Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File:                     Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier:          2v+QIH4RyqYHHG4gWnquUISvnTASrbFAdy8WxPfpyYs=
Subject key identifier:   80:92:E2:26:7E:BF:8F:50:29:99:BB:18:8A:7B:8F:67:80:F6:FD:3C
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer:       /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial:       019CAC0FEBEC7C3F595B71A91651E79C6BA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 01:00:50 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:50 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:50 +0000
Files and hashes:         1: 6MvEEf7_I3zO3ShtqYd8LKtfRq8.roa (hash: lIgvAYq1Ass4AfPtbYog1dJL/68LEdNig8uh3pGw9vM=)
                          2: EKgYi5uwmdQ3SbZogfsfQT2cobM.roa (hash: Y3gYmZwUht9JEwQTGH6EyDKQhtm/rC13n1867BeBzvQ=)
                          3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: 5deDbJZ8Lz7uAUAEgB4rVAV6/pmsfKA3TM7d9RgjtV8=)
                          4: Jqk7oDaY0GyweY_m1dLexacLzPE.roa (hash: prybAkap/ary1cwam/oMqauOzBkuf1YCV2giq0/4yoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:eb:ec:7c:3f:59:5b:71:a9:16:51:e7:9c:6b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
        Validity
            Not Before: Mar  2 01:00:50 2026 GMT
            Not After : Mar  3 01:00:50 2026 GMT
        Subject: CN=8092e2267ebf8f502999bb188a7b8f6780f6fd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7b:cb:74:aa:47:b6:4b:94:f9:0d:19:71:4c:
                    df:5f:ac:47:2a:40:3d:b0:55:9f:33:f8:31:b2:4e:
                    d6:c8:c3:89:93:70:b4:5c:98:b7:37:c0:8f:89:63:
                    34:61:3e:3d:6c:8b:fe:82:3a:c6:87:b6:b1:3c:4c:
                    78:55:91:8c:4a:e3:78:98:48:09:d8:94:5d:88:4e:
                    61:db:31:5d:21:5f:a4:70:8c:42:31:d7:77:e1:5b:
                    dd:b1:4e:79:c9:2c:c3:0f:ea:27:01:ce:11:48:ff:
                    02:14:39:89:e4:c1:5e:21:d5:0d:0f:45:a1:49:91:
                    fc:c5:8d:96:78:b8:a8:8a:45:be:73:ca:49:60:61:
                    82:c7:7e:d7:c3:fd:69:c3:f9:de:d3:16:0e:83:76:
                    95:72:af:d4:40:4b:41:f0:52:7c:30:d9:9a:6a:14:
                    2a:11:94:ee:c8:d3:3e:4a:0d:46:dd:fc:aa:0c:da:
                    9a:e4:80:8f:4d:7d:84:8a:b5:67:5a:ed:6d:d8:1f:
                    21:bb:a5:00:45:82:dc:6a:fa:d5:ac:e9:93:54:88:
                    27:8f:9e:ac:4e:b4:ff:70:c7:82:8e:89:75:13:04:
                    af:2d:e1:6f:8a:24:b1:9e:65:57:4c:38:be:5b:8c:
                    33:66:96:60:bf:6d:36:fa:c0:b8:22:c6:f6:d9:0e:
                    7e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:92:E2:26:7E:BF:8F:50:29:99:BB:18:8A:7B:8F:67:80:F6:FD:3C
            X509v3 Authority Key Identifier:
                keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4e:5c:9c:e2:87:16:e3:3e:29:94:a7:06:25:76:8d:d5:f2:
         9d:22:ba:98:95:25:cf:d1:3e:6b:19:01:25:91:f0:b7:f6:72:
         21:e7:93:79:c9:63:60:ec:e7:3e:4b:8d:02:7e:56:48:d9:79:
         e6:03:88:4b:b4:a3:cb:b9:10:09:2a:f8:0e:c0:7a:a4:ae:81:
         0b:80:02:00:15:3b:61:4e:08:d6:45:f4:62:f4:da:53:da:7d:
         cb:db:3f:fc:31:c3:09:c2:29:80:a1:35:ac:aa:74:ed:72:3e:
         00:ab:8e:d9:32:f8:18:7c:e6:7f:c3:fe:28:86:77:70:f2:fe:
         7a:d0:f4:25:ce:29:b7:54:75:64:d6:03:e9:97:64:21:da:9d:
         a8:2e:16:eb:cf:46:da:01:25:85:c3:c6:8c:12:9e:70:be:6f:
         c2:0e:02:60:a5:07:4e:5a:60:c8:20:e6:31:5f:b1:4e:64:a2:
         0b:ae:0c:45:9a:15:bd:f2:be:37:8d:56:64:59:01:f4:2a:21:
         21:03:ab:3c:c2:42:65:1a:f8:6b:71:e9:a1:83:6a:ee:f7:fc:
         4a:74:71:12:c9:ae:c4:4f:6b:d1:6c:21:ea:b2:c8:ed:03:6c:
         7b:0f:30:65:72:9a:d6:44:f9:b7:44:7e:a7:5f:30:08:28:6b:
         04:e7:f1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:07 2026 by rpki-client