Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
File:                     JMltOG189ZqZDTmU8N-Ek9_KSbM.mft (raw, json)
Hash identifier:          gEuRUpy2pwiZIlcOjXlvQPkbYXsq7sfROSE6/PXGrNg=
Subject key identifier:   89:A6:01:11:77:96:50:1E:C1:5A:F9:97:73:B5:CA:3F:65:F2:EF:F3
Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
Certificate issuer:       /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Certificate serial:       019D28166F44137BCEF24616922DF6C203F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
Manifest number:          0301
Signing time:             Thu 26 Mar 2026 03:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:52 +0000
Files and hashes:         1: 4C9QDlBnnXSHpJEM9ANlWAaSyEs.roa (hash: v92PqB+zER9mvZgRziC74aTu4c1aP8hKbPOOfRE55tQ=)
                          2: JMltOG189ZqZDTmU8N-Ek9_KSbM.crl (hash: MCvrd1Y4B4rTWcYmebRIJz8Acl0zcfe3NSs81CS1qfo=)
                          3: MkwV_p4ZiOf8Ia5ZHOPhoW4eKIU.roa (hash: JMKNPRf6e5NpGat9TNpevi/2X+CTiPo4/6Chd3GgN+E=)
                          4: oJUrlPiGpThaOu9GEMzKstl67oY.roa (hash: ZAsmCmye4OXdSzraVVSyaiBbg3Yr1OAE/9LISAwEOHg=)
                          5: s6R6PJpd-Myk3vNL1YiMPF0NHiY.roa (hash: 82ptaySXeh8vuN3858KZJT3/tNdBNq1pDFzQMH65GpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:6f:44:13:7b:ce:f2:46:16:92:2d:f6:c2:03:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
        Validity
            Not Before: Mar 26 03:00:52 2026 GMT
            Not After : Mar 27 03:00:52 2026 GMT
        Subject: CN=89a601117796501ec15af99773b5ca3f65f2eff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:52:6e:80:a3:5c:53:bb:b9:71:9b:d1:e2:
                    45:f5:a1:e6:b1:7f:df:cf:41:77:74:01:d0:5c:9b:
                    b7:17:44:2f:68:34:dc:a4:48:23:1b:4f:5c:ae:27:
                    14:83:38:8a:f1:ad:37:43:ba:54:7a:52:75:e5:9b:
                    c7:ca:c0:3a:e9:d3:4a:19:92:ad:af:97:83:43:c9:
                    ca:3f:22:a9:d8:2b:d0:b3:ce:f9:44:15:84:36:01:
                    26:72:0e:d7:c1:2c:30:f1:80:ca:8a:38:d2:0a:c4:
                    b5:a5:58:8a:03:8d:d9:4f:40:ad:ab:ba:a0:8e:f2:
                    ac:50:6a:90:ee:ab:91:99:96:e0:43:dd:9e:e5:d3:
                    8c:c2:87:ef:e6:cd:d4:8a:d5:94:87:a4:a0:ab:d7:
                    dd:56:f0:af:40:08:ee:c6:81:e7:a4:7b:ee:bc:0a:
                    78:c1:06:3d:f2:c2:6c:a9:be:48:60:23:b7:f8:af:
                    32:53:a3:7a:bb:d9:5c:0f:8b:35:a1:8d:e1:e2:4d:
                    d8:e2:4d:af:40:18:23:ad:48:2d:7a:8b:18:41:46:
                    ab:77:b4:6c:ba:84:e0:37:19:8b:72:e2:c9:93:8e:
                    9d:72:f8:ca:3d:a0:4c:73:fe:16:2b:ce:08:fa:b3:
                    f0:56:b2:98:29:17:06:1f:52:38:c3:36:44:de:46:
                    7b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A6:01:11:77:96:50:1E:C1:5A:F9:97:73:B5:CA:3F:65:F2:EF:F3
            X509v3 Authority Key Identifier:
                keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:c0:92:e5:20:be:76:e5:b4:2f:06:9c:91:c2:29:93:6c:90:
         f8:b6:84:c7:2e:e8:f8:d9:50:3c:ca:bc:90:57:8e:9a:89:0e:
         12:a2:55:28:78:97:27:12:dc:5f:ff:e7:51:61:70:4c:f1:63:
         a4:86:6b:11:ed:9b:33:d6:e5:34:f4:59:f0:d2:06:50:6a:a7:
         98:e8:13:7a:43:b2:db:62:e1:61:d4:e7:f9:cb:ae:6f:a7:0c:
         b9:5c:14:b5:aa:9a:8b:b2:64:05:3b:25:a7:80:65:3a:ff:4c:
         c8:e3:87:62:aa:14:82:80:73:76:d0:ab:40:6b:a0:c1:f2:97:
         9e:47:90:e6:54:4e:3e:10:29:dc:8f:1f:46:dc:f0:56:34:96:
         0c:40:9a:b7:b6:b0:53:03:40:51:c2:19:49:01:50:8b:4e:1e:
         e2:6d:e2:b3:54:35:de:1c:34:fc:37:f9:9c:71:20:f7:d6:e1:
         95:62:7a:b2:c0:36:fb:f5:f7:b3:18:7b:b3:2a:ee:03:24:25:
         cf:c0:35:6e:be:ee:94:ee:a8:74:9e:3a:7d:49:72:95:08:65:
         cc:e0:d0:a5:37:98:d6:6c:fe:03:0b:60:ba:a8:34:4c:48:97:
         1d:2d:9c:fa:88:3a:98:ca:f6:57:03:16:03:d4:85:3b:3b:93:
         bf:64:f1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:43 2026 by rpki-client