Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
File:                     jgo5Gq64_HyDP4JX16nnSlWzOv4.mft (raw, json)
Hash identifier:          JsQ0elgh7pxzPmbKxI+8jH8zw7Jd02FoI5YcOQjSC/w=
Subject key identifier:   42:CD:2B:1B:12:73:04:24:9E:D2:46:9E:3E:ED:0F:09:D1:C7:F0:52
Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
Certificate issuer:       /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Certificate serial:       019CAC7E5B85B9AE296D9506257878ABD807
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
Manifest number:          178C
Signing time:             Mon 02 Mar 2026 03:01:27 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:27 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:27 +0000
Files and hashes:         1: jgo5Gq64_HyDP4JX16nnSlWzOv4.crl (hash: I0J3Z5x4tJg8i1szbdmPCO4ZqMxMn5vobfaVTNhArIc=)
                          2: wBtREldvDjl4K9_Eyc6xek7-RYI.roa (hash: z4RdhE9lhhi0tt8aHo4p1WawqFAV7GTzx2aHrOIBbVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:5b:85:b9:ae:29:6d:95:06:25:78:78:ab:d8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
        Validity
            Not Before: Mar  2 03:01:27 2026 GMT
            Not After : Mar  3 03:01:27 2026 GMT
        Subject: CN=42cd2b1b127304249ed2469e3eed0f09d1c7f052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:50:8f:75:e8:ab:96:78:8e:f1:e3:2a:c3:
                    64:31:ef:6d:71:fc:08:e2:7b:e8:46:8e:6c:f6:cf:
                    15:1a:d3:37:78:42:3d:40:12:b4:a8:3d:11:a1:df:
                    74:c4:da:65:f2:5b:3d:8e:53:3b:c0:60:51:19:35:
                    38:f0:38:48:22:72:14:a5:f6:a7:c9:8f:ff:73:61:
                    f0:63:06:ac:8c:31:e4:d3:78:bd:bc:c5:df:8b:d3:
                    76:35:6a:3f:0f:40:5d:f5:db:22:65:c5:6f:bf:c6:
                    df:90:a3:83:b7:c0:72:33:5b:10:ab:33:6c:7e:ca:
                    ed:40:0f:45:c2:d0:d4:cd:33:f0:a4:9c:06:a9:67:
                    c7:36:09:8f:39:62:29:01:56:c7:d8:ac:00:4c:bc:
                    c7:b0:fa:20:e8:73:a2:04:c9:1c:1e:10:8c:5e:04:
                    17:12:73:29:c5:dd:d3:cc:c4:37:98:86:17:c5:00:
                    ad:03:b7:85:b7:42:de:24:c2:b3:08:e0:77:c6:04:
                    b4:04:26:84:ec:70:2a:ed:d6:9a:9f:7c:90:ca:04:
                    0a:70:fd:90:d9:df:bf:d3:38:5f:bd:a1:a5:f2:23:
                    01:01:7f:ad:98:70:0f:aa:8e:a2:8f:1c:48:1e:dd:
                    f9:0b:13:4e:5f:3a:df:0f:a8:8e:11:53:cd:3d:3c:
                    c5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CD:2B:1B:12:73:04:24:9E:D2:46:9E:3E:ED:0F:09:D1:C7:F0:52
            X509v3 Authority Key Identifier:
                keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:ce:8e:e0:7b:df:27:fb:f4:b9:df:fe:f5:94:83:d2:5d:
         fd:78:b6:73:97:e3:f5:3f:23:75:2c:5c:1b:b7:a3:53:1f:52:
         92:03:65:0a:55:4a:8f:94:28:5e:65:cd:a8:18:57:f5:c2:82:
         8e:4d:c2:b6:01:9f:2d:56:3e:c9:1f:fe:85:7b:37:79:b1:5f:
         98:5c:1e:db:38:2a:50:73:28:b3:f3:dd:95:47:46:30:6d:80:
         79:35:d7:1c:e0:57:aa:de:8f:cf:21:18:c7:15:12:fc:71:8c:
         bf:fe:5a:2c:bf:11:3c:cb:7d:4e:24:cd:8b:19:06:33:30:48:
         0f:dd:06:d1:ed:c3:8b:c1:32:2a:e8:f7:cd:20:05:40:dd:b8:
         9b:ca:98:7d:92:47:5b:d5:f2:c8:2b:b6:ba:97:f9:1f:27:6c:
         8d:f0:6b:cd:bf:29:d2:aa:0f:ea:19:3f:65:1d:00:5e:e0:97:
         28:52:2b:af:7f:a6:97:e5:24:2a:c5:3c:f4:4c:89:61:83:2b:
         6d:fe:1c:34:a2:90:2a:2d:18:3d:de:d8:c9:29:9e:32:24:20:
         10:7f:d7:7b:55:f2:d0:f7:4b:20:80:23:dd:ea:92:4f:65:fa:
         28:78:38:27:b9:7e:79:43:eb:78:1b:95:e2:7e:79:25:0b:29:
         5c:24:f1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:35 2026 by rpki-client