Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
File:                     Jowu3BO7KjxjJiEhueqtGIvtuuk.mft (raw, json)
Hash identifier:          inOxu6rfgjV6P3OcDaeN5U3N9bbOgGyGnohnk3WHS/k=
Subject key identifier:   21:2B:FD:D4:6C:80:19:83:42:8C:12:11:5F:1D:AC:AD:F9:87:F7:DF
Authority key identifier: 26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
Certificate issuer:       /CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Certificate serial:       019D265F4AEFD688C9DA7940E3A8E523F366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
Manifest number:          14A9
Signing time:             Wed 25 Mar 2026 19:01:12 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:12 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:12 +0000
Files and hashes:         1: 6GEbyuj2qKMcq18FIsrq4Q_-YBo.roa (hash: jxGNQfVpSStE/8Ajsn9ngwqV0Uae1t1kqzkQgh9Yxbs=)
                          2: Jowu3BO7KjxjJiEhueqtGIvtuuk.crl (hash: YmhmkeIa1PX4Cet+3LMJVK3BjxMKAUK1P6jlCexjsEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:4a:ef:d6:88:c9:da:79:40:e3:a8:e5:23:f3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
        Validity
            Not Before: Mar 25 19:01:12 2026 GMT
            Not After : Mar 26 19:01:12 2026 GMT
        Subject: CN=212bfdd46c801983428c12115f1dacadf987f7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:ae:81:6a:ce:c1:a3:9d:c8:e7:7e:88:93:
                    1f:58:1f:79:ee:32:2a:77:0c:3c:a1:28:2a:6a:c2:
                    65:2d:41:4d:83:7e:ab:e1:57:a3:e8:22:a9:3e:b6:
                    30:36:c2:6c:e4:e9:20:66:4b:e0:56:25:37:b4:b9:
                    ae:75:a2:f3:72:f0:14:a7:ab:df:96:05:8a:43:e2:
                    bf:da:8e:13:0d:45:bd:cd:83:9d:98:eb:7e:25:1c:
                    1e:f8:cc:4a:b7:c0:4e:d3:e7:19:0b:d0:d8:cf:4d:
                    56:d9:d7:c7:5f:67:d6:b0:8f:6e:29:dd:ba:44:6f:
                    9e:0d:55:99:0c:1d:55:5c:c1:74:47:a9:59:05:1c:
                    30:cb:78:d2:8a:fc:7d:82:7d:21:06:4b:c9:86:29:
                    29:d6:c2:fc:c0:9c:1b:c2:d4:a9:a9:bd:38:26:1e:
                    e7:4e:7b:64:f5:d0:2f:1c:1d:b4:2f:bb:89:f8:0d:
                    cc:be:1f:22:ea:56:d9:78:37:cd:b5:32:95:44:a1:
                    07:74:f5:63:2e:97:7f:0f:66:d6:9d:16:f2:50:2f:
                    aa:09:1d:b5:0b:53:3d:54:be:06:b4:2d:63:17:d3:
                    6b:1e:4a:a8:54:9a:52:7a:15:a8:be:16:73:ee:14:
                    bb:0b:d9:8a:9e:17:35:cc:15:c6:b6:c7:e0:42:41:
                    cc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2B:FD:D4:6C:80:19:83:42:8C:12:11:5F:1D:AC:AD:F9:87:F7:DF
            X509v3 Authority Key Identifier:
