Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
File:                     jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json)
Hash identifier:          vn3YjdtIp19uplDWdXaqmtxg44IGtbd4K4g9/iHXZAk=
Subject key identifier:   35:23:2F:6E:35:1B:EA:E7:57:68:A0:26:26:53:41:6A:CB:9C:57:25
Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6
Certificate issuer:       /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
Certificate serial:       019CE523A56DF60A1D9A36BDFC2D201AAF3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
Manifest number:          0F45
Signing time:             Fri 13 Mar 2026 03:00:44 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:44 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:44 +0000
Files and hashes:         1: 7uFvNrEWLGYD2SP4hsWwx5YGhZc.roa (hash: 2VvPcjNZZjpDQlSJjpl0TNHy3CzxEknpcXQY1dMkcII=)
                          2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: Oz5FkBJwBkfX5xQFD/P4IX3lvuGqiVeTVhYFHWA7X78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:a5:6d:f6:0a:1d:9a:36:bd:fc:2d:20:1a:af:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
        Validity
            Not Before: Mar 13 03:00:44 2026 GMT
            Not After : Mar 14 03:00:44 2026 GMT
        Subject: CN=35232f6e351beae75768a0262653416acb9c5725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b3:5e:89:e4:94:aa:07:e2:a7:81:7d:fd:84:
                    1f:3a:77:c9:5c:cf:30:1a:a0:89:2b:3a:b7:1e:5c:
                    0f:68:3d:f5:0b:76:42:0d:93:8b:ee:eb:d1:26:69:
                    9d:3e:22:a9:53:bc:65:0f:65:72:22:a9:00:5d:9a:
                    10:37:e5:03:11:ec:16:63:71:1c:00:8b:81:55:40:
                    e5:16:79:7a:97:0e:b2:28:0c:93:d8:c3:c1:d4:16:
                    2d:f4:74:03:26:66:e7:4a:7b:2f:80:97:44:e3:8d:
                    eb:f3:63:b2:4f:2d:34:ff:11:4e:10:9b:63:e9:31:
                    c5:a0:a2:3c:a3:84:69:7f:da:8e:b7:3e:de:a5:de:
                    76:04:95:61:f3:d1:5d:59:d4:46:96:c1:4c:86:04:
                    13:23:49:25:18:d1:89:dc:6f:c8:d4:50:6b:5c:ee:
                    a7:43:5c:e2:d5:5a:c6:81:05:fc:a8:d3:72:5b:50:
                    5c:03:79:0e:8a:c2:72:a1:f7:da:ff:0c:95:7c:c0:
                    e8:80:82:03:0c:b1:3d:e8:e0:38:87:de:2c:c5:70:
                    1d:34:16:04:9a:63:5e:aa:0f:b9:fd:05:86:f3:24:
                    17:c0:7c:b7:9b:3e:cf:99:f9:19:88:51:89:42:27:
                    e4:4e:70:19:53:7e:00:35:60:8b:57:86:8c:5b:52:
                    25:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:23:2F:6E:35:1B:EA:E7:57:68:A0:26:26:53:41:6A:CB:9C:57:25
            X509v3 Authority Key Identifier:
                keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d5:db:99:34:49:ca:21:32:2f:49:3a:48:0e:36:82:f6:f1:
         b1:4d:d6:c1:c4:e8:79:04:17:15:ee:4c:19:6f:2b:7e:c1:66:
         8b:62:a7:10:8f:50:10:1e:a8:8f:dd:b3:56:1a:b3:a3:df:33:
         e0:2c:2b:78:f5:4b:70:6c:f7:67:b3:4c:a6:84:93:e0:f3:f2:
         bb:02:4a:53:95:b4:73:d1:45:74:af:d3:2b:da:68:60:d2:82:
         d9:bc:51:8b:b6:3d:23:3c:98:e0:c6:4e:7f:42:a3:9f:eb:4d:
         60:53:0d:b5:1c:96:fb:2a:5e:42:0f:f5:da:04:04:59:c6:f5:
         36:90:62:85:a0:9e:09:1a:ad:12:73:2a:b6:61:94:d5:a9:7f:
         0d:9e:23:c9:f5:d5:68:15:88:7a:42:ef:9a:80:a3:9e:6f:6c:
         83:08:28:f3:e0:0f:cc:79:cd:d6:64:66:ad:f2:71:f8:6a:6c:
         24:aa:13:ab:7a:24:44:19:76:bf:b7:0c:d5:89:f4:31:d8:82:
         a4:07:c5:36:88:e6:3d:1e:9e:a6:a6:78:b6:c8:30:02:e1:f7:
         da:37:91:be:a9:82:9a:dd:16:81:5d:04:d0:c6:39:61:3a:f1:
         ad:0f:65:74:45:ea:5a:29:0f:84:74:76:16:63:e2:5c:5c:2a:
         d5:f4:00:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:59:42 2026 by rpki-client