Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File:                     jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier:          JlMn1fNrtXdPC9Wv3a5S+iuUESuIw16cp8j5HOKZrks=
Subject key identifier:   09:04:CD:D5:FA:E6:47:3D:0A:16:FC:46:A1:CA:3A:AB:84:C5:B5:25
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer:       /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial:       019D12A165114628CB05E48727FA5520B931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number:          0957
Signing time:             Sat 21 Mar 2026 23:01:00 +0000
Manifest this update:     Sat 21 Mar 2026 23:01:00 +0000
Manifest next update:     Sun 22 Mar 2026 23:01:00 +0000
Files and hashes:         1: BmoelkPQt4i3BlkcahPvi7qWXN4.roa (hash: z9IVfQbmn+DFxr8Krtk/I8KiP3Zb6ONjO0YjL8dGC3M=)
                          2: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: IjsJuoT+jRm/yeJXDcMLZpyFc7uu8IeSCZ0BaO/Qwb4=)
                          3: mNu3U5HOimkLMXrE7Xd3w0-SVZA.roa (hash: Q8HW68vvE5dt2JCgiuU6uY8uDN63CVOq6IX7sRD6oHI=)
                          4: zzcGdYNOZhe1jEco9OqFbyYvT9k.roa (hash: J+hhTkidSQB0Te9LHI8bfOqIwkK9dHKinjSyKGXTXTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:12:a1:65:11:46:28:cb:05:e4:87:27:fa:55:20:b9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
        Validity
            Not Before: Mar 21 23:01:00 2026 GMT
            Not After : Mar 22 23:01:00 2026 GMT
        Subject: CN=0904cdd5fae6473d0a16fc46a1ca3aab84c5b525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:62:3d:b0:12:33:13:29:05:d2:6e:57:82:af:
                    cd:2d:12:04:e6:c1:56:3c:5f:01:8e:5a:ec:32:e6:
                    68:31:76:3f:46:a4:8c:c1:f7:99:14:03:58:e9:57:
                    53:8b:f1:b8:e9:83:4f:26:42:8a:30:82:b7:6b:a7:
                    9e:bc:60:3d:83:96:ce:89:cb:11:b9:be:06:b8:4b:
                    bc:7e:d4:80:9f:a9:80:a3:ba:f1:24:b9:2a:67:48:
                    cf:c2:24:5e:ec:12:9f:0c:be:e8:ce:f5:a0:94:a6:
                    c4:7d:cc:bb:41:dc:04:53:8b:a5:93:c3:dd:00:82:
                    00:be:48:f7:11:3a:6e:1a:e8:1d:f9:ad:cb:6a:45:
                    7e:d8:6a:a6:83:e9:ed:c3:df:8c:79:10:87:3e:27:
                    44:3b:b2:53:0b:a8:d5:76:08:8e:b4:33:f7:1c:96:
                    98:4e:83:e7:4a:1a:74:67:20:18:94:ec:1e:05:44:
                    a1:e7:1f:fe:43:75:5a:04:35:d4:d6:ad:bd:ae:c8:
                    4e:98:d9:e4:59:b3:39:39:0f:30:70:5a:6a:56:b7:
                    3a:5e:02:b2:a6:cf:15:11:7c:4e:e6:af:00:52:f2:
                    a4:e7:43:37:d6:b1:27:47:7d:4a:8f:1e:55:be:e1:
                    bb:75:61:a5:80:27:ca:cd:5e:83:e8:0d:8c:aa:26:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:04:CD:D5:FA:E6:47:3D:0A:16:FC:46:A1:CA:3A:AB:84:C5:B5:25
            X509v3 Authority Key Identifier:
                keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c3:bc:5a:7f:83:46:68:ea:0e:5d:e8:71:dd:43:4f:23:20:
         19:9b:0c:3b:b8:88:ea:b5:1f:6d:5d:76:6c:20:03:2d:5a:fe:
         19:02:1d:be:ae:78:a4:ae:7b:6a:7d:30:b1:ac:c4:8f:e7:2b:
         f8:b9:a3:4f:fa:05:44:0e:0f:61:9c:ca:82:54:cc:fb:b7:e2:
         4b:38:c0:bc:90:44:e2:64:39:d1:69:20:3c:e5:ef:d8:85:3f:
         45:68:2c:36:bc:0a:c7:03:9e:c6:9d:01:b6:71:eb:b0:28:ba:
         e2:46:a9:ed:e6:65:cc:ee:2b:bd:cc:63:52:09:95:b6:09:47:
         78:d0:08:2f:c7:0e:78:1d:14:10:d7:ef:8c:dc:75:e9:b2:7a:
         b3:91:e4:8b:21:8a:58:78:80:c3:17:06:d6:87:7b:ea:f5:59:
         bb:d3:c1:92:00:88:c8:f5:58:f6:af:b7:e5:ba:c0:6d:68:46:
         7a:4a:09:9d:c9:59:7f:33:69:c3:88:14:be:fa:9c:d7:05:07:
         da:b2:1d:3b:d4:91:f4:68:38:82:45:68:ec:d4:8a:03:62:b1:
         a8:dc:36:2d:4a:dc:72:fc:50:f1:b0:46:a6:c6:f8:75:c7:3d:
         f8:98:22:27:81:35:27:5e:01:84:05:0c:96:97:9c:21:da:be:
         6c:99:d1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:47:41 2026 by rpki-client