Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
File:                     jO6IBP9wN24q_iGr-T4ijVr91Qk.mft (raw, json)
Hash identifier:          tJKyk4ICgg2Kwr9dV3gZN0sW/hLixqPGoHu0CT3sqdY=
Subject key identifier:   F8:FD:2C:B0:1C:D1:0B:C5:57:68:49:2F:A0:FA:B3:E5:DA:9B:CD:6D
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Certificate issuer:       /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial:       019D2703F8600BDA65A64AE7F7C8CFD2C902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 22:01:04 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:04 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:04 +0000
Files and hashes:         1: IreyC7z1Yhp8CnQTiMmYNasLsvc.roa (hash: TR7+Aar2Bxv7ahPzs2fJ/dVUCPN2vUNNNaJde+kEpd0=)
                          2: jO6IBP9wN24q_iGr-T4ijVr91Qk.crl (hash: SprLGxqeKKngPF+L5NwrL6+FrUBj09mTbFhUOnM1uVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:f8:60:0b:da:65:a6:4a:e7:f7:c8:cf:d2:c9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
        Validity
            Not Before: Mar 25 22:01:04 2026 GMT
            Not After : Mar 26 22:01:04 2026 GMT
        Subject: CN=f8fd2cb01cd10bc55768492fa0fab3e5da9bcd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:cc:e7:9c:0c:f1:d1:7e:b4:f4:30:2b:2a:
                    d7:96:89:c0:cf:8c:e9:7f:17:d7:6a:aa:57:9d:a6:
                    a9:fc:78:87:d3:39:83:b8:47:77:46:22:93:a5:95:
                    ca:5c:fb:24:99:71:44:1d:39:b7:2d:65:e0:be:19:
                    1d:28:6d:bb:ca:97:f4:24:53:10:1f:e4:e2:5e:2f:
                    a2:a3:b5:f3:d4:64:20:95:cd:e7:e2:9d:62:e9:4f:
                    3b:43:01:8d:5d:aa:83:2d:91:4e:93:6b:7b:24:02:
                    34:37:4a:b2:33:66:bf:38:b0:a5:c7:21:7b:bf:cb:
                    b2:03:d4:38:99:b3:77:d6:c0:c0:d8:55:d1:8a:82:
                    d8:9c:1e:4c:5f:e2:e9:76:6c:b1:b0:87:4c:d6:9f:
                    96:bc:60:e9:eb:89:d3:d5:e4:7f:ae:a2:f9:50:6f:
                    dd:13:5e:1c:52:24:a3:5b:55:d4:34:89:bb:5c:a2:
                    61:17:65:5d:9e:cc:92:af:f9:a2:50:5e:82:0d:2a:
                    a1:ec:94:c4:c1:cc:81:f7:e3:19:0e:0c:17:db:99:
                    42:f7:f8:32:cf:95:69:c2:e4:84:00:92:e9:57:33:
                    23:e6:60:63:ab:4d:29:f2:f2:95:f2:8d:47:c6:25:
                    96:7e:a0:4c:60:61:6e:b0:59:e5:f8:4a:39:41:c1:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FD:2C:B0:1C:D1:0B:C5:57:68:49:2F:A0:FA:B3:E5:DA:9B:CD:6D
            X509v3 Authority Key Identifier:
                keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:72:d4:d5:09:c6:62:74:8c:ab:3f:af:0d:68:1e:e2:bd:35:
         6f:6f:03:54:e7:9d:11:fc:93:d3:c1:eb:36:bc:b8:87:95:7b:
         56:14:31:69:85:0c:83:7c:26:0d:6a:a1:b9:54:88:40:80:1c:
         b5:46:20:0e:61:f0:7e:fd:d4:96:64:37:bc:47:3e:f3:9e:b2:
         e7:30:ed:94:38:1c:c6:71:97:ef:69:7c:d1:b9:65:c4:aa:4a:
         fd:bf:3a:bf:cd:02:45:c8:2d:47:a1:34:52:a6:e5:1c:b1:dd:
         d3:aa:d8:60:f0:fe:58:ee:ea:85:4e:6b:3b:e5:9c:36:cc:22:
         65:61:db:58:f1:1e:bf:74:d0:5a:34:36:0d:13:be:5d:96:04:
         58:d4:b1:47:72:e8:c7:1b:2a:3a:73:bd:76:53:37:1e:5b:75:
         38:a2:66:37:5d:9b:6a:1d:5f:07:08:27:24:4e:72:7f:27:8c:
         8e:f7:e7:4a:26:62:b5:ec:50:0a:e1:31:6a:0f:d1:7b:70:4b:
         b1:12:b8:5e:09:e4:57:eb:54:cf:e1:36:aa:e2:ba:ca:25:05:
         f8:ae:08:16:a9:44:21:fe:00:6d:e2:53:13:b9:1b:08:51:4f:
         2f:a6:d6:a1:31:2f:60:d7:47:5f:74:78:0e:6b:84:ca:65:a2:
         99:a3:be:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:50 2026 by rpki-client