Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
File:                     jV8GavgNDp8H6oeyS9r6WdH18m8.mft (raw, json)
Hash identifier:          /4Ai/5caWTFCMYCIDSThru8oW/IXyIFKGkJq820KIfo=
Subject key identifier:   34:8F:F3:D5:D1:01:CE:3E:CE:4A:AA:70:CA:F1:21:60:B1:A8:A9:E6
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Certificate issuer:       /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial:       019D382DF40679ED19DA743D329A154BF715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 06:00:28 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:28 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:28 +0000
Files and hashes:         1: _o-k0bNNHBrg0HhGSoEoWC8rUrM.roa (hash: YUrV94RoNYCOFVbYKNI8ylxN9kBT9dKZA2qph96XBuk=)
                          2: jV8GavgNDp8H6oeyS9r6WdH18m8.crl (hash: aTlpxZKxwMPvnwG7fJQM3wDXpZ8J73oJBtqcRXH4MI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:f4:06:79:ed:19:da:74:3d:32:9a:15:4b:f7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
        Validity
            Not Before: Mar 29 06:00:28 2026 GMT
            Not After : Mar 30 06:00:28 2026 GMT
        Subject: CN=348ff3d5d101ce3ece4aaa70caf12160b1a8a9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:87:91:58:95:2f:18:1b:4a:48:97:c7:1b:
                    d4:9f:7a:03:61:4e:83:d4:9d:04:4d:76:20:33:d0:
                    9d:a1:c5:58:cd:83:39:45:b7:8e:63:7e:2f:a2:92:
                    34:ab:8f:3b:b7:8f:62:23:29:a4:0f:2f:d1:29:78:
                    15:ec:70:ea:44:52:71:be:b1:37:70:dd:00:5d:7f:
                    b2:bc:54:d9:05:99:d1:30:3f:ee:46:92:f9:ad:b9:
                    c4:43:3d:22:44:69:f6:06:17:c6:4a:89:76:74:46:
                    28:51:0f:93:74:10:b1:1c:ff:e7:e2:67:80:e9:24:
                    39:bf:7e:5c:27:f9:9c:fd:f4:57:16:1f:25:73:cd:
                    25:ee:2b:2c:8e:e4:82:2f:04:39:b9:aa:e5:4b:39:
                    4f:67:c6:5c:df:18:06:26:81:41:2e:1a:87:81:94:
                    b5:9b:4e:b4:eb:95:6b:db:b6:02:d3:0d:2a:a5:61:
                    6c:92:98:59:7b:d8:ce:ac:01:87:e2:b2:4e:28:73:
                    6f:22:3b:df:a8:06:b9:8a:31:22:68:8a:d7:b1:23:
                    24:62:bb:06:5b:17:c8:05:86:3a:f5:80:7f:f2:9a:
                    9a:73:69:31:d2:e4:49:85:6d:7f:b6:bd:88:05:1e:
                    3b:08:f0:08:5b:2f:d1:ba:4e:76:25:00:81:21:0e:
                    ad:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8F:F3:D5:D1:01:CE:3E:CE:4A:AA:70:CA:F1:21:60:B1:A8:A9:E6
            X509v3 Authority Key Identifier:
                keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:34:23:a9:ff:66:74:16:79:9c:b1:92:b0:3d:fa:3a:06:19:
         c5:0a:38:c7:02:68:40:e4:2a:8c:b0:97:5b:b6:a9:da:f1:1e:
         d5:ce:d9:1d:e7:c6:3c:7e:1e:1d:7e:2d:69:66:39:43:f0:e4:
         31:46:81:2b:af:8b:1d:54:29:31:9a:c1:f3:7e:ea:32:fa:a5:
         d8:64:f8:d3:ee:49:47:22:7b:d0:9d:8e:ba:0f:87:59:7f:c3:
         b6:8f:86:82:7c:e4:7e:b7:89:82:33:41:a7:50:10:76:61:99:
         87:d3:ac:82:48:5a:fc:df:59:4a:08:b5:00:97:0d:23:ff:ed:
         40:5a:82:7e:b7:d9:ca:45:b5:3e:ba:8e:01:e2:20:ea:f3:39:
         4c:ad:40:5f:23:12:56:18:59:72:db:05:e3:ce:63:b9:01:88:
         45:9a:84:36:8d:fe:14:88:95:f6:b2:85:9c:a1:10:56:7e:7a:
         0c:f3:a6:b4:4b:91:a3:c6:2a:b2:a2:84:b5:71:84:a2:59:f8:
         e2:63:fd:ee:b8:17:70:96:27:92:b3:05:a3:e1:88:a9:90:e1:
         74:68:cc:07:57:5f:ee:3d:58:f3:c0:78:46:ec:25:a2:db:0a:
         cb:a2:a1:68:c0:9a:bd:8f:a7:e7:c3:b0:59:82:91:d5:34:99:
         66:25:a4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:48 2026 by rpki-client