Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
File:                     jHtuGDyNUsxGBbqLXa3cZjJik-w.mft (raw, json)
Hash identifier:          +QLo0pAtz76amh0rK0WDaqgEO6cZ4+CwtNUTqC4fHPg=
Subject key identifier:   EC:FC:17:9C:81:24:79:DC:A4:A9:02:C9:DB:39:74:86:BF:D3:D1:3C
Authority key identifier: 8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC
Certificate issuer:       /CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
Certificate serial:       019D3940D57B9873ABE0EAF948869FAEC83C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
Manifest number:          180C
Signing time:             Sun 29 Mar 2026 11:00:43 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:43 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:43 +0000
Files and hashes:         1: W9QORcGeUP3iLWU0X9nRIs0WJkY.roa (hash: hIl0UXb0kykXac0sKp+S7Vm2Hm+hm3Ey7N0z0BeyVKw=)
                          2: jHtuGDyNUsxGBbqLXa3cZjJik-w.crl (hash: hqa+AHLZC28nIOEL3q2bE4ZI/0i9oaIm1YpOrxkRqW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:40:d5:7b:98:73:ab:e0:ea:f9:48:86:9f:ae:c8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
        Validity
            Not Before: Mar 29 11:00:43 2026 GMT
            Not After : Mar 30 11:00:43 2026 GMT
        Subject: CN=ecfc179c812479dca4a902c9db397486bfd3d13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:51:3e:39:73:5c:e7:9f:e6:43:8f:19:37:
                    63:fa:5f:41:de:77:8a:f8:f8:ef:73:6e:dc:99:9b:
                    c1:b4:e5:03:51:eb:f9:ea:24:eb:41:fa:d3:9e:4a:
                    95:f9:1e:76:69:4b:e9:2a:d7:d9:e4:b9:dd:11:4e:
                    46:ef:e3:5f:3d:13:f7:bc:b1:74:f2:fc:0c:77:a7:
                    bd:cd:f2:ff:9c:4d:2b:b2:92:5c:3f:07:f5:ae:90:
                    5e:d3:dd:3a:6c:7a:e9:ae:c2:8f:65:8d:ec:e0:7e:
                    9d:6d:54:74:70:80:f1:7a:4c:5f:04:76:59:17:1d:
                    dc:74:ac:c0:77:bb:7a:d6:05:65:8e:62:42:c9:88:
                    69:59:e3:2f:b9:75:31:ce:3b:03:f9:bc:0b:79:ae:
                    4d:b2:1a:66:43:d0:31:68:69:75:f0:71:73:26:5a:
                    77:cd:a4:e6:d3:d8:4d:d1:26:0f:d9:c6:68:14:c3:
                    37:6a:8e:c3:04:ae:a0:5b:46:99:ee:5b:25:89:ce:
                    52:9b:5c:b0:c3:6d:12:94:f1:70:a7:ea:70:96:5b:
                    8b:dc:59:c3:fc:12:0a:9c:c5:56:b9:83:74:13:e1:
                    58:3d:dc:2a:7a:cc:c4:96:b6:d2:e6:39:13:44:68:
                    50:db:b2:6b:80:6e:d2:0b:30:3c:9e:09:ac:de:a0:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FC:17:9C:81:24:79:DC:A4:A9:02:C9:DB:39:74:86:BF:D3:D1:3C
            X509v3 Authority Key Identifier:
                keyid:8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:96:04:df:ee:a0:0f:f7:14:9d:36:2e:ef:41:b3:8f:38:8b:
         f8:85:0b:0f:7f:40:aa:a9:e1:02:ba:70:15:df:79:df:3f:20:
         ca:3f:b0:fa:c8:0a:13:22:0d:f2:18:6f:07:2d:19:f5:78:96:
         3d:a7:83:6c:cd:30:37:7d:42:5c:2f:71:9d:c7:ce:30:9e:47:
         f4:4a:06:a8:a6:1d:54:a8:f3:86:6a:f5:30:76:1f:c8:76:35:
         ee:53:71:4b:d6:00:8a:06:1c:33:82:91:ea:f5:86:8f:d8:3d:
         86:c6:e8:8d:21:ee:19:70:86:03:17:b9:89:68:18:4b:a9:44:
         91:85:3d:36:0b:59:eb:b6:ba:a4:41:c2:6b:0a:de:ba:96:e1:
         df:89:9f:91:fb:92:98:ae:23:6f:3f:3c:f2:70:cd:da:b2:9f:
         a6:f2:c7:4a:1a:14:0b:71:b9:49:eb:95:15:6c:2a:27:bf:7b:
         b9:f6:27:b3:17:d3:a7:ed:89:de:13:c0:a1:7d:c3:9b:af:a5:
         65:4f:0b:93:2b:ed:5c:aa:44:a4:57:d9:f7:70:6d:fc:03:1b:
         e4:30:52:24:4a:4f:8e:5c:e4:28:9d:ca:b7:86:a1:6d:9b:81:
         22:51:a9:05:01:a3:85:35:2c:e0:f3:d8:b4:08:70:8f:26:7f:
         94:a1:f2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:16 2026 by rpki-client