:3e:b8:2d:f3:0e:65:31:9d:cc:09:b5:09:
         47:ea:50:fb:a7:49:a5:72:f8:c1:44:63:21:7e:79:0c:42:0a:
         f6:02:c2:50:37:5d:b7:b7:92:3e:6d:c0:f9:be:f9:6f:cf:7b:
         85:79:78:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:50 2026 by rpki-client