Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
File:                     J0iJxEELQxcvQcjBSuqJm7sq2r0.mft (raw, json)
Hash identifier:          zv+bb8pSr87QvXMqmm2oLLYdtacWKj8lSiq19vk2zQQ=
Subject key identifier:   C0:00:D4:AE:77:C5:24:5B:67:E5:2C:12:73:4E:44:B8:3C:85:7A:13
Authority key identifier: 27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD
Certificate issuer:       /CN=274889c4410b43172f41c8c14aea899bbb2adabd
Certificate serial:       019D37C0AFDC3FC6B30CDAE94918D669EAC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
Manifest number:          0E83
Signing time:             Sun 29 Mar 2026 04:01:07 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:07 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:07 +0000
Files and hashes:         1: J0iJxEELQxcvQcjBSuqJm7sq2r0.crl (hash: R/aG9zYi8ajuW17TRUDJUPSZko3PeHP1mmjWizFSCN0=)
                          2: TUbGa1Pmd7nNnXpHY5ZghqY1ZTg.roa (hash: XMmHn4bI1/zHGOmxQxotD/VPUEBHxwHpms++PNlyFtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:af:dc:3f:c6:b3:0c:da:e9:49:18:d6:69:ea:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274889c4410b43172f41c8c14aea899bbb2adabd
        Validity
            Not Before: Mar 29 04:01:07 2026 GMT
            Not After : Mar 30 04:01:07 2026 GMT
        Subject: CN=c000d4ae77c5245b67e52c12734e44b83c857a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:20:27:9c:53:25:16:c9:b3:d4:3a:1f:6b:
                    ca:84:e9:7e:01:13:61:ae:f7:4b:d1:bd:22:2c:52:
                    85:b4:f9:cb:13:72:10:a1:9b:b6:92:57:ff:05:3c:
                    f9:ad:8a:ed:c4:97:57:aa:c5:4c:09:20:f1:59:7a:
                    f7:d9:82:b5:59:85:63:d1:55:67:65:19:9f:82:19:
                    28:3f:be:65:f2:60:de:8f:c2:0c:bc:e2:e7:35:ed:
                    6b:91:0b:c5:c9:ac:63:38:b3:a3:95:2b:30:cd:95:
                    ad:c2:dd:f6:4a:ea:00:81:b7:9e:90:6a:09:d9:40:
                    42:e7:d5:1e:88:71:7e:8e:db:c6:6c:3a:ab:62:6f:
                    f2:13:bb:f9:6e:d1:6f:0a:39:e2:09:9f:3b:13:fd:
                    b9:09:3e:01:8e:3c:5d:79:38:c3:2a:60:4d:cd:18:
                    31:a4:34:eb:ff:7b:5b:1c:4b:84:fd:cc:b9:bb:cc:
                    25:24:2c:7a:12:e9:5b:53:6a:f7:62:59:96:57:f8:
                    2d:3e:b6:82:4c:dd:f7:a9:de:17:07:6d:c5:e7:30:
                    d5:34:26:d5:2b:ed:f6:11:b9:b3:98:91:e6:cf:23:
                    5e:8b:23:c1:e7:bc:50:bb:cd:32:ed:cc:9d:be:4f:
                    f4:c8:6f:c6:b8:9d:9f:31:7a:53:29:7d:5d:05:96:
                    36:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:00:D4:AE:77:C5:24:5B:67:E5:2C:12:73:4E:44:B8:3C:85:7A:13
            X509v3 Authority Key Identifier:
