Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
File:                     jkFZeSO5geHA1Pyi_9CozcNme30.mft (raw, json)
Hash identifier:          yITpNge+6UuVlojf1dI/8AdFGH2f3FM6r6IIg1s2MIs=
Subject key identifier:   31:E0:78:D0:31:A8:0A:83:63:98:88:79:8C:18:25:8E:73:14:D7:BF
Authority key identifier: 8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
Certificate issuer:       /CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Certificate serial:       019D37C07DFBE64D7788C162E2500C8DDF09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
Manifest number:          0224
Signing time:             Sun 29 Mar 2026 04:00:55 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:55 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:55 +0000
Files and hashes:         1: 2QK16_GzCxStUDI0mu8WHffdpn8.roa (hash: GKlCvD0CmH/A+xQlfrKSRNG2sqH4ve1r+aoC47JjAIU=)
                          2: jkFZeSO5geHA1Pyi_9CozcNme30.crl (hash: 4av5zvB60UOpa8+I6cqgNB6bCTo93Vq2/aMprhc7cX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:7d:fb:e6:4d:77:88:c1:62:e2:50:0c:8d:df:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
        Validity
            Not Before: Mar 29 04:00:55 2026 GMT
            Not After : Mar 30 04:00:55 2026 GMT
        Subject: CN=31e078d031a80a83639888798c18258e7314d7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9f:11:e3:5c:39:a7:a0:2e:62:a6:53:66:a0:
                    8b:a4:9b:8f:7b:89:27:25:46:82:13:bc:4d:c5:a0:
                    ca:b6:de:47:a7:fb:d2:bc:75:e4:4f:ab:80:74:e3:
                    4b:a0:e9:90:da:41:45:ef:73:a2:cc:b5:c3:7e:5d:
                    a2:16:e7:28:d2:8a:c6:78:09:3d:6f:83:e8:77:d3:
                    05:ca:54:f2:e9:5a:42:2c:58:af:45:61:0c:23:7a:
                    fd:59:77:47:50:d5:f8:16:e8:35:28:a5:46:03:2f:
                    05:bd:88:22:44:6d:81:7f:cd:f8:a7:ff:5d:16:c4:
                    ca:92:d1:03:ad:9a:9e:67:a5:60:68:de:97:fc:5d:
                    c9:ee:a9:ad:5a:76:00:50:eb:b8:34:1a:53:79:58:
                    f8:24:11:fc:0e:ad:e3:f5:20:1f:34:02:ed:1c:33:
                    4b:84:ba:88:ad:4c:f6:c2:e5:e0:cc:cd:35:55:56:
                    26:4d:2d:f4:cd:66:9b:4f:d8:6a:27:d1:b8:bf:7e:
                    03:bc:e2:1a:f7:a1:3a:9f:37:98:86:23:1e:14:76:
                    b2:5a:6b:b5:5a:59:c9:b8:5d:e0:3f:6f:e1:ca:cd:
                    13:b8:ab:48:a8:4f:fe:f9:0a:7c:13:58:dc:f9:cc:
                    98:18:de:58:60:e1:53:bf:32:46:3e:0a:78:95:f3:
                    54:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E0:78:D0:31:A8:0A:83:63:98:88:79:8C:18:25:8E:73:14:D7:BF
            X509v3 Authority Key Identifier:
                keyid:8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d0:7a:be:c5:30:a8:80:60:47:52:03:ab:63:be:0a:d5:d5:
         78:41:6d:e4:6d:a7:27:ff:de:55:ee:5f:a7:54:06:24:64:59:
         2e:af:41:a1:3c:ca:23:35:67:8c:0b:4b:45:da:99:5f:f0:da:
         f7:d1:ff:68:57:a5:ac:8f:0e:00:86:6e:20:3f:c0:42:01:7c:
         f9:63:06:91:fe:b6:21:b7:50:13:4d:15:a2:ba:01:24:3c:93:
         0c:fb:78:e0:40:00:01:e5:c0:bb:9f:28:62:28:14:a6:5c:51:
         35:53:c9:df:e0:dd:ae:45:52:97:19:d7:ef:e2:6a:28:39:62:
         fe:bf:d4:d6:16:a6:a8:6c:99:81:ff:de:24:ee:a8:f5:c0:d8:
         c7:0a:d1:6a:ca:13:14:8f:59:a4:e4:78:a9:0e:7a:f8:7b:41:
         4d:6b:c4:1d:f6:4d:94:7c:6c:50:04:0f:a8:fa:f8:96:64:76:
         e6:22:8b:a5:d7:db:69:68:b5:21:46:d9:3a:d7:39:05:f4:c3:
         ab:40:b2:43:c1:3a:19:82:cd:71:39:3c:8f:6e:5f:02:3e:df:
         b0:1b:b0:0b:8c:48:50:a3:b3:2e:81:84:aa:b3:14:80:40:2c:
         26:56:41:4c:ab:91:e2:12:79:70:60:50:8a:45:02:a2:2e:47:
         a2:56:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:53 2026 by rpki-client