Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
File:                     j-7pSg47IoCXZK7h4o8Hj61ja8M.mft (raw, json)
Hash identifier:          QEdjK3+i5p7xRTaLVINh+TP3QaS/6qC8mdfXfik98BQ=
Subject key identifier:   38:FA:19:CD:9F:A1:6A:CD:36:36:B3:54:F1:A8:EC:F8:AA:2A:3A:19
Authority key identifier: 8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
Certificate issuer:       /CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Certificate serial:       019CAC105CBA403B25A9C05BC47595F20518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 01:01:19 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:19 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:19 +0000
Files and hashes:         1: j-7pSg47IoCXZK7h4o8Hj61ja8M.crl (hash: /EbwSg1NvVV4OXCJno+KYe/A+d8EZcea3h75Ttd1Im8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:5c:ba:40:3b:25:a9:c0:5b:c4:75:95:f2:05:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8feee94a0e3b22809764aee1e28f078fad636bc3
        Validity
            Not Before: Mar  2 01:01:19 2026 GMT
            Not After : Mar  3 01:01:19 2026 GMT
        Subject: CN=38fa19cd9fa16acd3636b354f1a8ecf8aa2a3a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:7b:99:ec:7e:ce:90:65:be:96:0e:21:2c:
                    0f:11:ba:4a:2b:30:c1:29:e3:68:9e:7e:f1:55:87:
                    c8:54:df:0b:f4:5f:ba:9b:a2:40:39:bd:5b:0d:43:
                    0a:22:59:2e:bb:b7:df:46:15:ed:a8:1d:a3:d3:3b:
                    8c:79:1d:0c:00:81:9e:fc:bf:cc:8b:91:39:53:19:
                    66:95:0d:a2:66:fe:31:cc:80:17:69:76:80:24:02:
                    20:c7:85:7d:df:3a:5f:41:1b:3b:11:55:ab:23:ac:
                    af:ad:2b:16:d5:69:cf:73:af:73:9b:42:88:54:85:
                    d2:f6:be:c8:7b:c8:e5:63:39:4e:35:af:e3:78:ee:
                    20:bf:00:be:b9:b1:6d:20:48:1f:63:ce:6f:b9:54:
                    4c:c5:b5:6a:d9:1d:66:1b:26:f7:87:23:e6:9d:2e:
                    4d:08:0c:62:4f:b2:07:cb:fa:8a:13:2a:e7:cc:1b:
                    bd:8d:eb:16:46:d5:66:5d:b7:b1:b1:b8:fa:94:22:
                    a3:23:72:c4:a1:68:48:ab:ac:ee:10:48:89:aa:f4:
                    47:ee:0f:60:68:5e:7c:b2:bc:8f:67:15:7d:a6:63:
                    2c:e7:46:5c:df:74:21:a2:83:08:fb:fb:75:2c:5b:
                    d7:ef:29:ad:16:0b:3d:8b:11:65:4a:c5:3d:6a:fb:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FA:19:CD:9F:A1:6A:CD:36:36:B3:54:F1:A8:EC:F8:AA:2A:3A:19
            X509v3 Authority Key Identifier:
                keyid:8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:98:84:d7:9c:16:ee:79:a6:02:47:7e:a4:13:55:82:a8:4b:
         2e:1b:d4:17:50:37:78:0e:c4:69:63:5d:4d:a0:3a:bf:f1:dc:
         31:8c:a3:20:1c:45:94:ab:27:18:b2:53:d8:13:31:d8:0e:6b:
         73:8c:55:1f:74:ef:e8:ba:0f:89:bc:da:73:9b:c9:ca:ca:cf:
         5e:98:f0:5c:5c:da:ef:2e:3d:19:d1:6d:d6:95:96:5c:4a:50:
         48:b0:bd:4e:aa:8a:cf:1f:3e:ec:77:4b:d9:d0:9c:e3:65:b1:
         68:0b:58:01:3b:6b:94:5e:08:9d:ff:9e:56:18:2f:ad:76:1e:
         97:11:b1:f8:55:cb:aa:ba:f8:29:ea:e3:e8:2a:eb:27:c7:66:
         8f:e1:05:cb:3e:cb:45:73:3c:74:d0:f8:b4:52:53:60:2c:e1:
         fb:c8:f8:e3:74:df:03:b3:7c:b6:56:3f:55:1b:42:97:8d:f9:
         77:48:b6:1f:18:bd:0a:f4:18:8e:61:8b:95:92:51:53:86:0a:
         08:66:9d:be:67:1e:65:99:9e:ff:51:ec:0b:dd:e9:ea:03:3c:
         33:84:d4:7a:d4:93:ac:81:83:fe:1e:80:25:a6:1c:84:a9:b8:
         2d:51:5b:72:41:c3:ea:b2:6c:40:5c:0e:f7:d6:3d:04:9a:db:
         33:82:ea:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:42 2026 by rpki-client