Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
File:                     J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft (raw, json)
Hash identifier:          5Vmc0UN6C8UBBzlShFzhAmq7afsO8sJQmidEa4jDNkg=
Subject key identifier:   B9:4B:E4:7D:CD:E5:79:4B:6F:8F:65:37:03:69:3C:75:A2:17:FB:F6
Authority key identifier: 27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64
Certificate issuer:       /CN=27fca5b7a77d887649f68a45c90d667c76500164
Certificate serial:       019D382DCB3E45631686A286B2411DFE0232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
Manifest number:          01EC
Signing time:             Sun 29 Mar 2026 06:00:18 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:18 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:18 +0000
Files and hashes:         1: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl (hash: NzdJ5Gj2sz4XGplAyl31iT0hd0iYoeZ2niV8sqMHhIA=)
                          2: MjJql6N1k7NzCgb9-0-RouDw4k8.roa (hash: fpENb/LPkDXvYm6to8o4nXJyGfsle0bOqeriZZmpCDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:cb:3e:45:63:16:86:a2:86:b2:41:1d:fe:02:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27fca5b7a77d887649f68a45c90d667c76500164
        Validity
            Not Before: Mar 29 06:00:18 2026 GMT
            Not After : Mar 30 06:00:18 2026 GMT
        Subject: CN=b94be47dcde5794b6f8f653703693c75a217fbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9e:cf:21:43:f2:c6:4c:a0:79:a0:3d:d1:aa:
                    96:9d:a5:a5:90:83:48:d8:41:a3:44:1f:93:80:12:
                    f7:42:b0:4a:f0:b7:16:88:16:69:64:59:2a:9e:86:
                    68:6a:96:38:22:c7:14:b5:19:4d:16:ae:6e:c3:e4:
                    d1:83:02:70:5f:27:4b:82:ce:09:eb:b0:81:6d:87:
                    16:d0:50:16:f4:13:95:d5:74:8e:8f:78:94:3a:29:
                    a0:61:6d:b1:78:64:45:06:4f:4f:ac:e7:82:7a:7e:
                    c4:fb:46:48:e7:8f:f8:78:b6:28:8b:85:67:40:2f:
                    20:6a:a5:b7:c4:05:56:38:cf:1c:39:d5:11:5b:9f:
                    c2:f7:65:f2:38:7e:8b:7e:cb:98:5a:16:66:83:a3:
                    3e:05:49:24:78:51:e5:1b:05:af:c5:26:92:65:da:
                    65:e7:55:e6:7d:5c:77:74:df:20:8e:db:e9:90:8d:
                    fa:fc:83:80:6f:ca:bd:0d:57:b9:40:a1:54:fe:0c:
                    5b:9f:1f:c8:ff:d8:b1:62:9e:35:3e:1a:22:c3:96:
                    45:54:f7:43:4e:62:54:6f:2e:ac:58:21:e9:20:96:
                    51:f4:2b:5e:43:5d:1a:cf:73:1d:29:61:8a:e5:7f:
                    d7:93:83:b7:eb:f1:cc:cc:a5:44:42:66:7b:2e:fe:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4B:E4:7D:CD:E5:79:4B:6F:8F:65:37:03:69:3C:75:A2:17:FB:F6
            X509v3 Authority Key Identifier:
                keyid:27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d8:61:39:ee:5c:fb:e8:4e:99:5e:eb:45:1a:4e:5a:b6:9a:
         94:6b:e1:d1:9a:1d:77:a2:10:d9:1e:6a:be:88:8e:77:f6:26:
         d3:3c:1c:94:3e:56:26:39:d2:09:ad:7c:97:20:6f:6c:64:3c:
         4f:e5:cc:d1:e4:31:40:b7:59:cd:96:79:68:28:18:59:4b:a2:
         f3:de:6b:eb:95:99:d0:9d:73:99:cb:27:99:25:b6:60:78:f8:
         bd:6c:f4:f7:e9:72:a8:3b:dd:1b:58:56:b8:79:ad:99:d3:4d:
         96:d1:17:30:1a:31:a1:f5:49:7d:56:8d:90:bd:d4:50:74:90:
         78:9f:a1:4b:d6:60:d3:9a:b2:bf:14:b0:b9:49:a2:8e:ad:da:
         ef:d3:cb:d3:11:c5:d8:7a:44:f1:5d:9b:36:cc:0b:52:03:11:
         e4:12:92:d6:2e:1d:ea:3a:f5:ff:f6:7a:66:f1:d6:d3:d0:bc:
         ee:58:2d:a0:da:d1:b1:ef:59:79:52:79:bd:d6:50:19:1a:2e:
         9b:06:f4:e7:db:11:d1:36:b4:e1:c5:73:bb:8d:0e:0a:b0:57:
         98:ad:00:ba:6c:47:10:0b:f5:65:84:f5:31:ac:ac:65:cd:13:
         3c:a6:71:a5:e3:d2:84:eb:01:54:31:a1:6b:fc:04:55:e4:37:
         58:90:af:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lcs+RWMWhqKGskEd/gIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmNhNWI3YTc3ZDg4NzY0OWY2OGE0NWM5MGQ2NjdjNzY1
MDAxNjQwHhcNMjYwMzI5MDYwMDE4WhcNMjYwMzMwMDYwMDE4WjAzMTEwLwYDVQQD
EyhiOTRiZTQ3ZGNkZTU3OTRiNmY4ZjY1MzcwMzY5M2M3NWEyMTdmYmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z7PIUPyxkygeaA90aqWnaWlkINI
2EGjRB+TgBL3QrBK8LcWiBZpZFkqnoZoapY4IscUtRlNFq5uw+TRgwJwXydLgs4J
67CBbYcW0FAW9BOV1XSOj3iUOimgYW2xeGRFBk9PrOeCen7E+0ZI54/4eLYoi4Vn
QC8gaqW3xAVWOM8cOdURW5/C92XyOH6LfsuYWhZmg6M+BUkkeFHlGwWvxSaSZdpl
51XmfVx3dN8gjtvpkI36/IOAb8q9DVe5QKFU/gxbnx/I/9ixYp41Phoiw5ZFVPdD
TmJUby6sWCHpIJZR9CteQ10az3MdKWGK5X/Xk4O36/HMzKVEQmZ7Lv5J8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlL5H3N5XlLb49lNwNpPHWiF/v2MB8GA1UdIwQY
MBaAFCf8pbenfYh2SfaKRckNZnx2UAFkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zNTM4NWItNjY4NC00NTllLTgzMjct
YzFmYWUwMDg4OWRiLzEvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8zNTM4NWItNjY4NC00NTllLTgzMjctYzFmYWUwMDg4OWRi
LzEvSl95bHQ2ZDlpSFpKOW9wRnlRMW1mSFpRQVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9hhOe5c
++hOmV7rRRpOWraalGvh0Zodd6IQ2R5qvoiOd/Ym0zwclD5WJjnSCa18lyBvbGQ8
T+XM0eQxQLdZzZZ5aCgYWUui895r65WZ0J1zmcsnmSW2YHj4vWz09+lyqDvdG1hW
uHmtmdNNltEXMBoxofVJfVaNkL3UUHSQeJ+hS9Zg05qyvxSwuUmijq3a79PL0xHF
2HpE8V2bNswLUgMR5BKS1i4d6jr1//Z6ZvHW09C87lgtoNrRse9ZeVJ5vdZQGRou
mwb059sR0Ta04cVzu40OCrBXmK0AumxHEAv1ZYT1MaysZc0TPKZxpePShOsBVDGh
a/wEVeQ3WJCvmg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:58 2026 by rpki-client