Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
File:                     J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft (raw, json)
Hash identifier:          kC/5PmuiSZDY9m7KHZ5rATDMugIwPoNvSwxyURmskQc=
Subject key identifier:   07:5B:A8:30:63:5E:95:E9:3A:B3:14:6C:2B:92:4C:4C:6B:52:99:04
Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Certificate issuer:       /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Certificate serial:       019CAEDA257B2F431C61074F6569401EE3B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 14:00:57 +0000
Manifest this update:     Mon 02 Mar 2026 14:00:57 +0000
Manifest next update:     Tue 03 Mar 2026 14:00:57 +0000
Files and hashes:         1: J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl (hash: Lr/UTMsTyYCLYDU7Ga2eKlaEn4r8tjgjJ6kvxuaGekE=)
                          2: opETjfO6mWFYsmS6JQzzGRH9WxI.roa (hash: 7PPELYdKKburZhJ6qtTeTQUYG9VrfTnWioCBqvymRAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:da:25:7b:2f:43:1c:61:07:4f:65:69:40:1e:e3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
        Validity
            Not Before: Mar  2 14:00:57 2026 GMT
            Not After : Mar  3 14:00:57 2026 GMT
        Subject: CN=075ba830635e95e93ab3146c2b924c4c6b529904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:e2:89:bd:d4:d3:54:7c:94:eb:00:e2:56:
                    5e:87:fe:31:78:30:05:e2:66:1d:e0:22:f7:85:d1:
                    99:8c:ad:62:15:59:52:e5:38:ed:ef:27:16:1f:14:
                    08:76:1e:2e:38:2c:f5:61:2c:07:58:d4:4d:d2:c2:
                    5a:3a:db:55:87:64:47:2c:f7:99:f9:99:70:ed:80:
                    92:2e:62:3d:fe:21:e6:1d:13:24:fd:b8:b1:77:42:
                    d3:6d:76:9a:b2:ac:dc:f9:8f:4f:e5:f9:c4:dd:d4:
                    32:6f:13:68:3d:1f:26:a4:08:17:07:78:8a:b9:90:
                    96:5f:f1:b4:57:26:7e:79:31:2d:aa:49:ac:e5:9f:
                    df:ba:f4:72:d3:a1:94:0d:cb:df:f9:68:f6:c8:d6:
                    35:30:c3:e1:02:5c:cc:a8:35:17:c3:41:74:32:9a:
                    41:f0:79:a0:fc:0f:14:08:e1:a4:00:2b:2c:1d:1d:
                    f0:14:33:e8:80:70:bc:5e:81:44:2e:65:b9:13:24:
                    48:53:a0:5d:97:0a:54:4b:b6:42:66:5a:77:48:eb:
                    6f:20:d1:ba:96:f8:f9:e7:bc:8e:8c:e2:44:90:42:
                    57:da:3d:d2:49:3f:b4:40:85:7d:be:31:25:9c:16:
                    74:14:82:e6:35:48:65:3c:34:f0:c8:fe:50:69:8c:
                    b6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5B:A8:30:63:5E:95:E9:3A:B3:14:6C:2B:92:4C:4C:6B:52:99:04
            X509v3 Authority Key Identifier:
                keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d0:19:71:2c:ef:95:a2:43:79:b2:bd:94:84:94:02:77:82:
         24:92:1f:10:50:ba:32:4d:5d:f6:09:1d:d9:d6:bf:ef:bc:35:
         4c:4e:0e:76:2d:3c:27:b7:ed:07:79:49:91:4d:2c:a5:14:47:
         b3:ef:8c:82:02:8c:21:d0:13:09:a2:cc:8c:e9:d2:54:f1:43:
         1a:7e:1a:d3:35:b1:c5:ca:0d:db:38:1b:31:82:9a:c4:96:3d:
         27:9b:a9:b4:2b:02:46:17:78:a3:d5:a5:f8:8b:70:0b:8c:29:
         02:a8:78:eb:d1:5e:ac:8b:99:ce:08:87:c5:d6:43:cf:6f:0e:
         75:b3:61:69:bb:8d:ac:50:4a:64:14:07:a0:4d:05:65:7a:4a:
         8e:8f:83:3d:0a:fb:8e:73:a7:f0:18:0e:b4:b8:b0:9f:50:da:
         48:f4:44:bd:f4:98:6a:50:6b:66:65:fb:ea:38:18:70:74:f4:
         02:6c:d5:3f:76:b1:78:42:70:fa:a5:cb:de:25:91:03:d8:6c:
         3f:34:3b:29:f4:50:19:c3:49:ff:eb:8d:66:83:c4:f6:85:b5:
         6c:59:24:a2:e9:dd:ba:45:0a:a1:d7:9f:54:56:50:eb:b3:e4:
         77:29:71:d2:b9:b7:c7:8f:a7:35:91:0a:3a:8f:62:ed:74:f8:
         e8:4c:81:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2iV7L0McYQdPZWlAHuOyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZjEzMGI2ZjQ1ZjAwZjdjMWQxMzViNmM5M2IyMGU2OTA0
MTJjZmMwHhcNMjYwMzAyMTQwMDU3WhcNMjYwMzAzMTQwMDU3WjAzMTEwLwYDVQQD
EygwNzViYTgzMDYzNWU5NWU5M2FiMzE0NmMyYjkyNGM0YzZiNTI5OTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8Hiib3U01R8lOsA4lZeh/4xeDAF
4mYd4CL3hdGZjK1iFVlS5Tjt7ycWHxQIdh4uOCz1YSwHWNRN0sJaOttVh2RHLPeZ
+Zlw7YCSLmI9/iHmHRMk/bixd0LTbXaasqzc+Y9P5fnE3dQybxNoPR8mpAgXB3iK
uZCWX/G0VyZ+eTEtqkms5Z/fuvRy06GUDcvf+Wj2yNY1MMPhAlzMqDUXw0F0MppB
8Hmg/A8UCOGkACssHR3wFDPogHC8XoFELmW5EyRIU6BdlwpUS7ZCZlp3SOtvING6
lvj557yOjOJEkEJX2j3SST+0QIV9vjElnBZ0FILmNUhlPDTwyP5QaYy2mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdbqDBjXpXpOrMUbCuSTExrUpkEMB8GA1UdIwQY
MBaAFCfxMLb0XwD3wdE1tsk7IOaQQSz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lYWQ0YTAtMjUyMS00YWJiLWFjMmQt
MDdkYmQ5MDBjNGFkLzEvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lYWQ0YTAtMjUyMS00YWJiLWFjMmQtMDdkYmQ5MDBjNGFk
LzEvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtAZcSzv
laJDebK9lISUAneCJJIfEFC6Mk1d9gkd2da/77w1TE4Odi08J7ftB3lJkU0spRRH
s++MggKMIdATCaLMjOnSVPFDGn4a0zWxxcoN2zgbMYKaxJY9J5uptCsCRhd4o9Wl
+ItwC4wpAqh469FerIuZzgiHxdZDz28OdbNhabuNrFBKZBQHoE0FZXpKjo+DPQr7
jnOn8BgOtLiwn1DaSPREvfSYalBrZmX76jgYcHT0AmzVP3axeEJw+qXL3iWRA9hs
PzQ7KfRQGcNJ/+uNZoPE9oW1bFkkoundukUKodefVFZQ67Pkdylx0rm3x4+nNZEK
Oo9i7XT46EyBGw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:34 2026 by rpki-client