Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
File:                     JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft (raw, json)
Hash identifier:          cxAJ+FAD/x2vJV7xPLZ33MfYE7QoSi2MkAHldDTDzXE=
Subject key identifier:   C8:E0:57:8A:11:84:95:3D:B7:A6:1E:5B:1F:71:78:68:DF:47:A4:A5
Authority key identifier: 26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B
Certificate issuer:       /CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
Certificate serial:       019D3909E94DC5E229E9A78595B43B052269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
Manifest number:          0F6F
Signing time:             Sun 29 Mar 2026 10:00:43 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:43 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:43 +0000
Files and hashes:         1: JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl (hash: P753mFoWAV5xk7BaD5xYsjtLUGzb25qH2s/jXT0Whb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:e9:4d:c5:e2:29:e9:a7:85:95:b4:3b:05:22:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
        Validity
            Not Before: Mar 29 10:00:43 2026 GMT
            Not After : Mar 30 10:00:43 2026 GMT
        Subject: CN=c8e0578a1184953db7a61e5b1f717868df47a4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:13:1f:24:ec:50:1c:8e:80:d2:ca:13:3f:a2:
                    aa:4f:4f:c6:6e:be:f5:7c:f8:50:c2:71:66:91:d8:
                    e9:0f:b9:21:aa:37:7d:9a:44:54:b9:ff:b1:54:e3:
                    8a:95:a3:fe:ff:20:c8:24:05:ce:63:db:a4:2a:0d:
                    f3:62:12:03:49:fd:b6:d5:9b:a3:1e:84:55:0b:93:
                    35:f6:d2:2c:1e:2e:76:9e:80:db:0c:32:5c:af:5b:
                    89:fc:a9:84:cb:90:7d:5c:48:92:b0:be:20:cc:99:
                    02:85:46:f3:85:f8:38:62:f8:97:9f:b2:86:4d:a1:
                    1b:c5:42:d7:fb:1f:11:37:e7:9d:c9:57:fa:90:67:
                    db:ee:40:63:52:51:02:a4:41:6a:5f:99:1c:f1:54:
                    0f:73:f7:21:e9:7d:b8:ce:a5:61:dc:51:45:fa:5f:
                    fe:92:d4:b2:1d:93:87:b6:1b:b7:30:2d:34:ff:c9:
                    62:bd:ab:8b:13:82:68:76:9c:15:51:25:26:64:ee:
                    1f:0d:73:db:ae:a9:9a:9b:69:97:ea:74:b3:42:90:
                    87:c7:9c:16:01:d4:a5:e7:a6:19:9d:9c:15:71:95:
                    3a:75:75:b4:8d:d7:d9:a6:10:4e:55:d2:41:d4:e1:
                    8c:cb:29:a6:b4:a7:ef:81:31:1d:f6:e3:b6:e0:73:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E0:57:8A:11:84:95:3D:B7:A6:1E:5B:1F:71:78:68:DF:47:A4:A5
            X509v3 Authority Key Identifier:
                keyid:26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:63:aa:da:7b:17:22:de:9a:34:4f:05:8e:ac:02:31:ed:
         79:ef:5e:74:36:d1:0b:0a:b1:ea:2c:df:ac:c2:85:d1:5d:93:
         9c:ad:7d:52:f4:ae:35:36:24:14:2a:8d:78:34:1b:da:92:f6:
         41:1c:5d:12:8c:f3:f5:8f:8b:8a:1c:ee:36:b4:87:46:b4:1b:
         32:74:e0:e4:ef:3a:90:70:c5:ca:6a:af:1a:86:06:32:f0:29:
         92:e3:95:07:83:0a:03:52:65:1e:d2:8b:cd:5c:49:18:7e:80:
         06:4e:3a:43:ee:f2:d7:4a:2c:e6:11:b7:f7:ed:45:96:83:0a:
         3d:36:06:86:98:86:19:0c:cf:0e:c8:ac:f1:f5:da:4b:0c:28:
         f5:22:93:ff:6f:c9:fa:dd:13:5e:84:09:b2:29:1f:45:e5:a2:
         2b:60:97:51:45:b6:af:cd:55:6b:83:69:d6:40:52:44:24:10:
         ec:2f:71:77:3e:06:da:66:b9:72:48:bc:fe:b4:dd:68:88:0f:
         94:d1:b3:ae:e3:08:67:87:77:21:2e:46:6f:85:8d:0b:7f:c7:
         4d:fb:51:74:85:6d:8d:da:63:00:8f:ea:a9:b7:03:7a:a5:a7:
         aa:8f:e8:93:7a:79:5c:b3:23:41:1f:e4:c2:3a:dc:72:f9:06:
         35:77:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:49 2026 by rpki-client