Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File:                     jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier:          KmcOii1BSKu7u8VA1m6PyQTotldjCry1CBqagJAZ0hQ=
Subject key identifier:   82:07:E4:32:74:0C:9E:56:78:AB:87:6D:3B:3D:4B:18:1F:9A:0A:58
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer:       /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial:       019CE222C207F4DB35BC3D9B39DF3CD83E0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number:          122E
Signing time:             Thu 12 Mar 2026 13:00:54 +0000
Manifest this update:     Thu 12 Mar 2026 13:00:54 +0000
Manifest next update:     Fri 13 Mar 2026 13:00:54 +0000
Files and hashes:         1: 4xXEgGHm6FNEvzXSZMYA4CB15Xo.roa (hash: kLRMqyoKtLNzDHMHuXXnJpKSX1vsJYZPpStvOsdpbkA=)
                          2: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: gPEBwGLa9uOMFD9awWTTTP+ZG2w+qR74VQnjzhPK/Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:22:c2:07:f4:db:35:bc:3d:9b:39:df:3c:d8:3e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
        Validity
            Not Before: Mar 12 13:00:54 2026 GMT
            Not After : Mar 13 13:00:54 2026 GMT
        Subject: CN=8207e432740c9e5678ab876d3b3d4b181f9a0a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:6b:70:f3:69:42:c5:75:78:14:b3:fe:3a:
                    dd:1a:28:59:76:e1:a9:87:f9:ca:76:91:e5:4a:aa:
                    6d:b9:f9:84:63:b4:64:e8:c5:8f:72:cd:3e:90:8a:
                    c7:0a:e5:2b:7a:d5:a9:7b:66:3b:21:d2:9d:f4:d5:
                    5d:d3:17:14:d9:5c:a9:ef:ac:19:62:44:83:10:1e:
                    1d:f9:0d:db:ec:dd:3e:20:45:78:b4:12:20:e9:ad:
                    e5:40:c3:bf:c8:6b:cf:61:3d:2b:6c:10:1e:8a:da:
                    c2:d3:b2:a4:e2:8a:36:ec:84:5a:8d:f1:8e:18:f8:
                    e1:5b:6d:6f:dc:3f:02:38:b2:61:f4:8a:7a:9f:79:
                    bc:2c:61:1d:38:a5:bf:10:4f:2c:0b:9a:7f:70:46:
                    c0:91:e9:85:b8:43:ae:59:36:f3:59:e1:a6:5c:dc:
                    fc:85:18:47:08:b6:d3:8c:93:ae:82:ef:21:b0:a4:
                    d6:3e:a1:60:36:f6:64:84:ad:53:f7:80:13:57:d3:
                    02:d0:01:5d:48:23:c5:44:5b:4d:c9:dc:f1:54:f3:
                    fe:4e:eb:cd:2a:99:5a:02:9e:f1:51:9c:d1:27:ab:
                    70:4b:6b:0e:6c:25:82:8d:66:9d:9a:eb:8a:b4:6b:
                    71:51:6b:28:5b:69:06:99:3a:f8:78:b0:9b:5b:c4:
                    a8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:07:E4:32:74:0C:9E:56:78:AB:87:6D:3B:3D:4B:18:1F:9A:0A:58
            X509v3 Authority Key Identifier:
                keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d3:a6:33:68:dc:98:0f:ab:c3:90:73:d7:16:9c:43:97:a6:
         28:9d:fd:86:ba:bd:5c:d9:7b:2b:06:3c:fc:39:87:33:42:0d:
         0d:ad:ca:ec:30:82:b3:2c:52:2f:7f:c2:c8:45:22:db:3f:95:
         45:31:d8:e8:c1:68:e0:83:ea:22:93:a1:46:0a:58:f0:b4:36:
         db:b8:42:d6:54:70:21:47:21:d0:03:58:d7:71:92:7b:ef:28:
         8c:9c:a8:6d:ed:b0:ea:b8:06:46:18:bf:7a:26:8c:f3:2a:f4:
         43:e0:a2:11:38:1f:49:19:32:91:76:1e:9f:ab:b5:9f:37:3a:
         3b:ae:39:c5:02:20:f4:d8:7f:41:e0:80:cf:ed:71:b1:68:d1:
         4e:1a:74:10:26:61:9c:93:85:85:f9:a9:6f:df:de:22:f7:fa:
         55:db:f3:50:52:66:4d:f3:e7:ea:c3:0f:50:bf:0c:0b:59:fb:
         ba:52:98:5b:28:66:6e:8d:2f:89:87:aa:54:68:a5:2e:0c:7b:
         c4:c4:11:b8:97:ca:64:25:b0:73:9c:60:07:92:ed:6e:af:30:
         b8:f4:23:3c:bd:6b:07:24:01:96:28:9c:bc:f7:9c:6e:51:f4:
         27:d7:0b:50:a5:22:e5:87:06:a6:00:e9:83:9d:c5:3a:28:10:
         47:7f:e5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:14:57 2026 by rpki-client