Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
File:                     tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft (raw, json)
Hash identifier:          FiuOGIPzbTZ63x28cqw9iLKURSyjfmHaGgqgfYLQzHs=
Subject key identifier:   1D:1D:B6:A0:37:E4:B3:B7:48:25:78:C4:2D:A6:CB:10:B9:33:5C:DB
Authority key identifier: B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
Certificate issuer:       /CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Certificate serial:       019CABD947340E7AD4522DD54E30874C5646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
Manifest number:          0731
Signing time:             Mon 02 Mar 2026 00:01:09 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:09 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:09 +0000
Files and hashes:         1: QS-HbfHVwOboNvSjD7qE62Hr4KA.roa (hash: hPSMDrsX6eEkfCzcrrl0uCvcB1hd9Gv6m2p+Bfe7qjw=)
                          2: tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl (hash: AGxYfqf7+TPvR/t58n/Ij0rXJNy3kG1zSLFCFJ5NA8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:47:34:0e:7a:d4:52:2d:d5:4e:30:87:4c:56:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
        Validity
            Not Before: Mar  2 00:01:09 2026 GMT
            Not After : Mar  3 00:01:09 2026 GMT
        Subject: CN=1d1db6a037e4b3b7482578c42da6cb10b9335cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ea:43:e3:67:4b:67:b8:9f:ea:98:5e:90:85:
                    20:1b:18:01:db:ec:45:3e:39:5b:d1:3a:3f:38:c7:
                    59:24:98:0e:9d:fa:df:3a:0e:13:84:f5:3f:1b:c2:
                    f5:04:ff:b6:8b:c1:8d:fa:ce:5e:ec:ec:68:9f:4a:
                    c2:a7:0a:99:e6:68:e0:f9:f0:9d:39:f5:64:26:e5:
                    94:f6:f6:4d:96:11:ed:d5:0b:fd:26:74:c7:f8:d9:
                    0b:1a:7b:0d:45:12:41:6a:c8:84:3f:88:94:94:59:
                    2f:50:c8:1b:6d:76:35:1d:19:b9:7b:ba:2a:af:00:
                    c7:24:c5:07:a7:69:e1:c6:a6:5d:67:2b:86:cc:65:
                    2c:72:4f:5e:0b:7b:90:40:6e:d9:76:cc:5a:5d:50:
                    d3:59:00:42:d3:a0:45:39:1c:c1:27:7e:83:8c:0a:
                    a9:29:2f:d6:73:6c:26:d9:97:88:91:75:d9:64:fa:
                    b0:e3:5d:4f:55:f9:cd:f1:87:e5:f2:89:30:42:b6:
                    d9:8e:98:bc:fe:41:10:c7:f9:b7:bd:78:83:8e:44:
                    84:cf:d6:8b:a6:90:10:5a:e4:12:ec:4d:5d:bc:78:
                    fd:3b:d2:a9:aa:ca:4c:23:21:15:16:cf:4e:2a:c3:
                    15:f5:60:ef:47:c5:1d:bb:8d:c6:3e:53:b0:31:46:
                    51:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1D:B6:A0:37:E4:B3:B7:48:25:78:C4:2D:A6:CB:10:B9:33:5C:DB
            X509v3 Authority Key Identifier:
                keyid:B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5f:a8:16:5f:02:4c:c1:b4:e6:86:f5:fc:ac:5b:aa:35:a2:
         18:79:a5:e6:11:ac:29:f8:09:71:58:46:b5:81:6a:f7:29:77:
         0e:f2:31:8a:7e:bc:de:1b:b7:0e:b9:06:14:20:95:14:6d:26:
         2e:c5:13:e0:de:db:a4:84:c4:44:93:3f:4d:51:1f:11:67:66:
         65:ec:25:fd:8d:0b:1b:3c:41:76:46:5c:75:74:3e:53:51:26:
         97:fa:9f:9e:7c:71:ec:43:a0:e1:a0:d4:2f:da:49:1e:f5:fd:
         3f:7c:83:a5:75:35:c4:0f:86:6e:87:17:90:7c:97:6c:be:eb:
         65:74:02:24:fc:f3:77:26:99:8a:ea:c7:3f:36:81:0e:21:ba:
         1e:2b:5b:13:29:ec:24:2f:a6:b8:b8:ef:27:af:34:7e:44:a9:
         ac:c1:9d:74:3c:21:67:b5:c7:19:0f:d4:81:0c:83:7d:38:c8:
         63:6b:e6:d5:3e:d5:db:b8:e0:ff:37:d1:7b:a8:2b:08:09:7e:
         3e:41:15:9e:92:b9:77:c7:b0:2e:30:a9:28:46:26:99:09:70:
         3c:95:28:ae:ff:2b:d5:f0:c2:9a:58:29:dc:fd:68:34:b9:39:
         a3:0f:88:c7:25:8f:fe:a7:0e:74:72:84:b3:ee:05:79:60:8c:
         b3:d8:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:20 2026 by rpki-client