Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
File:                     jphwObPzstubKYrg2NDrNIlprWI.mft (raw, json)
Hash identifier:          muPUG3STt+jk19qwV+vakf6Ri4pEnYCoda0YCkLjc3E=
Subject key identifier:   39:5A:D2:CE:DF:97:84:A6:5F:EF:C5:17:9E:DD:33:DA:9C:AB:A3:1A
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Certificate issuer:       /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial:       019CAC101336462A08E71FBF9167A391A34B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
Manifest number:          0F15
Signing time:             Mon 02 Mar 2026 01:01:00 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:00 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:00 +0000
Files and hashes:         1: 1Frxfbc98CPNBXlvYxNVV4HDdfw.roa (hash: zDjUPNkwFr1cypuN/i7XmbHHkWcY1mRap2kucDPhT9w=)
                          2: 82JWIomOThmW0YMHKxDPuIJNFK0.roa (hash: hC4sRPtPg3GW3YOxAj+I1bNIwfqpwHn+ecr5wb73PWo=)
                          3: GKI0oMGPc_ao96H_Pxppo6dkqjU.roa (hash: zkKvY4dzGqAm86wlj6w2FQOXQJkkmZRclubHEKVhIrs=)
                          4: UbPR__GWgCOIAb3NQc0qlqrppxU.roa (hash: lTQfU6TbcxSvADq8zAUFbLRCThmdnW+zAxZAvDh4gWQ=)
                          5: jphwObPzstubKYrg2NDrNIlprWI.crl (hash: smI9Rw2tU8aIrbnqOg13rkJA1v44awO3F3rhZsU/QIw=)
                          6: mSOb8oL2yaxSaSAqBWs5Nse1M6o.roa (hash: P4pKI4jOB/owH0H61XW01BCRPQ5A8npRT1ANcLU/gqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:13:36:46:2a:08:e7:1f:bf:91:67:a3:91:a3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
        Validity
            Not Before: Mar  2 01:01:00 2026 GMT
            Not After : Mar  3 01:01:00 2026 GMT
        Subject: CN=395ad2cedf9784a65fefc5179edd33da9caba31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:e3:23:6f:3d:cd:86:08:9d:d5:c3:5a:c4:
                    ee:4a:a6:c2:fa:0b:02:14:3d:cd:79:dd:47:b3:3a:
                    64:c0:e7:d9:47:54:c0:1d:0a:ae:eb:6f:56:f5:73:
                    de:a1:f7:a9:77:9c:c4:bf:9d:4f:8c:3e:84:43:f2:
                    7c:ea:d3:ad:07:37:d0:bd:b0:7a:02:05:bb:0d:a4:
                    ae:f4:95:f9:e8:8e:e9:a6:0d:26:81:dd:69:f5:76:
                    27:51:fd:c4:e1:9c:4c:3c:0d:83:29:eb:b6:a9:c3:
                    fa:9d:e0:60:4f:ae:68:36:85:57:11:9c:0c:c7:0d:
                    06:fa:62:74:00:99:48:6f:cf:eb:75:c4:05:a3:2e:
                    6f:5e:44:26:80:b5:9d:a6:3e:98:24:57:51:92:6b:
                    c1:7d:72:df:1d:19:cb:b0:45:56:9d:93:bd:f0:06:
                    1e:d1:e0:e0:06:3b:6f:ec:14:b3:04:e7:ff:dd:f5:
                    a5:4a:6c:82:b2:6f:64:08:a2:de:1a:06:aa:8f:c9:
                    f8:9c:6f:05:68:8c:bb:09:de:b4:21:57:20:f9:e3:
                    57:60:df:7a:31:ec:7a:04:50:e2:a6:f8:5b:ff:48:
                    4c:eb:48:0f:29:60:6c:2d:e9:d0:24:34:0d:3d:f5:
                    ed:1f:ea:22:ab:d8:2d:21:c3:e4:4e:19:5d:b8:59:
                    c8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5A:D2:CE:DF:97:84:A6:5F:EF:C5:17:9E:DD:33:DA:9C:AB:A3:1A
            X509v3 Authority Key Identifier:
                keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:1f:d6:f4:ca:04:0b:4f:39:17:dc:02:8b:9d:5c:65:60:34:
         70:5d:90:0d:58:d4:9f:3f:d0:19:88:c1:2d:81:3e:aa:4a:33:
         a4:78:ef:8a:c8:51:59:72:8c:f1:ee:9c:4c:9f:9d:71:ed:32:
         0e:c3:34:9b:7c:52:4a:a7:c8:7d:d1:80:5a:67:87:54:eb:19:
         db:63:6a:75:fd:97:90:44:95:fa:78:8a:2b:b8:03:c5:40:8e:
         47:0b:d9:72:24:cd:7f:80:5b:ec:b9:1e:bd:34:36:8c:90:6f:
         ce:f2:74:35:b7:1b:35:cd:3e:6c:1d:d0:8d:12:e1:af:fa:31:
         d5:fb:35:02:f4:0b:33:19:02:e3:79:5c:a3:e6:14:2c:36:ac:
         54:2d:ff:0a:04:e7:ec:38:3d:d7:0f:3e:ef:9d:ab:6d:3e:ae:
         18:38:16:a3:88:0c:62:3d:7f:d1:83:38:f1:1c:d2:46:5c:7e:
         da:5c:5c:26:fc:72:07:b0:5e:46:0c:cc:75:8d:0a:97:af:bc:
         79:e9:d1:7d:57:d8:22:1c:02:50:4b:90:1a:93:7c:4d:83:fb:
         e4:9d:cf:e0:48:41:ce:6c:e6:31:a5:68:b3:9d:89:64:84:7d:
         b9:cb:1e:7f:c0:2d:b5:ff:e9:45:f0:15:32:d0:ca:d2:8f:3f:
         7f:a4:22:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:10 2026 by rpki-client