Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
File:                     jDutauSRZD0HXiHLqFnvKOJuPHk.mft (raw, json)
Hash identifier:          JCooKiPc8eq3+D3+9yXCZKkgloO0Avu3kvrcAd4onG8=
Subject key identifier:   8A:86:3D:99:D5:EE:49:F7:27:F5:FA:DC:0C:1E:8E:E5:EB:0D:C6:A2
Authority key identifier: 8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79
Certificate issuer:       /CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
Certificate serial:       019D3A8A85C93F76DAFA4AF9E40F8ADD5DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
Manifest number:          1537
Signing time:             Sun 29 Mar 2026 17:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 17:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 17:00:49 +0000
Files and hashes:         1: jDutauSRZD0HXiHLqFnvKOJuPHk.crl (hash: HBZMMPjRuCU7uHHJyLvyqxE+fuS9v23cZ6t1gV1fNWw=)
                          2: qmZ4U9hGV8VSwz5yK7CScI-NPoI.roa (hash: lBrjEmgGCnOGQAjqYMA0OP4JZ/cwhcFHf/zVri7F27g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:8a:85:c9:3f:76:da:fa:4a:f9:e4:0f:8a:dd:5d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
        Validity
            Not Before: Mar 29 17:00:49 2026 GMT
            Not After : Mar 30 17:00:49 2026 GMT
        Subject: CN=8a863d99d5ee49f727f5fadc0c1e8ee5eb0dc6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:5c:38:18:93:2d:a2:39:f9:b2:16:63:d6:
                    c8:7b:a1:b5:f4:6e:90:42:79:53:4b:40:b6:a7:0d:
                    1f:13:34:6e:4a:eb:b0:6f:ba:f0:2e:02:bd:05:d4:
                    fb:77:d3:dd:86:97:e8:6e:24:01:82:e9:09:42:80:
                    9c:ad:27:4a:63:0b:0c:f7:7c:6b:1a:bb:28:90:0c:
                    68:dc:3a:43:02:24:e0:ed:91:77:86:10:57:4d:f9:
                    d5:cb:1f:4e:9a:22:67:71:f8:c5:d1:dd:df:2e:ef:
                    8e:cf:24:0c:c3:b6:53:83:ec:12:c4:57:cd:f9:e1:
                    58:b6:59:1e:20:50:7f:54:f5:33:85:9a:83:42:a6:
                    fa:09:69:64:b4:1c:8d:e7:ce:b5:1b:b0:f8:25:1b:
                    12:fb:c3:a4:0d:f3:3b:81:db:d9:f4:2c:53:87:cd:
                    6f:ef:12:a5:d1:49:9d:2f:54:05:6f:ae:f6:ce:69:
                    13:34:07:c2:7a:a5:a3:c3:6e:15:df:23:d2:ab:21:
                    bb:f2:4a:38:38:25:c5:e8:73:7c:95:1c:e9:ab:02:
                    1c:ad:55:98:c8:65:29:40:f7:2b:87:9c:86:63:6d:
                    86:7b:89:10:6f:7f:f3:22:6c:eb:a5:fc:90:47:83:
                    47:f1:f0:e8:18:6d:f7:9e:dc:69:3d:11:50:f1:aa:
                    c7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:86:3D:99:D5:EE:49:F7:27:F5:FA:DC:0C:1E:8E:E5:EB:0D:C6:A2
            X509v3 Authority Key Identifier:
                keyid:8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e9:1f:88:6e:df:70:15:95:b0:56:e9:9f:7d:79:ca:2a:d8:
         d6:4a:d0:59:c7:e3:25:21:f6:12:1a:99:68:19:c7:ca:da:34:
         8a:05:41:86:f2:f8:26:1f:40:73:11:5e:e9:07:c7:12:8d:c6:
         bf:88:8d:ce:aa:3e:25:9b:f0:32:08:ce:85:61:da:62:ac:4f:
         07:e7:47:4c:1d:8c:0a:7f:b0:c1:d7:7c:23:d9:b1:8e:e7:04:
         40:0f:63:a0:88:75:c3:c5:ff:fb:98:1f:77:50:ef:22:55:13:
         01:cc:a2:88:df:3f:b7:3c:88:9d:4a:92:d5:fb:53:d1:64:73:
         56:9b:8f:84:4a:c5:75:60:89:43:1c:3e:c4:0a:68:48:29:51:
         17:7d:ec:2c:19:40:eb:cb:3d:07:31:32:a1:69:35:4b:ed:e9:
         29:78:33:2f:12:23:f6:c2:ee:72:d3:bc:3b:c2:29:9b:62:61:
         36:e1:8b:51:08:4a:92:4e:67:ca:cd:88:8d:e6:7c:7a:42:ad:
         37:95:08:39:96:a1:a9:76:33:6f:5d:1f:57:59:4f:7b:ee:d7:
         e3:fb:6a:ad:68:9d:47:40:16:9f:9b:e6:18:cb:df:2f:2b:fc:
         09:53:a6:25:5d:3c:d5:be:f2:66:6b:25:96:0e:68:6a:7a:16:
         b5:1a:88:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:42:38 2026 by rpki-client