Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
File:                     jxdSJfOGzpgBGfaYhPm-fGorOzM.mft (raw, json)
Hash identifier:          CRTGWZO2FtwVlcIqODOnhXsx1j7uFai/OQTju9Snows=
Subject key identifier:   7A:2E:82:42:BE:F0:7E:0A:AE:B3:B4:C8:76:E8:48:FD:DF:D7:A3:FF
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Certificate issuer:       /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial:       019D3909FEBCA5D8BD5E7230D7FDAC47F2BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 10:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:49 +0000
Files and hashes:         1: G1NkqVj8Yr6VTyyoWcdSUhUvvCw.roa (hash: CZnYGn2RTJItTzBITrNscqi0v2S9GDn0ujpdRLMbDD4=)
                          2: _Vs0Q32Z46fRXhG-kxJxEYZXxtg.roa (hash: xyogZ8QKw5nxXSVIno+0JDHOn4OpmuVmDGIYgg6rJzo=)
                          3: jxdSJfOGzpgBGfaYhPm-fGorOzM.crl (hash: HQP2FKvVfxb3cUZ6kcPOpK3CPnR4noFvwuMWBXYkmD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:fe:bc:a5:d8:bd:5e:72:30:d7:fd:ac:47:f2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
        Validity
            Not Before: Mar 29 10:00:49 2026 GMT
            Not After : Mar 30 10:00:49 2026 GMT
        Subject: CN=7a2e8242bef07e0aaeb3b4c876e848fddfd7a3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5f:fa:1a:3d:c5:3f:e8:ae:30:8b:45:a1:93:
                    6f:ea:29:33:02:bc:26:6e:52:b2:84:98:45:e0:de:
                    aa:f9:07:d4:bf:3f:0b:01:a3:a9:d8:44:24:9b:41:
                    ab:57:d0:23:c3:8b:bf:8a:6f:93:5d:98:a2:e0:97:
                    e2:89:02:37:36:8f:73:57:18:14:38:5b:12:1c:41:
                    d4:53:9b:35:08:c2:85:a1:85:55:f6:a3:68:a3:c7:
                    90:22:b6:e1:45:77:dc:aa:16:9d:18:c7:72:95:fd:
                    d1:53:e5:9f:15:c8:f7:72:c1:9b:b1:04:aa:d6:f9:
                    0d:28:a5:e7:ef:52:bd:70:31:f0:21:a4:c1:32:ba:
                    38:4c:33:3d:0b:8e:85:9e:35:6f:a3:f1:24:ce:bf:
                    73:1c:2c:1a:82:e0:6b:62:55:54:4a:65:13:a6:29:
                    b3:f3:77:11:8f:36:72:37:a3:89:b9:0e:3a:a0:ea:
                    89:3b:b8:27:58:b0:a3:8a:54:d0:a2:cc:09:c0:3d:
                    26:fd:77:ba:21:33:12:d3:9d:72:f1:01:d4:00:f8:
                    0a:5b:e1:dc:3b:5b:25:a5:58:e3:7f:d6:62:2c:66:
                    55:64:3b:a3:58:1f:5d:08:e8:02:09:9d:56:95:ea:
                    d9:1f:86:7f:9c:89:91:03:ce:df:d3:90:4e:b1:b8:
                    82:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2E:82:42:BE:F0:7E:0A:AE:B3:B4:C8:76:E8:48:FD:DF:D7:A3:FF
            X509v3 Authority Key Identifier:
                keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f6:40:2a:42:e4:a7:a2:8e:e8:b2:58:66:e8:9a:10:a1:4f:
         c8:b6:f3:3d:f3:02:b7:7f:c8:ea:f9:ff:87:d7:86:c4:ba:b5:
         ce:5f:0a:ea:4e:6e:b9:22:3f:e3:7f:58:32:53:72:af:b4:8e:
         98:e4:58:d2:e1:68:62:7a:44:2e:55:04:88:d3:31:ad:fa:21:
         93:57:98:02:d1:8d:f1:ca:cb:94:4b:ec:8d:2b:7b:7c:99:44:
         c1:f4:92:a5:e1:bf:28:4f:c8:15:c6:f1:cd:29:07:34:31:52:
         28:fa:52:a2:cc:64:72:cd:c4:18:dd:2a:a2:7c:49:88:5a:9f:
         a5:a4:8d:bd:b7:27:c1:a0:04:10:d8:0c:bb:b9:67:6e:0f:99:
         f6:d4:da:98:45:8e:82:81:e3:6f:e5:ca:0a:ea:cf:22:5a:f5:
         3c:ba:7b:99:68:4c:31:7d:d4:4e:f0:fc:ce:6b:5e:e0:ac:43:
         b2:74:65:e3:1a:e6:16:7a:84:27:0d:69:68:5b:e9:86:21:71:
         b9:0e:93:ca:70:d4:3a:eb:2d:c9:35:c2:b5:c8:6d:e6:51:31:
         ac:d6:91:48:89:11:49:76:6f:cd:29:d6:d8:8c:76:8f:ac:9c:
         05:d5:67:bf:4d:4c:a0:74:bc:93:66:9e:b6:40:d7:a4:15:1b:
         a5:d3:00:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:02 2026 by rpki-client