                keyid:27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:85:19:a9:9d:e6:94:52:e7:f8:9e:50:79:33:71:6c:cd:68:
         14:01:6f:ee:0e:da:26:22:3d:a8:38:c2:24:18:b4:c0:c5:43:
         e5:ac:29:da:9b:e5:49:6f:c1:73:ea:76:21:a4:bc:a4:84:67:
         38:62:23:74:9a:04:37:ab:23:27:5b:f6:b1:be:9b:eb:bc:cb:
         97:4d:1c:44:ad:ba:4d:e0:7b:43:df:1e:f7:25:fa:02:9a:3e:
         7f:b9:13:55:f9:b3:5f:95:56:19:a1:6d:68:b8:40:41:b8:cc:
         a3:fc:fe:61:43:3a:b0:9a:6c:43:39:a8:21:15:28:1b:45:28:
         6f:73:85:a8:f6:3d:cf:49:f4:cd:30:81:b4:4e:08:e1:a5:9b:
         83:7c:97:f9:dd:ae:0d:98:52:ee:da:c1:81:78:3e:b3:26:92:
         3c:22:5c:6f:3a:ee:02:7c:eb:80:27:70:c9:cb:0d:59:f9:f2:
         bd:ab:2b:fd:e4:81:50:75:ef:f1:04:6a:f2:5f:90:af:dc:56:
         e2:bc:90:2d:b1:78:ef:5e:fa:fb:d5:d4:84:b3:4f:14:ce:8d:
         c0:4c:1f:f6:b8:fb:30:3d:de:c6:15:96:d4:b3:4e:b1:98:c1:
         b2:7b:af:d5:57:c9:7e:6b:82:6c:96:4d:45:84:3e:6b:cf:d5:
         ea:e3:4d:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wK/cP8azDNrpSRjWaerGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDg4OWM0NDEwYjQzMTcyZjQxYzhjMTRhZWE4OTliYmIy
YWRhYmQwHhcNMjYwMzI5MDQwMTA3WhcNMjYwMzMwMDQwMTA3WjAzMTEwLwYDVQQD
EyhjMDAwZDRhZTc3YzUyNDViNjdlNTJjMTI3MzRlNDRiODNjODU3YTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwsgJ5xTJRbJs9Q6H2vKhOl+ARNh
rvdL0b0iLFKFtPnLE3IQoZu2klf/BTz5rYrtxJdXqsVMCSDxWXr32YK1WYVj0VVn
ZRmfghkoP75l8mDej8IMvOLnNe1rkQvFyaxjOLOjlSswzZWtwt32SuoAgbeekGoJ
2UBC59UeiHF+jtvGbDqrYm/yE7v5btFvCjniCZ87E/25CT4BjjxdeTjDKmBNzRgx
pDTr/3tbHEuE/cy5u8wlJCx6EulbU2r3YlmWV/gtPraCTN33qd4XB23F5zDVNCbV
K+32EbmzmJHmzyNeiyPB57xQu80y7cydvk/0yG/GuJ2fMXpTKX1dBZY2TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAA1K53xSRbZ+UsEnNORLg8hXoTMB8GA1UdIwQY
MBaAFCdIicRBC0MXL0HIwUrqiZu7Ktq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBpSnhFRUxReGN2UWNqQlN1cUptN3NxMnIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82MmJhY2ItYTk1Zi00MzBiLWFmZjkt
MTlhM2VkYTA1MjRlLzEvSjBpSnhFRUxReGN2UWNqQlN1cUptN3NxMnIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82MmJhY2ItYTk1Zi00MzBiLWFmZjktMTlhM2VkYTA1MjRl
LzEvSjBpSnhFRUxReGN2UWNqQlN1cUptN3NxMnIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoUZqZ3m
lFLn+J5QeTNxbM1oFAFv7g7aJiI9qDjCJBi0wMVD5awp2pvlSW/Bc+p2IaS8pIRn
OGIjdJoEN6sjJ1v2sb6b67zLl00cRK26TeB7Q98e9yX6Apo+f7kTVfmzX5VWGaFt
aLhAQbjMo/z+YUM6sJpsQzmoIRUoG0Uob3OFqPY9z0n0zTCBtE4I4aWbg3yX+d2u
DZhS7trBgXg+syaSPCJcbzruAnzrgCdwycsNWfnyvasr/eSBUHXv8QRq8l+Qr9xW
4ryQLbF47176+9XUhLNPFM6NwEwf9rj7MD3exhWW1LNOsZjBsnuv1VfJfmuCbJZN
RYQ+a8/V6uNNkw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:45 2026 by rpki-client