Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
File:                     jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft (raw, json)
Hash identifier:          gVL+oL4okA1ZvMa4ANk/vHf47qZpDz87i7XgMGw9dSk=
Subject key identifier:   FB:7D:08:82:A8:92:03:99:54:93:AF:B1:34:27:17:57:FC:4E:7A:5C
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Certificate issuer:       /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial:       019D38D3785411CBFAC482D31C9B7890E2F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
Manifest number:          1897
Signing time:             Sun 29 Mar 2026 09:01:16 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:16 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:16 +0000
Files and hashes:         1: 3L4WcN7gzhBNpVVNiXU_dlpvE-U.roa (hash: fWfFsGbI8ZEJSeb49tnQpRdHMLtKv9wl/8H4rcMy248=)
                          2: OLnzxAlUC3QhNrKWLOgcy2U30To.roa (hash: lX5neqnKug6Y4cQTPSta0w75qmPdh3MW8Tx/neXnEbc=)
                          3: XjQJl2a4wVJ5vbGz2VtG7fUNbWk.roa (hash: T4dfrQILAEkH/eyRrkFYsCcye4GAdljvbKUoaz/5NDg=)
                          4: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl (hash: wc+3jxnfsf2LTmYKhWrZuyj0spvRh+wrafTBS4h/N70=)
                          5: nFEK6z-jx-S0HOWYHzz-ynE7Bmc.roa (hash: SlfRBt8iF6tZBTeqrGVg/w4P8tgE7MMFKcNAFRdvA84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:78:54:11:cb:fa:c4:82:d3:1c:9b:78:90:e2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
        Validity
            Not Before: Mar 29 09:01:16 2026 GMT
            Not After : Mar 30 09:01:16 2026 GMT
        Subject: CN=fb7d0882a89203995493afb134271757fc4e7a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:2f:e7:87:cb:82:bd:6c:38:38:06:c1:13:
                    08:c1:4f:fb:97:cb:e0:31:13:86:4b:6f:6c:6a:12:
                    7a:c9:2e:39:e6:9a:dc:f3:69:d7:f5:65:5f:1e:17:
                    54:7f:3b:38:f6:52:31:40:ad:24:8d:1e:46:ca:fa:
                    6c:68:64:24:0a:08:25:5f:d3:9a:57:28:2e:4e:a7:
                    5d:63:e8:66:2d:4e:29:6c:5a:3c:26:67:75:71:41:
                    4a:2c:42:36:b6:a6:03:57:ae:ce:80:3f:a8:63:90:
                    71:4c:8f:17:1d:6c:03:82:8c:3e:52:03:19:55:68:
                    dd:f5:6f:94:c9:92:74:18:28:1f:bb:b6:d1:7d:ab:
                    5d:8d:9a:6e:bc:10:04:09:4d:e6:2b:9d:8d:bf:27:
                    5a:0b:f3:b5:b6:c3:c5:70:01:5c:20:9f:48:f4:6d:
                    55:b9:e5:05:33:7a:99:21:2c:21:02:77:31:62:6f:
                    19:d7:8c:b2:75:a7:4b:72:8c:80:c0:17:8a:03:cf:
                    d3:6c:87:a8:95:80:52:21:f2:6f:a8:98:01:0b:eb:
                    54:77:40:5d:a2:62:f5:a3:3a:7b:8b:17:2d:57:c0:
                    f8:cc:8f:c9:d0:86:26:ed:d0:c0:06:cd:bc:a8:af:
                    de:8b:a5:2d:fb:0f:06:12:79:28:76:20:5f:49:b8:
                    85:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7D:08:82:A8:92:03:99:54:93:AF:B1:34:27:17:57:FC:4E:7A:5C
            X509v3 Authority Key Identifier:
                keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:09:32:09:5e:7f:27:02:39:13:b5:cd:75:7c:35:e4:00:85:
         ac:21:a8:12:99:92:d4:bb:44:69:63:a0:7d:f9:dd:3e:3b:55:
         0f:1d:fd:c3:1f:73:ee:67:6a:fe:c3:18:07:a6:63:7d:46:79:
         a1:0d:89:c2:31:23:b9:b5:87:c5:f7:47:0a:98:f2:c5:c9:ec:
         9b:37:09:3b:23:02:bb:49:a8:1f:57:63:4e:1d:60:00:47:6b:
         c6:2a:b9:e6:a7:93:2a:3a:08:ab:16:44:80:5a:fb:62:89:cd:
         81:db:22:5a:25:56:0e:72:11:76:92:47:b4:a3:6b:11:5f:03:
         ca:fb:6a:fe:ce:fb:6b:a1:45:7e:a0:c6:e8:4c:0c:e8:84:d3:
         6a:2e:c0:64:46:51:18:af:42:88:83:78:69:d9:26:c6:ce:0a:
         43:62:10:b2:34:c0:d9:cb:67:b6:97:c5:19:49:9c:9f:bd:c4:
         f9:92:40:ae:84:01:4e:12:2c:35:cf:f8:b9:b4:87:2b:af:b3:
         77:35:6b:2a:f7:71:dd:79:ac:73:2d:b2:de:2c:83:97:35:46:
         e9:67:13:de:91:88:66:43:46:8f:d8:7f:86:3c:2f:f6:20:c9:
         5d:2d:0e:d2:ca:e1:42:d9:81:d7:31:7b:5c:89:8d:c7:f3:e2:
         d5:87:e0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:54 2026 by rpki-client