Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
File:                     JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json)
Hash identifier:          Ld+jjWBaFD5M4jlkMZVKev4aEzYz3BorsYXiE8FuSc4=
Subject key identifier:   B9:AC:ED:A3:37:DB:8A:80:21:0A:0A:E9:65:78:63:3C:CE:9F:50:4B
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Certificate issuer:       /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial:       019D382E00B544C923AA068359B49C72DCC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
Manifest number:          0B6F
Signing time:             Sun 29 Mar 2026 06:00:32 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:32 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:32 +0000
Files and hashes:         1: 4FrplW2P0skTJUa1sCtVMSIppcM.roa (hash: D9MVNJi9010IKib/p9TXKfT7aX0EYXNgCDs72hr1/ps=)
                          2: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: lMZ2Id0z0WXPgMjPMznmIq6knsAD81Cqp/bmHNBNR1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:00:b5:44:c9:23:aa:06:83:59:b4:9c:72:dc:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
        Validity
            Not Before: Mar 29 06:00:32 2026 GMT
            Not After : Mar 30 06:00:32 2026 GMT
        Subject: CN=b9aceda337db8a80210a0ae96578633cce9f504b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:98:69:84:25:b6:29:33:8a:a3:b1:68:8c:
                    e7:6a:e1:77:69:e1:98:00:da:20:1d:bb:42:3d:83:
                    d5:bb:44:fc:1c:93:c2:fc:21:0c:33:13:f4:66:11:
                    c4:ae:5d:7f:44:2a:4d:36:c2:6c:d7:b5:91:93:85:
                    41:13:50:fc:75:89:c0:2b:42:b7:cb:a7:43:72:44:
                    40:ec:6a:5d:2c:8f:59:8d:ea:d7:78:b1:03:d9:62:
                    84:f1:af:7f:2d:d9:1b:50:1d:85:8d:5f:3c:62:32:
                    7c:5c:01:40:f9:f8:ab:43:57:9d:8c:86:46:a5:d5:
                    cd:9d:14:c1:16:4b:d7:3e:00:81:a1:1c:f7:19:d0:
                    f4:2d:5f:26:9f:b0:7c:7d:75:43:7e:04:23:25:20:
                    a9:ee:8c:e3:24:ae:ae:be:13:d4:7f:5b:1d:5a:ac:
                    56:50:1d:df:08:0b:ae:eb:77:99:af:c0:20:40:0a:
                    ce:8e:4e:c7:0f:34:df:b5:22:ac:ab:d4:a4:ee:59:
                    21:95:c7:98:cd:f7:0f:27:03:8d:8f:43:41:0d:9c:
                    1a:46:16:2f:40:99:08:c8:30:73:7b:7a:81:6f:cc:
                    4c:a4:bf:66:d1:a1:41:30:7c:91:17:d5:5a:91:25:
                    b0:e5:b5:70:02:a1:a1:1e:c1:99:a8:f3:60:3c:01:
                    06:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AC:ED:A3:37:DB:8A:80:21:0A:0A:E9:65:78:63:3C:CE:9F:50:4B
            X509v3 Authority Key Identifier:
                keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b5:be:00:f3:cc:f2:0a:41:a1:2f:30:7e:b3:2c:94:c5:40:
         eb:37:bb:4e:61:de:96:d8:53:3c:3d:70:d9:fe:fc:33:23:6d:
         75:e9:eb:d0:da:ff:7e:4b:ee:45:55:f2:c6:5f:96:e0:dc:74:
         1f:85:9a:74:7a:64:b5:ac:bc:cf:c6:03:18:38:4b:ed:af:58:
         56:4d:fc:31:85:94:b4:25:8d:88:d4:b3:28:f5:93:e4:1a:14:
         a5:66:f3:32:e2:e7:4a:5c:12:8e:e2:94:f9:df:a4:44:c6:27:
         59:64:be:8b:16:68:9e:64:65:48:c2:31:ef:2b:38:b3:00:c0:
         fc:53:25:bb:14:6b:03:16:71:2e:1f:b0:eb:d9:8f:8f:f0:3a:
         94:68:a5:e8:a2:6c:7b:c7:7b:6f:09:5c:fa:10:97:b6:26:c7:
         3d:5c:e6:42:e9:34:0c:bb:23:64:b8:db:42:d5:c4:21:95:fd:
         8f:c0:a7:c5:11:15:e6:bd:04:a6:81:14:e0:62:a5:27:2a:8a:
         10:c1:c1:f4:72:38:c6:58:3e:5b:d7:c8:5b:36:05:9e:ff:9a:
         63:35:32:f7:84:15:69:68:dd:ca:98:af:42:a8:6c:00:46:56:
         79:38:40:63:8a:b8:4c:de:f5:3b:67:6e:47:a0:3a:09:b0:39:
         44:ed:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:28 2026 by rpki-client