Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
File:                     jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json)
Hash identifier:          VwIRCf7s254f2fOpTgRnbUFbw0pmmZMWjf/a4EC0v48=
Subject key identifier:   B1:F1:16:29:10:6A:FA:AF:CE:A1:2D:B6:6D:9C:16:54:49:CD:12:B3
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Certificate issuer:       /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial:       019CA9B3D06EBB80C26804F804687BF62DE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
Manifest number:          184B
Signing time:             Sun 01 Mar 2026 14:00:59 +0000
Manifest this update:     Sun 01 Mar 2026 14:00:59 +0000
Manifest next update:     Mon 02 Mar 2026 14:00:59 +0000
Files and hashes:         1: AR0snb2WiBVjty2iEPK8q39KPZo.roa (hash: LRggRbjFzoUTOK1TTVfP+3KeKjujfqsLku1ZGYI58wk=)
                          2: F13pIjKslpUrOUGbjMV17CmkLWk.roa (hash: szqGRHA6NM3mWFGyDMMW+gpH0BvtN2cqf2OUgq/zN28=)
                          3: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: R7zkgShmQdHXiAesLYvHcSsdzjyx3Ufb50Zav3t8mlE=)
                          4: olmoqfzN7VFo-bxr_cK8ARodjJ4.asa (hash: DUkoDNJ/61GCLycft48nLmtAR70B8+qDz8ujkdLUM/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b3:d0:6e:bb:80:c2:68:04:f8:04:68:7b:f6:2d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
        Validity
            Not Before: Mar  1 14:00:59 2026 GMT
            Not After : Mar  2 14:00:59 2026 GMT
        Subject: CN=b1f11629106afaafcea12db66d9c165449cd12b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b0:43:e5:57:62:b2:45:c9:6e:22:82:50:d2:
                    b9:ec:32:d1:68:bb:6e:b6:bf:38:bf:46:e5:62:1c:
                    f5:74:16:e4:48:7c:72:1e:a3:a7:ba:b9:ff:3d:4f:
                    be:33:d3:e0:51:24:1f:97:24:bf:83:cb:cf:cc:bf:
                    76:fa:c7:19:fd:de:fa:09:f5:23:5f:b4:b7:ea:e9:
                    23:80:f3:ff:f8:35:2e:3c:eb:36:a1:a4:3e:6c:eb:
                    bd:4c:18:c4:af:60:13:64:84:22:ed:a6:c0:1b:50:
                    ce:4e:9b:dc:bc:83:25:df:a4:01:d7:d1:d1:d5:15:
                    4c:e5:90:aa:68:14:4c:dc:66:c1:18:79:a2:11:5c:
                    3d:3d:21:f0:23:58:3e:92:55:61:ea:8e:19:7e:77:
                    aa:61:b9:77:b7:05:46:76:20:63:47:a3:ca:85:d3:
                    56:b5:48:05:dc:f2:22:2a:6e:ad:5e:6e:c2:b6:14:
                    02:2a:85:7c:18:54:b4:7a:be:29:0a:ab:37:21:06:
                    80:d6:2d:a6:79:b0:94:96:73:9d:4e:10:5e:d8:6c:
                    c5:43:bc:a8:b7:50:1b:18:58:f9:de:70:4e:eb:97:
                    69:9c:70:5d:86:a8:7e:17:cd:d1:7d:d8:16:62:58:
                    f9:eb:d1:bf:2e:06:93:fa:c8:b2:fa:14:96:e1:a9:
                    08:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F1:16:29:10:6A:FA:AF:CE:A1:2D:B6:6D:9C:16:54:49:CD:12:B3
            X509v3 Authority Key Identifier:
                keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:75:ba:f8:d2:14:c5:06:09:f9:b2:44:e4:a7:17:25:26:6a:
         28:26:2d:24:41:40:7f:71:19:e9:75:8e:d3:ce:77:f6:62:97:
         c2:9a:79:5e:38:13:b7:41:ba:ad:8c:ee:10:da:a0:eb:4a:61:
         0d:87:55:0b:6f:9a:c5:e3:15:cd:33:d9:2d:23:b7:c4:f8:a1:
         83:b5:06:b6:2d:31:5a:ab:26:be:3b:1e:e1:5c:a5:a1:39:af:
         f2:5b:b9:cc:bf:1c:0a:8c:54:60:90:a3:68:9b:d6:53:ac:9a:
         0a:03:cc:7b:79:ed:0e:d2:c1:f5:90:3f:f3:a6:85:d6:d0:b5:
         be:b4:f9:eb:34:92:b6:9f:9d:81:6f:da:bc:ab:f9:ee:d1:99:
         bf:02:2f:eb:d7:eb:01:cb:f1:9e:52:2e:f8:64:74:e0:4f:20:
         eb:63:46:3b:68:8a:0a:60:a6:e7:7b:97:20:b2:70:21:6c:72:
         4e:81:fe:7b:a5:6e:a9:58:35:80:e0:16:ff:0b:bb:82:07:d8:
         0f:9d:5e:e6:44:49:1f:20:73:eb:3a:d2:8f:a5:2c:5a:6d:cc:
         e8:ce:51:7a:e1:a8:ad:47:8a:7c:5b:7d:bd:60:1e:0b:5b:c4:
         3f:13:58:e9:f0:b3:5a:1e:a6:c9:04:2a:48:f9:b0:1b:bd:89:
         e2:13:73:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:36:26 2026 by rpki-client