Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
File:                     mjk-8WAn_AO8XARf-SidS7t_82Q.mft (raw, json)
Hash identifier:          6bZHBrVqUSxfQGQB8SsCjWiyKpAII80leOZIJoDFSvM=
Subject key identifier:   BA:13:30:46:FE:77:50:12:91:56:59:57:9F:06:88:1A:22:9A:71:C6
Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
Certificate issuer:       /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Certificate serial:       019D37522A7D4E255752CF39EBC8E82D1390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
Manifest number:          14D8
Signing time:             Sun 29 Mar 2026 02:00:24 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:24 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:24 +0000
Files and hashes:         1: Vb0iGqrAQPlQmNGSdhQn2Ex6BEo.roa (hash: Etr28FcrasjMYjMvyTTIdEuz44C1hmgNsxU1F56W2gs=)
                          2: mjk-8WAn_AO8XARf-SidS7t_82Q.crl (hash: gUdDI1dPH/X0Y+Z57pAj45V7WODemRMox2XLw32Ufe8=)
                          3: rc_UgEQuERXAcFu0ryqIqFlvKe8.roa (hash: dFsLxVGQ4UAiyb+zv8JS9ufJDb8KzppW9TIIyizF/Sc=)
                          4: yUv2RfMvy9R3pN_vex3UtFkR-qY.roa (hash: lPAN24qwmWZ1IkZzOetMyqpr4pK3soxRCSbkbdcczvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:2a:7d:4e:25:57:52:cf:39:eb:c8:e8:2d:13:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
        Validity
            Not Before: Mar 29 02:00:24 2026 GMT
            Not After : Mar 30 02:00:24 2026 GMT
        Subject: CN=ba133046fe775012915659579f06881a229a71c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:40:87:9e:27:67:65:ad:bf:dc:f4:a7:e6:
                    b9:0e:87:83:c6:2c:6a:4e:b3:c3:9c:4d:18:dd:ac:
                    90:51:88:12:30:40:bf:48:c8:04:13:b6:82:a7:e0:
                    9b:f7:10:6a:e8:1c:e1:e2:22:c2:5c:3c:eb:f9:95:
                    ba:00:e5:e3:ac:78:1f:cd:90:02:91:ac:9d:a4:04:
                    9d:ec:4f:b1:32:12:20:9c:2f:ac:b0:6f:97:60:c6:
                    4e:80:a7:6f:a3:76:44:f4:65:ea:3e:87:8b:90:2e:
                    32:9b:ac:48:e6:09:fa:85:79:58:ac:6e:c9:f4:5c:
                    10:de:21:7c:ce:05:7d:bd:12:b3:7c:f4:81:34:09:
                    f7:21:2a:c5:ff:3d:2e:ba:81:10:0b:7c:06:8b:4f:
                    c5:b5:36:71:03:c4:61:b9:5e:0b:47:25:1f:0f:dc:
                    90:fd:7f:50:b6:fc:c9:4b:70:93:ae:6d:03:cd:13:
                    97:d5:50:aa:1c:0b:33:d7:dc:7f:97:9c:c3:6e:f5:
                    9c:bf:f2:db:fe:74:66:df:93:15:ce:85:f9:bc:f4:
                    1b:54:e2:db:4a:70:c7:d5:10:65:5f:47:95:74:2f:
                    d5:d9:d3:74:49:59:0a:31:63:fa:72:c1:65:07:50:
