Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
File:                     JvRVgKY2EDzJWr6BCg0GkouaDd8.mft (raw, json)
Hash identifier:          781qIqvAvym0x9SgyaGPDc29cFJ5idC8/MKASdUC1Z0=
Subject key identifier:   83:AE:A4:9E:57:40:C5:7A:1A:96:9A:33:05:37:BF:3E:5C:97:20:23
Authority key identifier: 26:F4:55:80:A6:36:10:3C:C9:5A:BE:81:0A:0D:06:92:8B:9A:0D:DF
Certificate issuer:       /CN=26f45580a636103cc95abe810a0d06928b9a0ddf
Certificate serial:       019D2A0453ED39457F51FADB1340B5FB34E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
Manifest number:          4D
Signing time:             Thu 26 Mar 2026 12:00:19 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:19 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:19 +0000
Files and hashes:         1: JvRVgKY2EDzJWr6BCg0GkouaDd8.crl (hash: acaKv9Vl7JlXRlcATl8B8tXCVfTI0A04NW1PNJHYUa8=)
                          2: w-nnLB0gJHLqHYNGFppYN7WkZFM.roa (hash: QK4oKJXySakBc6G1Ar7UfRyPt44Ci6G96TsVap7g1D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:53:ed:39:45:7f:51:fa:db:13:40:b5:fb:34:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f45580a636103cc95abe810a0d06928b9a0ddf
        Validity
            Not Before: Mar 26 12:00:19 2026 GMT
            Not After : Mar 27 12:00:19 2026 GMT
        Subject: CN=83aea49e5740c57a1a969a330537bf3e5c972023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:9d:f8:f5:2e:1e:cd:95:46:92:90:b0:ae:
                    94:e9:9b:85:9a:1f:e9:5a:b3:ea:c6:c7:c4:6e:3f:
                    54:1b:5a:cf:77:86:f5:5d:c8:32:88:a5:a1:d3:49:
                    2e:43:26:d4:39:01:9c:54:54:65:ca:61:1f:f5:23:
                    e1:83:4a:bf:1d:2e:34:8b:32:db:cf:83:89:cf:4b:
                    2e:bc:27:0a:b2:7d:7f:2a:79:63:4c:e0:95:d0:14:
                    c4:84:51:c4:1c:13:9b:a2:5b:37:bc:97:c8:db:f5:
                    a8:c1:76:c7:e6:23:b6:d4:f4:c9:b4:71:0a:2e:af:
                    e6:28:4f:6d:6a:82:1a:c8:20:07:4c:70:d2:b9:79:
                    8c:b8:54:9f:8a:a7:4b:18:d8:e4:c7:0f:2a:8b:da:
                    2e:1e:53:0d:f7:c7:96:43:c4:20:08:c0:6c:ac:dd:
                    f8:da:77:28:6a:0e:9f:37:d4:cf:7c:31:b0:7f:58:
                    f6:5d:59:69:ad:f7:c3:3d:d1:e6:9f:14:da:44:82:
                    d0:04:78:8a:e0:0c:45:71:cd:df:48:84:f2:0e:1e:
                    0a:51:c8:2e:5b:4c:67:66:2b:58:6b:08:45:53:39:
                    44:44:86:44:c8:64:99:30:c6:3f:dc:ce:94:93:ce:
                    6c:0b:c6:ef:8b:79:f3:dd:b3:6b:81:d4:f3:78:1a:
                    9d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AE:A4:9E:57:40:C5:7A:1A:96:9A:33:05:37:BF:3E:5C:97:20:23
            X509v3 Authority Key Identifier:
                keyid:26:F4:55:80:A6:36:10:3C:C9:5A:BE:81:0A:0D:06:92:8B:9A:0D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:11:3a:2c:af:da:ac:fc:70:72:72:a8:2f:09:dc:50:80:48:
         90:ba:16:e9:31:2a:73:51:d3:96:34:39:5e:63:93:6f:f4:75:
         94:3e:67:ee:d0:be:16:c7:53:da:8a:20:83:a3:31:d9:2b:08:
         d7:1e:c1:31:5e:b4:2d:76:f1:9c:fe:71:3e:5a:5a:46:40:5f:
         8a:3d:2b:39:f5:c1:f9:a8:ea:05:98:f5:b0:19:67:9a:42:27:
         de:35:e5:50:f2:06:4a:27:8c:5b:68:b5:64:f5:d8:0a:54:83:
         fe:27:1b:fa:d7:b3:a7:c0:df:03:d3:23:eb:fc:60:4e:77:fb:
         eb:57:f0:cb:1c:7e:65:9d:44:72:23:61:5a:13:52:42:84:31:
         8e:43:47:a9:d7:52:be:83:e3:9d:8b:8b:bb:8a:cd:11:a7:db:
         ba:f4:7b:ce:a7:06:c6:df:2e:6a:c9:d7:dd:90:d6:e2:bc:d0:
         eb:99:3f:fa:e9:2f:f1:a2:b2:ae:de:8f:75:3b:e8:e7:1a:0a:
         52:30:23:e2:12:cb:d2:d4:ad:7b:42:55:a2:e3:ad:e2:cc:91:
         a7:a7:08:5b:f1:b3:8e:78:b6:bd:17:58:4b:47:0b:7b:94:08:
         e8:82:dd:21:a1:be:fc:49:01:50:43:3d:2b:65:32:df:3f:e7:
         ef:38:5a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:13:51 2026 by rpki-client