Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
File:                     jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft (raw, json)
Hash identifier:          93X2nzSBwIIJxUj4P5OZagl9iu2j1gRxiUHOiRM+H/0=
Subject key identifier:   93:83:E6:53:DD:42:90:3E:FE:6B:FF:9D:B0:6A:0D:8D:E7:9B:F7:31
Authority key identifier: 8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
Certificate issuer:       /CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Certificate serial:       019D2583B6349F1D5EA208CA937F8D567037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
Manifest number:          0E71
Signing time:             Wed 25 Mar 2026 15:01:21 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:21 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:21 +0000
Files and hashes:         1: jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl (hash: FJIV0EQQA96YtGOggOnsySvXPiajYMff4DPYeXSkLpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:b6:34:9f:1d:5e:a2:08:ca:93:7f:8d:56:70:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
        Validity
            Not Before: Mar 25 15:01:21 2026 GMT
            Not After : Mar 26 15:01:21 2026 GMT
        Subject: CN=9383e653dd42903efe6bff9db06a0d8de79bf731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:0e:43:e2:96:4c:d5:cd:ab:57:07:4b:ee:
                    7c:19:44:62:4b:ae:71:ec:de:9b:7f:52:40:a8:b6:
                    d0:52:45:93:c6:51:9d:9c:0d:b7:3f:a7:68:2a:a1:
                    3f:ee:dd:1f:a6:b9:fc:ed:6b:8b:75:c3:4d:7e:11:
                    07:0d:ef:79:38:34:c9:70:31:b4:c8:90:e8:5b:b8:
                    72:35:83:41:94:cd:d5:d3:72:a9:0c:f3:72:e4:c0:
                    8e:2d:06:c2:54:b9:03:b2:d1:d9:6f:82:6c:a6:4f:
                    c3:f9:62:59:d3:4a:8c:58:da:4f:ca:20:4d:d2:e1:
                    54:1d:ba:c2:b9:2f:e3:bf:22:66:8d:2e:e8:26:30:
                    15:cb:7b:ac:73:70:8a:d7:6b:03:4e:14:dd:af:b2:
                    96:6d:83:ff:3f:5e:44:26:d5:1f:1a:9d:d3:bc:c4:
                    cb:36:a8:65:02:28:f1:cb:f1:e1:85:24:6d:0f:3a:
                    dc:5a:93:1e:06:cb:ef:1f:c5:dc:5c:f8:60:eb:7d:
                    a2:3a:4d:f8:e0:9a:7c:c8:8c:14:35:37:ad:dc:4b:
                    0f:cc:fb:11:f8:58:b2:56:c3:ce:d1:14:05:ae:80:
                    98:16:f0:48:75:a4:89:f8:d1:fa:ae:d9:f1:b0:00:
                    1d:ab:79:16:2d:b4:01:c8:f4:6f:74:70:43:d6:76:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:83:E6:53:DD:42:90:3E:FE:6B:FF:9D:B0:6A:0D:8D:E7:9B:F7:31
            X509v3 Authority Key Identifier:
                keyid:8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a8:12:8d:a7:91:6e:96:93:eb:91:91:a8:1f:7b:f8:6e:d3:
         6a:fd:08:6d:98:06:3f:bf:c5:30:15:0f:55:5c:70:ab:4e:d5:
         ac:98:00:f2:a2:5b:f1:d5:24:ca:38:44:41:76:6c:4d:a8:ee:
         76:ad:ec:c3:bc:a1:9c:91:3f:6f:9e:42:76:eb:7d:75:8e:c9:
         2e:dd:74:ca:b8:cb:bd:ec:98:d8:99:20:a8:da:74:98:a0:c2:
         1b:25:25:41:44:34:84:f5:de:d1:a2:01:9b:f3:56:eb:1c:4f:
         a5:91:64:42:58:79:10:dc:fa:75:02:74:cf:d9:c8:63:f3:e1:
         44:4e:65:91:ac:c6:c6:3e:b2:1e:57:fa:0a:dd:29:0d:00:01:
         5a:f8:d4:1b:03:c7:a8:ac:a2:f0:04:aa:07:79:9f:b6:dd:a8:
         15:70:25:f3:e4:bc:cd:6e:a1:b3:0e:ce:f6:d6:a0:ef:72:47:
         fd:ca:83:cb:30:93:1b:7d:aa:10:ef:ea:23:62:fa:2b:f4:65:
         01:99:77:29:2e:dc:9a:76:52:d3:c7:26:42:c3:37:af:1f:c2:
         36:7d:e4:fb:1f:90:67:52:14:16:92:61:e1:c7:48:9c:6d:c2:
         ca:9a:04:83:f5:ee:00:14:48:00:71:13:e9:00:a7:83:40:a2:
         6b:19:db:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg7Y0nx1eogjKk3+NVnA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDRjNjE1ZTBkYjBjNWI5OGE4MGIyNWI1MmQ4OTMyZGJm
ZDA1ZGYwHhcNMjYwMzI1MTUwMTIxWhcNMjYwMzI2MTUwMTIxWjAzMTEwLwYDVQQD
Eyg5MzgzZTY1M2RkNDI5MDNlZmU2YmZmOWRiMDZhMGQ4ZGU3OWJmNzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNgOQ+KWTNXNq1cHS+58GURiS65x
7N6bf1JAqLbQUkWTxlGdnA23P6doKqE/7t0fprn87WuLdcNNfhEHDe95ODTJcDG0
yJDoW7hyNYNBlM3V03KpDPNy5MCOLQbCVLkDstHZb4Jspk/D+WJZ00qMWNpPyiBN
0uFUHbrCuS/jvyJmjS7oJjAVy3usc3CK12sDThTdr7KWbYP/P15EJtUfGp3TvMTL
NqhlAijxy/HhhSRtDzrcWpMeBsvvH8XcXPhg632iOk344Jp8yIwUNTet3EsPzPsR
+FiyVsPO0RQFroCYFvBIdaSJ+NH6rtnxsAAdq3kWLbQByPRvdHBD1nY1zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOD5lPdQpA+/mv/nbBqDY3nm/cxMB8GA1UdIwQY
MBaAFI8ExhXg2wxbmKgLJbUtiTLb/QXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandUR0ZlRGJERnVZcUFzbHRTMkpNdHY5QmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80YjdmYTgtZWIxZC00NDQxLWFhMTgt
ZjJiMGIyN2ExY2I2LzEvandUR0ZlRGJERnVZcUFzbHRTMkpNdHY5QmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80YjdmYTgtZWIxZC00NDQxLWFhMTgtZjJiMGIyN2ExY2I2
LzEvandUR0ZlRGJERnVZcUFzbHRTMkpNdHY5QmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAagSjaeR
bpaT65GRqB97+G7Tav0IbZgGP7/FMBUPVVxwq07VrJgA8qJb8dUkyjhEQXZsTaju
dq3sw7yhnJE/b55Cdut9dY7JLt10yrjLveyY2JkgqNp0mKDCGyUlQUQ0hPXe0aIB
m/NW6xxPpZFkQlh5ENz6dQJ0z9nIY/PhRE5lkazGxj6yHlf6Ct0pDQABWvjUGwPH
qKyi8ASqB3mftt2oFXAl8+S8zW6hsw7O9tag73JH/cqDyzCTG32qEO/qI2L6K/Rl
AZl3KS7cmnZS08cmQsM3rx/CNn3k+x+QZ1IUFpJh4cdInG3CypoEg/XuABRIAHET
6QCng0Ciaxnbmw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:51 2026 by rpki-client