Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
File:                     JiditzviJrFxmZQSYlrMcnAkQ0M.mft (raw, json)
Hash identifier:          zjMQy+njxgQGzHyDes3s+zG+FnfXiic8TQznkJgAtHM=
Subject key identifier:   30:16:0D:8D:A1:CC:B7:2A:2F:60:4B:60:D5:64:F0:1C:7E:42:27:2C
Authority key identifier: 26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43
Certificate issuer:       /CN=262762b73be226b171999412625acc7270244343
Certificate serial:       019CAC4778E747D7719CE89F65503863DF02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
Manifest number:          0495
Signing time:             Mon 02 Mar 2026 02:01:30 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:30 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:30 +0000
Files and hashes:         1: JiditzviJrFxmZQSYlrMcnAkQ0M.crl (hash: ZzMgKtdRf/0C6ZRAbFXFRvgls7usHRb/Qo8EcTEXWWw=)
                          2: m7kVx-sKSPUtRod6BBQcaAsqdtY.roa (hash: ySihte+ihW35NP6Gcv6i5fBq39Uu/G8KkgjvNw72U1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:78:e7:47:d7:71:9c:e8:9f:65:50:38:63:df:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262762b73be226b171999412625acc7270244343
        Validity
            Not Before: Mar  2 02:01:30 2026 GMT
            Not After : Mar  3 02:01:30 2026 GMT
        Subject: CN=30160d8da1ccb72a2f604b60d564f01c7e42272c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7e:dd:71:db:ce:70:52:e2:47:e4:82:7b:68:
                    55:1b:de:51:17:78:5c:8b:f2:25:c2:e9:9f:b4:2a:
                    73:9c:3d:85:b4:c2:b0:d8:f8:88:44:9d:36:17:a6:
                    2a:03:fe:48:b0:80:f5:d2:3c:0c:72:1c:53:26:3f:
                    d6:36:67:3d:df:55:78:84:5f:3a:ce:ee:0e:4a:cd:
                    cc:09:cb:5f:a4:fc:d9:40:d2:e3:39:91:fb:56:8e:
                    6b:dc:06:d0:a6:4c:44:54:a7:ab:76:05:ef:73:cd:
                    32:80:77:32:b5:8e:d3:11:44:fa:1c:2b:91:e5:47:
                    5e:7a:cb:08:79:b6:57:fb:e4:3a:b6:e6:94:49:08:
                    e9:24:38:ae:d1:9c:83:2f:68:22:1d:e4:66:a7:60:
                    ee:60:79:b1:33:99:e9:a7:0d:14:97:fa:5f:98:b8:
                    5c:0c:2f:8e:8b:17:bb:4a:23:51:d3:8d:84:0d:4c:
                    62:b7:84:c2:85:4b:f6:8d:87:e5:13:95:09:21:28:
                    89:9c:18:ea:fb:b0:bb:5d:40:6e:dc:d8:f6:29:8a:
                    41:9d:2e:82:c2:3f:e8:5b:10:72:a1:e7:c8:09:e3:
                    90:80:1b:8f:97:ad:51:1a:e4:15:f6:6a:4f:cf:4c:
                    8d:ab:6f:60:9c:da:93:be:c0:e6:8b:ae:b9:0c:91:
                    e5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:16:0D:8D:A1:CC:B7:2A:2F:60:4B:60:D5:64:F0:1C:7E:42:27:2C
            X509v3 Authority Key Identifier:
