Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File:                     ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier:          tXhQZFpmKhwIQDJhpvLhN6zv2RwTH5i96Zb7hgGj/A4=
Subject key identifier:   AD:A8:66:69:04:CF:31:99:E0:77:E7:50:51:BF:C6:A0:3D:D1:5D:8C
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer:       /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial:       019CAA58BE2B56873051D5D2002874620DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number:          184F
Signing time:             Sun 01 Mar 2026 17:01:08 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:08 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:08 +0000
Files and hashes:         1: 2qzM6x9baKtwfCTVUC_vOHhaD9Q.roa (hash: slF8umIXO8u1xfM7uQvlWuXSbFnPY4ktqm1QtTsVvaw=)
                          2: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: gdBHnHgLtrMFea37vxpH9k22a7qokOmT0bwEZ53p2Dg=)
                          3: qj22xyeLu60pShMzvtnaPDnNQis.roa (hash: Fv9rfv3pioycRBue2RhOjkBOSKLXM7H4+uyv5DM79wI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:be:2b:56:87:30:51:d5:d2:00:28:74:62:0d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
        Validity
            Not Before: Mar  1 17:01:08 2026 GMT
            Not After : Mar  2 17:01:08 2026 GMT
        Subject: CN=ada8666904cf3199e077e75051bfc6a03dd15d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:61:47:39:2e:1c:df:7e:05:46:07:25:1f:
                    a7:d7:48:0f:2b:2e:fb:b0:97:1e:92:00:30:a3:e9:
                    f3:20:76:5b:db:e4:1c:d5:a8:ab:e1:57:76:df:23:
                    fb:af:dd:52:57:dd:42:b5:90:d1:7f:08:1f:47:92:
                    d4:fa:a9:f7:38:00:94:f0:3a:04:d5:e8:fa:f3:e3:
                    dd:b1:57:79:77:e2:bc:1c:b0:c6:a1:35:38:4f:39:
                    f4:8b:34:c6:94:a0:8d:5c:e7:dc:5d:ce:96:96:9f:
                    4e:91:ea:9b:d8:14:74:bb:4b:a5:74:16:0c:7d:0b:
                    e4:de:65:c2:95:a2:8c:7e:c4:d0:77:e3:59:d7:2a:
                    ae:0c:ce:a7:71:e8:13:b6:d4:da:36:eb:1b:92:6a:
                    7f:13:8e:51:ba:d2:7a:51:bc:42:42:a6:9d:a0:78:
                    2f:8c:38:7b:aa:73:66:bb:52:3b:55:59:c9:65:f0:
                    68:2c:c5:20:68:a6:37:81:5b:53:ce:66:78:c0:2c:
                    bc:ad:ce:29:9d:43:5f:41:17:85:10:dd:d6:3a:ce:
                    86:6f:fa:80:02:d1:69:f1:03:73:98:aa:bf:2c:0e:
                    c4:65:41:4c:63:45:e1:09:e6:d7:7e:02:a2:7f:c4:
                    85:c6:3b:b6:02:c8:f1:51:19:c7:80:ae:60:a9:dc:
                    7f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A8:66:69:04:CF:31:99:E0:77:E7:50:51:BF:C6:A0:3D:D1:5D:8C
            X509v3 Authority Key Identifier:
                keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5d:b6:44:3d:15:bd:e4:9b:fb:64:f5:a4:51:99:fd:d3:6d:
         08:74:92:46:c1:fe:22:ea:e9:6d:8e:77:36:9e:4a:f4:4f:0d:
         6a:af:a3:51:31:26:04:94:3a:61:5d:61:f1:23:d8:ea:6b:91:
         2f:f0:b8:8b:03:af:d9:ad:15:d8:16:15:d4:b9:60:5f:f2:da:
         c4:c0:32:fe:5f:a0:04:63:cc:0a:0e:12:7d:27:02:50:12:68:
         96:13:a3:11:13:b6:33:29:eb:79:76:bb:9e:14:51:4f:e3:a4:
         17:db:19:36:c5:3c:60:91:d0:26:20:04:b8:ac:ec:84:70:69:
         6f:32:aa:82:2a:3e:fa:94:c6:02:74:0e:07:ab:43:41:8d:8f:
         58:1c:f5:14:97:8b:e9:d0:b1:b8:89:9a:88:ac:2e:be:5e:2c:
         1d:66:25:67:59:e1:87:4e:43:5f:88:fd:2d:a8:d6:e2:f1:9d:
         3a:81:66:e3:8a:97:8a:85:1c:c4:8c:b8:29:ef:3e:13:c1:fa:
         c8:3f:fb:34:32:e9:3c:9d:6f:11:47:9a:a4:e5:8b:a6:23:c3:
         64:a2:15:d0:10:85:71:96:66:b6:ba:6f:3a:68:43:8f:7a:df:
         67:f3:50:ff:71:c8:f9:e3:d8:01:90:ff:9d:2f:79:d2:29:aa:
         60:93:02:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:31 2026 by rpki-client