Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
File:                     JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft (raw, json)
Hash identifier:          sQ0HapqHeRFI5Up52Disw8LZ4tacX5p30kU2SVsiTfA=
Subject key identifier:   64:1E:28:A5:8A:B1:37:1E:B0:CE:94:7F:9E:B0:EC:E1:D3:E3:A1:24
Authority key identifier: 26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B
Certificate issuer:       /CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
Certificate serial:       019CAA2155F59F0E78B0375932738748D3DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
Manifest number:          0F25
Signing time:             Sun 01 Mar 2026 16:00:37 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:37 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:37 +0000
Files and hashes:         1: JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl (hash: ORZ4P9E8kyHa9jFgiceaSoWg7tC49XN8YoIicV/AFnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:55:f5:9f:0e:78:b0:37:59:32:73:87:48:d3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
        Validity
            Not Before: Mar  1 16:00:37 2026 GMT
            Not After : Mar  2 16:00:37 2026 GMT
        Subject: CN=641e28a58ab1371eb0ce947f9eb0ece1d3e3a124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:22:88:96:57:b6:9b:bf:c3:79:4a:db:0a:
                    a1:78:d8:c3:55:a5:2e:16:b7:5d:35:66:58:1e:97:
                    9a:49:97:53:65:6b:73:7a:bc:5f:89:e8:34:ef:c3:
                    49:50:fe:19:90:49:ad:05:85:75:31:3d:82:70:ed:
                    e0:88:eb:5b:6b:e9:bc:8d:a3:c6:57:30:47:b6:d4:
                    57:90:63:9f:60:d9:aa:46:c0:42:ae:83:57:a8:94:
                    45:6a:7f:5f:e2:fc:8f:15:da:e8:0f:d7:28:53:85:
                    5c:0a:76:86:c4:59:c8:b3:33:9a:22:69:98:4d:96:
                    dd:2e:0e:44:e7:c6:38:6a:76:14:0a:6a:38:48:24:
                    60:94:d3:5a:1a:6e:c5:47:6b:c6:d1:96:9d:40:78:
                    cf:93:8c:5c:76:27:1d:b4:35:1e:d5:c8:7d:7a:f6:
                    7a:22:54:92:52:3d:8d:d2:59:9f:fa:e9:7a:3e:be:
                    c9:45:e2:28:11:78:08:c8:3a:49:9d:cf:ee:29:88:
                    02:44:c5:e0:4d:90:67:e4:87:ba:2e:b1:7a:5a:98:
                    1a:84:fe:93:d3:6a:6b:fd:d7:ff:d9:97:e3:57:d7:
                    a2:2c:78:ac:57:25:b2:cf:12:8d:08:08:d6:59:48:
                    ec:f7:29:eb:f9:d7:45:31:37:41:4f:79:dd:ac:0e:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1E:28:A5:8A:B1:37:1E:B0:CE:94:7F:9E:B0:EC:E1:D3:E3:A1:24
            X509v3 Authority Key Identifier:
                keyid:26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:85:c3:36:68:54:d2:49:9f:8e:99:1c:b2:a1:8d:04:79:8d:
         e5:ea:5e:08:04:de:72:52:1e:83:a6:0f:0b:0d:39:b2:54:f7:
         1d:fc:41:b2:ae:95:9a:f1:35:0d:c8:e3:74:44:23:36:59:2f:
         be:82:1e:92:ac:3f:e9:5f:dc:d7:7c:ca:d8:ec:4d:72:53:d1:
         dd:9d:35:1f:e1:48:65:bf:80:90:30:00:1a:95:ed:7f:60:f5:
         ea:0b:a8:e8:0a:a3:13:a8:9a:5e:26:56:75:c9:33:b8:3a:b7:
         42:b4:9e:1c:df:98:a4:48:10:2e:7a:9f:74:21:95:db:e0:88:
         d7:c5:69:b8:74:3e:aa:92:62:20:91:97:43:6f:8e:59:53:e6:
         94:18:b3:4c:23:15:d6:ac:d5:68:78:6e:8b:2f:16:49:d0:d9:
         bd:36:f2:18:fd:8b:e3:73:b1:d8:9f:cc:a6:1c:9d:72:c0:70:
         32:00:08:e2:6d:1a:e1:e7:28:b3:e7:03:81:74:21:e9:e6:9f:
         d3:3e:6b:6a:9b:68:8b:85:3a:7b:08:d3:16:40:d3:e3:54:37:
         b6:cd:20:af:84:d8:50:d8:fa:99:79:a8:c2:e4:fa:ae:72:8b:
         19:07:c3:d7:1e:9b:16:04:91:47:be:cb:3b:3d:ad:72:22:15:
         f9:ca:2f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:10 2026 by rpki-client