Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
File:                     J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft (raw, json)
Hash identifier:          GzbYXKSSoffeMtuQiIOQLlRoukqPW/M5zEmpwXcYQCM=
Subject key identifier:   9A:66:8C:7B:8B:4A:18:03:AC:3B:2B:80:09:42:DE:49:C3:96:97:C0
Authority key identifier: 27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB
Certificate issuer:       /CN=27d7d0d37bf0494589472189e03c193057e373ab
Certificate serial:       019D39AE744731B52FE95784C2721E9D10A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
Manifest number:          0B46
Signing time:             Sun 29 Mar 2026 13:00:27 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:27 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:27 +0000
Files and hashes:         1: 0Cm_g_87JIdTUpYEQoVDJC5A5q4.roa (hash: jEiO5ebUj5SRcBSuoIhoNwHMi5VSET1vC0A1dX6gpOs=)
                          2: J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl (hash: RLkf8/AkyudbfRIfVwIVFH1JZ1MN5FBQQR1lR3x+enw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:74:47:31:b5:2f:e9:57:84:c2:72:1e:9d:10:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d7d0d37bf0494589472189e03c193057e373ab
        Validity
            Not Before: Mar 29 13:00:27 2026 GMT
            Not After : Mar 30 13:00:27 2026 GMT
        Subject: CN=9a668c7b8b4a1803ac3b2b800942de49c39697c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:28:09:c2:26:ff:7d:e1:bb:0d:fc:46:5e:50:
                    bd:27:4f:10:53:f4:7b:f4:0c:8b:58:e3:a6:f4:ca:
                    7e:42:3f:9a:4e:49:dc:20:42:f6:d8:e8:bb:eb:5e:
                    a3:30:28:b7:d5:4c:95:ea:78:79:14:ef:20:60:b9:
                    bd:01:3a:51:6d:a7:8d:19:86:b1:f1:61:69:73:8a:
                    76:b4:fc:69:c9:0f:15:76:ed:04:dc:32:59:41:bc:
                    db:bb:9d:05:cd:46:e9:eb:66:7a:8e:dc:8b:68:62:
                    19:1d:da:82:1b:6f:5e:40:b1:ff:3e:a2:8c:5d:fd:
                    8a:8d:a5:bf:a8:03:df:3b:38:e5:fa:0d:5c:1a:11:
                    1c:1c:d7:ff:9f:8d:0f:cf:ef:e6:b4:7a:47:93:ba:
                    6e:5a:22:3e:17:7c:9f:eb:e3:46:3d:fe:4a:af:5a:
                    f0:57:52:a4:8a:33:98:ee:94:ab:78:5f:98:63:f1:
                    6b:87:71:34:66:dc:3a:2d:be:23:41:c8:cf:24:6d:
                    65:f0:a6:97:1f:6d:e0:b6:c7:b9:ab:11:b5:08:e8:
                    f0:7f:2a:49:3c:e8:22:97:bf:ea:96:65:8c:2c:ce:
                    b3:b4:b9:23:00:36:93:5a:50:18:b5:03:c1:89:13:
                    b6:20:2b:6f:9e:d6:60:5b:82:9a:24:5e:6a:cc:2b:
                    3f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:66:8C:7B:8B:4A:18:03:AC:3B:2B:80:09:42:DE:49:C3:96:97:C0
            X509v3 Authority Key Identifier:
                keyid:27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:30:07:bc:02:62:69:78:b9:72:b5:de:d9:51:84:b5:23:28:
         a3:9f:90:cd:24:b5:66:ca:7e:ff:dd:87:74:c5:bd:77:78:16:
         68:08:d1:48:db:dc:b9:0f:c4:aa:33:7b:9a:5d:8e:2d:32:34:
         fa:a8:8e:04:ab:55:56:30:03:72:bb:ec:09:24:1e:29:1a:7d:
         2a:68:c1:49:12:6d:0c:9a:27:c5:43:86:86:94:c1:ac:f8:ab:
         0c:a1:fd:88:38:d3:26:8f:33:e3:3d:9a:2d:6a:10:4c:61:3d:
         12:18:cf:a3:bd:be:26:bb:77:4a:63:38:88:9b:7a:fe:81:ed:
         55:35:bc:84:b4:93:b0:87:b3:0e:2b:c5:b8:95:69:58:2e:6b:
         72:95:6e:cc:1c:34:92:66:ba:e5:89:65:ec:b3:76:66:42:7c:
         f3:a4:e1:e0:28:5b:54:f5:77:73:db:64:05:de:68:de:65:74:
         d0:d4:90:7e:6c:b2:5d:32:b3:03:53:66:11:68:e3:cb:ec:b6:
         b7:c6:b9:d8:d3:1b:b4:04:7d:cb:20:36:5e:b3:8e:05:0f:b3:
         03:9d:aa:a9:d6:a6:99:89:56:94:bc:9a:40:33:51:f9:30:21:
         47:0a:a3:92:82:bf:1f:7f:4d:4e:d7:a8:f9:cc:c8:44:1b:c6:
         fe:f1:08:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:16 2026 by rpki-client