Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
File:                     J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft (raw, json)
Hash identifier:          UoAlETz0Oy67pDv6juzb9gMjLdmrRhvX/nb1u6Ox358=
Subject key identifier:   B0:93:AE:B9:E5:D2:0B:18:5B:98:07:8E:75:48:A2:30:43:9A:4C:B6
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Certificate issuer:       /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial:       019D273A82D52C8E56A8B5138730F8D9F2A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
Manifest number:          16C5
Signing time:             Wed 25 Mar 2026 23:00:39 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:39 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:39 +0000
Files and hashes:         1: 1zrQOkN9Z90Pr68K5rn8gfvEwpo.roa (hash: 6SGeBYB7qPaByHLVFjzOEKr5KcRtq2GA3JucBrXz448=)
                          2: 4oer0NIy8gLaot91RUTGaO6LrAo.roa (hash: yRr8CCQ/YtEMqUBMAHOSC+xneg3hncFxDqmVEzIn8BA=)
                          3: J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl (hash: v/VeOxzDghrWVXYXueQDVCfrbrfOMBGRnQwrvWCiQwY=)
                          4: eWHL2KDrJjJ8ZSeJDpUQ4WKF2Gk.roa (hash: 7JmTL04KBPq1kd3qGXa89Y/80yoHChM4TTSdZFS3a48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:82:d5:2c:8e:56:a8:b5:13:87:30:f8:d9:f2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
        Validity
            Not Before: Mar 25 23:00:39 2026 GMT
            Not After : Mar 26 23:00:39 2026 GMT
        Subject: CN=b093aeb9e5d20b185b98078e7548a230439a4cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d7:fe:8c:4b:ee:3e:2e:74:4e:2a:87:d3:2d:
                    06:01:1c:14:e0:19:b6:85:65:92:0a:3a:d0:e5:79:
                    af:68:95:61:e8:36:0b:83:27:a1:a9:ce:3c:51:4b:
                    2d:94:f6:3a:0a:00:45:bf:2b:1c:c6:f0:2b:b2:2c:
                    3f:64:0e:7d:d3:9b:44:d8:d9:d4:3a:f2:91:d3:de:
                    60:ce:38:10:75:ae:98:bf:44:f2:56:a6:ab:f3:f2:
                    47:3c:ce:2f:91:f1:b9:81:be:c6:3f:35:3f:e5:39:
                    6f:f7:3c:53:0a:43:04:3c:60:17:dd:af:7b:66:e6:
                    b4:f8:c2:15:93:80:38:b0:eb:1c:90:86:23:e5:f8:
                    c2:c4:f2:69:42:0b:8d:e1:06:31:fb:1a:4a:af:c1:
                    80:95:5b:25:24:a7:dc:ed:26:c4:06:64:ff:68:3a:
                    c4:08:fb:3b:40:cc:27:3b:61:f8:6a:ad:f7:15:a1:
                    b2:11:f1:b1:69:fb:d9:80:d7:e4:c1:74:f8:5e:19:
                    2f:03:c2:f5:71:d7:18:5f:31:d7:13:9d:68:8a:11:
                    03:e5:d1:bc:86:ed:c6:72:f6:58:c5:e0:de:22:42:
                    ce:51:e7:36:34:da:37:81:81:a7:d9:fd:b6:a6:77:
                    90:8a:b1:5e:f9:3a:da:ba:94:d3:7f:1e:f6:46:da:
                    03:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:93:AE:B9:E5:D2:0B:18:5B:98:07:8E:75:48:A2:30:43:9A:4C:B6
            X509v3 Authority Key Identifier:
                keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:32:03:21:85:d5:f7:13:f9:9b:2d:01:a7:38:bf:ac:32:1b:
         22:a7:c2:40:53:99:71:8d:19:5d:72:34:a7:b1:5e:18:16:64:
         26:be:34:09:9d:d0:0f:a4:b4:7d:5c:e5:bd:c2:fc:12:1b:06:
         c2:67:a9:77:d2:1f:72:ce:95:dc:6d:b5:d1:a9:4d:e4:3e:10:
         72:fc:8c:fe:79:6e:c8:8c:d5:2c:09:23:4d:54:e1:c8:91:49:
         3c:5a:bc:a3:57:1a:13:17:92:ba:2a:d3:94:00:ce:84:e3:4f:
         ee:a5:59:dc:0d:d4:8d:d0:fb:a3:31:f6:3f:f4:44:f5:b6:89:
         d9:5e:57:4a:f3:b9:80:64:27:8f:26:ab:32:bd:77:d5:e6:a2:
         57:03:36:50:10:6c:97:da:25:23:ba:ec:da:64:09:d7:74:2f:
         48:1a:37:b0:40:f9:a9:92:8e:c3:2b:ff:51:de:6a:8a:33:8b:
         8c:51:55:90:00:28:38:2a:52:bf:5a:c0:a0:4d:d1:23:19:cb:
         bb:cd:c2:4e:0b:72:25:da:5a:14:4d:70:3d:80:34:86:c4:73:
         71:50:71:fe:25:fd:06:c1:0d:23:4b:d6:72:90:f1:4a:e5:8b:
         c1:1f:c0:43:e5:88:a2:84:35:d7:52:d9:ca:6a:eb:8b:9e:d2:
         5c:bc:f8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:01 2026 by rpki-client