Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
File:                     3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json)
Hash identifier:          Mqc6AVRlf2Y8V48YFZvvk+U7GbOwdmJx5Of72/SViC0=
Subject key identifier:   9D:95:41:B8:14:34:42:E9:2B:CA:E7:E3:A4:5F:ED:3F:BE:AC:1A:6A
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Certificate issuer:       /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial:       019D2816A125FE160DE45EB3A5080B649417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
Manifest number:          1480
Signing time:             Thu 26 Mar 2026 03:01:04 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:04 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:04 +0000
Files and hashes:         1: 3BxH_bEdWRum2rhs_55rh-xY-JE.roa (hash: L7QbNE/A+wkbmeuga30Pjc/Z4164/JddJVT41mQnxHE=)
                          2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: 9365/JfxGUHlK/BcAkgmsFJ3qOwjGCXexXvN/wNTNFg=)
                          3: 7ejZ3K5XJXw42cK_JDpws_LBqPY.roa (hash: Y1PAS81Ngu/ibCqA+GXn0uait9upSnAxeVEYWJyyRbo=)
                          4: 9-ZkpJLZAxXzbNNccpqxr1yI3TQ.roa (hash: JAqKnj2bS/riQd9C2Ai/D19XD9DVFg+M8BKlm0uu5lQ=)
                          5: Ki5lgptZeKqxkVY1rSUS3fFpdNo.roa (hash: wCDh26IbseWW9odw6/4vFdpDTBtddnVSe0afNNR63xE=)
                          6: Mvc6dRwMPV0p3nS-xgeT1pSks3s.roa (hash: tEWtg/ml85Q9O/bjcJjCkBkPWgRPJZDdFKAGmtBJpW8=)
                          7: XcFzjI2uuV84oN4qh53dtgVk0G4.roa (hash: vDuNqlBbw47k7/TAAtk4TmMaBj19DDFnRfvi0NtLZ1E=)
                          8: XjB8pSYFTRWu3aeuPZfoCPdtSU8.roa (hash: clM1FhXerIaxDZVMbA4484QAmARB0GCCeaDtZ15BS4A=)
                          9: _CwOTtU3okI82pLwtmx5rCYmqBw.roa (hash: mdVcgR96055cvSGaX98e3jUXv5Q46o7z7n7mSva9LM8=)
                          10: eWht4CqsRozCLydJERnRuTN-Adw.roa (hash: rBx2jxtcduhOc94/W12cQD59jQKweQjaDhzj2mHD0e8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:a1:25:fe:16:0d:e4:5e:b3:a5:08:0b:64:94:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
        Validity
            Not Before: Mar 26 03:01:04 2026 GMT
            Not After : Mar 27 03:01:04 2026 GMT
        Subject: CN=9d9541b8143442e92bcae7e3a45fed3fbeac1a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:02:3f:4e:f8:2d:92:d9:d5:08:62:4d:44:
                    83:64:8b:c9:41:bd:fa:05:a0:d3:19:e9:3d:63:c1:
                    96:d4:bf:89:de:85:a1:32:57:55:3e:c3:19:fe:b8:
                    af:8e:bb:b4:8a:07:4c:3e:ea:d7:84:47:fe:e5:32:
                    f1:3c:44:95:07:9a:83:ba:a0:25:2b:4c:7b:27:4a:
                    7c:b4:aa:c6:e7:42:b3:e0:c3:57:53:e5:a6:3a:c1:
                    08:ed:d8:5d:89:85:df:3e:79:34:a4:d0:dc:d3:71:
                    7f:0a:1b:0c:d4:78:63:d3:2c:f3:6d:85:fb:b6:98:
                    5f:63:e5:c7:6a:21:7e:2f:59:84:3b:ce:44:a1:ab:
