Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
File:                     JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft (raw, json)
Hash identifier:          BhCP6BGPHD21ah2LyQD5uCNOa+zMP9pviSWLdnuPetg=
Subject key identifier:   F7:F1:11:6F:58:24:C9:27:9C:10:BD:12:F4:94:DE:B7:74:3F:87:77
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Certificate issuer:       /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial:       019D38D2CD24CFB1568BC0813E3A196A04FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
Manifest number:          1896
Signing time:             Sun 29 Mar 2026 09:00:32 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:32 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:32 +0000
Files and hashes:         1: 5zbBjKYDbKWTcUfQy2LjlEpGD3U.roa (hash: fUQj6/FKT/tHdExtCdO4GHSNm5JnTAgrwRSXAti5fnU=)
                          2: JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl (hash: ay7wWZEMNt9FKqHto7bBNj5d8hQnYNALs3COk0hjYVI=)
                          3: ty_yNfxELwDwdu1g8yk5XzB3xJk.roa (hash: Fx2p1X7kKIHJBVO5IpebjJHxMfg/mSJSoKNyxpeMDjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:cd:24:cf:b1:56:8b:c0:81:3e:3a:19:6a:04:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
        Validity
            Not Before: Mar 29 09:00:32 2026 GMT
            Not After : Mar 30 09:00:32 2026 GMT
        Subject: CN=f7f1116f5824c9279c10bd12f494deb7743f8777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d0:06:48:cb:b1:78:4a:0e:25:24:74:1d:df:
                    57:50:25:4c:16:b8:41:ce:65:ad:e1:42:5c:89:12:
                    66:63:a0:0a:d2:50:1c:a1:d2:4f:ae:6a:c4:2a:c0:
                    de:99:47:8a:64:fe:3b:a6:c1:42:78:9d:53:9e:54:
                    ef:aa:83:6b:8e:e4:0d:e4:9d:95:23:71:a6:f0:0a:
                    1e:7a:79:80:48:9d:2b:15:52:5b:ae:c9:41:d5:b5:
                    df:13:82:ca:eb:18:43:46:4d:12:ed:e5:14:60:50:
                    d3:12:d1:3c:70:e1:54:0d:e3:48:6a:19:22:2d:f7:
                    02:70:d2:7c:93:d3:57:f9:d4:20:b8:37:22:6c:76:
                    f9:94:ab:1b:f3:ec:c7:e8:20:e5:76:58:c8:d4:4d:
                    3a:19:34:49:e1:e7:94:cb:26:ce:af:30:7c:04:ea:
                    f1:5f:29:b4:12:d0:8e:4b:84:17:bb:08:96:04:54:
                    a0:c4:df:bc:dd:48:92:79:95:a0:21:0a:0e:f0:d2:
                    14:eb:b1:c3:be:1f:fa:d3:61:5c:2f:8b:36:28:a2:
                    9d:09:d3:7b:4f:f7:66:97:d7:bd:44:df:06:61:a7:
                    03:e8:a7:9d:bd:29:1a:bd:79:ab:08:b8:bd:c5:c7:
                    6a:d1:81:05:d6:b9:68:a7:20:09:54:16:18:fe:5e:
                    49:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F1:11:6F:58:24:C9:27:9C:10:BD:12:F4:94:DE:B7:74:3F:87:77
            X509v3 Authority Key Identifier:
                keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:33:b5:94:8a:f3:e5:b8:0e:0f:a8:5f:87:e2:ad:c4:65:d4:
         56:f4:c5:37:54:1a:44:9e:c1:9b:dd:de:2b:21:fb:32:38:ef:
         5a:e9:ba:17:2a:11:6c:1d:65:34:e3:51:70:98:16:df:f9:3f:
         e6:12:f9:28:d1:35:78:ca:a5:bf:0a:9c:5b:6e:0e:04:0b:5d:
         16:b8:88:70:2c:ee:fa:67:56:11:b3:ac:ec:f3:a1:e2:88:4e:
         87:df:1b:86:ac:73:8f:4f:64:b7:6d:f0:68:64:a9:56:2b:fc:
         1e:67:0e:08:a8:50:c3:de:07:39:92:90:ec:3a:46:da:a1:06:
         3a:c8:35:aa:eb:c3:12:ef:68:9e:59:1d:4a:fa:60:1d:a5:ab:
         dd:39:b5:09:00:c3:aa:30:8a:c6:ad:67:c6:33:60:62:71:6a:
         d1:71:02:f2:9f:ae:76:47:30:e2:78:47:4a:12:38:b9:c1:7f:
         80:b4:6a:05:e4:a8:e8:aa:3b:b8:f9:44:6d:cb:80:e7:20:75:
         1c:b0:b3:41:f1:76:89:90:0c:2c:28:1d:14:c5:88:58:71:5b:
         be:ed:82:09:ea:cb:c8:10:71:18:54:72:b9:dd:d3:8c:be:4e:
         6f:4e:0e:c8:a1:00:b5:2c:5a:71:b4:26:1a:06:b6:d7:ce:dc:
         e9:bb:75:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:50 2026 by rpki-client