Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
File:                     JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft (raw, json)
Hash identifier:          aD0K/dK+mqUKYBz98iGFLG2tqbB54DrH8MEKzN9C8ug=
Subject key identifier:   86:86:AF:A2:99:3F:56:8E:AD:87:AD:AC:0A:36:CA:F1:3E:43:42:39
Authority key identifier: 25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97
Certificate issuer:       /CN=25a3f511d0095606a525084ae460836dc5d24397
Certificate serial:       019CAA8FA100B8686CDB27575F5402B2D022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 18:01:05 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:05 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:05 +0000
Files and hashes:         1: JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl (hash: YLYi4TOO09yIIfkBbcmJ+A6ohT/KdUW2kLlA4BVsmN4=)
                          2: hyiJPzfAptiIheKGmgXOpCc_N9s.roa (hash: E8PxxP3rh4OaBNhRUw5kY24HDuRfFYWY8ni4A6l64oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:a1:00:b8:68:6c:db:27:57:5f:54:02:b2:d0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a3f511d0095606a525084ae460836dc5d24397
        Validity
            Not Before: Mar  1 18:01:05 2026 GMT
            Not After : Mar  2 18:01:05 2026 GMT
        Subject: CN=8686afa2993f568ead87adac0a36caf13e434239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:61:d2:35:b1:02:4c:e1:c2:95:d1:dd:31:
                    59:bb:21:dd:81:a6:38:6b:3e:53:7d:c2:87:c3:5e:
                    80:f5:d9:50:be:05:77:ce:21:b8:a8:1c:ae:d0:11:
                    ba:85:ea:b3:d2:68:09:c0:12:34:52:5e:9a:a2:61:
                    17:09:7c:5a:6c:1b:52:23:8b:dc:f9:30:86:56:47:
                    8d:00:a9:6f:0c:eb:36:25:db:c2:57:2a:4e:4a:e3:
                    42:d1:49:b8:c6:97:ab:36:f5:2d:08:8e:0e:82:56:
                    d9:7a:0b:3a:d4:23:b1:98:fd:eb:02:bc:8a:d4:c0:
                    24:08:c3:ec:d5:bb:72:78:42:ed:db:7b:f0:74:74:
                    77:77:81:6d:74:ec:51:ed:a3:46:da:3a:21:e9:f5:
                    99:01:e9:04:56:1b:0c:29:00:fb:ea:9c:48:51:44:
                    63:80:b6:83:ca:36:f0:ac:9b:4c:31:f0:3e:68:c0:
                    9a:99:7a:e9:c3:c1:9a:6b:3f:d7:ed:1f:e7:35:9a:
                    e6:d6:e5:34:95:f7:6a:53:0c:ad:f7:e0:30:3d:be:
                    eb:c3:35:df:2f:9a:2c:5e:29:bc:e7:d4:bb:c4:3b:
                    55:75:95:b6:f7:1a:1e:3f:53:7a:58:1c:27:21:52:
                    3d:01:e5:e2:8a:99:d8:4c:d5:56:a2:40:99:59:82:
                    6b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:86:AF:A2:99:3F:56:8E:AD:87:AD:AC:0A:36:CA:F1:3E:43:42:39
            X509v3 Authority Key Identifier:
                keyid:25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b7:6c:8f:6d:9e:4b:f5:87:15:eb:a8:72:97:a9:a8:6f:6a:
         29:2e:2a:69:c9:84:cd:81:34:7c:1f:48:06:3a:98:5b:33:7a:
         bb:e5:9f:52:cf:b1:94:0e:f9:e5:1e:d8:55:f3:c9:fa:be:89:
         e4:d1:59:b7:74:57:91:a5:27:e4:99:63:85:b1:92:dc:5c:6c:
         db:2a:6c:5c:8a:dd:36:36:78:e3:dc:61:52:81:ef:e5:9d:0b:
         d9:31:8c:da:1a:07:f2:b4:a7:c9:0f:0d:eb:f4:aa:0e:2d:c0:
         42:b1:69:07:0e:36:4c:96:7a:cd:67:f2:db:eb:cf:74:50:07:
         10:6b:a2:f5:64:49:c4:47:aa:c2:0a:f5:19:a3:76:36:8d:18:
         e7:e1:32:cd:e4:cb:cb:4c:98:47:cc:50:14:ed:28:cd:2b:5e:
         2b:a4:ec:da:98:b8:50:86:df:6f:ec:7f:73:1a:5e:9a:3e:dd:
         cb:be:d7:1f:84:cd:09:7e:03:c7:d8:4d:44:7e:dd:01:91:14:
         6e:00:6c:7e:75:f1:d6:77:44:5e:26:55:15:5a:63:98:6f:c5:
         b5:44:28:65:18:f1:d3:19:9d:36:d3:e9:5b:e4:73:04:29:55:
         1e:55:b9:2a:42:c3:88:cd:53:1a:30:69:46:ad:be:90:1c:ce:
         47:16:1a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:43 2026 by rpki-client