Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
File:                     ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json)
Hash identifier:          pBfP4FeMqpjzyjftv/EN5HaDhB/hD0ujtoNND3gsSUI=
Subject key identifier:   E2:77:80:8A:F7:49:2A:2C:43:7C:C2:B8:B7:FA:1B:CF:AC:84:2D:0B
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Certificate issuer:       /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial:       019D2A8737D894AC721F649ED8C1EF3AB226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
Manifest number:          1897
Signing time:             Thu 26 Mar 2026 14:23:17 +0000
Manifest this update:     Thu 26 Mar 2026 14:23:17 +0000
Manifest next update:     Fri 27 Mar 2026 14:23:17 +0000
Files and hashes:         1: 6osyBEyP0HcSM0NQyBHIvRn1Fhk.roa (hash: hglwRwFDDllYX9jYTjK+3ZWKDlBPRVFz/hfeMX7vQ4o=)
                          2: Ote8Xple36NOljGpswnBnv1BVHg.roa (hash: 7PcKnm0HqFWloTnBPRiK0Jc5QCuqif0gaeoULdBF7ck=)
                          3: a_b0RtO03m9umwvmGIisfH1ezxs.roa (hash: WnvfYu3njkCzDS9UXMUF95mscuNaF/URNqYfEe2vBrA=)
                          4: cKqvG9BsZG6su7we84q3E8DeV-0.roa (hash: yebnJKVbgSkS4D7E+ORpv+scwNkFgxpLo5cTVCzh2rI=)
                          5: jYL_MHWzxB2OX15Vxs1hmwy4NzY.roa (hash: VfRhELdR7icqL4aOULnTdK+xLakSZDUjVfSg/1rTQ3c=)
                          6: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: MaOwqwzTBFUWMsHj+zDZVrLwDEQ+NYYuLFIgDYeIMgM=)
                          7: vsAq2ox79fGO3Ta6QC_1orZGKIY.roa (hash: 11wmgbpdweQHKnUalimrWFHED8Za8q31JapGPV4qcP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:87:37:d8:94:ac:72:1f:64:9e:d8:c1:ef:3a:b2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
        Validity
            Not Before: Mar 26 14:23:17 2026 GMT
            Not After : Mar 27 14:23:17 2026 GMT
        Subject: CN=e277808af7492a2c437cc2b8b7fa1bcfac842d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:8a:6b:14:a3:9b:7b:c4:74:00:13:d2:3e:
                    09:3e:a1:37:6e:4c:77:9a:fd:a6:ba:54:63:22:99:
                    32:b8:50:1c:6b:13:3d:8e:05:5a:62:3d:7f:ef:53:
                    c1:83:dd:80:67:1c:97:f6:b6:dc:d3:0e:eb:28:f5:
                    88:02:cc:b5:4e:bb:c7:ec:c6:83:4f:08:80:6d:09:
                    26:21:e5:8a:6e:73:7a:b8:31:95:b1:78:4a:6a:38:
                    59:10:54:5f:8b:46:bf:f2:6b:e3:76:fd:b2:e0:ec:
                    22:45:93:a8:ae:7d:29:76:a3:2b:b0:ba:ba:a4:c7:
                    2c:6f:bc:37:77:bf:70:fa:7d:25:e1:ea:bc:7c:bc:
                    2c:01:51:7a:c0:b0:fa:dd:75:4d:dd:95:9a:60:df:
                    03:09:db:6e:f7:13:ab:93:02:b8:9a:32:e9:22:d1:
                    a3:a9:96:d2:e9:d5:3d:b0:96:b7:33:96:2c:25:cf:
                    41:98:08:80:a9:32:c1:a1:a0:d0:74:22:37:9f:5f:
                    68:44:5f:6b:85:11:42:ee:f6:14:ce:86:98:7b:f9:
                    63:74:59:2c:95:cd:f1:f7:f7:92:69:15:8d:60:9a:
                    9f:f6:37:97:23:24:7a:d0:e2:b2:29:2f:e8:0f:4a:
                    d3:33:07:75:37:e9:38:dc:37:70:c7:1b:92:65:35:
                    a0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:77:80:8A:F7:49:2A:2C:43:7C:C2:B8:B7:FA:1B:CF:AC:84:2D:0B
            X509v3 Authority Key Identifier:
                keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:82:41:ac:52:ae:75:88:09:d5:c7:74:ff:9e:57:ab:70:59:
         4a:29:dc:c3:9e:e6:e7:6d:1e:71:98:b1:22:b0:31:f4:4f:17:
         22:48:60:3f:68:40:c5:7e:fc:fc:2c:dd:94:11:25:8b:0a:d6:
         f5:4b:27:ad:b7:ee:93:e3:df:8f:9e:fe:3b:71:13:91:7a:96:
         ea:40:c9:f6:dc:36:1f:af:c7:07:c0:c5:4e:b7:fa:3d:02:36:
         0d:43:f8:ad:2b:5c:58:c5:1f:d5:f2:5b:dd:c6:a4:13:83:24:
         6e:af:d5:2c:d3:c5:2e:66:03:a0:80:12:e1:1e:f8:82:e4:a7:
         c3:9c:aa:eb:eb:d5:66:7f:85:e2:0b:f4:c0:9d:3b:9b:35:6b:
         42:b8:ad:b1:23:46:36:cf:d3:41:55:0c:8b:ff:fb:2a:15:7d:
         bc:1c:95:23:18:d9:f5:9f:e1:75:ab:4c:81:fd:cf:2a:70:eb:
         f1:3b:03:80:1e:16:aa:ac:a3:75:55:65:02:b8:f5:a8:62:7d:
         c2:b3:15:34:04:78:41:de:e3:65:10:ef:28:4c:67:84:0e:6e:
         69:af:72:80:9f:56:98:38:c2:d4:6d:cf:b4:bd:ef:5b:26:51:
         a8:42:0f:6e:92:89:0f:29:c7:a3:e7:2c:a5:eb:b6:f6:c6:20:
         26:7b:c3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:30 2026 by rpki-client