Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
File:                     JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json)
Hash identifier:          DmcF+fVpMw/HLshGhxEl9vevOP/wfDjsixsnvTF/08g=
Subject key identifier:   C3:1C:C5:78:D3:A1:55:60:93:8B:76:A0:B4:B4:9D:50:C2:9F:BE:15
Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
Certificate issuer:       /CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Certificate serial:       019D25BABD2BE415680D5CA35065BCD80EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
Manifest number:          08F6
Signing time:             Wed 25 Mar 2026 16:01:28 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:28 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:28 +0000
Files and hashes:         1: 2l98OJUUaR9ta-P_Yl3BL25xX6E.asa (hash: epA5OEpKpO6J6HOrXhbe4eK7JMJAieEm7djq/rBNlXc=)
                          2: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: vsp2VruVZXs+y2BRVUjJl8V/bnhGBc4Qo2Yo3uT7M/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:bd:2b:e4:15:68:0d:5c:a3:50:65:bc:d8:0e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e
        Validity
            Not Before: Mar 25 16:01:28 2026 GMT
            Not After : Mar 26 16:01:28 2026 GMT
        Subject: CN=c31cc578d3a15560938b76a0b4b49d50c29fbe15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:98:83:43:47:20:00:4d:e1:da:b5:5e:a7:c8:
                    f3:ce:43:d4:5e:70:b4:4c:e7:69:fd:b9:52:8f:68:
                    3e:e3:49:cd:8d:09:3e:24:1b:36:3d:c0:02:6b:52:
                    2d:fe:54:91:63:2c:e0:16:1c:e3:4c:e8:94:ca:45:
                    97:c1:5c:d4:d2:3d:b8:cf:c3:96:6f:37:c0:9c:ac:
                    d8:dc:26:d1:5c:92:d7:d4:a2:13:a2:4f:f7:1e:e3:
                    05:86:09:c9:2a:c6:29:d0:44:ef:fd:1a:27:03:1c:
                    e7:45:c3:d9:7c:c4:0f:58:1e:1e:07:16:03:2e:6c:
                    e4:14:06:c2:4d:e6:9b:3f:d4:7a:7a:d6:20:29:5c:
                    02:ab:80:27:68:46:f5:5a:57:87:b6:47:83:e9:fd:
                    15:9a:89:49:7e:c9:50:fa:77:e8:79:c9:a3:87:6b:
                    d1:da:e7:51:a2:e4:34:56:f7:2c:d7:e1:c8:97:27:
                    62:2e:50:66:5c:4c:02:14:65:0d:02:89:d0:8b:9e:
                    e4:c7:fc:72:a6:c2:31:d7:e8:77:ab:ff:6b:80:c9:
                    93:3f:3d:2d:63:45:28:ba:49:0b:8b:ea:6d:af:3b:
                    70:80:1f:7c:49:16:89:e9:9c:97:0b:e9:12:a5:fc:
                    82:13:ac:7c:b6:aa:ea:f0:8b:e6:8e:9a:e0:d4:36:
                    89:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1C:C5:78:D3:A1:55:60:93:8B:76:A0:B4:B4:9D:50:C2:9F:BE:15
            X509v3 Authority Key Identifier:
                keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:72:7c:56:f1:57:35:fd:bb:b1:53:90:49:8f:77:23:1a:20:
         03:2e:5c:65:7e:65:95:50:92:14:89:5b:4d:d4:b2:c4:4c:ef:
         59:53:67:86:3d:bc:92:d3:bf:d0:6e:f6:28:65:5d:c0:0c:b0:
         d5:39:5e:c2:73:5d:de:48:5d:76:96:d6:f2:d1:b3:0e:62:b0:
         f3:46:93:e9:92:bc:ee:86:0d:3b:31:2e:9d:dc:9a:d2:87:ec:
         5a:fa:a8:4d:65:67:ff:21:ac:6d:53:d0:4a:4b:9a:18:59:4a:
         30:72:57:05:09:1d:08:54:87:36:40:a2:63:27:f2:c3:b6:5c:
         df:36:65:4a:2c:c8:da:35:06:c6:2e:9c:82:69:5a:90:a4:7a:
         12:bb:93:9d:62:f8:6e:be:fd:39:4f:f4:aa:47:87:56:3a:d1:
         d4:26:bc:1c:17:53:56:a4:da:22:ef:9a:4d:5d:26:3f:99:32:
         c1:63:e6:c4:63:9b:00:9e:e0:ca:98:9a:be:89:86:d4:24:9e:
         f7:35:4c:82:a2:1c:f7:2e:1a:f9:61:6b:66:c6:a0:88:e8:b7:
         f9:fe:fa:53:4e:2d:5a:df:ee:77:e2:17:18:60:91:bd:67:95:
         c6:2d:6e:af:05:85:49:54:ee:04:ed:15:ab:d6:84:f6:1d:f1:
         81:b4:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:06 2026 by rpki-client