Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File:                     Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier:          f+fL2yFvPkJZStUsKNPeM93YJwq/u0+IRFvM15Dl5YI=
Subject key identifier:   78:BB:95:DA:DC:B9:E9:64:DF:3A:2E:9F:1F:F5:B7:67:04:46:BF:ED
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer:       /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial:       019D27725F618995B1E45FC9B0FD882598F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number:          188F
Signing time:             Thu 26 Mar 2026 00:01:40 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:40 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:40 +0000
Files and hashes:         1: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: JxSng9bA03TWlAcLp6y4CKdJC/jV4gePSlrvLRusr20=)
                          2: LSc0zZT14Jo7EI4R2womLi4BWXw.roa (hash: /t+Y52iuLvhD9G1Nt7yXlLrqwqdhR3k7UUDI+0b7Jck=)
                          3: RJf7_BZh630LGIaBvGR48OfaOYM.roa (hash: vStLRSl6R9d4MF0nfflCotGK33XI7Q9JgJmQ0UQ6+co=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:5f:61:89:95:b1:e4:5f:c9:b0:fd:88:25:98:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
        Validity
            Not Before: Mar 26 00:01:40 2026 GMT
            Not After : Mar 27 00:01:40 2026 GMT
        Subject: CN=78bb95dadcb9e964df3a2e9f1ff5b7670446bfed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c3:6a:30:bc:89:1b:ec:5d:e9:de:dc:3c:08:
                    36:e9:e9:e2:c3:e8:a6:f3:3c:fd:07:0c:7e:06:88:
                    8d:3b:5f:35:18:7c:95:b0:4b:8d:27:f7:2b:f0:1f:
                    da:5e:60:9e:9f:87:b1:33:3c:8c:0b:d4:43:e2:9a:
                    8b:54:ec:7e:81:8d:d5:68:c8:c7:56:76:d6:bc:ef:
                    11:b0:2a:57:45:74:8c:60:d6:50:51:98:6f:c9:70:
                    a0:82:17:29:e1:1c:41:6a:d9:67:90:da:07:25:b0:
                    5c:00:2a:d6:8d:23:88:29:b0:14:92:79:2d:0c:6a:
                    a3:1e:05:57:da:a0:17:59:8e:51:53:1b:30:f7:76:
                    01:9d:75:4f:40:98:d3:37:c5:05:3d:bf:22:25:92:
                    29:4a:78:cd:e5:e3:ad:f6:2e:3f:02:8b:63:99:27:
                    88:2d:fb:ad:c9:be:c6:47:9f:62:e9:dd:e5:0c:6f:
                    e7:14:e4:43:eb:d5:82:38:95:3b:42:9d:c6:84:c6:
                    22:6b:b1:6e:99:8b:b9:96:fc:a7:25:cf:a2:34:8a:
                    3d:1c:7b:02:ef:38:15:ec:a2:0b:0d:d2:2e:f2:c9:
                    68:f1:d5:ae:a9:d3:28:bc:2a:51:b9:c5:85:af:b5:
                    4c:43:56:a1:a6:9a:96:0e:c0:15:3e:52:a9:88:e0:
                    f2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BB:95:DA:DC:B9:E9:64:DF:3A:2E:9F:1F:F5:B7:67:04:46:BF:ED
            X509v3 Authority Key Identifier:
                keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c9:50:4d:28:b9:f5:44:3d:3a:eb:cb:c4:d5:0b:93:01:8f:
         22:e8:93:09:a6:ba:a3:8a:6f:76:9c:aa:91:e2:c0:d7:ed:bd:
         08:63:a7:e6:fe:69:f2:50:09:5e:88:c3:fa:d9:e0:45:a9:a2:
         16:03:af:a5:6c:31:ef:83:d0:27:71:45:28:0a:fa:a7:2d:12:
         e0:d3:32:54:f4:08:7f:32:4f:b7:23:aa:5b:fe:d0:3e:0e:b5:
         db:ef:40:59:a6:fc:d5:01:a6:9e:ce:6f:18:b1:24:41:3c:c9:
         60:11:e6:ac:d4:af:54:31:1f:2c:77:87:fd:68:a5:f7:39:1e:
         7b:d5:9a:0f:b9:9f:2a:4a:35:c9:d6:d7:f1:c7:19:e9:f7:58:
         f2:2b:a4:22:c3:19:bd:68:cd:15:39:c8:c4:28:0a:5e:32:5f:
         c0:b9:75:2f:4a:27:05:c5:af:f6:10:86:0f:c5:76:27:42:71:
         0e:d2:b4:39:8a:1c:fa:84:a2:7e:28:8c:81:b0:e6:28:01:af:
         29:82:6e:dc:92:04:e0:54:07:66:b7:c9:ee:c8:23:d2:c9:6b:
         57:5f:a1:9b:d7:f9:e0:59:88:65:98:3f:0a:80:de:b0:79:97:
         54:b2:49:56:7e:39:2d:e6:8a:44:1e:27:0c:da:5b:71:a6:f1:
         c6:9e:3d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:28 2026 by rpki-client