Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
File:                     jw6u_3Y07o3-gFSthfihXoR1kRQ.mft (raw, json)
Hash identifier:          0LYcmHe4smj4ny6YGq6WlGZ46QdywELON2c/QxD6d0M=
Subject key identifier:   88:35:E7:1D:16:15:45:B4:61:9A:98:F8:AD:2F:C1:70:99:FA:54:8C
Authority key identifier: 8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
Certificate issuer:       /CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Certificate serial:       019D273B1AE0DB0137A2A1E4FF66BFDF8E5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
Manifest number:          07BE
Signing time:             Wed 25 Mar 2026 23:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:18 +0000
Files and hashes:         1: jw6u_3Y07o3-gFSthfihXoR1kRQ.crl (hash: /jh1oPgsA0APoszoEqyRZShTZp4vjFha13neIAZuTlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:1a:e0:db:01:37:a2:a1:e4:ff:66:bf:df:8e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
        Validity
            Not Before: Mar 25 23:01:18 2026 GMT
            Not After : Mar 26 23:01:18 2026 GMT
        Subject: CN=8835e71d161545b4619a98f8ad2fc17099fa548c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:70:33:e8:e8:73:d3:ce:b5:fa:f3:af:5f:dc:
                    df:a2:12:64:c9:f5:1d:d6:99:0a:47:66:db:54:c0:
                    3f:61:9b:d8:bc:19:54:30:bc:41:a2:04:03:f3:f4:
                    6d:cd:dd:cb:fa:8b:5e:97:a2:3d:f7:dd:be:5f:d9:
                    8c:f8:61:0a:bb:a8:4e:93:60:b3:d6:91:8d:8e:97:
                    48:41:62:a6:8d:9f:f0:99:e8:17:e8:22:4e:14:9a:
                    37:de:d9:86:3f:58:6e:db:14:ea:bc:bf:80:9d:3d:
                    b7:c7:c4:c3:4b:03:cb:4f:30:14:d2:2d:69:7d:1e:
                    23:e0:82:b1:fe:da:c7:78:d1:76:6f:18:22:7a:2d:
                    2f:33:1c:76:9a:12:a8:47:45:e0:3b:46:63:f2:29:
                    3c:2a:6d:cc:15:6b:32:08:52:ff:07:97:0d:81:4c:
                    c2:c4:61:6b:e8:c9:3c:cc:7f:d6:b2:fa:ff:90:ae:
                    15:b7:38:60:fa:7a:01:e1:cd:ec:d3:f3:3c:be:ce:
                    b3:f1:76:b3:c3:e1:3d:3f:39:05:20:fb:24:41:92:
                    5c:cb:27:8c:f9:74:b1:5b:19:0b:9f:7a:77:70:88:
                    72:5c:d5:72:ac:89:f6:ff:81:aa:9d:7f:30:0a:2e:
                    5a:99:79:ed:58:51:58:17:7b:81:82:5f:25:26:55:
                    ed:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:35:E7:1D:16:15:45:B4:61:9A:98:F8:AD:2F:C1:70:99:FA:54:8C
            X509v3 Authority Key Identifier:
                keyid:8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:11:36:45:f3:72:d1:cf:e5:c0:e3:8b:50:3c:59:df:16:ec:
