Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
File:                     Jowu3BO7KjxjJiEhueqtGIvtuuk.mft (raw, json)
Hash identifier:          YHBI/WeQf1537YYpAQNhhXZUSRyBkA284STssrLyUAE=
Subject key identifier:   FD:05:63:AA:78:96:09:65:D0:E9:27:54:6E:CD:18:C4:56:8F:4F:4B
Authority key identifier: 26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
Certificate issuer:       /CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Certificate serial:       019D37C058B562B03B1E871312DED55597FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
Manifest number:          14B2
Signing time:             Sun 29 Mar 2026 04:00:45 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:45 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:45 +0000
Files and hashes:         1: 6GEbyuj2qKMcq18FIsrq4Q_-YBo.roa (hash: jxGNQfVpSStE/8Ajsn9ngwqV0Uae1t1kqzkQgh9Yxbs=)
                          2: Jowu3BO7KjxjJiEhueqtGIvtuuk.crl (hash: 1TGkZ2Wp/Qd5IpJdurRzi2TzMm8D3KuK03mInjN5RUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:58:b5:62:b0:3b:1e:87:13:12:de:d5:55:97:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
        Validity
            Not Before: Mar 29 04:00:45 2026 GMT
            Not After : Mar 30 04:00:45 2026 GMT
        Subject: CN=fd0563aa78960965d0e927546ecd18c4568f4f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e9:b6:f0:c3:b1:b2:aa:e1:5b:85:fe:1d:6e:
                    81:64:b1:12:56:03:06:fb:a1:1b:22:1c:45:07:28:
                    5d:3a:a8:a0:b5:37:5d:2a:99:29:5c:82:34:54:3e:
                    b7:cb:3b:59:9c:88:4d:af:fc:5b:d1:93:ea:2d:03:
                    95:ab:d5:8f:30:88:d6:a7:0c:b2:98:92:39:bf:d6:
                    3d:ad:16:7c:74:1d:e1:7b:61:65:d5:58:e0:47:a0:
                    c8:45:54:4d:df:4e:8b:dd:0b:12:05:8e:22:f5:ba:
                    32:9e:80:0f:10:23:9e:49:f1:41:ec:57:d3:57:4d:
                    3b:22:8e:13:8f:b2:af:06:3d:4d:2f:23:b4:72:a9:
                    5d:74:19:eb:8c:55:7f:ac:c6:21:da:d5:bc:32:13:
                    bf:4c:c0:06:33:f7:20:b0:65:f1:fa:3f:98:5a:bb:
                    90:17:ca:99:00:38:4d:44:f5:e1:09:c0:d6:99:10:
                    4a:6c:fb:11:b7:ce:44:b2:e6:ab:e9:7e:17:c5:24:
                    99:c3:47:30:28:d3:b4:62:cc:36:60:9e:99:73:e7:
                    d5:79:c9:16:55:9e:72:36:05:cb:42:7b:a9:b5:d7:
                    a1:e0:ec:30:bb:6a:6e:89:e6:82:6c:e9:d8:53:c3:
                    52:7c:f1:26:43:07:4b:70:41:81:e0:85:7b:11:62:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:05:63:AA:78:96:09:65:D0:E9:27:54:6E:CD:18:C4:56:8F:4F:4B
            X509v3 Authority Key Identifier:
