Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
File:                     tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft (raw, json)
Hash identifier:          FnvcuXXFvdvA06e92kN39X16N9P69O8zKRtJ3B8stZE=
Subject key identifier:   7E:C4:F1:CE:30:FA:6C:B4:49:AD:AE:B2:1E:3A:53:C3:BD:47:10:EE
Authority key identifier: B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
Certificate issuer:       /CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Certificate serial:       019D2583FFE56C90AFA97175E7515F085782
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
Manifest number:          0770
Signing time:             Wed 25 Mar 2026 15:01:40 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:40 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:40 +0000
Files and hashes:         1: QS-HbfHVwOboNvSjD7qE62Hr4KA.roa (hash: hPSMDrsX6eEkfCzcrrl0uCvcB1hd9Gv6m2p+Bfe7qjw=)
                          2: tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl (hash: qaQhxmREn9D7cvEjHI2yDQ7zpfydfRiJKkVoo3a6hGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:ff:e5:6c:90:af:a9:71:75:e7:51:5f:08:57:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
        Validity
            Not Before: Mar 25 15:01:40 2026 GMT
            Not After : Mar 26 15:01:40 2026 GMT
        Subject: CN=7ec4f1ce30fa6cb449adaeb21e3a53c3bd4710ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:6a:ec:0d:9a:92:33:c9:a4:37:7e:16:7f:
                    30:df:b7:a7:f7:db:3e:2b:9b:6d:99:39:b6:74:91:
                    57:d1:0a:f6:cf:c5:3d:2e:b4:ab:5d:76:00:55:dc:
                    b0:ab:93:9c:26:2a:3e:cd:9a:7c:8e:49:63:f7:8c:
                    54:44:f8:32:87:b4:b4:c0:1e:c2:ef:2a:6d:51:b7:
                    2f:54:9f:34:00:0e:36:52:a8:f0:e6:d1:5f:3b:7d:
                    58:8e:96:6a:44:33:4a:03:d8:fb:bc:67:90:0b:49:
                    dd:65:de:93:6e:65:e8:98:9f:94:30:a8:da:10:ed:
                    a9:0e:89:dc:c3:62:2c:c6:a9:f6:23:bd:f9:78:a8:
                    52:5b:eb:c3:6c:65:9c:32:cc:eb:81:50:8d:66:54:
                    f3:f1:f7:7e:40:5c:88:4f:d1:40:53:e5:50:e8:5d:
                    d2:02:cd:ce:79:eb:fa:7a:37:22:9f:ed:eb:f6:b2:
                    c3:18:f1:a4:6b:b8:f9:bf:cc:9e:20:ad:8c:95:db:
                    38:f2:5e:6c:b6:d1:2b:8c:7b:e0:03:01:e8:33:e2:
                    eb:e9:90:f6:ad:3a:67:ac:48:6e:02:a6:10:21:93:
                    81:f6:81:ae:8b:9d:ee:0f:55:cb:ee:55:ef:dc:a3:
                    2b:23:f2:a3:75:b4:c8:45:38:98:5e:24:1c:87:46:
                    c0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C4:F1:CE:30:FA:6C:B4:49:AD:AE:B2:1E:3A:53:C3:BD:47:10:EE
            X509v3 Authority Key Identifier:
                keyid:B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:04:d1:d2:62:08:98:33:81:05:30:9f:59:d0:87:26:1c:81:
         f8:49:e6:4c:03:3c:8c:1f:45:2d:fc:10:05:12:b3:44:39:16:
         6b:2a:16:e1:59:79:89:b9:13:bc:e6:8c:8d:e2:63:59:24:55:
         2e:ff:c7:37:6a:f5:92:3b:96:25:cd:db:0d:49:77:4c:c1:97:
         e3:2c:e6:0f:8c:e9:04:7a:da:6f:fe:6d:89:c8:cb:df:e2:d4:
         52:cc:81:ec:58:0a:20:4a:13:b6:f3:7a:29:50:53:2f:c8:0c:
         23:10:85:f3:05:ab:df:e0:29:20:38:a8:6d:01:72:0c:04:59:
         d1:c7:f3:81:31:6e:c6:7a:97:27:e0:ca:09:ea:da:32:4c:44:
         1a:26:ea:41:cf:7f:7c:21:d1:8b:b7:10:fd:63:fb:b1:cc:9f:
         f1:dd:dc:75:8b:d1:63:c5:2b:57:c8:35:21:35:c8:c2:e2:e2:
         45:e0:0e:90:02:95:e5:74:01:04:ba:00:26:8d:2d:4a:2a:06:
         1a:a8:22:26:6c:4d:58:34:26:df:31:53:88:ab:60:d8:dd:eb:
         db:a5:b3:1c:b8:1c:58:78:50:a4:62:7a:86:66:26:fc:d9:6d:
         de:f0:96:6d:c9:e9:64:47:4b:92:a6:da:2e:09:e8:e0:ed:4a:
         52:aa:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:15 2026 by rpki-client