Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
File:                     j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json)
Hash identifier:          uII7/s0Nr6uCLT+E7oAJEyJ2h1azjp2o8oJVkhR6EHE=
Subject key identifier:   07:5B:8E:C7:7A:94:91:C8:CB:17:47:B8:52:9B:3A:19:0C:34:FA:24
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Certificate issuer:       /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial:       019CAAC642C57BCA9A3782299B76C6F365F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
Manifest number:          1849
Signing time:             Sun 01 Mar 2026 19:00:45 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:45 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:45 +0000
Files and hashes:         1: _QFYHtLUd5PrTEx3ytqrTgZXY4A.roa (hash: IMcdfSBLxJMlJLL2pxyXtKfsGbWAEaXixakUAiVwCV8=)
                          2: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: 0qUrM6fRHqok50hUAEDOiCeYj0SA66MUWlgfMP9U7mU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:42:c5:7b:ca:9a:37:82:29:9b:76:c6:f3:65:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
        Validity
            Not Before: Mar  1 19:00:45 2026 GMT
            Not After : Mar  2 19:00:45 2026 GMT
        Subject: CN=075b8ec77a9491c8cb1747b8529b3a190c34fa24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:67:e6:ac:a6:8f:1c:51:6e:85:2c:a1:4c:08:
                    f7:00:72:76:bc:bc:f6:29:4b:30:5d:da:b1:b7:f4:
                    92:72:38:c6:1b:a6:ae:6d:5e:33:81:83:22:7d:a7:
                    93:93:3a:a9:05:dd:d6:cc:e0:1b:0e:4b:98:f9:13:
                    9f:8b:ee:64:0e:ca:22:8c:97:51:76:f9:2d:79:da:
                    8d:4f:a0:1d:bd:13:2d:a2:83:cc:7b:98:71:eb:fe:
                    88:39:c8:8a:c9:dd:e8:89:26:f3:b2:af:fa:07:91:
                    c3:cb:da:55:94:38:b0:07:bd:16:0c:b4:22:fc:19:
                    c4:a8:72:c8:d2:69:f2:a4:05:a4:6b:36:52:bd:e8:
                    ef:aa:45:c3:59:45:d5:89:a1:26:04:bb:60:3d:fc:
                    bb:db:1e:b2:5d:60:86:1b:d7:72:42:ed:ae:33:55:
                    08:6f:a5:52:e8:a1:34:10:a0:c8:08:0d:ae:a0:5e:
                    7a:f2:29:48:22:fb:03:15:90:29:c5:01:d3:dc:9f:
                    58:87:bd:8d:38:f8:a7:c5:49:2b:c0:4f:de:48:75:
                    a6:f3:f1:b9:69:ee:8e:aa:16:dd:e9:89:99:ba:07:
                    52:c3:72:f2:0a:5e:40:06:d7:b8:51:a4:b1:a7:f9:
                    72:02:ff:bf:22:ba:ca:65:47:0a:53:97:1d:b9:f3:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5B:8E:C7:7A:94:91:C8:CB:17:47:B8:52:9B:3A:19:0C:34:FA:24
            X509v3 Authority Key Identifier:
                keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:99:c5:c4:f1:16:20:b6:87:58:b6:0c:e5:9b:ed:ee:87:0e:
         1f:da:f7:13:40:fd:2a:99:23:b5:af:2e:ba:79:20:48:9c:29:
         78:d6:4d:a8:71:cd:4d:f4:9f:81:80:98:70:78:ca:96:e7:be:
         29:c4:26:bb:09:b8:e5:23:7f:02:d0:be:c5:bb:8f:2a:1e:ba:
         6a:4f:5e:50:8d:2a:92:b6:ee:a8:6f:11:46:38:e9:0f:e1:97:
         7a:62:31:9e:a9:cd:f8:2e:a5:f8:3f:51:52:13:42:35:26:36:
         12:42:8a:7f:fa:51:62:df:30:bf:0b:6f:fa:de:34:72:47:95:
         09:27:a8:31:cd:98:2b:d6:ab:03:7b:ac:bc:24:fe:ea:d4:06:
         40:b6:10:37:01:46:ea:21:56:2e:b0:3f:a9:e1:f9:65:01:cc:
         71:9f:98:bf:6f:49:d3:3c:25:97:14:b8:fc:ac:0c:c9:ef:1a:
         1d:90:95:17:b8:ea:a9:ba:28:c4:bc:57:0d:c1:fb:b5:8b:fc:
         6e:1f:fb:33:45:d2:65:ef:b5:ee:c1:0d:83:6c:c4:83:84:d7:
         69:38:4f:17:ea:27:23:dd:8a:5d:dc:f4:62:26:6b:97:da:44:
         b6:87:25:e4:25:c8:8a:b1:dc:d1:e5:14:a0:d7:db:8d:15:f2:
         e0:08:0d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:41 2026 by rpki-client