                    a6:e0:07:f1:17:6b:97:e8:32:88:41:2f:50:e9:16:
                    6a:4c:ce:18:d3:63:a6:e2:5b:da:57:60:ab:b8:e8:
                    c3:94:c3:37:3d:a9:64:05:6a:ef:5b:3d:84:f0:51:
                    b4:f3:15:ff:c1:65:a8:78:13:29:66:48:2d:f5:74:
                    3a:3d:9f:6d:32:ba:94:7c:4a:53:94:e7:e2:3c:ea:
                    cc:d3:ad:76:a9:23:e8:0b:af:0e:79:f3:c8:7a:94:
                    99:40:db:2e:ab:bf:7b:0f:00:9a:fd:bd:70:27:6f:
                    ad:11:9f:a8:48:12:0f:51:e7:99:98:c5:91:ac:e2:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:95:41:B8:14:34:42:E9:2B:CA:E7:E3:A4:5F:ED:3F:BE:AC:1A:6A
            X509v3 Authority Key Identifier:
                keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0a:1e:2f:a6:e3:77:80:36:c7:32:d4:87:e3:8c:c2:2e:95:
         05:17:68:47:ad:21:e2:ac:af:60:fe:36:ad:9b:c2:86:32:66:
         0b:e7:05:6c:a3:48:77:9f:49:af:67:67:de:10:35:d5:62:9c:
         92:20:68:3a:37:f3:e2:d2:a3:fc:86:0b:18:c8:40:06:03:1a:
         70:26:9b:ed:56:88:cc:80:53:96:12:14:00:7e:ba:82:42:3c:
         32:e5:f4:54:01:bc:42:24:c1:b8:31:19:e2:1c:02:f7:01:6b:
         ec:cc:06:02:37:e5:68:5c:8b:82:5c:dd:eb:06:9c:fd:f0:70:
         67:0e:3d:47:e1:8f:ed:cc:27:f3:a0:df:ae:3e:77:39:72:65:
         8e:2b:2f:42:53:6a:cf:b5:53:5f:fc:bd:51:91:0c:de:6c:43:
         47:2a:a4:7d:f9:d8:87:52:a9:7d:10:9b:e9:27:73:7c:99:8c:
         4b:45:e2:12:51:91:0e:8e:a3:52:38:8b:61:6d:95:e6:0c:3b:
         e0:3e:23:a6:71:db:45:1b:76:2e:52:b8:f7:39:7a:8d:90:d9:
         45:5c:58:2e:05:62:f6:c2:54:97:c8:4b:79:89:53:82:9c:a9:
         84:2b:69:90:c3:77:47:02:36:4b:1c:a2:b6:12:9a:41:f0:d4:
         87:73:c6:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFqEl/hYN5F6zpQgLZJQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjYwMzI2MDMwMTA0WhcNMjYwMzI3MDMwMTA0WjAzMTEwLwYDVQQD
Eyg5ZDk1NDFiODE0MzQ0MmU5MmJjYWU3ZTNhNDVmZWQzZmJlYWMxYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9wCP074LZLZ1QhiTUSDZIvJQb36
BaDTGek9Y8GW1L+J3oWhMldVPsMZ/rivjru0igdMPurXhEf+5TLxPESVB5qDuqAl
K0x7J0p8tKrG50Kz4MNXU+WmOsEI7dhdiYXfPnk0pNDc03F/ChsM1Hhj0yzzbYX7
tphfY+XHaiF+L1mEO85Eoaum4AfxF2uX6DKIQS9Q6RZqTM4Y02Om4lvaV2CruOjD
lMM3PalkBWrvWz2E8FG08xX/wWWoeBMpZkgt9XQ6PZ9tMrqUfEpTlOfiPOrM0612
qSPoC68OefPIepSZQNsuq797DwCa/b1wJ2+tEZ+oSBIPUeeZmMWRrOJIIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2VQbgUNELpK8rn46Rf7T++rBpqMB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAoeL6bj
d4A2xzLUh+OMwi6VBRdoR60h4qyvYP42rZvChjJmC+cFbKNId59Jr2dn3hA11WKc
kiBoOjfz4tKj/IYLGMhABgMacCab7VaIzIBTlhIUAH66gkI8MuX0VAG8QiTBuDEZ
4hwC9wFr7MwGAjflaFyLglzd6wac/fBwZw49R+GP7cwn86Dfrj53OXJljisvQlNq
z7VTX/y9UZEM3mxDRyqkffnYh1KpfRCb6SdzfJmMS0XiElGRDo6jUjiLYW2V5gw7
4D4jpnHbRRt2LlK49zl6jZDZRVxYLgVi9sJUl8hLeYlTgpyphCtpkMN3RwI2Sxyi
thKaQfDUh3PGLA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:46 2026 by rpki-client