Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File:                     pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier:          6vbt9+jhRxjUKmD/+De1CR5eNEY11rSc+nTjX8lO9as=
Subject key identifier:   26:88:8D:26:22:DC:26:75:57:1C:92:6B:3F:C1:F8:72:1C:EE:D8:21
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer:       /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial:       019CAA21CA017BDF3854E64DC9401E4BEA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 16:01:06 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:06 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:06 +0000
Files and hashes:         1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: CLIsvqygKXbaYSNBgfSlt3gSB/kgHbvDiDZHRSkjpVY=)
                          2: vRd4lkbID2XP7GTV89IAJrPGpPk.roa (hash: OzTqPtevWeZEZpJ3WDJJ/YsKofNfG0tZ601DSg2/22I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:ca:01:7b:df:38:54:e6:4d:c9:40:1e:4b:ea:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
        Validity
            Not Before: Mar  1 16:01:06 2026 GMT
            Not After : Mar  2 16:01:06 2026 GMT
        Subject: CN=26888d2622dc2675571c926b3fc1f8721ceed821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:01:b7:c9:be:06:18:d6:a9:ad:91:f7:71:
                    25:11:f9:8b:c1:be:e7:a1:98:fb:83:01:e7:bc:72:
                    22:d9:7b:fe:cc:4d:d7:72:88:a4:0c:2c:8a:ad:c8:
                    c5:a8:3d:11:16:e9:6f:49:a3:20:ff:dc:1a:ef:4d:
                    60:7d:21:56:7c:86:80:8d:47:ff:4c:6d:b5:14:dc:
                    39:98:2e:e0:e0:83:0f:f3:b6:cd:63:50:19:54:15:
                    21:30:3a:e9:bc:20:38:8d:3b:c7:22:25:05:44:7b:
                    0c:2f:b5:5b:76:38:b3:90:d4:41:d6:f7:87:87:90:
                    ef:e1:6d:f3:12:71:97:37:fc:ba:e6:88:db:59:8f:
                    70:fa:9a:dc:49:d8:a9:f9:05:ef:88:64:96:33:dd:
                    01:8d:4a:cf:6a:55:07:a6:8f:29:11:d5:25:de:96:
                    a9:98:69:82:c9:08:ba:f9:21:d2:ed:09:b0:57:62:
                    ae:e4:67:44:b9:e8:cd:78:7b:31:7f:17:b5:88:d4:
                    85:48:ab:31:fb:ac:68:69:1f:3b:30:de:8d:5e:f4:
                    f9:0f:92:c8:71:86:6c:73:a4:ca:89:07:0c:5b:c5:
                    ff:e5:5a:db:a6:bf:64:42:41:55:c0:df:5a:8a:fe:
                    e5:a2:02:04:ca:8a:38:7c:58:51:38:5a:c3:07:0d:
                    cc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:88:8D:26:22:DC:26:75:57:1C:92:6B:3F:C1:F8:72:1C:EE:D8:21
            X509v3 Authority Key Identifier:
                keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6c:f3:59:77:0c:7e:89:cd:48:d2:6b:57:d3:f2:35:6f:16:
         ec:e5:0f:ff:9b:88:f8:8a:84:b5:48:fc:d0:b5:fe:06:a6:67:
         fa:ba:e1:56:04:61:49:07:1c:42:96:65:b5:c1:27:74:ee:01:
         ed:99:5e:4b:3f:6f:c4:58:22:c1:fb:e9:1a:2b:37:25:21:eb:
         fd:f8:5e:5d:2d:94:bb:d6:12:1f:c7:19:ad:9e:ee:c1:5c:5c:
         c1:2f:ff:d4:67:48:d8:51:99:46:e5:dc:1a:32:e7:75:c4:bc:
         c6:59:46:2e:07:6c:70:0a:0e:ba:d8:e8:a9:20:3c:5c:a1:82:
         a2:5f:60:d2:8c:1e:41:0f:70:cc:b4:fc:a7:00:46:c0:c6:1e:
         28:61:e6:32:81:0e:e3:64:fc:35:0a:4a:33:e0:c6:0f:a3:1c:
         3f:0d:aa:a1:5d:0b:1a:89:5f:da:b8:b6:f0:23:45:60:ef:ce:
         1a:1d:6f:2f:2e:3c:47:91:7b:5e:a2:20:23:b1:c5:53:43:86:
         3e:c4:78:96:20:f9:04:e9:38:b2:2e:75:d6:de:38:5e:5a:71:
         4d:b4:b2:10:e2:c7:5e:0c:62:a2:26:24:77:cf:e2:fd:cb:21:
         c3:34:e3:96:2a:c3:37:7b:24:4b:c9:25:e3:af:44:07:3d:a8:
         dd:ef:7d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:42 2026 by rpki-client