Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
File:                     J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json)
Hash identifier:          IduOYJaY6ow6r8Wy2ONQK7h2jBLe5ZP1fegt+c8sWd8=
Subject key identifier:   24:17:8B:1A:2D:F0:BA:F9:DC:67:7A:58:BD:B0:19:61:E7:1B:8E:6F
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Certificate issuer:       /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial:       019CEE94C7E2BE1F923CD556129050098D46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
Manifest number:          1412
Signing time:             Sat 14 Mar 2026 23:00:53 +0000
Manifest this update:     Sat 14 Mar 2026 23:00:53 +0000
Manifest next update:     Sun 15 Mar 2026 23:00:53 +0000
Files and hashes:         1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: zE46Caoxt/ebrdITuKIOOTdGwpcCLpPqN1xdpxK/f0g=)
                          2: hv5F2fKm7cZ-fqlTGhS4HLwa_Mo.roa (hash: 3e8QQ5wpWIE1xn2kF+A/CiSMbxQICMGVp/zM+nv9PN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 21:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ee:94:c7:e2:be:1f:92:3c:d5:56:12:90:50:09:8d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
        Validity
            Not Before: Mar 14 23:00:53 2026 GMT
            Not After : Mar 15 23:00:53 2026 GMT
        Subject: CN=24178b1a2df0baf9dc677a58bdb01961e71b8e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:ba:0d:81:ac:be:4d:39:86:5c:2c:ff:db:
                    0c:2c:04:67:62:2a:42:46:63:8e:c3:c9:ef:ba:6c:
                    63:fe:f4:df:e4:61:59:64:3b:97:76:c4:d0:e9:e5:
                    fb:fe:1f:9b:f2:53:01:c1:28:c0:39:9f:98:9c:75:
                    b5:71:4e:4b:ae:53:a2:be:2d:7e:24:34:a4:9c:71:
                    9b:90:4a:40:ee:e2:9e:88:45:34:2d:05:9a:41:61:
                    d1:d2:8f:87:e9:de:50:de:be:91:76:27:24:05:08:
                    65:e5:2c:47:58:69:56:24:8d:7e:5a:99:64:b7:5b:
                    d1:d3:89:ad:e9:5f:17:14:9d:c2:4e:dc:3f:e6:29:
                    a8:ac:a4:08:90:10:5e:49:e2:e4:ae:c8:ce:53:5c:
                    e4:c9:a7:91:a0:3c:df:54:1b:9a:06:97:b3:4a:3f:
                    53:09:26:1c:fa:69:e8:4b:97:9a:f0:0a:6d:60:02:
                    09:72:d6:a1:1f:98:80:99:bc:ce:f9:74:68:28:da:
                    33:30:4b:3c:fa:a6:42:5c:f3:3b:23:cb:f6:ed:06:
                    60:e9:aa:a9:72:86:e3:6e:8c:1e:8e:67:ab:fb:01:
                    69:9c:c1:eb:14:0c:ae:35:39:13:0f:b1:0f:07:58:
                    49:c4:8b:2c:8f:b5:09:d9:d1:43:aa:9f:e9:04:36:
                    d2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:17:8B:1A:2D:F0:BA:F9:DC:67:7A:58:BD:B0:19:61:E7:1B:8E:6F
            X509v3 Authority Key Identifier:
                keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:97:b8:48:2f:c7:7f:ba:9f:d3:79:3c:2f:ee:42:57:b0:fd:
         df:d1:5c:c7:07:39:aa:29:6c:31:39:e7:57:6e:58:d4:c8:04:
         30:7c:85:8f:22:cc:83:88:df:4b:96:34:13:a5:ec:fd:8e:e2:
         ed:9e:94:9b:a3:6b:21:b8:53:1e:c5:91:55:b9:b4:b6:e5:3d:
         ac:15:f8:10:da:f7:82:5c:a7:5f:e7:14:55:13:b2:0b:c3:17:
         77:95:e1:b5:20:69:d5:5a:37:11:2d:e7:bb:56:63:cf:f5:d1:
         92:2a:5b:2c:0f:70:4b:2e:0c:55:70:cd:39:90:32:e8:b5:3e:
         d6:a6:a7:56:d6:dd:f5:55:26:eb:a8:d1:29:5a:b2:7d:c8:40:
         e5:0d:6c:03:b7:93:ca:1d:ff:87:a4:bd:c2:61:0b:c9:c6:28:
         f5:04:3b:a5:41:b0:9b:55:d3:01:8b:91:38:8f:6f:55:28:44:
         03:b9:17:a5:d0:6d:f6:df:8f:a0:32:e9:39:bf:04:70:00:b5:
         63:13:ef:8d:05:b0:89:83:c3:7e:c0:a4:5e:f7:6b:1a:a2:1f:
         14:d5:07:7e:54:c7:b4:92:a6:e2:32:a5:98:8f:57:7d:28:c4:
         28:b4:4a:45:fb:5f:26:b5:a2:98:80:38:b8:0b:8a:e1:bc:43:
         25:c2:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 00:54:23 2026 by rpki-client