                keyid:26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d9:e6:7a:d1:e5:0c:53:b5:1e:10:a7:e4:f7:d4:40:c3:b4:
         80:b8:62:9d:78:86:d5:5a:f7:5d:bc:47:b1:91:55:3e:d3:ca:
         ec:6e:b8:fc:dc:32:17:36:ee:c2:6f:79:e3:f2:ef:db:7b:a0:
         c7:5e:bc:23:f2:e4:aa:cf:35:41:54:59:36:15:ac:65:5c:72:
         92:79:2d:fc:24:c5:e0:50:73:e9:12:8f:2f:cd:32:32:e1:16:
         cc:80:a9:de:35:30:14:3e:25:22:28:ce:8f:7a:3b:0e:60:bf:
         e1:09:1e:9a:ae:97:76:c7:64:43:9d:9d:61:7d:82:74:1e:40:
         d8:4c:82:75:44:63:a7:8f:3d:ad:f4:b5:b0:f0:d8:8a:52:7b:
         b4:4d:86:85:aa:89:df:e0:f3:8c:e4:4b:0c:1a:17:ba:5b:61:
         54:a6:bc:8b:0a:9c:72:f4:ed:28:b8:31:e6:7f:43:c0:3f:61:
         d6:25:00:0f:fe:d5:7a:4a:07:4a:3b:a6:b0:cf:36:8b:ea:72:
         c2:82:95:81:9e:32:bb:8c:3a:c4:d1:f2:b2:e6:97:36:81:b1:
         40:e9:51:b4:d5:e3:a5:ad:a0:56:44:7b:5b:2b:73:ee:d5:fe:
         9a:54:0a:fe:1e:8d:f5:27:33:ce:09:75:c5:97:61:e8:1d:ae:
         f8:bd:01:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX0rv1ojJ2nlA46jlI/NmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OGMyZWRjMTNiYjJhM2M2MzI2MjEyMWI5ZWFhZDE4OGJl
ZGJhZTkwHhcNMjYwMzI1MTkwMTEyWhcNMjYwMzI2MTkwMTEyWjAzMTEwLwYDVQQD
EygyMTJiZmRkNDZjODAxOTgzNDI4YzEyMTE1ZjFkYWNhZGY5ODdmN2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3+ugWrOwaOdyOd+iJMfWB957jIq
dww8oSgqasJlLUFNg36r4Vej6CKpPrYwNsJs5OkgZkvgViU3tLmudaLzcvAUp6vf
lgWKQ+K/2o4TDUW9zYOdmOt+JRwe+MxKt8BO0+cZC9DYz01W2dfHX2fWsI9uKd26
RG+eDVWZDB1VXMF0R6lZBRwwy3jSivx9gn0hBkvJhikp1sL8wJwbwtSpqb04Jh7n
Tntk9dAvHB20L7uJ+A3Mvh8i6lbZeDfNtTKVRKEHdPVjLpd/D2bWnRbyUC+qCR21
C1M9VL4GtC1jF9NrHkqoVJpSehWovhZz7hS7C9mKnhc1zBXGtsfgQkHMcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEr/dRsgBmDQowSEV8drK35h/ffMB8GA1UdIwQY
MBaAFCaMLtwTuyo8YyYhIbnqrRiL7brpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm93dTNCTzdLanhqSmlFaHVlcXRHSXZ0dXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yY2IzYzktM2QwMS00Y2EyLWI5Yzct
ZjAxMTVjODVmM2JhLzEvSm93dTNCTzdLanhqSmlFaHVlcXRHSXZ0dXVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8yY2IzYzktM2QwMS00Y2EyLWI5YzctZjAxMTVjODVmM2Jh
LzEvSm93dTNCTzdLanhqSmlFaHVlcXRHSXZ0dXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtnmetHl
DFO1HhCn5PfUQMO0gLhinXiG1Vr3XbxHsZFVPtPK7G64/NwyFzbuwm954/Lv23ug
x168I/Lkqs81QVRZNhWsZVxyknkt/CTF4FBz6RKPL80yMuEWzICp3jUwFD4lIijO
j3o7DmC/4Qkemq6XdsdkQ52dYX2CdB5A2EyCdURjp489rfS1sPDYilJ7tE2GhaqJ
3+DzjORLDBoXulthVKa8iwqccvTtKLgx5n9DwD9h1iUAD/7VekoHSjumsM82i+py
woKVgZ4yu4w6xNHysuaXNoGxQOlRtNXjpa2gVkR7Wytz7tX+mlQK/h6N9Sczzgl1
xZdh6B2u+L0BmA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:52 2026 by rpki-client