Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
File:                     mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft (raw, json)
Hash identifier:          8njctPlTywcHxL3Wn86wzW+iQT/loOPoKFYI5kDwmt8=
Subject key identifier:   CF:B9:FD:10:FE:73:87:E6:4E:A2:41:DC:ED:65:24:53:C0:53:A7:1D
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Certificate issuer:       /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial:       019D28F2BA14F51C556AD783444851414F0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
Manifest number:          13FD
Signing time:             Thu 26 Mar 2026 07:01:29 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:29 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:29 +0000
Files and hashes:         1: HXYHaazK-agsXQtrAp4TdIiFPCw.roa (hash: 8c6r2+HmrNIxR72NP8l7eeROpR6oXO6CEMfBkvZx7+M=)
                          2: IDDMpCjqYwAGI-peC47tdVFpVME.roa (hash: Wn6wDDm3PxHp8jcuiJeMcmVpL1iWQEDeRHHD8I7chpQ=)
                          3: Ic-s3BxEKNsh-PbVJpc1Xz23AYs.roa (hash: oUF2uyrZqrkZx39wCYRgq/1hjdMckUA4FiG0GID4cJw=)
                          4: hnzz_PU7efQx6H153s8gnlp79IY.roa (hash: n+Gty9V7GKTlH1GHsjEfP3vQhmL0KYOhTaCWQIcvZc8=)
                          5: mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl (hash: tC5i6WJ3XQwCeW1Weq3aV9E999dayjIU81i1Kia0w+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:ba:14:f5:1c:55:6a:d7:83:44:48:51:41:4f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
        Validity
            Not Before: Mar 26 07:01:29 2026 GMT
            Not After : Mar 27 07:01:29 2026 GMT
        Subject: CN=cfb9fd10fe7387e64ea241dced652453c053a71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:33:c5:79:8c:c2:da:98:79:3e:88:24:bc:66:
                    a0:b2:ee:05:f9:ea:13:dd:3b:e6:95:5e:bd:af:2f:
                    d4:6d:79:e9:88:7c:2f:2d:0c:2f:9b:e4:b1:5a:08:
                    03:01:a1:79:52:b5:f7:35:73:de:75:49:da:a8:7f:
                    d4:f3:c6:bf:5d:87:c5:2b:19:b4:18:c9:cc:15:4d:
                    18:1c:9f:42:b8:2b:26:19:2d:50:e8:d6:5a:15:db:
                    bb:64:15:15:31:24:cc:2a:c2:62:fc:43:93:95:57:
                    43:a0:d0:7a:c4:53:a4:9c:d3:93:5a:68:de:d0:ca:
                    f6:6e:7e:4c:58:79:78:f5:5b:bb:60:da:29:d7:cd:
                    b1:c9:81:cb:e7:26:3c:e1:66:4e:6f:72:9a:a6:cc:
                    fc:de:a6:2e:0e:54:45:2e:35:e0:c0:ad:5c:c3:2d:
                    59:61:3d:4c:cb:4b:e0:2e:d7:4a:69:50:84:a6:54:
                    5e:ed:ff:d3:90:af:bc:37:4c:96:a8:a1:ee:7e:e9:
                    ed:c9:0c:89:be:eb:f9:60:4f:d0:68:1b:77:4b:94:
                    86:0e:3d:87:5c:7b:a6:8b:2c:fb:b7:87:dc:72:65:
                    2d:9c:1e:42:29:0a:b4:12:d8:d9:f7:b6:8e:d2:81:
                    f4:be:d2:3f:14:63:c1:38:dd:a7:92:9d:e8:e0:0d:
                    27:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B9:FD:10:FE:73:87:E6:4E:A2:41:DC:ED:65:24:53:C0:53:A7:1D
            X509v3 Authority Key Identifier:
                keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:13:bf:b1:96:87:46:06:f9:20:1d:c4:80:e1:73:86:c6:af:
         70:2f:31:b5:2b:65:b4:bf:1d:7f:10:0e:d4:f6:f7:aa:9f:c4:
         6f:c9:23:58:61:a2:91:d9:06:3b:ba:29:7b:b0:4b:56:bc:f3:
         ac:be:c3:3d:5f:32:e6:5c:e5:a2:cd:02:ce:51:7a:52:05:1f:
         99:22:8b:74:64:8e:f9:b9:a3:3c:77:36:ec:4e:44:18:38:c8:
         d4:3e:04:6a:ba:dc:12:9e:cf:bc:26:1a:d6:60:b3:52:ee:7e:
         28:cc:8f:cd:03:c7:21:a2:62:fc:33:80:af:67:63:5c:13:e0:
         9a:64:19:2b:61:2c:56:ce:66:8e:1e:f4:7a:24:77:08:d1:79:
         ab:94:25:5d:31:ec:4f:51:9b:25:48:dd:b4:fb:c8:fa:b0:9c:
         b7:6b:15:27:32:ac:ac:44:72:c2:4c:de:c9:05:2e:e7:19:fe:
         d0:9a:4e:5e:cd:d7:9b:ec:f6:88:88:a4:b5:d9:00:a8:b5:54:
         a9:c6:66:c0:b4:f6:ce:27:ee:71:4b:59:9d:66:1a:85:c1:a9:
         45:f5:9a:c2:eb:bf:b9:fa:45:30:b8:25:bc:fb:ee:7d:00:6e:
         06:8b:82:ae:6d:e2:38:64:32:11:88:a3:4d:8b:a0:34:8e:97:
         d3:22:28:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:04:02 2026 by rpki-client