Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
File:                     JpildU3unu9vIkViy4I5rIvbBbg.mft (raw, json)
Hash identifier:          +Ea/G5oL2rZqCnkBD9EwjV+LAPZ0tvONWtIriM8sdqc=
Subject key identifier:   88:8F:36:D6:9A:6A:0D:76:87:2C:E6:34:2A:ED:3D:5E:FC:CC:E6:7F
Authority key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
Certificate issuer:       /CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Certificate serial:       019CAC0FC9986FFCD938B516DC0FAC14C918
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 01:00:41 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:41 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:41 +0000
Files and hashes:         1: 1KySW6Ro-K6j0ocElPKZRtuE5Ao.roa (hash: dWyTpT0UPgzBjyIAGYHP0a0Cm+BwtjLbW4C9xN5de58=)
                          2: JpildU3unu9vIkViy4I5rIvbBbg.crl (hash: WLitL/333YD9YCLvKaKhqJQL/55YE2BTLyWEDRpSjYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:c9:98:6f:fc:d9:38:b5:16:dc:0f:ac:14:c9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
        Validity
            Not Before: Mar  2 01:00:41 2026 GMT
            Not After : Mar  3 01:00:41 2026 GMT
        Subject: CN=888f36d69a6a0d76872ce6342aed3d5efccce67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8f:0d:30:3c:51:0c:63:74:43:c2:09:86:4a:
                    42:e7:bd:3a:d6:fc:3b:5b:dd:e0:13:88:c6:84:cb:
                    96:9c:42:eb:4a:44:c0:83:f4:16:a8:50:c1:16:f3:
                    9d:7d:e9:ec:99:07:08:4a:42:63:68:02:3b:f8:0f:
                    1d:10:4c:3e:b3:b1:d8:ba:1c:8d:3c:09:80:da:8e:
                    e9:0c:84:6c:46:f7:bd:a3:31:45:b1:0d:dc:89:e1:
                    5f:71:09:d5:99:b3:99:c9:3a:98:21:fc:17:41:72:
                    1c:9d:ef:10:e1:33:b8:18:ce:4e:2a:56:56:83:4c:
                    cc:98:34:38:3c:8a:45:5d:bf:ee:72:a5:4c:60:a5:
                    49:95:d1:93:94:bc:52:2a:69:00:45:1d:37:1a:4a:
                    6e:50:2b:18:b1:14:56:fe:1d:62:de:fb:5b:60:4a:
                    3e:42:80:a6:33:7a:e8:eb:8e:5c:02:4b:56:73:02:
                    52:97:b1:bf:79:f5:51:3d:17:bd:14:13:e6:bc:04:
                    48:81:1f:2d:08:04:52:3e:6b:0c:e4:62:bf:be:92:
                    17:ef:db:0c:70:47:ee:52:8f:17:53:60:f4:e5:9e:
                    74:4a:21:27:77:e0:e5:25:62:50:da:6d:13:e5:4b:
                    2c:25:4f:f1:5e:42:a7:54:ac:1c:2d:7e:85:6e:2f:
                    86:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8F:36:D6:9A:6A:0D:76:87:2C:E6:34:2A:ED:3D:5E:FC:CC:E6:7F
            X509v3 Authority Key Identifier:
                keyid:26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9e:e4:b9:20:fd:eb:3c:15:ad:d9:bd:cd:b4:52:95:e3:77:
         f9:5f:63:82:f4:89:2d:b5:e6:1f:6f:ab:29:17:b7:52:28:fc:
         2e:64:c0:d7:91:01:ef:03:c4:ed:78:f5:6a:f6:7d:f2:91:8f:
         a8:1e:e8:20:59:88:27:5b:cd:cd:42:df:dc:96:02:35:85:8d:
         ed:41:79:ce:d7:de:b2:0a:b3:44:bb:2d:65:41:b8:50:19:c4:
         62:37:ba:eb:72:63:a7:0a:bd:b1:9c:16:af:57:48:37:76:b2:
         37:c1:21:4d:ed:8a:a0:24:0a:8d:f5:9e:3b:05:48:2d:c4:6c:
         e6:f9:4a:14:bf:f0:8e:f3:67:8f:58:69:71:08:f5:87:56:b4:
         c4:a5:5b:f4:be:db:25:10:6d:18:3d:70:05:ca:66:53:07:88:
         6c:15:5b:4d:f3:41:09:92:56:87:b1:57:ee:06:0c:cf:fb:ba:
         e2:16:86:48:ef:83:f6:26:aa:85:2d:89:d2:d2:aa:56:e1:28:
         a3:ee:b0:25:1b:20:ee:de:36:36:63:70:e6:53:e2:e4:ca:da:
         1b:27:73:b0:74:38:ff:08:01:b1:9c:14:6f:dc:b5:69:dc:66:
         58:e2:ff:ab:cd:2d:ee:fa:14:82:fa:22:b4:55:8a:95:7c:3f:
         d7:4f:a5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:10 2026 by rpki-client