Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.mft
File:                     Jqwzv336i9kGGrnml_STFk5JxFg.mft (raw, json)
Hash identifier:          ndWzngXny4B0HhnV/hTsN2Xq4Dbo3rW+I34qYv317fg=
Subject key identifier:   73:6E:E5:BF:B9:38:10:58:E7:A0:07:AD:56:A4:4F:F5:2B:69:83:B6
Authority key identifier: 26:AC:33:BF:7D:FA:8B:D9:06:1A:B9:E6:97:F4:93:16:4E:49:C4:58
Certificate issuer:       /CN=26ac33bf7dfa8bd9061ab9e697f493164e49c458
Certificate serial:       019D38D39EDEADE439BB6DA0B749E7AC145C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jqwzv336i9kGGrnml_STFk5JxFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.mft
Manifest number:          A7
Signing time:             Sun 29 Mar 2026 09:01:25 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:25 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:25 +0000
Files and hashes:         1: Jqwzv336i9kGGrnml_STFk5JxFg.crl (hash: 76dmOn9gsUSfLtAcBAERK4l8pZy3StlPq416md8UMe0=)
                          2: d7TMwS92glTdW3N8KmDukqMRLqU.roa (hash: 31LbEXEUnAvolwco3YmcCdR5874EevAvdxtYmb4X9nU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jqwzv336i9kGGrnml_STFk5JxFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:9e:de:ad:e4:39:bb:6d:a0:b7:49:e7:ac:14:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26ac33bf7dfa8bd9061ab9e697f493164e49c458
        Validity
            Not Before: Mar 29 09:01:25 2026 GMT
            Not After : Mar 30 09:01:25 2026 GMT
        Subject: CN=736ee5bfb9381058e7a007ad56a44ff52b6983b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:3b:25:be:dc:09:50:da:23:b0:df:22:f8:
                    16:7b:23:a4:17:d3:73:e0:10:ae:11:94:9a:36:1b:
                    88:a4:95:c8:d0:a3:ad:26:f8:99:e8:0d:45:6b:03:
                    7c:5d:40:8b:9d:2b:12:18:66:78:b1:7f:b7:2b:44:
                    5d:0d:d0:c9:ab:f9:4d:df:c9:94:c5:16:b5:32:cb:
                    77:c3:52:bd:20:5e:2f:c6:46:30:6c:18:21:28:49:
                    df:6b:09:0e:9b:47:2f:55:1e:c3:14:c8:e9:bd:5e:
                    77:29:39:63:5b:3b:ef:6a:9e:ab:ec:b0:7f:c4:b0:
                    09:dd:5c:00:eb:9a:c7:40:cb:6b:28:fd:d7:57:30:
                    1c:f7:70:e6:69:02:28:d2:61:e6:61:a4:c0:d7:d0:
                    10:89:e8:b0:76:2b:95:71:6b:fd:83:9b:58:0b:1d:
                    13:fc:2c:05:6a:9c:39:b2:a0:e9:6e:d8:c6:56:aa:
                    75:e5:44:45:e9:10:75:be:38:9d:25:71:7a:96:e0:
                    d8:da:35:79:b0:f7:52:2e:39:e9:f1:ef:57:f2:ec:
                    b3:9c:fe:d4:c5:b8:30:99:69:24:a9:1c:f4:b9:c7:
                    6f:f3:59:43:2e:f4:84:13:82:83:1e:3f:ac:d5:62:
                    63:71:d1:79:32:52:f9:fc:1c:70:7f:29:d1:f7:53:
                    e5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6E:E5:BF:B9:38:10:58:E7:A0:07:AD:56:A4:4F:F5:2B:69:83:B6
            X509v3 Authority Key Identifier:
                keyid:26:AC:33:BF:7D:FA:8B:D9:06:1A:B9:E6:97:F4:93:16:4E:49:C4:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jqwzv336i9kGGrnml_STFk5JxFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b8:6e:e2:80:16:41:59:52:b8:bb:2c:c6:13:98:f0:14:94:
         92:28:f7:bf:db:26:80:b2:dd:b0:86:04:15:5b:c7:75:11:25:
         65:e8:7e:27:4e:77:7f:fb:f5:f4:c4:cf:c8:7d:31:5b:4b:67:
         56:ab:28:45:63:f0:9f:a2:63:c4:8f:67:3d:bf:f5:44:8e:09:
         3f:40:cd:8c:c2:08:0a:e0:5a:a4:b1:5d:7a:b3:04:47:dd:1d:
         a5:3b:8d:64:30:b7:ed:a0:c2:86:13:c7:59:3f:0c:0f:f3:18:
         ea:62:06:6c:c0:39:cf:52:3e:33:72:9f:a0:85:3a:e6:cb:d1:
         33:e2:e7:65:a7:4f:dc:2f:cb:db:df:56:bf:8f:d6:23:e8:67:
         d2:7f:6d:ec:6f:14:0d:4c:d1:13:ae:1e:e6:09:51:5e:8d:82:
         82:e1:f3:58:9c:6b:95:3f:c6:8d:71:0b:76:bc:9c:75:15:91:
         90:b3:05:ae:b0:d1:85:51:d0:b4:35:3d:bc:3b:f9:bd:60:d7:
         86:3f:dd:c0:ea:21:ca:67:a2:79:7f:e6:f6:b6:05:15:95:ec:
         d7:83:0f:6b:bd:09:83:3d:86:ac:23:c5:73:0c:22:3e:a9:1c:
         82:5a:ac:fe:56:89:11:26:d9:57:d4:08:e8:3c:75:d0:8c:ba:
         66:55:2c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:28:20 2026 by rpki-client