Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
File:                     j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft (raw, json)
Hash identifier:          AERE3ykVemPDucJzaTtLjUM7hcaQizk/S35KcfKjvlY=
Subject key identifier:   2B:34:86:BA:1C:E1:67:8C:CC:6E:F2:C5:2C:89:DA:77:6E:2F:FA:55
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Certificate issuer:       /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial:       019CAA8FA481BB62E35BCB70F02F809719B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
Manifest number:          107B
Signing time:             Sun 01 Mar 2026 18:01:06 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:06 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:06 +0000
Files and hashes:         1: DShqO0Ue11GUy5d8RFMckaCauhk.roa (hash: PD8/R6zXgkXFWzaUz+2PUMdYJX3ZY2n+651dnXziaN8=)
                          2: HhUP9V6D6eMcyfe9trO5RFkUgrk.roa (hash: dLLQt7TFTOMK0HJ6sdmoFfSXq6h2xikykKO4e94KISk=)
                          3: KvYzATzwIL9g-iqhBKjN6pRQns4.roa (hash: Bq4sJCKB4JPFIy91hhv99d4z3fVb9NtKRyY/klM1Ank=)
                          4: j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl (hash: CbK0YHG+tejARVFc/X2Dwu+DfdPV26fPRWtK9pXUIVM=)
                          5: vKntuT3xVwdgWmZ3-NPNbmwYIuo.roa (hash: i9XFeCZuakWWqMNbjgXUo7/eL4g2IBgqmIa52Z/2v4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:a4:81:bb:62:e3:5b:cb:70:f0:2f:80:97:19:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
        Validity
            Not Before: Mar  1 18:01:06 2026 GMT
            Not After : Mar  2 18:01:06 2026 GMT
        Subject: CN=2b3486ba1ce1678ccc6ef2c52c89da776e2ffa55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:39:f7:ff:00:d2:c1:fc:d1:c7:35:8d:54:
                    c9:ee:62:74:ed:86:9e:59:de:07:80:c2:9a:74:c6:
                    03:f8:fe:ab:90:95:12:de:6c:82:2c:88:fe:d7:98:
                    d0:7f:e8:95:23:1a:12:3b:b5:b3:44:7e:54:e9:f7:
                    4b:62:1e:f3:77:c3:b7:a0:57:b5:35:80:e4:eb:ad:
                    31:de:06:03:27:27:46:e8:19:f9:17:4e:a5:e7:ef:
                    d6:dd:34:cf:e1:fa:8c:bb:88:f9:35:52:d5:c3:5d:
                    97:1e:9a:84:c4:99:f8:66:e6:e2:d6:61:84:5d:2d:
                    70:c8:fa:8d:7e:7f:24:bf:58:26:14:7d:60:71:85:
                    4a:d3:21:55:d1:73:23:46:11:fb:a2:b1:b3:5e:b2:
                    8b:45:3e:f0:ba:3c:47:4c:56:c7:19:57:61:ce:d8:
                    da:78:eb:78:b3:97:3c:8d:5e:e0:fb:22:42:db:d0:
                    0f:9d:9c:82:3c:14:0a:d5:3d:0f:6a:1c:ce:72:1b:
                    85:bf:35:f2:e8:98:a3:c6:9c:f4:3c:52:89:d9:4d:
                    be:f8:30:61:9f:4f:42:23:0c:31:a7:63:42:70:b9:
                    c0:61:a4:e1:17:2d:a2:57:f6:e5:d3:e6:35:ca:21:
                    65:26:7f:a6:00:15:0e:3f:56:6e:bc:62:f3:26:1a:
                    a2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:34:86:BA:1C:E1:67:8C:CC:6E:F2:C5:2C:89:DA:77:6E:2F:FA:55
            X509v3 Authority Key Identifier:
                keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8a:5c:66:c0:8e:13:34:42:46:93:03:7d:53:32:ef:5c:a6:
         13:e5:ea:ef:27:ef:d1:2b:81:3f:c1:c6:1a:e4:30:eb:92:c8:
         44:d9:46:da:26:26:14:ba:6e:67:10:c4:be:cc:65:73:93:bf:
         f8:45:68:b2:fd:eb:05:67:2a:c9:28:ec:25:32:c9:0a:8b:df:
         36:0c:7e:73:93:5a:f7:1e:b3:54:35:9d:42:e4:1e:f2:f2:df:
         fe:9d:fd:a8:d8:0c:03:fe:90:80:a1:51:ec:f9:60:95:69:3d:
         64:59:ba:2a:3c:80:20:cf:9a:a4:ff:a1:d6:5a:c5:9c:5f:ac:
         90:42:d9:af:f8:ea:ec:af:25:48:47:3f:f6:b0:09:28:db:59:
         42:9d:39:98:19:05:08:06:49:a6:64:ef:0b:42:8a:75:d3:1f:
         5a:70:fc:93:39:6c:26:6a:d7:86:44:8b:52:79:ba:87:c3:34:
         39:6d:1c:6a:0e:47:a2:5b:11:f2:81:8c:15:4d:c9:e9:fd:25:
         78:3f:41:14:37:65:23:0c:00:55:73:ad:d3:2e:7e:47:44:53:
         ac:e9:95:d3:d0:03:7a:38:9c:6f:54:ca:a8:57:06:4d:21:da:
         7e:37:0a:a8:aa:97:7a:19:b3:53:97:05:9e:61:ba:65:58:5b:
         02:38:32:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:50 2026 by rpki-client