Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File:                     jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier:          UgEP/R3tWY4YMyiddItzlMqKKEhN2XqS9Xwgjb21V1Y=
Subject key identifier:   53:32:2E:E9:6C:64:F6:42:DD:58:C4:32:B0:A2:6D:84:9B:B6:7E:CE
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer:       /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial:       019CAAC6C83805FEAC9F1D953488CD36F588
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number:          1891
Signing time:             Sun 01 Mar 2026 19:01:19 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:19 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:19 +0000
Files and hashes:         1: 7M11WAr8ASMmTsOpEXXftqbLZKI.roa (hash: Hy7iKCS/PTOuaQ4Hy/XwhYj+Mf9Lpbiz3nTqAU+v+KA=)
                          2: IPD7v-J9c376oyXeNIKc_aWnNmQ.roa (hash: EEItVG+CeXn/JupxjY6OK4AdQvnwdrYLgxk2U0ldhpY=)
                          3: _gRsaSao0vaUMwc0x3LyFobrYg8.roa (hash: NuZeEvpoAsVGvJOhf6lMpbCZ6vhyLjtVLY0IuaaWnsk=)
                          4: gpd1mhOHXiMRj4sBD1YUlIe0OKY.roa (hash: Mp1A6bnLjG6e+iNvqlRY2Pi1q3kKD3uoZO/De04Jgqw=)
                          5: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: +WUyDbgoTolxlmLX+fIU+X4GMpgC5P6tAIpusD3Hkrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:c8:38:05:fe:ac:9f:1d:95:34:88:cd:36:f5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
        Validity
            Not Before: Mar  1 19:01:19 2026 GMT
            Not After : Mar  2 19:01:19 2026 GMT
        Subject: CN=53322ee96c64f642dd58c432b0a26d849bb67ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:82:09:a6:69:7a:bf:1b:17:f4:3a:a0:26:
                    79:95:0f:c1:5a:cd:06:e6:b2:f9:bf:04:83:40:8f:
                    f0:42:f6:ec:da:12:8a:bb:89:28:b5:33:72:7e:63:
                    dc:3b:88:85:ad:52:9d:88:16:0a:04:39:d5:0d:8a:
                    91:ee:6f:85:c6:64:ae:03:1b:0a:82:61:d8:25:6d:
                    6d:09:67:4f:33:b8:b4:10:c4:48:80:b8:01:7c:c0:
                    9f:56:f5:78:6b:1a:7a:2b:38:a7:94:29:50:e4:71:
                    d9:b9:72:3e:a7:6f:53:82:5a:94:de:c7:79:a3:2d:
                    11:23:9c:df:88:05:b9:44:47:76:2e:14:54:1a:49:
                    04:79:bb:0e:ae:e2:91:6a:c9:bd:e5:83:12:40:84:
                    8f:e1:39:5b:4e:e1:03:bf:37:5e:e7:dd:6e:5e:c3:
                    ea:b2:f5:3c:65:06:bf:da:db:f4:24:e3:75:0d:88:
                    3d:6f:9b:d8:c8:e6:82:f8:53:14:c3:7d:fd:42:69:
                    24:cb:c2:25:dc:b3:88:45:d1:4e:ce:50:a2:17:5a:
                    16:28:19:2e:32:63:ef:e0:77:ca:3f:eb:c1:ff:92:
                    1f:09:55:64:17:db:7e:6a:9b:ed:93:0a:c1:34:67:
                    b4:d3:94:36:6f:eb:90:2d:58:d5:6e:b8:e3:69:72:
                    62:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:32:2E:E9:6C:64:F6:42:DD:58:C4:32:B0:A2:6D:84:9B:B6:7E:CE
            X509v3 Authority Key Identifier:
                keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:be:d1:9d:22:98:0d:3d:9a:44:c4:37:df:66:fc:67:51:41:
         42:3b:79:af:62:8e:d3:10:e0:62:5a:92:1a:49:3a:38:d6:41:
         23:85:6d:eb:54:a8:ca:22:fb:43:83:3d:5c:5d:33:8c:a0:43:
         a6:02:d2:a1:76:02:84:16:71:eb:ef:14:f0:9e:c8:01:d2:89:
         ce:41:24:5d:4f:fe:c8:ac:85:8b:bf:0c:7d:fa:bf:f4:00:41:
         f2:f6:f5:09:1d:cc:25:a2:92:9c:0c:e3:a3:8c:04:94:e5:3f:
         db:60:9c:9e:4e:33:e0:d7:61:82:01:74:67:77:53:4d:17:65:
         fd:c9:55:d7:d5:c4:4a:28:57:b1:71:2c:54:4a:0c:3f:c3:55:
         20:81:d8:60:d9:a3:20:46:29:f7:1a:7c:83:57:bd:5b:54:48:
         c5:33:cd:01:76:54:f3:56:6c:e8:3f:b6:4a:8f:05:d1:f4:42:
         9f:9a:0c:47:cb:17:bf:82:78:0a:7c:43:d0:96:80:f7:74:6c:
         4b:3a:9b:41:a3:3b:4c:6d:f5:6c:39:0e:54:82:99:de:28:d3:
         d4:b7:8a:ac:ba:a6:1f:84:23:bd:c0:da:d5:f8:02:82:a8:40:
         a2:ec:8f:60:e3:32:69:80:a3:a0:e5:dd:63:69:58:1d:7e:a3:
         c9:5a:83:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:37 2026 by rpki-client