Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
File:                     jgRb_s0rviTTP1MJ20fIqnejsQw.mft (raw, json)
Hash identifier:          RnPd9dF7lS5f7CGvQzvcV0irvuWKkFl1pmdyVT0a3HI=
Subject key identifier:   FB:EB:36:81:12:4A:18:B3:45:EF:91:B5:60:8E:E9:CF:A1:B7:11:03
Authority key identifier: 8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C
Certificate issuer:       /CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
Certificate serial:       019D39780BACC030BF298773B0A4CD3C12B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
Manifest number:          1546
Signing time:             Sun 29 Mar 2026 12:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 12:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 12:01:01 +0000
Files and hashes:         1: fzpf91ZVxSyjkpJthW1ioGWIhp4.roa (hash: ryNazaSm80nyBlQG4XkXpwOiUN2WFZ22ImBpcGYlMTQ=)
                          2: jgRb_s0rviTTP1MJ20fIqnejsQw.crl (hash: MFCObJHZFS6G5/vKXL5tALIaqIpWWm/KAY81SJeUhI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:78:0b:ac:c0:30:bf:29:87:73:b0:a4:cd:3c:12:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
        Validity
            Not Before: Mar 29 12:01:01 2026 GMT
            Not After : Mar 30 12:01:01 2026 GMT
        Subject: CN=fbeb3681124a18b345ef91b5608ee9cfa1b71103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:79:fc:26:54:36:6d:d9:c6:88:08:c7:e9:a6:
                    fe:9a:02:db:af:31:bd:1c:94:85:0a:b5:4b:90:f6:
                    0a:3e:ba:a5:6a:b7:34:b8:c5:37:52:93:84:93:46:
                    cf:b9:54:59:f6:7c:a3:5b:c2:38:fd:14:d1:a2:fa:
                    a1:3a:39:05:a9:7d:fa:41:3f:7a:6c:5b:d3:57:6f:
                    71:82:67:a0:fd:dc:c1:46:57:a3:51:58:b1:30:73:
                    01:8e:e1:9f:48:e2:b3:49:90:9c:77:d6:19:97:5b:
                    3e:39:06:7e:f0:3a:b5:8b:8f:12:a7:f5:6d:d2:3b:
                    9b:1a:90:67:ff:07:c2:5a:55:72:d9:7b:29:01:c1:
                    76:2f:01:26:f4:12:59:60:07:7c:30:66:64:f1:87:
                    bd:c9:e0:63:ac:d0:a2:b0:c1:6d:2f:75:91:95:d3:
                    26:58:ad:f6:4e:a2:84:d6:db:e7:c8:b4:f5:e7:8e:
                    b0:f2:44:75:96:f8:81:07:a4:92:c5:5f:34:e5:e9:
                    a9:8d:f0:59:cb:3b:a2:ca:15:ba:ca:7b:37:26:f8:
                    be:67:f1:2f:87:9b:65:24:8e:31:08:65:00:39:e5:
                    33:f6:56:1c:ee:05:52:c2:0a:d1:47:a8:3c:b4:5e:
                    50:37:fd:95:b0:d2:c4:bb:9d:1b:30:a9:57:03:29:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EB:36:81:12:4A:18:B3:45:EF:91:B5:60:8E:E9:CF:A1:B7:11:03
            X509v3 Authority Key Identifier:
                keyid:8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6a:b2:da:40:81:0d:2b:80:6d:4d:2a:05:8f:68:7c:a4:72:
         0d:47:67:b1:99:fc:9d:0a:45:ae:66:c6:8a:29:03:b9:2d:f6:
         41:18:60:fa:f3:1c:45:47:8a:8f:a3:6f:f1:d0:ef:be:c0:6a:
         9a:34:5b:1d:d5:77:c7:6b:57:79:c0:86:f1:f3:9f:b1:f0:7d:
         08:1c:72:64:73:74:50:49:22:0b:aa:e0:02:45:95:01:35:83:
         1b:97:68:b7:ee:f7:5d:7a:e9:45:66:de:da:8c:9b:ba:0d:29:
         29:f3:c8:a2:9e:18:40:dc:81:17:79:4b:b7:4c:50:f2:db:b9:
         8b:8f:f4:af:ee:06:c1:66:ff:0a:18:1d:8f:13:f8:53:ac:b2:
         f5:f9:d0:21:76:76:de:0c:a0:4b:f0:88:06:09:ab:86:bc:8b:
         32:b6:bd:71:f9:a5:c7:b6:21:0d:97:d1:77:6d:2a:d7:fd:07:
         0f:d5:85:26:40:57:70:d0:7a:6e:bc:5a:41:50:07:84:32:97:
         39:20:56:d7:22:ce:9c:e0:02:07:79:4b:5e:57:ef:b6:18:d9:
         54:75:7e:19:07:3c:b4:57:2c:01:e2:e6:50:18:51:34:c2:cd:
         1b:30:8b:54:5e:c5:62:6c:f8:2a:c2:e5:2f:fc:2e:2a:05:6f:
         17:0b:1d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:13 2026 by rpki-client