Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
File:                     jRvvcwUnquHs-PswhWWdb9_u15c.mft (raw, json)
Hash identifier:          WoaIdkZkrSsXCD+/Ch03qC0xw/47gZmVnVQifGsVJG0=
Subject key identifier:   AA:4E:58:58:41:47:7E:9C:36:C0:B9:EB:0D:EC:F7:39:12:F6:C3:9D
Authority key identifier: 8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97
Certificate issuer:       /CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
Certificate serial:       019CABD98EDF1C45D5C818E702CCD25C6ADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
Manifest number:          0869
Signing time:             Mon 02 Mar 2026 00:01:27 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:27 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:27 +0000
Files and hashes:         1: jRvvcwUnquHs-PswhWWdb9_u15c.crl (hash: RkDOlthLaY6VpSWrlLjDCnptyvCc9IStIh2mTRvGo0I=)
                          2: nykf0zrTCoPd1iM-xAnh89_VJaM.roa (hash: MbWss0wBitxLQn7qC9neXRi6hi6X3oH2hMY4Zjhb/A4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:8e:df:1c:45:d5:c8:18:e7:02:cc:d2:5c:6a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
        Validity
            Not Before: Mar  2 00:01:27 2026 GMT
            Not After : Mar  3 00:01:27 2026 GMT
        Subject: CN=aa4e585841477e9c36c0b9eb0decf73912f6c39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:d5:72:d0:73:68:10:37:76:b4:11:10:ad:
                    74:23:b9:9e:3e:46:b5:f6:b4:a5:e8:8a:20:3b:4e:
                    15:d0:6f:7d:3f:e0:15:ee:c9:0d:8c:4a:b2:05:27:
                    13:42:97:22:b6:b5:73:c3:b6:cb:2d:a7:4a:20:b6:
                    80:91:95:f2:cf:48:a1:b5:7b:8b:c0:46:19:13:04:
                    81:21:4a:ca:06:d7:70:6e:28:46:b5:7b:79:00:bf:
                    02:55:76:29:72:b1:d6:c1:83:71:38:51:37:35:60:
                    81:96:16:d8:68:74:13:e3:dc:c8:ff:e1:39:99:7a:
                    40:f1:93:d5:c5:c0:0c:d5:9d:08:6a:c3:4e:6f:70:
                    e4:1a:30:54:da:05:ae:95:a7:65:c6:46:8c:ac:f7:
                    e7:77:76:c9:1a:38:f1:c7:dd:96:55:2c:0b:e5:0b:
                    1f:84:2f:f8:79:82:b0:aa:45:63:0e:1c:d6:79:57:
                    14:28:28:97:94:a9:3a:09:94:21:fa:35:f0:8d:35:
                    20:e8:12:f1:4e:0e:7e:95:b3:9d:b3:89:6d:f1:8f:
                    55:e0:f4:b0:62:d5:77:83:05:e6:95:ed:42:f3:9c:
                    f0:88:2b:60:96:0e:df:13:3c:2b:bb:3b:f9:80:be:
                    93:06:eb:a4:35:ee:aa:51:80:a8:67:e9:a2:fd:11:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4E:58:58:41:47:7E:9C:36:C0:B9:EB:0D:EC:F7:39:12:F6:C3:9D
            X509v3 Authority Key Identifier:
                keyid:8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:80:66:51:d7:70:f4:d3:28:56:d9:1b:df:db:74:09:42:b3:
         bf:64:c9:72:90:b3:50:d6:2d:39:65:52:69:22:3a:1d:6f:41:
         ba:0a:30:1c:e2:ec:b0:e1:a1:de:2d:40:e6:9d:1c:97:4a:e9:
         0a:63:4c:03:19:e8:dc:15:57:86:fb:9d:e6:db:22:75:1f:57:
         82:e9:22:3f:cc:25:90:18:12:2d:cc:16:d6:7f:ad:f5:93:06:
         16:f3:6a:77:17:84:0d:6f:a6:5a:d5:af:0c:cf:c8:ca:c5:f2:
         f4:9c:39:71:82:25:18:d6:30:08:10:20:f5:50:96:cf:bf:7a:
         81:a3:59:dd:e0:63:50:f3:ff:b3:bb:06:8d:33:85:b8:25:2a:
         5e:63:50:ff:d2:27:f3:1c:34:74:91:80:2e:8c:fb:dc:83:9e:
         56:ae:58:c6:01:f1:bf:aa:ca:b5:37:2d:a5:89:40:de:96:97:
         ac:86:b0:8e:e1:3a:57:98:ac:39:0a:1a:5d:ea:f9:cb:b1:29:
         34:dc:5d:18:af:00:2d:e2:07:f5:74:96:17:78:aa:a6:df:5b:
         31:95:e5:4f:f8:09:68:f5:b3:28:05:e5:6e:d0:54:5e:0c:b1:
         e2:f7:23:a2:f9:29:f7:e8:d1:93:9b:04:a7:76:2c:2d:0d:24:
         95:f2:43:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:10 2026 by rpki-client