Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.mft
File:                     jdwENRyFimp_4PkIErsQZV5a-Mo.mft (raw, json)
Hash identifier:          7P3Qud4J8E6RVV5V3KgL2yQqUreOfPV77cDMG7ss0Ks=
Subject key identifier:   00:50:8A:1C:00:1B:D2:BC:EE:D6:66:96:9F:4B:7B:9C:62:A3:92:64
Authority key identifier: 8D:DC:04:35:1C:85:8A:6A:7F:E0:F9:08:12:BB:10:65:5E:5A:F8:CA
Certificate issuer:       /CN=8ddc04351c858a6a7fe0f90812bb10655e5af8ca
Certificate serial:       019D39AEBCFB359017B1CDDA30EFF851DD32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jdwENRyFimp_4PkIErsQZV5a-Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 13:00:46 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:46 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:46 +0000
Files and hashes:         1: jdwENRyFimp_4PkIErsQZV5a-Mo.crl (hash: 0gow+ehoNwxsqqCSJeX8PxlP16aHTerFndteOeMypvY=)
                          2: pZOi8KgLQPZzvVybSS9PPvYIKdA.roa (hash: PNYuRFnux4k2df/b/Jh2UtMM43qZz0BzvbZ7UBzhxHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jdwENRyFimp_4PkIErsQZV5a-Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:bc:fb:35:90:17:b1:cd:da:30:ef:f8:51:dd:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ddc04351c858a6a7fe0f90812bb10655e5af8ca
        Validity
            Not Before: Mar 29 13:00:46 2026 GMT
            Not After : Mar 30 13:00:46 2026 GMT
        Subject: CN=00508a1c001bd2bceed666969f4b7b9c62a39264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:83:94:67:71:91:b2:c7:af:4c:17:a4:34:
                    e3:7c:54:c1:b9:58:2f:47:2a:20:91:65:56:cf:9a:
                    91:71:3a:fd:b3:24:37:1b:40:f2:47:50:bf:eb:3b:
                    85:38:9e:7d:ae:96:cf:e8:05:2f:f9:35:4a:65:2e:
                    fa:ac:8a:bf:19:d0:5e:3f:11:c4:fc:69:48:1c:04:
                    1e:96:a6:01:1c:87:28:9d:3f:e0:c9:11:c8:a3:36:
                    cc:91:c9:99:43:b0:db:3c:51:e1:be:15:1f:cc:7b:
                    45:2f:45:b9:e0:44:8b:d9:95:17:2d:e8:6a:ad:0c:
                    af:cf:3c:20:04:ba:0d:8f:f6:96:0f:eb:ad:b3:ef:
                    1a:f4:4b:84:b6:f3:39:87:12:c5:ac:bb:d7:73:b4:
                    29:32:9c:19:f6:d1:74:29:27:45:83:97:7c:6c:0d:
                    1a:e0:16:c9:c0:f6:c6:9e:31:53:24:9f:a8:43:43:
                    07:72:b3:c7:7f:d4:06:5d:49:a0:fa:fd:8e:e0:0a:
                    fc:5e:27:f0:c1:88:f7:1f:38:c3:9c:9f:94:c0:22:
                    c6:15:75:bd:ed:29:90:d5:dc:59:4a:9e:32:4b:59:
                    26:d7:d7:d3:c0:b8:4a:17:d8:03:2c:a5:19:3f:b7:
                    ec:bc:d3:56:08:fb:49:69:31:07:ca:64:50:9f:34:
                    14:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:50:8A:1C:00:1B:D2:BC:EE:D6:66:96:9F:4B:7B:9C:62:A3:92:64
            X509v3 Authority Key Identifier:
                keyid:8D:DC:04:35:1C:85:8A:6A:7F:E0:F9:08:12:BB:10:65:5E:5A:F8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdwENRyFimp_4PkIErsQZV5a-Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b984d6-167a-4c0d-b544-58d5bb71c2a1/1/jdwENRyFimp_4PkIErsQZV5a-Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d1:53:9a:2d:15:c6:08:3f:05:8a:24:4b:67:5e:6a:1f:08:
         15:5e:ee:c0:20:f1:38:0e:c7:45:f8:80:c3:58:64:7c:b5:da:
         49:70:80:64:29:c2:5b:d2:e9:37:91:b8:5f:26:e8:72:f5:05:
         f6:14:ad:25:80:81:f5:48:7a:90:4e:f7:1f:4d:e2:88:cd:4e:
         3d:2d:30:53:85:8a:6a:ee:95:9d:9f:7f:21:d1:9e:92:d1:56:
         b2:61:41:03:4b:23:40:3f:ff:4f:82:8f:da:4d:bb:e4:ff:9b:
         11:c3:f7:ae:a2:5a:bf:4f:84:bc:b6:bc:68:b2:26:3c:cb:13:
         ff:c7:f1:4f:0e:40:d9:b4:72:16:b8:22:4f:c1:7d:ba:30:1e:
         cd:a3:6f:19:1c:25:63:b0:6f:38:62:10:24:3c:7f:51:86:11:
         85:f7:2c:c5:a1:91:d8:93:ec:28:a6:40:8e:a7:10:29:d6:17:
         cf:0d:08:31:1e:79:fd:cb:7c:e5:b8:c1:22:a7:cb:65:85:cc:
         10:29:14:64:c2:14:88:d1:8b:99:99:d3:c6:67:59:3c:a5:cf:
         34:3d:d5:ca:9d:cf:73:90:e2:da:3c:ca:8d:75:e8:c1:06:28:
         45:88:fa:4e:36:05:0e:9f:4e:9c:ac:17:c3:a1:b2:42:34:aa:
         38:7c:ce:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:45 2026 by rpki-client