Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
File:                     JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft (raw, json)
Hash identifier:          ZNvHXlLX/yicRXJm1d/FVaHnxi86xzIu9fi/VeMDyHU=
Subject key identifier:   3F:77:82:A5:C1:22:E2:B4:3B:0C:5D:78:2E:F2:28:33:77:28:95:D9
Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
Certificate issuer:       /CN=261c8e2b00a3d5957d4112daf35b66e429375505
Certificate serial:       019D382DFEACB856324A26FAA648A0151308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
Manifest number:          0610
Signing time:             Sun 29 Mar 2026 06:00:31 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:31 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:31 +0000
Files and hashes:         1: CWNF4a7mLYbKSGXj37QsRs18EPc.roa (hash: YsCfFIceaBejyXvZZ5Ucl+3/y81JerhJsxljYX0B06A=)
                          2: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl (hash: 40ixFIEjanHIkEqKUepwFrsMbinqM77gzfNnRyZPCMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:fe:ac:b8:56:32:4a:26:fa:a6:48:a0:15:13:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505
        Validity
            Not Before: Mar 29 06:00:31 2026 GMT
            Not After : Mar 30 06:00:31 2026 GMT
        Subject: CN=3f7782a5c122e2b43b0c5d782ef22833772895d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:86:1d:48:b3:d8:c2:17:e4:03:6f:43:11:d0:
                    64:ce:30:87:7f:18:bf:9c:ca:f6:35:8a:2f:70:d4:
                    e7:26:3b:c7:51:5a:32:24:1c:23:b2:a6:0c:d0:be:
                    61:ce:bb:64:f6:a3:45:74:fc:05:5e:6d:2c:f0:d9:
                    ee:1d:60:0e:ce:40:49:16:04:c4:34:e9:05:ae:57:
                    25:42:cc:77:76:23:11:76:b3:71:5f:6f:56:7d:72:
                    ba:83:3f:8c:43:92:3f:42:10:b9:25:0f:f1:a3:17:
                    6f:a2:97:15:75:a7:54:c0:4e:b4:c4:30:96:03:66:
                    8b:a0:9a:8c:2f:fa:da:0c:2a:7a:5e:0a:10:30:4d:
                    42:80:5a:83:16:c6:1c:2d:80:f7:34:62:7c:0b:c0:
                    d9:dd:6d:f5:27:e8:5f:77:8a:76:b1:50:ff:b4:48:
                    4c:84:53:9c:25:6b:7b:bf:05:ac:1a:dd:40:a0:5f:
                    fd:92:88:94:bb:81:ab:39:53:0d:9e:55:9a:04:5a:
                    d5:01:b2:1b:87:0b:17:8a:b0:c3:47:b3:69:79:15:
                    27:90:94:13:ee:b5:8e:2e:f9:99:52:a3:67:0b:df:
                    22:7c:63:ec:dd:3c:2f:0a:ca:5b:69:57:22:fe:cf:
                    68:68:8f:28:70:35:1b:40:f7:c9:e7:54:26:93:69:
                    bc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:77:82:A5:C1:22:E2:B4:3B:0C:5D:78:2E:F2:28:33:77:28:95:D9
            X509v3 Authority Key Identifier:
                keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d5:12:e8:ff:3a:10:9e:34:67:d8:c8:14:76:20:37:87:99:
         ba:d3:b2:03:45:5f:75:38:be:e8:64:8d:ce:e4:7e:13:d8:dd:
         0f:42:d9:0e:db:f0:64:07:2f:b5:47:66:d6:8e:56:bd:85:2d:
         d2:f4:41:51:ae:85:24:4a:2b:ba:d1:2e:7e:02:a8:da:82:75:
         35:6b:69:cd:b4:56:b1:59:cf:58:76:26:fa:31:77:9a:4d:09:
         aa:b7:43:23:96:33:54:5d:9d:25:ce:5a:51:3e:f7:69:af:3f:
         7d:b9:b4:7a:80:06:6e:80:34:3d:40:80:7f:8e:3e:ec:df:a4:
         4c:fd:d7:da:fe:a2:ce:4d:b3:dc:32:98:97:87:b5:be:fa:f5:
         0a:54:c8:32:33:3a:c7:84:57:86:1f:13:15:54:3b:48:fc:ee:
         c8:cb:31:bd:14:5d:52:c6:0e:ed:d3:ea:38:55:32:98:e9:bb:
         d8:f0:c5:4c:ab:97:3f:e3:1b:5d:7f:a1:50:40:a0:ca:87:85:
         c7:33:06:e7:a3:59:de:18:be:ad:c2:97:f0:ef:4f:4c:a0:ab:
         6c:86:00:a2:4a:cc:95:49:e2:7a:68:34:68:01:b7:c9:b9:a6:
         bb:ee:45:e4:9e:cd:ab:32:7b:f9:46:60:4e:50:a3:e0:23:bd:
         8f:c4:42:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:20 2026 by rpki-client