                keyid:26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5e:ff:3d:82:02:5a:ba:c6:b8:4c:26:2a:a3:4e:e9:23:3d:
         6b:9a:09:3f:08:b9:84:d7:f9:90:d2:71:7f:cc:59:83:c7:02:
         06:20:30:10:0e:fe:2e:07:d8:fb:54:1d:11:ca:01:0a:37:fc:
         37:d1:dd:45:51:6d:3f:93:17:22:d0:3c:0e:ae:65:7a:65:d3:
         cd:eb:fc:1f:12:fd:26:68:79:ea:97:ed:8b:f8:1b:4f:f1:96:
         51:2b:08:c8:14:b4:6f:69:03:fe:18:0f:ea:d6:ad:77:20:8f:
         cf:b1:78:5c:7c:f7:e9:af:e2:bc:d9:de:47:4e:86:db:d7:0c:
         49:e9:5d:f3:f4:db:99:c1:b4:93:a2:09:36:b5:54:97:51:55:
         c1:6e:32:3a:1d:2d:c7:89:d7:d5:34:e2:85:fa:08:4c:f5:26:
         92:63:83:5c:5b:a9:7b:af:cf:22:69:63:e2:40:70:23:27:b6:
         b3:59:e8:5f:67:00:8f:97:93:4d:8b:fb:27:91:6c:c6:de:60:
         fb:1c:33:96:39:00:73:3f:82:e0:3a:af:86:3f:c1:a8:0d:7f:
         99:37:4e:6e:6e:d9:cd:6b:28:5b:da:df:10:47:f2:ee:6f:d1:
         b9:15:49:c7:5e:15:48:d2:21:20:22:5c:65:48:1a:63:0c:df:
         68:e0:2b:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wFi1YrA7HocTEt7VVZf9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OGMyZWRjMTNiYjJhM2M2MzI2MjEyMWI5ZWFhZDE4OGJl
ZGJhZTkwHhcNMjYwMzI5MDQwMDQ1WhcNMjYwMzMwMDQwMDQ1WjAzMTEwLwYDVQQD
EyhmZDA1NjNhYTc4OTYwOTY1ZDBlOTI3NTQ2ZWNkMThjNDU2OGY0ZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOm28MOxsqrhW4X+HW6BZLESVgMG
+6EbIhxFByhdOqigtTddKpkpXII0VD63yztZnIhNr/xb0ZPqLQOVq9WPMIjWpwyy
mJI5v9Y9rRZ8dB3he2Fl1VjgR6DIRVRN306L3QsSBY4i9boynoAPECOeSfFB7FfT
V007Io4Tj7KvBj1NLyO0cqlddBnrjFV/rMYh2tW8MhO/TMAGM/cgsGXx+j+YWruQ
F8qZADhNRPXhCcDWmRBKbPsRt85Esuar6X4XxSSZw0cwKNO0Ysw2YJ6Zc+fVeckW
VZ5yNgXLQnuptdeh4Owwu2puieaCbOnYU8NSfPEmQwdLcEGB4IV7EWKDyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0FY6p4lgll0OknVG7NGMRWj09LMB8GA1UdIwQY
MBaAFCaMLtwTuyo8YyYhIbnqrRiL7brpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm93dTNCTzdLanhqSmlFaHVlcXRHSXZ0dXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yY2IzYzktM2QwMS00Y2EyLWI5Yzct
ZjAxMTVjODVmM2JhLzEvSm93dTNCTzdLanhqSmlFaHVlcXRHSXZ0dXVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8yY2IzYzktM2QwMS00Y2EyLWI5YzctZjAxMTVjODVmM2Jh
LzEvSm93dTNCTzdLanhqSmlFaHVlcXRHSXZ0dXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASV7/PYIC
WrrGuEwmKqNO6SM9a5oJPwi5hNf5kNJxf8xZg8cCBiAwEA7+LgfY+1QdEcoBCjf8
N9HdRVFtP5MXItA8Dq5lemXTzev8HxL9Jmh56pfti/gbT/GWUSsIyBS0b2kD/hgP
6tatdyCPz7F4XHz36a/ivNneR06G29cMSeld8/TbmcG0k6IJNrVUl1FVwW4yOh0t
x4nX1TTihfoITPUmkmODXFupe6/PImlj4kBwIye2s1noX2cAj5eTTYv7J5Fsxt5g
+xwzljkAcz+C4Dqvhj/BqA1/mTdObm7ZzWsoW9rfEEfy7m/RuRVJx14VSNIhICJc
ZUgaYwzfaOArHw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:14 2026 by rpki-client