Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
File:                     jYBF-d8IxTBX6d-ft7eldRA__0o.mft (raw, json)
Hash identifier:          pmLooeELJo8yozOTTe1g1NKb/JpW+x5yHKUIakS7+vw=
Subject key identifier:   F1:93:D3:96:13:49:50:8F:03:4B:16:FA:6E:CB:7E:7F:52:44:48:49
Authority key identifier: 8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
Certificate issuer:       /CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Certificate serial:       019CAFECF330C04BFBB6015C7DBBF0F93F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
Manifest number:          0347
Signing time:             Mon 02 Mar 2026 19:01:07 +0000
Manifest this update:     Mon 02 Mar 2026 19:01:07 +0000
Manifest next update:     Tue 03 Mar 2026 19:01:07 +0000
Files and hashes:         1: 0wmiIEGgBNaM0SH3E3jDJzi9lvA.roa (hash: 5FuZkazkiJGDrvBOsL3FrqVNzaE9M0HyAMUTf9d4FZQ=)
                          2: jYBF-d8IxTBX6d-ft7eldRA__0o.crl (hash: aNmL4aWSsXZjrW/I0gKy5P+De6u/SM1JVva91EY9u0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:ec:f3:30:c0:4b:fb:b6:01:5c:7d:bb:f0:f9:3f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
        Validity
            Not Before: Mar  2 19:01:07 2026 GMT
            Not After : Mar  3 19:01:07 2026 GMT
        Subject: CN=f193d3961349508f034b16fa6ecb7e7f52444849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:39:dd:d6:07:32:78:f5:41:ae:c8:0b:62:
                    29:86:df:17:24:72:96:e6:76:13:33:ce:ec:e5:6c:
                    0f:0b:bd:5b:c8:d5:85:e1:b8:01:8b:71:4c:4c:da:
                    f6:71:7a:e1:36:33:e2:67:2f:f7:bf:8a:88:11:c9:
                    5b:77:c9:e2:f6:8c:a9:9a:99:c5:04:f1:e9:ce:d7:
                    71:ed:44:ee:a3:40:2d:5a:1a:6b:1c:89:13:5a:39:
                    a0:2c:4b:79:1f:54:66:c4:a0:95:2e:54:f8:90:73:
                    7d:96:47:33:2a:2d:43:e4:a8:ea:d5:c8:f6:04:90:
                    f3:92:37:08:27:f6:cf:fd:8f:c4:6f:77:52:61:c6:
                    b7:94:76:5b:65:f8:3e:5c:39:f9:c1:2b:4c:8b:2d:
                    45:89:ab:9d:57:1a:f0:c2:84:f2:19:6b:0c:00:95:
                    1a:b2:d9:00:ea:bf:b5:41:9a:21:31:56:33:c7:91:
                    80:71:68:d8:a8:69:bc:e4:53:f6:65:2b:f4:1d:39:
                    44:42:ef:ab:47:14:61:bd:43:d2:a7:bf:51:6d:98:
                    58:28:b4:02:0c:1a:a2:f8:88:99:32:23:67:05:ea:
                    e9:cd:e0:43:e0:c8:60:e4:9e:ee:2a:a1:93:2e:6e:
                    6a:34:61:97:82:d6:27:96:81:cc:51:95:f9:9a:fc:
                    b5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:93:D3:96:13:49:50:8F:03:4B:16:FA:6E:CB:7E:7F:52:44:48:49
            X509v3 Authority Key Identifier:
                keyid:8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:bc:c9:89:f5:ee:4d:d4:0a:8f:c0:17:65:a7:67:a0:cc:f6:
         51:ee:bb:c2:50:bb:f3:78:b4:93:57:18:d4:bc:42:b7:57:41:
         c4:34:3e:38:fd:e5:9c:74:fa:85:11:29:dc:cd:d3:78:ff:d4:
         d0:e9:4f:e2:63:4c:66:a7:b1:2f:e8:ba:64:57:03:69:f8:fb:
         10:fb:45:ce:29:3c:c4:1e:ca:c6:2d:e7:77:19:1f:b7:13:a1:
         45:c5:7f:24:79:39:01:2f:60:2f:d8:77:ec:0e:98:c6:43:6c:
         f4:e0:a6:72:a9:58:d4:ed:d8:15:45:77:0e:37:91:4d:6f:07:
         9a:db:88:5d:0a:a8:ad:b4:cd:99:20:47:83:21:71:0b:43:32:
         05:ab:18:f3:fc:45:68:b7:ca:ca:a9:f1:2e:06:f5:de:87:71:
         af:82:3b:48:74:02:0e:0f:91:24:d5:8c:41:0b:99:7c:0a:dd:
         6d:0a:01:b3:a3:f6:25:7b:52:ea:66:52:10:58:2b:68:3d:e8:
         07:06:58:fe:cb:4c:f7:0d:d0:a3:74:82:5c:64:5e:26:ee:7e:
         48:1c:e2:3f:32:f2:be:ab:a2:c8:02:64:13:1e:25:4e:f1:bd:
         66:03:91:5b:ae:04:60:ed:b7:65:a9:03:d4:31:fa:bb:0a:c0:
         dc:cc:aa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:25:00 2026 by rpki-client