Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File:                     jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier:          zC7PjnHDteDPK44QKGVZ35KDKb4dtUxkvClIANTAanU=
Subject key identifier:   B5:2E:49:C8:18:CB:F6:39:07:07:11:F2:F8:8C:87:A3:5F:CD:76:30
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer:       /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial:       019CE2C7243FD76816ADFD7FBAD08FB86D6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number:          1865
Signing time:             Thu 12 Mar 2026 16:00:27 +0000
Manifest this update:     Thu 12 Mar 2026 16:00:27 +0000
Manifest next update:     Fri 13 Mar 2026 16:00:27 +0000
Files and hashes:         1: 5UgWz4TquW-RCZNQAffQO9XK1TY.roa (hash: K3S0eQrPAI5ZGDD9EhtxIW1xNbkOZ7avoejLjH/PyGs=)
                          2: TrdJEenqgtHhdFelNOTUIFotJQw.roa (hash: Dr0F+aTEx7ePrr0l9Z8JmKO/N1C2g7VZ2b2KhzfPrQQ=)
                          3: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: cu4pSw2xOM/TwvCTv8B0sPeodABf0ZY1uf8H18A8GMM=)
                          4: kzDbK2QoBVIIp9tqNTtnUJP1NZs.roa (hash: X7UOIcXOkpLacmMqPlB5bii5jBSrwu1Tt1zBt5jizCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:c7:24:3f:d7:68:16:ad:fd:7f:ba:d0:8f:b8:6d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
        Validity
            Not Before: Mar 12 16:00:27 2026 GMT
            Not After : Mar 13 16:00:27 2026 GMT
        Subject: CN=b52e49c818cbf639070711f2f88c87a35fcd7630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:31:db:f8:b0:c2:dd:39:04:f5:70:85:1d:
                    f6:ea:37:9a:73:ca:37:d6:70:5d:af:f1:d4:e2:14:
                    a9:42:83:9d:17:09:02:38:8b:ac:5b:23:59:c9:56:
                    5f:39:c1:81:c9:d7:b2:4a:7c:24:23:5f:38:8d:c3:
                    e5:a5:fe:ae:db:60:4b:de:ab:05:be:ba:32:d1:be:
                    d8:24:ac:77:cf:4a:cd:13:76:e1:02:75:a1:c4:ae:
                    7f:63:65:79:fd:3f:08:65:58:ab:fb:3f:47:81:26:
                    45:d9:eb:3a:18:cd:33:81:eb:94:db:c5:a7:8f:08:
                    37:dc:0a:75:03:0e:1d:9c:e5:e5:0b:c8:24:12:53:
                    87:d4:5a:8f:bc:8d:2b:32:47:db:34:77:7b:06:4b:
                    76:59:bd:27:cf:9a:c1:84:5a:10:91:08:19:24:49:
                    7c:98:56:4a:38:ae:c4:5d:78:64:75:46:83:34:84:
                    53:f5:05:3e:7e:c7:c8:1c:d6:f3:f9:59:74:5b:61:
                    ea:e6:82:73:be:a4:b3:f0:6a:46:33:a8:48:ab:24:
                    f1:28:ae:8e:c6:08:66:1f:cf:fa:0f:bd:09:41:a2:
                    4b:7d:57:93:ad:32:3f:77:ad:3a:dc:7d:9d:9b:79:
                    3c:a4:ff:5c:bb:77:a4:bd:c7:b5:0a:8c:87:4f:21:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2E:49:C8:18:CB:F6:39:07:07:11:F2:F8:8C:87:A3:5F:CD:76:30
            X509v3 Authority Key Identifier:
                keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:57:f1:1c:be:5e:e4:7d:16:30:a8:23:0e:1b:84:72:a4:76:
         1f:38:01:f1:7d:26:32:1c:b8:7c:11:6f:bb:6b:83:23:3e:a5:
         84:03:07:af:15:a2:02:73:bc:bc:5a:86:aa:eb:22:3d:5e:b1:
         29:99:19:a9:6e:8b:87:2a:78:20:06:a1:6a:91:fc:c9:41:67:
         60:eb:a5:a1:57:4b:11:72:b0:97:fa:da:db:d4:a7:f8:f2:94:
         69:a4:0d:96:65:02:8e:ac:80:c6:67:3f:dd:64:04:d9:01:11:
         e8:68:1e:25:f2:57:b3:f9:df:44:91:00:10:26:a1:dc:ac:d9:
         97:90:4c:02:b2:da:f9:63:e2:a7:69:98:68:d4:9d:42:5c:34:
         12:bc:31:ac:2d:47:f5:64:b7:68:f1:9f:6a:b5:6f:89:36:03:
         2d:3a:3c:bb:c9:97:da:ad:6c:55:17:66:f9:45:3a:c6:e2:b7:
         28:42:70:6c:38:b1:83:97:20:00:ae:97:52:e8:18:73:b0:98:
         bc:fc:da:51:35:ba:0d:46:3b:37:d1:b8:35:4b:bb:a3:68:9e:
         28:5f:7c:10:07:a8:1d:a2:f4:b0:11:aa:b4:ee:f2:fd:64:96:
         b7:75:6a:f6:e6:46:92:d2:6e:45:99:54:15:a4:c5:52:33:ba:
         2a:3a:65:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 23:12:24 2026 by rpki-client