                keyid:26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:da:f4:b3:49:04:e3:7f:62:0c:84:60:69:a7:1e:29:00:8e:
         a0:90:1f:35:97:39:46:6a:a6:ef:9c:08:a8:8f:33:bf:aa:61:
         78:e8:33:c9:9d:f5:cc:0c:6c:8b:91:92:c5:45:b5:c9:5e:e3:
         ec:47:30:4f:ac:70:19:4a:df:98:83:c7:03:75:de:d6:ad:70:
         c6:9c:2d:6b:b9:a9:c7:f7:f2:60:60:8c:f2:1a:3c:40:a1:14:
         6e:67:95:c8:49:87:4e:d1:a7:e8:78:d8:b4:ee:94:20:ad:03:
         11:0b:85:56:24:86:5a:6d:e6:43:1f:6d:26:bc:08:52:9c:e3:
         21:2e:4c:63:b5:2e:89:a9:30:91:eb:c6:05:ab:52:e4:fd:c4:
         99:54:3f:cb:a3:e2:71:bd:40:f8:e1:67:28:c8:d9:36:76:7a:
         53:af:8a:8a:1f:39:ea:cc:70:a1:ec:2d:5f:d5:0b:c4:fd:56:
         13:35:05:0d:a8:0f:ba:9c:49:1c:67:2f:ec:a1:7b:3a:78:34:
         a9:1e:11:69:ac:bb:89:29:32:cd:d9:a8:bc:c5:f5:47:3f:b5:
         cf:34:c9:08:a8:9d:86:15:a8:42:f9:fa:f6:e1:b3:93:8d:b0:
         1e:f3:5a:77:1b:70:f8:99:97:3b:7a:2a:2a:d0:05:69:93:86:
         36:69:6b:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR3jnR9dxnOifZVA4Y98CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Mjc2MmI3M2JlMjI2YjE3MTk5OTQxMjYyNWFjYzcyNzAy
NDQzNDMwHhcNMjYwMzAyMDIwMTMwWhcNMjYwMzAzMDIwMTMwWjAzMTEwLwYDVQQD
EygzMDE2MGQ4ZGExY2NiNzJhMmY2MDRiNjBkNTY0ZjAxYzdlNDIyNzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH7dcdvOcFLiR+SCe2hVG95RF3hc
i/IlwumftCpznD2FtMKw2PiIRJ02F6YqA/5IsID10jwMchxTJj/WNmc931V4hF86
zu4OSs3MCctfpPzZQNLjOZH7Vo5r3AbQpkxEVKerdgXvc80ygHcytY7TEUT6HCuR
5UdeessIebZX++Q6tuaUSQjpJDiu0ZyDL2giHeRmp2DuYHmxM5nppw0Ul/pfmLhc
DC+Oixe7SiNR042EDUxit4TChUv2jYflE5UJISiJnBjq+7C7XUBu3Nj2KYpBnS6C
wj/oWxByoefICeOQgBuPl61RGuQV9mpPz0yNq29gnNqTvsDmi665DJHlAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAWDY2hzLcqL2BLYNVk8Bx+QicsMB8GA1UdIwQY
MBaAFCYnYrc74iaxcZmUEmJazHJwJENDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlkaXR6dmlKckZ4bVpRU1lsck1jbkFrUTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kYjU0N2UtZjQzMS00ZDc4LTlmMzgt
MmM0YzA2NmZjMjkxLzEvSmlkaXR6dmlKckZ4bVpRU1lsck1jbkFrUTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9kYjU0N2UtZjQzMS00ZDc4LTlmMzgtMmM0YzA2NmZjMjkx
LzEvSmlkaXR6dmlKckZ4bVpRU1lsck1jbkFrUTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNr0s0kE
439iDIRgaaceKQCOoJAfNZc5Rmqm75wIqI8zv6pheOgzyZ31zAxsi5GSxUW1yV7j
7EcwT6xwGUrfmIPHA3Xe1q1wxpwta7mpx/fyYGCM8ho8QKEUbmeVyEmHTtGn6HjY
tO6UIK0DEQuFViSGWm3mQx9tJrwIUpzjIS5MY7UuiakwkevGBatS5P3EmVQ/y6Pi
cb1A+OFnKMjZNnZ6U6+Kih856sxwoewtX9ULxP1WEzUFDagPupxJHGcv7KF7Ong0
qR4Raay7iSkyzdmovMX1Rz+1zzTJCKidhhWoQvn69uGzk42wHvNadxtw+JmXO3oq
KtAFaZOGNmlrqA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:36 2026 by rpki-client