Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
File:                     J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft (raw, json)
Hash identifier:          irGbF4w7hM5xfd4hcDNafbsa3YguffY8XQp+YwtkxL4=
Subject key identifier:   27:8A:8C:22:9B:9D:5A:8C:31:95:93:58:58:EC:3B:E4:CD:00:C6:27
Authority key identifier: 27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD
Certificate issuer:       /CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
Certificate serial:       019D27A9331FA3FA42CD1A905907E298DE62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 01:01:33 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:33 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:33 +0000
Files and hashes:         1: J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl (hash: 1vi/61bf5+xBqP/VpJacXtK0qn9Wz1RSaCOwfWdRx3g=)
                          2: U8IK9zOrS2YBTjRbIk-gk-cBt68.roa (hash: yusdb1/WrOXutSMCFdk0bfUHNam0sw06TKJeP0mCnGc=)
                          3: cV-z3VBLUASMrIq4SMj8YmJTXjU.roa (hash: zZS+jPf5y7gr08V8zCZfQbJhX967ajmJFVAkbk/01Ew=)
                          4: vLzum_3xiySkT3R3o28koRHRvWg.roa (hash: vj9JWRWLPCy8DDsgu3Xmj2hFdUNWrsZTq4TtJ5bRflE=)
                          5: wh4k9axfhsDf-Do-dUFqE9nApww.roa (hash: 93omHoRTuFsw/T3J6aAGcVsj1NzTknVj2UFj23gAKLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:33:1f:a3:fa:42:cd:1a:90:59:07:e2:98:de:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
        Validity
            Not Before: Mar 26 01:01:33 2026 GMT
            Not After : Mar 27 01:01:33 2026 GMT
        Subject: CN=278a8c229b9d5a8c3195935858ec3be4cd00c627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:10:22:05:a7:13:b8:4d:4c:2e:e1:83:03:
                    84:69:62:51:ad:02:22:bb:f6:1a:12:e0:8d:71:51:
                    fa:ea:3c:41:ab:d0:d1:4d:bf:10:72:2e:0a:b9:01:
                    e0:20:5e:03:61:cd:3d:53:11:ba:c8:b2:74:ba:31:
                    12:06:9f:5b:f4:4d:81:0a:0d:1d:71:2c:d9:c5:a4:
                    e5:ce:73:e6:04:f6:e6:7f:3d:f2:48:0b:47:12:b0:
                    af:7a:88:d0:10:66:7b:c2:89:af:b4:e4:3a:8b:23:
                    d2:15:41:9a:9a:1f:9e:2c:95:3e:72:e8:06:90:c4:
                    d1:1c:a5:a7:78:97:d5:7f:a9:4a:f8:7b:9d:c5:9d:
                    7c:28:f4:05:ad:fc:c9:6c:0c:6c:3a:8f:20:e6:7a:
                    bb:d1:6f:5e:da:70:8e:76:fe:51:a7:f2:76:19:2a:
                    1b:6f:bc:3d:3d:ec:a6:00:c0:59:b0:89:18:27:6f:
                    c2:5f:34:a9:d0:72:af:d1:39:13:39:d1:fb:f2:ec:
                    44:94:92:71:ad:21:a0:70:29:d1:a7:b1:91:bd:2f:
                    b0:cd:99:e4:09:c7:5b:0f:bc:fd:7d:ee:50:f7:7d:
                    3a:51:64:0f:fc:44:79:0f:7e:e2:ae:fa:47:7c:d9:
                    20:1f:81:b3:aa:a3:f4:1d:e4:d3:d4:c9:06:2f:52:
                    60:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8A:8C:22:9B:9D:5A:8C:31:95:93:58:58:EC:3B:E4:CD:00:C6:27
            X509v3 Authority Key Identifier:
                keyid:27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:02:d4:7b:e3:1e:ee:b3:f9:5c:38:d1:91:52:05:68:5f:22:
         fa:49:9f:1a:7b:65:f3:d7:bb:8f:67:84:b4:fb:12:74:8a:0a:
         4f:e7:bf:9c:10:38:09:88:37:79:75:56:96:8f:80:47:ea:ac:
         90:b7:7b:e6:e3:d9:e3:b2:a2:6d:c2:fd:ff:30:6a:04:54:33:
         3f:ff:8c:b4:d5:f6:22:72:f7:f4:00:86:2a:73:78:92:cc:d4:
         63:ed:db:b0:aa:64:69:da:c7:cf:81:14:30:30:7f:0f:9f:87:
         67:49:37:45:19:df:94:c8:0b:a7:bd:27:fa:8c:16:22:82:66:
         bf:91:b5:e4:f0:2c:8b:84:ee:e0:3c:aa:07:86:5c:6f:37:bd:
         73:3e:1e:86:be:4c:ca:22:ec:25:98:e0:57:75:a8:e3:94:f1:
         f3:2a:e1:91:8b:6b:5b:bb:85:af:23:5f:ce:e6:47:30:6a:92:
         45:f0:f6:46:5f:ce:93:30:f7:4b:65:19:f4:e5:21:ff:c7:3f:
         15:75:b9:8b:1f:ee:3b:c3:1d:d7:c1:8e:38:c8:22:9b:74:11:
         66:af:f7:45:3b:53:fa:1e:22:87:bd:71:7b:36:be:5a:a4:81:
         1f:82:26:c9:26:82:27:5c:23:82:b0:5c:59:0b:41:77:e9:6e:
         cd:53:6b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:57 2026 by rpki-client