Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
File:                     JzWxnbJ9Py131AgYhFO-JrNFUK0.mft (raw, json)
Hash identifier:          RXjFRqdfGV4LwAlOIue/F0PjQarIHOPWvNez5Wr1I6w=
Subject key identifier:   51:89:3F:DF:44:AF:3F:29:9E:8B:03:42:62:01:FF:03:DE:9A:57:E9
Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
Certificate issuer:       /CN=2735b19db27d3f2d77d408188453be26b34550ad
Certificate serial:       019CE8C993F6D3C5D46265F49459FB0EFDEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
Manifest number:          05CA
Signing time:             Fri 13 Mar 2026 20:00:50 +0000
Manifest this update:     Fri 13 Mar 2026 20:00:50 +0000
Manifest next update:     Sat 14 Mar 2026 20:00:50 +0000
Files and hashes:         1: JzWxnbJ9Py131AgYhFO-JrNFUK0.crl (hash: VWWmsD32vnn3BhJOHD4cGAvZTHJlGMly8J9ZAIFPvvw=)
                          2: g84cD1l0NIWiAh0qYxQZFWYbDew.roa (hash: 3YtnarT57s4PMZl4o0PMkx+Dnjlo0jMzpQu5PPXZZnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e8:c9:93:f6:d3:c5:d4:62:65:f4:94:59:fb:0e:fd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad
        Validity
            Not Before: Mar 13 20:00:50 2026 GMT
            Not After : Mar 14 20:00:50 2026 GMT
        Subject: CN=51893fdf44af3f299e8b03426201ff03de9a57e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:40:5c:f9:f4:e9:e3:73:d5:65:bf:d7:41:f8:
                    51:94:aa:02:1d:74:c2:83:01:e1:69:77:78:1e:ea:
                    35:62:31:f9:b1:4d:64:7a:dc:32:45:0c:46:46:a9:
                    c9:6e:55:f4:56:76:d5:f2:8a:5d:72:db:44:f2:2e:
                    78:19:a7:0c:06:1d:54:aa:fa:58:fc:c3:9b:62:ba:
                    34:44:5e:5f:60:d6:3e:44:12:64:9d:29:a2:86:e2:
                    68:bf:f2:e4:58:84:5b:a1:1c:f5:f0:6b:e3:dd:02:
                    e6:95:9c:98:c8:0b:97:ba:37:77:5e:9b:ce:ed:f6:
                    42:fe:4c:18:b9:02:5e:7b:7c:12:62:b9:d5:13:a7:
                    ed:e4:44:3b:9e:17:49:76:1f:b4:62:5d:99:0e:17:
                    cf:bd:2d:14:b9:7e:38:62:21:0a:4c:2d:55:2b:ee:
                    3a:a9:f3:92:99:91:ef:95:b6:0a:01:f9:99:9f:2b:
                    21:f6:d1:d6:57:20:77:d9:63:62:ba:7a:cb:67:00:
                    da:c2:46:b9:38:cb:ab:85:35:d7:50:bd:6b:67:44:
                    05:42:70:ab:aa:a5:50:15:7d:b3:4a:d7:5c:22:97:
                    db:88:36:4d:93:14:38:c1:1f:a3:be:9d:d1:26:4d:
                    44:f9:f0:f1:97:a4:a2:1d:a9:53:32:cc:e3:56:f5:
                    60:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:89:3F:DF:44:AF:3F:29:9E:8B:03:42:62:01:FF:03:DE:9A:57:E9
            X509v3 Authority Key Identifier:
                keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:45:e4:64:a8:73:b7:a2:6a:c1:18:a2:ad:5b:30:c0:aa:95:
         1e:2c:cf:9c:77:4f:68:c2:5c:43:55:ce:f6:ac:4e:78:65:d6:
         cc:ce:63:f1:24:e9:3f:23:76:9c:f2:fb:9a:f4:70:88:e8:ab:
         92:81:b8:e7:6b:48:ba:b7:bd:14:dd:04:18:0c:d0:49:59:33:
         ba:9a:c7:20:b9:81:fa:6d:ff:c4:2d:94:02:ba:e0:23:32:a8:
         cc:72:d1:ed:67:39:9e:13:56:1c:f1:90:f6:4e:5b:a3:78:8a:
         75:ad:7c:3b:74:75:39:7d:ad:0d:eb:45:d2:a2:05:2d:58:3a:
         f8:98:70:4a:16:e4:83:fd:51:eb:ef:98:19:a0:0b:25:ac:87:
         70:57:12:b0:ad:59:dd:5c:4c:c5:a3:fa:fd:83:57:e5:84:62:
         92:16:51:ed:08:7b:ea:3d:4d:36:ad:ee:0a:ef:90:e4:08:b0:
         78:ff:f5:7a:e9:32:b0:cf:41:d0:ff:fe:e3:c9:e5:e8:dc:25:
         0d:06:7e:c7:eb:91:1d:a7:dc:da:94:bd:ea:7f:ea:ab:67:e4:
         c5:9f:6c:19:ba:90:31:03:6d:24:fc:f5:a7:c1:76:08:8c:d2:
         34:ef:c8:ec:ac:aa:56:7e:a3:72:ac:62:07:0c:54:1f:11:ce:
         a0:07:0f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:42:09 2026 by rpki-client