                    bc:4a:f6:db:1f:71:9a:fd:78:71:ca:54:35:5e:76:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:13:30:46:FE:77:50:12:91:56:59:57:9F:06:88:1A:22:9A:71:C6
            X509v3 Authority Key Identifier:
                keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ab:f8:48:ee:e8:b3:17:f9:94:28:07:ad:99:d7:9b:a4:60:
         f7:db:ce:09:f5:ca:49:5c:36:c3:e6:95:06:a3:63:56:86:a9:
         72:e3:23:03:a7:df:43:f4:31:84:a4:34:1d:9f:40:cb:fe:a0:
         c1:43:9c:d9:81:1e:6b:01:c9:9d:67:82:37:f3:29:1c:f9:d2:
         dd:ef:d3:fd:8b:26:c0:70:67:de:f1:7a:fc:15:aa:2d:87:fa:
         df:31:21:28:18:c5:3f:98:55:17:fc:35:64:b7:0c:0d:1b:ce:
         f8:b1:34:39:90:49:d6:44:f6:d3:30:89:9d:d9:1c:e8:a6:d9:
         dd:c1:95:4d:dd:1c:f7:37:d0:e5:16:88:1a:40:4e:d8:b4:16:
         1a:d0:c3:1e:e7:20:fd:e7:f4:c6:f9:1d:09:d9:da:70:0a:8d:
         d0:9d:04:04:1f:8d:fd:63:8c:2b:b8:e7:8d:f3:af:1e:e2:30:
         b0:a3:e0:bc:10:ff:68:53:bb:ee:8a:c4:ae:22:31:e9:ed:2e:
         04:2c:97:eb:35:33:15:c5:77:74:38:4a:dc:6b:2b:d6:f7:46:
         69:04:36:04:35:ff:24:b5:68:90:6d:b1:dd:cb:a8:81:aa:ab:
         13:ed:86:aa:92:ef:70:4f:e6:bf:ff:3e:20:ac:ea:a5:9a:f0:
         2d:0c:63:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uip9TiVXUs8568joLROQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMzkzZWYxNjAyN2ZjMDNiYzVjMDQ1ZmY5Mjg5ZDRiYmI3
ZmYzNjQwHhcNMjYwMzI5MDIwMDI0WhcNMjYwMzMwMDIwMDI0WjAzMTEwLwYDVQQD
EyhiYTEzMzA0NmZlNzc1MDEyOTE1NjU5NTc5ZjA2ODgxYTIyOWE3MWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstpAh54nZ2Wtv9z0p+a5DoeDxixq
TrPDnE0Y3ayQUYgSMEC/SMgEE7aCp+Cb9xBq6Bzh4iLCXDzr+ZW6AOXjrHgfzZAC
kaydpASd7E+xMhIgnC+ssG+XYMZOgKdvo3ZE9GXqPoeLkC4ym6xI5gn6hXlYrG7J
9FwQ3iF8zgV9vRKzfPSBNAn3ISrF/z0uuoEQC3wGi0/FtTZxA8RhuV4LRyUfD9yQ
/X9QtvzJS3CTrm0DzROX1VCqHAsz19x/l5zDbvWcv/Lb/nRm35MVzoX5vPQbVOLb
SnDH1RBlX0eVdC/V2dN0SVkKMWP6csFlB1C8SvbbH3Ga/XhxylQ1XnbSUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoTMEb+d1ASkVZZV58GiBoimnHGMB8GA1UdIwQY
MBaAFJo5PvFgJ/wDvFwEX/konUu7f/NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgt
YWIyZDVlN2Q0YTdiLzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgtYWIyZDVlN2Q0YTdi
LzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6v4SO7o
sxf5lCgHrZnXm6Rg99vOCfXKSVw2w+aVBqNjVoapcuMjA6ffQ/QxhKQ0HZ9Ay/6g
wUOc2YEeawHJnWeCN/MpHPnS3e/T/YsmwHBn3vF6/BWqLYf63zEhKBjFP5hVF/w1
ZLcMDRvO+LE0OZBJ1kT20zCJndkc6KbZ3cGVTd0c9zfQ5RaIGkBO2LQWGtDDHucg
/ef0xvkdCdnacAqN0J0EBB+N/WOMK7jnjfOvHuIwsKPgvBD/aFO77orEriIx6e0u
BCyX6zUzFcV3dDhK3Gsr1vdGaQQ2BDX/JLVokG2x3cuogaqrE+2GqpLvcE/mv/8+
IKzqpZrwLQxjwQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:26 2026 by rpki-client