Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
File:                     ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json)
Hash identifier:          2lLvdyCD1AsjFf5yvW1OV0bRHqB9CYQFgA1VnEwUmXA=
Subject key identifier:   DF:0A:17:68:1A:34:4D:7C:80:65:17:C5:E4:44:B6:09:EB:C0:67:9A
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Certificate issuer:       /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial:       019D284D74E5C53F61292D5553ED13066C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
Manifest number:          1895
Signing time:             Thu 26 Mar 2026 04:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:57 +0000
Files and hashes:         1: 6osyBEyP0HcSM0NQyBHIvRn1Fhk.roa (hash: hglwRwFDDllYX9jYTjK+3ZWKDlBPRVFz/hfeMX7vQ4o=)
                          2: OW65PTWCsUr6rYv2nxQ4ao8piZo.roa (hash: VLNBF5WuX5ZBGEPR8/YSpx5OT5Jf+BPBXizwYwHgpSQ=)
                          3: a_b0RtO03m9umwvmGIisfH1ezxs.roa (hash: WnvfYu3njkCzDS9UXMUF95mscuNaF/URNqYfEe2vBrA=)
                          4: cKqvG9BsZG6su7we84q3E8DeV-0.roa (hash: yebnJKVbgSkS4D7E+ORpv+scwNkFgxpLo5cTVCzh2rI=)
                          5: jYL_MHWzxB2OX15Vxs1hmwy4NzY.roa (hash: VfRhELdR7icqL4aOULnTdK+xLakSZDUjVfSg/1rTQ3c=)
                          6: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: XZyrPa1FPp/wLSPxagabUfHb0EDGpiIAiD8pR+5c/uQ=)
                          7: vsAq2ox79fGO3Ta6QC_1orZGKIY.roa (hash: 11wmgbpdweQHKnUalimrWFHED8Za8q31JapGPV4qcP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:74:e5:c5:3f:61:29:2d:55:53:ed:13:06:6c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
        Validity
            Not Before: Mar 26 04:00:57 2026 GMT
            Not After : Mar 27 04:00:57 2026 GMT
        Subject: CN=df0a17681a344d7c806517c5e444b609ebc0679a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ca:70:70:a1:eb:62:a0:bc:81:97:35:21:06:
                    ec:7a:cf:6b:f7:d0:28:2f:47:81:62:64:0a:70:c9:
                    6e:f9:07:a2:89:61:df:6e:77:b7:8e:12:44:4f:3e:
                    d8:70:42:54:a5:5f:87:b9:e3:4a:aa:b7:46:65:4f:
                    76:9b:da:72:1b:80:f2:f1:80:b0:bf:b2:75:94:a0:
                    84:4f:57:d1:5e:33:d5:ea:a3:2b:80:9c:cc:bf:85:
                    bb:4d:08:5f:15:cf:62:74:05:49:a1:f5:33:a2:55:
                    90:f8:f8:47:d8:8b:b8:f6:cb:b6:95:a2:9c:33:56:
                    a1:37:94:f1:3d:a9:04:f0:60:e9:b1:da:82:42:09:
                    a9:7e:a4:5e:53:02:a8:96:3a:39:f9:de:1b:04:45:
                    a4:a3:cc:2a:ae:d7:2d:e4:01:e5:72:59:fe:f8:1e:
                    7a:89:7e:49:d7:d0:5d:b1:73:e2:1f:f9:f5:c1:be:
                    e0:c2:f8:43:96:32:0f:22:86:78:c3:81:77:ba:8b:
                    2e:27:f5:1f:c8:ce:d5:ca:2d:46:29:01:d0:d1:e7:
                    ff:f5:83:8c:4a:69:10:e2:65:c2:e6:d6:18:52:94:
                    1a:74:fd:ce:93:f0:b4:a9:7e:4d:c5:71:26:12:1b:
                    c6:39:56:59:83:8e:88:68:d8:4b:a6:10:97:06:5f:
                    49:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0A:17:68:1A:34:4D:7C:80:65:17:C5:E4:44:B6:09:EB:C0:67:9A
            X509v3 Authority Key Identifier:
                keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5b:0d:7d:3c:6b:61:91:fa:e1:fe:75:85:cc:9c:14:19:97:
         f5:b6:68:a3:a6:66:69:b1:8c:62:ae:cc:e4:3c:ac:7b:5a:f9:
         15:59:c7:fd:fc:95:9a:f7:12:3b:de:1c:9c:3b:f2:79:93:40:
         8b:67:d2:3e:09:41:29:c2:9f:00:a8:65:2a:b5:64:75:3a:b6:
         df:f7:a1:15:3f:a2:d2:62:a5:b3:6a:1e:c4:2a:aa:66:b6:f9:
         24:1e:c6:ff:2b:c2:05:63:3f:4d:49:ae:e1:fc:37:a3:90:08:
         04:ec:5c:48:c2:34:a0:dd:2f:f9:3e:f5:99:69:75:d1:fe:ec:
         d2:f5:0f:2b:f4:32:7a:ee:10:69:d8:60:c0:a6:6d:1b:06:4a:
         fc:61:cd:92:87:c4:0a:67:af:6f:a7:39:30:dc:6c:dd:5c:a2:
         00:aa:36:9e:35:5f:8b:3c:de:0d:85:b9:9f:52:9c:d1:92:6b:
         e2:31:5e:af:e6:68:ee:74:b2:3b:65:79:5b:07:a7:e0:e5:9f:
         b2:59:54:18:cc:a9:4c:88:44:18:fd:6c:1e:4c:e7:ab:6b:ba:
         e0:ec:cd:d2:f1:af:f9:f4:83:18:dd:80:19:fd:60:40:69:f6:
         eb:15:ec:1a:9a:33:49:b9:bd:8c:cf:f5:8b:c0:67:dd:bf:3e:
         37:c6:3c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:48:37 2026 by rpki-client