Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File:                     j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier:          VO5XfcN2vlVJ1qCg7+JDDvUS/2TdbP1MyapSBmPXQFI=
Subject key identifier:   77:50:F8:DD:75:86:B2:5A:C8:A9:85:59:57:43:01:BA:09:FD:8C:96
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer:       /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial:       019D375342B0252F2304BB8B365C7FAD2634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 02:01:36 +0000
Manifest this update:     Sun 29 Mar 2026 02:01:36 +0000
Manifest next update:     Mon 30 Mar 2026 02:01:36 +0000
Files and hashes:         1: 7OTQnzrbHyXo119EfPUpBJCKYHw.roa (hash: 2rynQETuFSP28J9DNP84gVl8Pw/3bThUsvE7hH2G5gw=)
                          2: MsTpS_9Ef3SDy2PLq6WfNUkYizQ.roa (hash: Ea2AJU7gEy/xVP6HsAboTHLHs8TQfaChyqKqx20NTwM=)
                          3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: ImRD+6cXhtb0GTKmoHwYh4lmCniV9/svuJcVGFJnDOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:53:42:b0:25:2f:23:04:bb:8b:36:5c:7f:ad:26:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
        Validity
            Not Before: Mar 29 02:01:36 2026 GMT
            Not After : Mar 30 02:01:36 2026 GMT
        Subject: CN=7750f8dd7586b25ac8a98559574301ba09fd8c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:99:2e:80:14:77:2f:81:a4:35:0c:b3:bc:
                    ee:00:e8:3d:b9:b3:e6:86:0e:34:7a:f5:f0:9c:97:
                    c9:70:c5:98:b3:ba:90:9a:20:cd:93:c7:ee:57:ae:
                    f7:48:d2:b5:43:d4:ce:47:af:9c:8e:42:2d:b9:1a:
                    aa:59:fa:87:0e:38:f9:42:81:67:84:7a:67:98:b9:
                    7a:28:1d:28:70:e2:6b:12:63:be:d4:d2:7d:2b:9b:
                    a1:21:22:ca:a6:6d:cc:5b:c6:e3:3c:e1:88:e3:de:
                    a6:2d:53:ac:69:66:2b:b6:94:80:fa:ab:ae:20:45:
                    e4:2b:22:6e:cc:3e:26:3c:e1:70:24:7c:05:c2:62:
                    95:48:57:7f:1f:bb:6c:c6:1f:f3:26:25:d0:81:a7:
                    9b:f9:9a:9c:ee:ba:f6:9b:45:45:24:6a:78:c9:b9:
                    8d:45:3e:dd:10:d5:0c:d4:e1:c8:e0:fb:c1:42:38:
                    b9:bc:f6:67:46:0e:a8:59:e6:8b:43:9c:dd:95:77:
                    23:51:db:96:a6:57:63:5c:f1:f1:2c:7b:57:cc:82:
                    a0:00:35:ca:e4:d4:2a:16:2a:9e:e5:81:f1:ba:0a:
                    2b:f0:d5:15:f3:63:e4:ed:74:2c:be:d9:80:5d:78:
                    07:3b:37:aa:53:b0:ef:0d:94:80:5a:ce:1a:29:9a:
                    84:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:50:F8:DD:75:86:B2:5A:C8:A9:85:59:57:43:01:BA:09:FD:8C:96
            X509v3 Authority Key Identifier:
                keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:30:5c:0c:e6:b9:d6:5f:f3:cc:1a:5b:77:32:75:75:29:65:
         76:48:ef:ab:b3:ee:d3:db:93:96:29:3f:55:3b:70:ba:75:30:
         f9:16:14:4a:80:a3:64:44:31:7a:d9:d6:65:03:ff:57:3d:96:
         54:0e:75:b5:34:1e:24:79:df:46:08:1a:ae:0b:3b:03:4e:53:
         08:63:92:da:8a:64:a8:4e:2e:a6:36:c4:78:18:3a:27:c0:16:
         da:0e:5c:34:eb:2d:99:c4:ed:0f:58:23:55:3e:eb:5c:d1:87:
         a7:61:80:c4:d7:06:04:8a:98:b3:45:5d:77:ab:7a:8a:bd:c9:
         f9:d3:4c:04:de:3e:a2:ba:1b:36:b0:cc:36:49:22:d7:f3:e3:
         49:72:98:7e:05:1f:96:05:36:55:de:df:56:9d:6e:7b:0a:92:
         93:be:e1:16:a9:dd:01:47:38:9e:4e:7c:39:7f:00:de:84:ff:
         0c:1e:ab:02:4a:e0:78:91:91:7b:7c:d0:c7:9c:7d:c8:b3:f4:
         b4:bb:4e:9f:94:e7:fe:f0:ff:5b:9b:ee:35:a8:28:8f:f3:72:
         8d:9d:e5:c3:80:54:d5:ef:67:4d:12:53:2a:22:d6:2a:54:df:
         33:fe:7c:f0:3b:2d:b0:4f:c8:ec:95:1d:3e:d1:e3:58:94:d3:
         d0:26:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:29 2026 by rpki-client