Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
File:                     J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft (raw, json)
Hash identifier:          YC/GYgMSh/dgLm1gSEVe4Vd7MCYsWkzZfnP0Blv13to=
Subject key identifier:   29:B8:B5:00:4C:11:9A:CF:9B:3E:E3:58:45:15:DB:88:36:ED:3D:A0
Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Certificate issuer:       /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Certificate serial:       019D2884CDD30067224B99D17E1EAD1FD8DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 05:01:25 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:25 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:25 +0000
Files and hashes:         1: J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl (hash: x0v7rREi/SFkH4SsItB2K1nskZ9lUDTT5XJhMPtY7Eg=)
                          2: opETjfO6mWFYsmS6JQzzGRH9WxI.roa (hash: 7PPELYdKKburZhJ6qtTeTQUYG9VrfTnWioCBqvymRAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:cd:d3:00:67:22:4b:99:d1:7e:1e:ad:1f:d8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
        Validity
            Not Before: Mar 26 05:01:25 2026 GMT
            Not After : Mar 27 05:01:25 2026 GMT
        Subject: CN=29b8b5004c119acf9b3ee3584515db8836ed3da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:6f:b1:d1:d4:f4:27:2b:60:ed:77:f3:29:
                    0b:ab:28:bc:b0:b3:a3:08:79:bd:91:1d:dd:75:3f:
                    7a:07:b9:59:f0:12:b3:03:d2:49:d1:0a:9a:5c:37:
                    5d:c8:60:26:cb:df:ac:18:17:19:18:2e:3d:ae:80:
                    e2:64:a4:ec:20:84:ee:03:f2:70:61:f7:cb:88:59:
                    34:d2:b4:74:91:df:94:51:de:18:cc:eb:b3:67:de:
                    c0:4a:32:ac:82:f1:ae:70:60:4c:68:7d:29:bf:b0:
                    d1:7c:90:66:25:61:ba:0a:3a:e3:b3:1f:62:c5:17:
                    1a:b2:b9:13:50:84:14:4d:2e:d3:56:7c:0f:6e:0d:
                    9f:98:b8:26:32:75:24:31:90:11:6f:57:b0:a9:c4:
                    85:93:b9:af:9f:fe:fe:47:08:60:ce:8b:4d:6a:ce:
                    cc:a8:d7:65:43:e0:b9:64:1f:43:10:a1:fe:de:ca:
                    d4:aa:5b:06:28:1c:94:a0:5b:fa:cc:4c:4a:fb:b5:
                    f1:b7:56:f2:e2:63:9a:1f:26:e6:95:97:a3:f1:df:
                    ed:be:2f:5b:4b:6b:37:3e:37:59:f1:a2:c5:54:54:
                    79:43:68:74:f7:26:fd:82:c8:a6:c6:dd:64:81:52:
                    6b:0d:8c:e8:ee:97:a9:6f:d8:ef:35:b3:b6:ea:5c:
                    5b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B8:B5:00:4C:11:9A:CF:9B:3E:E3:58:45:15:DB:88:36:ED:3D:A0
            X509v3 Authority Key Identifier:
                keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:16:7c:47:c0:e9:96:b7:1e:94:e3:b2:9a:16:07:65:5e:76:
         0b:ce:85:66:d2:21:aa:7b:a5:9e:34:f2:78:30:2f:e5:d2:05:
         cd:24:57:69:3e:88:d3:98:d6:8b:6c:5a:69:df:d3:96:a2:96:
         ad:98:29:45:36:d3:dc:2e:2b:00:4b:76:cb:4c:ef:d7:0a:e5:
         eb:7b:a2:82:88:11:81:6f:40:86:57:8c:71:df:54:57:87:45:
         50:eb:e1:3e:fb:0b:d3:26:f0:2e:aa:ae:29:44:92:0e:a3:a5:
         bd:09:c4:71:e0:07:19:7e:41:6c:58:31:29:97:e2:a5:92:cb:
         6e:fe:7e:c4:f7:60:35:c2:a1:28:9d:b1:18:1d:26:5e:66:df:
         c2:93:1e:96:fd:4c:3b:19:82:58:f2:8c:c0:1b:d8:8b:34:58:
         c3:3f:55:1d:fe:7f:01:a9:dd:f8:7f:1d:2d:68:f9:7a:7c:af:
         a2:c7:27:15:af:16:18:f9:6e:ae:e7:4f:53:66:ed:89:84:fa:
         df:6c:0b:bb:b4:a1:7d:20:5f:76:8b:c7:9c:63:01:e1:5b:d2:
         b6:f7:b4:c6:90:e9:d6:cf:a4:b5:43:1d:ea:27:8c:2e:ca:27:
         b3:d5:25:29:81:54:91:aa:c1:b6:a9:ff:91:6e:60:85:7a:ce:
         3e:07:77:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:37 2026 by rpki-client