Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File:                     jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier:          tcBRqC43IDx+ZDeDONAsGP4fvKek9a30TebddldYzV4=
Subject key identifier:   C3:DE:43:51:AF:1B:42:4C:FD:46:AD:B7:CA:F1:2A:95:69:BC:11:1F
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer:       /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial:       019D28BB5379054CA6906E842C23CEDEC87A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 06:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:58 +0000
Files and hashes:         1: Qx0ddBKlSvnACpzjugQJrfWkEs4.roa (hash: aJD4jYhJCqk7+8Q4F//sAqddVJklJ5JHNsKetWjBmH4=)
                          2: dElS2LHmvzOJL3jvJ8t1FWNOXRQ.roa (hash: pKoUZvmEW4liSwgxySiejWpEorumEVEvbMzgYr8Wr84=)
                          3: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: Zxuap924ZndKhTO3onbgzyQLSMR3gm7XgKgDTiv2BQM=)
                          4: lKM1gHFyylwdRUKMaY5fLo9cQo4.roa (hash: s0i27z26ycWaj2Sw/lN75r12wdUfV6zW3S6uMy4zqRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:53:79:05:4c:a6:90:6e:84:2c:23:ce:de:c8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
        Validity
            Not Before: Mar 26 06:00:58 2026 GMT
            Not After : Mar 27 06:00:58 2026 GMT
        Subject: CN=c3de4351af1b424cfd46adb7caf12a9569bc111f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a4:e3:3f:68:7f:ea:02:47:64:96:90:e6:6a:
                    8c:58:48:ff:93:02:d4:bb:c6:dd:f4:30:4f:df:c9:
                    05:52:3a:cc:1a:ab:9a:31:a5:82:0a:50:71:6a:f8:
                    90:16:7c:02:ac:e8:ec:b0:d5:8e:82:2d:b8:03:79:
                    13:f7:e4:25:89:87:19:23:0d:0a:77:4f:87:e1:66:
                    79:3f:56:21:cc:a7:03:43:5c:a3:68:b9:a6:b7:48:
                    06:9f:c8:14:7e:cc:1f:55:4b:50:8d:b7:c8:81:37:
                    20:2c:da:6c:d0:06:0f:00:fa:92:31:04:ac:a8:0e:
                    e4:f0:d2:38:a8:92:f4:aa:8e:65:80:5a:60:e7:39:
                    76:2a:1a:0c:ad:6e:5f:4c:d4:ff:6b:56:8e:bd:cd:
                    ce:6e:66:cb:5f:ca:27:8a:9b:82:63:e3:ab:d2:74:
                    28:f2:57:89:40:c2:7d:25:02:9a:00:25:61:cb:1a:
                    a9:f6:ff:db:8e:6a:78:49:cf:30:b6:49:5c:f9:e5:
                    1c:38:5d:6c:6a:4e:5b:c8:03:cb:b1:19:13:cd:9b:
                    ce:2c:b4:f7:cd:f5:ee:80:59:e1:8d:83:04:50:76:
                    44:b9:a1:5b:8b:2b:ec:78:15:89:ea:d4:88:40:1c:
                    7d:60:87:7f:29:6f:fd:a6:fe:e2:99:bf:6a:bd:9c:
                    7f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DE:43:51:AF:1B:42:4C:FD:46:AD:B7:CA:F1:2A:95:69:BC:11:1F
            X509v3 Authority Key Identifier:
                keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ba:60:b1:14:15:29:55:d9:31:9e:8e:be:6d:89:58:eb:8b:
         0b:c7:0a:56:60:d9:ea:4f:27:a8:73:e5:eb:0d:5b:ae:1d:a3:
         a8:c6:0c:a3:27:25:cd:90:2c:69:d1:19:c7:a7:fe:e1:33:f4:
         74:a3:12:53:db:94:7a:9b:17:98:6a:3c:79:8b:c4:b3:60:74:
         6e:c9:19:99:39:15:06:6e:18:9f:11:53:a6:1b:e4:c7:5d:50:
         ca:8d:66:b5:b0:21:55:a1:09:73:10:20:88:01:a8:55:b0:4c:
         cd:c0:9f:c1:2a:72:6b:1c:f5:03:a1:a4:c3:a3:9c:b6:92:0b:
         72:d4:50:e0:a0:7e:ef:64:98:53:60:8c:49:80:4b:f7:0e:06:
         a6:67:f9:44:e8:12:ce:f4:0a:05:0d:b2:e8:93:0c:c7:f4:48:
         d5:ed:0c:88:fa:a5:8b:fe:8b:81:2a:0c:6b:fb:28:d9:71:66:
         9c:eb:4e:27:7a:33:a0:59:5a:50:35:16:80:8e:41:32:88:98:
         3b:9a:47:d4:54:14:e3:6b:31:ff:72:43:bf:1d:09:48:99:96:
         5e:1e:c8:99:74:0a:9f:9e:fc:f5:7e:69:a4:71:9a:d8:7e:fe:
         53:17:fc:9f:f5:31:b8:49:bf:3a:e6:f5:20:05:64:82:75:c7:
         ba:48:c0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:16 2026 by rpki-client