         64:19:1f:ac:e7:bd:4b:5a:09:29:32:ff:15:4b:93:60:7b:a0:
         86:a0:aa:40:31:1b:0d:e2:32:71:55:11:af:17:b3:dc:06:9e:
         fb:1c:b8:8b:31:60:18:f5:d7:77:a0:37:5a:d2:ff:bb:48:ff:
         3a:7a:1a:a0:25:a2:ff:9e:1f:8d:86:5b:0c:59:ac:23:6b:16:
         02:e4:35:b2:76:b4:70:1a:3b:c6:de:ff:3f:98:2f:f7:14:5c:
         0f:f3:5f:ac:b2:21:66:50:64:e7:d7:92:8c:21:b2:da:ab:45:
         c7:c5:15:c6:39:8a:01:35:c0:8e:47:3a:aa:5c:eb:78:23:6f:
         e2:10:e3:be:2d:85:57:a7:1f:1d:28:6f:0a:fd:88:f8:0b:9e:
         ac:65:f9:bf:b3:71:72:85:36:5d:96:98:31:62:a0:f6:72:d8:
         93:fd:11:20:4e:0e:4a:9d:4d:73:17:3a:4a:70:5f:7a:db:31:
         a9:ea:de:18:ee:d0:92:b1:8b:42:b8:f2:f6:93:40:e2:71:58:
         0b:77:57:4e:19:a9:4b:f4:10:85:77:51:f7:48:0e:7a:60:43:
         45:c5:8e:50:ea:45:9f:fa:90:ef:80:ff:60:82:f7:4e:b1:3b:
         84:7d:a4:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOxrg2wE3oqHk/2a/345eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMGVhZWZmNzYzNGVlOGRmZTgwNTRhZDg1ZjhhMTVlODQ3
NTkxMTQwHhcNMjYwMzI1MjMwMTE4WhcNMjYwMzI2MjMwMTE4WjAzMTEwLwYDVQQD
Eyg4ODM1ZTcxZDE2MTU0NWI0NjE5YTk4ZjhhZDJmYzE3MDk5ZmE1NDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53Az6Ohz0861+vOvX9zfohJkyfUd
1pkKR2bbVMA/YZvYvBlUMLxBogQD8/Rtzd3L+otel6I9992+X9mM+GEKu6hOk2Cz
1pGNjpdIQWKmjZ/wmegX6CJOFJo33tmGP1hu2xTqvL+AnT23x8TDSwPLTzAU0i1p
fR4j4IKx/trHeNF2bxgiei0vMxx2mhKoR0XgO0Zj8ik8Km3MFWsyCFL/B5cNgUzC
xGFr6Mk8zH/Wsvr/kK4Vtzhg+noB4c3s0/M8vs6z8Xazw+E9PzkFIPskQZJcyyeM
+XSxWxkLn3p3cIhyXNVyrIn2/4GqnX8wCi5amXntWFFYF3uBgl8lJlXtKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIg15x0WFUW0YZqY+K0vwXCZ+lSMMB8GA1UdIwQY
MBaAFI8Orv92NO6N/oBUrYX4oV6EdZEUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanc2dV8zWTA3bzMtZ0ZTdGhmaWhYb1Ixa1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jZmE4NTUtZjBjNy00NDU4LWEzZGUt
YjNiNGVlZmU3MGE1LzEvanc2dV8zWTA3bzMtZ0ZTdGhmaWhYb1Ixa1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jZmE4NTUtZjBjNy00NDU4LWEzZGUtYjNiNGVlZmU3MGE1
LzEvanc2dV8zWTA3bzMtZ0ZTdGhmaWhYb1Ixa1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhE2RfNy
0c/lwOOLUDxZ3xbsZBkfrOe9S1oJKTL/FUuTYHughqCqQDEbDeIycVURrxez3Aae
+xy4izFgGPXXd6A3WtL/u0j/OnoaoCWi/54fjYZbDFmsI2sWAuQ1sna0cBo7xt7/
P5gv9xRcD/NfrLIhZlBk59eSjCGy2qtFx8UVxjmKATXAjkc6qlzreCNv4hDjvi2F
V6cfHShvCv2I+AuerGX5v7NxcoU2XZaYMWKg9nLYk/0RIE4OSp1Ncxc6SnBfetsx
qereGO7QkrGLQrjy9pNA4nFYC3dXThmpS/QQhXdR90gOemBDRcWOUOpFn/qQ74D/
YIL3TrE7hH2k+g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:11 2026 by rpki-client