Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
File:                     JiditzviJrFxmZQSYlrMcnAkQ0M.mft (raw, json)
Hash identifier:          BgGXODcnRoqUXYYUYkF8DTzDvFu+3fwwpJ+EaPRK3zs=
Subject key identifier:   DC:29:88:E4:9B:6D:3B:F3:13:16:D5:DA:54:F1:F1:66:DC:44:DF:ED
Authority key identifier: 26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43
Certificate issuer:       /CN=262762b73be226b171999412625acc7270244343
Certificate serial:       019D3753085F7308544EFF17AA17ED2B1FBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
Manifest number:          04DD
Signing time:             Sun 29 Mar 2026 02:01:21 +0000
Manifest this update:     Sun 29 Mar 2026 02:01:21 +0000
Manifest next update:     Mon 30 Mar 2026 02:01:21 +0000
Files and hashes:         1: JiditzviJrFxmZQSYlrMcnAkQ0M.crl (hash: PJbYPcUjWAH2O5oLaS2DyHU1aVn2IWhhBNV3gV8HuBg=)
                          2: m7kVx-sKSPUtRod6BBQcaAsqdtY.roa (hash: ySihte+ihW35NP6Gcv6i5fBq39Uu/G8KkgjvNw72U1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:53:08:5f:73:08:54:4e:ff:17:aa:17:ed:2b:1f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262762b73be226b171999412625acc7270244343
        Validity
            Not Before: Mar 29 02:01:21 2026 GMT
            Not After : Mar 30 02:01:21 2026 GMT
        Subject: CN=dc2988e49b6d3bf31316d5da54f1f166dc44dfed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:de:18:f5:1a:a5:c4:7c:13:2d:fd:66:fd:
                    c2:34:56:ef:61:1f:e5:b4:14:0a:64:4c:f5:b6:9a:
                    89:b6:a1:4c:cc:5f:8c:c6:c7:b7:0c:04:6a:dc:45:
                    eb:7c:af:be:46:4c:fa:5e:82:73:80:f8:96:3a:21:
                    b2:cf:50:f2:ac:d8:a3:6d:70:57:7a:0b:dd:be:bd:
                    df:93:b7:a9:5e:dd:48:bd:b7:6a:cf:7c:6a:5d:3c:
                    79:3c:94:05:ee:49:70:06:fa:ea:f1:79:34:84:4c:
                    cf:d0:d7:90:4e:c7:6f:9c:fb:3c:bc:2e:44:e4:15:
                    8b:1c:2a:9a:c3:d6:1e:1d:11:e3:68:a6:b3:58:a7:
                    b2:e7:14:d5:23:88:18:eb:69:bc:e7:a5:7a:fb:35:
                    ea:be:73:39:b0:79:d3:6a:79:ac:5e:c1:32:39:54:
                    8d:60:2a:cf:2f:f2:e0:f9:33:d2:3b:55:ff:90:f0:
                    b3:b8:26:56:e8:3c:fc:8d:a4:c4:d4:79:e7:b6:21:
                    cc:0f:dd:1b:dd:e6:18:0e:6f:b0:0a:f3:77:39:1b:
                    58:a5:cb:8a:b6:09:85:cc:cb:89:2f:b7:83:43:2b:
                    17:77:6c:7b:6e:fd:2e:8f:6d:fd:2d:4f:bf:5c:a7:
                    af:38:e6:02:d7:75:60:f6:5e:34:12:b0:a2:8c:69:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:29:88:E4:9B:6D:3B:F3:13:16:D5:DA:54:F1:F1:66:DC:44:DF:ED
            X509v3 Authority Key Identifier:
                keyid:26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:75:a6:94:f1:66:6c:0d:d3:5b:97:47:3c:bc:1d:cc:a8:2e:
         f6:2b:0d:a2:17:5e:cf:d6:8a:aa:a9:61:9b:ed:05:bc:97:c7:
         88:59:99:44:ae:fe:0f:dc:e0:7a:8c:79:fe:52:1f:83:9e:15:
         70:62:cf:3e:52:e5:a8:23:e3:dd:84:a3:a9:03:53:17:b6:d7:
         f5:2f:c3:99:e6:5b:4a:0b:a0:cc:73:b7:c9:02:47:03:c3:37:
         ae:4f:4c:28:d4:82:b0:26:7b:9c:c9:da:fa:c4:c4:cc:b1:ad:
         0a:6a:cd:4c:f0:c5:e6:86:0d:d8:56:ff:0c:62:3d:ae:8c:78:
         6e:4e:78:23:cf:91:96:4e:fc:86:d5:5a:ea:fe:fe:6e:42:f4:
         6f:ed:80:04:c2:66:95:d3:3a:f5:d5:85:be:49:94:e5:8a:95:
         8f:3c:94:3f:43:28:de:38:4d:cf:fb:17:50:1f:af:06:ea:04:
         bf:4e:2f:05:e2:d6:27:6d:f4:b9:b4:0c:cd:7e:64:eb:e1:d5:
         b0:3b:2f:4b:ae:9e:ce:5a:41:93:07:b1:5f:05:d1:21:9a:fb:
         69:57:d7:fc:af:0b:82:85:a4:83:b0:83:50:35:75:7a:69:a9:
         70:26:f3:bd:f5:e1:92:dc:3e:79:31:2a:ca:43:d1:30:f4:a2:
         e1:76:cf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:49 2026 by rpki-client