Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
File:                     jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json)
Hash identifier:          8vB4d+uiVdMA/qlBO5q8SbX0OIe6tw1o1zh9FCHL20I=
Subject key identifier:   F3:9B:A6:B4:5B:CD:ED:AC:B3:41:92:4D:97:57:A2:CF:38:15:16:54
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Certificate issuer:       /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial:       019CACB4A6F702CC54ED944D6875A5D86964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
Manifest number:          0B38
Signing time:             Mon 02 Mar 2026 04:00:46 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:46 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:46 +0000
Files and hashes:         1: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: 9D8NMUzm+WxYXQiB466sTJc2B4DkIBMVlWlZUYQPabE=)
                          2: zVm1lqtYpLPgcCC6R2FQhhyeTpw.roa (hash: Mr6zA1SBW1abbeTreFoPgkXQSAh5HCSCpxdgGGoFjUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:a6:f7:02:cc:54:ed:94:4d:68:75:a5:d8:69:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
        Validity
            Not Before: Mar  2 04:00:46 2026 GMT
            Not After : Mar  3 04:00:46 2026 GMT
        Subject: CN=f39ba6b45bcdedacb341924d9757a2cf38151654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c9:1f:4d:b9:22:fb:3d:32:db:ab:00:8f:a4:
                    19:6b:8c:b7:8d:df:7b:fc:b4:13:18:79:76:54:97:
                    40:c7:90:05:b3:bd:30:21:af:02:fd:f3:3f:06:7c:
                    02:01:f1:24:3f:f8:11:0b:ad:6c:08:bc:76:c9:7e:
                    56:db:4a:7e:b3:99:e6:ab:e8:e0:28:14:cd:72:68:
                    01:33:06:67:c8:11:66:8b:30:29:81:a8:b8:4d:93:
                    5f:bd:1c:0b:c5:ed:46:82:98:08:d9:84:5e:40:76:
                    24:2e:b2:d5:25:91:0d:40:4e:63:04:d2:19:7c:77:
                    c7:b2:7c:a6:79:58:a8:41:73:47:b0:f8:33:e1:9d:
                    ab:9b:1a:b0:65:21:70:98:68:3f:ee:91:52:1f:8e:
                    eb:8b:87:2d:48:60:4f:79:00:f7:d7:5e:13:d4:36:
                    51:4e:b1:b4:1b:61:aa:de:5a:6e:33:3a:c2:06:0b:
                    3a:0b:8c:d5:15:1f:41:57:60:4b:5d:a9:93:7e:19:
                    c3:7f:a0:5e:db:24:06:48:a5:98:56:39:b6:49:bf:
                    7d:aa:ca:70:19:7e:4c:fd:20:5b:f3:bf:fc:c8:9c:
                    30:09:a3:9f:34:c3:15:fd:26:33:9b:58:e0:8d:87:
                    8c:b1:7f:41:0c:71:e7:b8:fd:32:34:3d:cc:3d:d2:
                    cd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9B:A6:B4:5B:CD:ED:AC:B3:41:92:4D:97:57:A2:CF:38:15:16:54
            X509v3 Authority Key Identifier:
                keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:7e:1e:74:3a:eb:b9:6b:a3:ee:76:35:22:36:8d:fa:b8:6e:
         de:ad:4f:e8:3b:e0:0d:17:ed:76:32:77:7f:ac:b9:6d:54:2e:
         6b:37:1a:25:3a:df:f1:3e:d4:de:e2:d0:46:1e:9e:a0:70:7f:
         94:ae:b1:74:1a:9f:f3:88:11:dc:4d:10:56:23:d1:f6:1f:c3:
         60:4f:51:f0:2c:0d:74:da:02:48:da:31:36:48:b2:12:9e:f5:
         bb:eb:e8:59:06:9f:e9:35:7d:35:b5:a0:8a:9a:ab:36:75:40:
         98:ca:e9:39:77:bf:d8:35:d9:23:0b:38:bd:1d:91:3a:9d:76:
         07:d9:9f:b4:a3:2a:ad:90:52:ab:76:57:0d:2e:eb:81:c2:90:
         f3:d3:d7:81:59:d9:14:e0:f9:40:31:16:1e:56:3d:f2:aa:36:
         6f:6c:93:ba:36:83:6a:1f:91:7f:96:de:60:65:b2:28:48:ca:
         e3:05:30:c8:e5:43:9e:8b:11:bb:5d:46:58:2e:68:15:04:b2:
         d4:4c:da:03:df:40:25:aa:97:08:d1:a1:1f:4e:90:82:04:2b:
         8d:a2:38:46:88:0c:f9:88:0e:26:97:82:df:dd:29:da:7f:3a:
         55:0a:e3:4a:22:e5:6c:66:ee:26:9e:8d:20:a4:65:38:54:dd:
         b9:c2:b2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:39 2026 by rpki-client