Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft
File:                     Jq19NWATTgqK5G_Fsyxay2Hd45w.mft (raw, json)
Hash identifier:          /g9HmRGxJBp2RDXop06mbv21Fn52zA/8JG6FRJBeF3c=
Subject key identifier:   A1:F5:89:E2:BC:55:6D:42:A2:6B:C1:F1:5D:B0:32:AE:58:57:6C:6E
Authority key identifier: 26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C
Certificate issuer:       /CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
Certificate serial:       019CAC474D48493C28A78019686D480C6AB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft
Manifest number:          1371
Signing time:             Mon 02 Mar 2026 02:01:19 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:19 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:19 +0000
Files and hashes:         1: Jq19NWATTgqK5G_Fsyxay2Hd45w.crl (hash: P4HDUiOLKLtJiH+A//l2CiZxIyQYtOk64ecN8Dl98ug=)
                          2: wkHctLvdsJaCxOWaekPpSlsFo1o.roa (hash: 62uOxIFMIJj4gV6OQmk4HcKVN0NAehpTp48LJq+Xir8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:4d:48:49:3c:28:a7:80:19:68:6d:48:0c:6a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
        Validity
            Not Before: Mar  2 02:01:19 2026 GMT
            Not After : Mar  3 02:01:19 2026 GMT
        Subject: CN=a1f589e2bc556d42a26bc1f15db032ae58576c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:5d:63:03:94:f9:b1:eb:88:f7:c6:ee:e1:
                    86:72:72:24:f9:79:d8:c3:ed:d7:23:68:b5:39:81:
                    95:02:71:c1:80:55:85:5e:66:61:29:ef:6a:1e:a2:
                    a9:b8:af:4e:e0:6d:e5:da:36:59:21:7f:07:fa:2a:
                    fc:6d:9f:54:17:bd:05:a8:69:9b:c1:12:66:c1:23:
                    c7:19:ff:57:fd:ac:40:b2:f3:73:fa:3b:8d:2d:0c:
                    5a:81:29:af:ac:b2:92:6c:82:6e:82:1e:20:9b:ee:
                    f7:7d:5a:9e:ef:0d:b2:92:d3:72:0f:08:bd:39:23:
                    41:1b:c2:96:f0:5e:30:08:6d:82:52:a3:41:42:71:
                    81:8e:51:1d:09:e5:d0:3c:40:15:ab:c4:f5:52:5d:
                    99:9b:ed:d7:8e:6a:d1:51:e4:6b:4d:c6:15:e2:28:
                    a4:a8:a5:f4:bd:77:a3:95:0c:88:ed:b5:30:ad:5c:
                    79:a6:15:da:12:13:6a:e0:46:0b:f5:fd:f4:c8:c9:
                    cc:af:26:15:ca:92:74:dd:25:9b:dd:04:56:14:cf:
                    26:ed:9f:83:d9:bc:0a:79:d8:32:d1:f8:ce:2d:13:
                    e5:78:63:29:c6:a6:c5:cd:2c:fb:4f:63:bf:8d:03:
                    85:54:50:39:df:17:3e:a7:47:29:02:d3:63:e0:52:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F5:89:E2:BC:55:6D:42:A2:6B:C1:F1:5D:B0:32:AE:58:57:6C:6E
            X509v3 Authority Key Identifier:
                keyid:26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:9a:96:c7:dc:1b:7f:28:17:81:e0:c1:fd:50:da:83:ee:5a:
         7b:50:f3:9c:ae:33:9b:e9:c5:31:54:a0:44:b8:c4:04:27:0a:
         85:5b:04:0e:6e:de:a4:37:92:cd:d4:45:8e:a1:5c:a2:03:a8:
         40:c1:bb:9b:15:16:31:a4:fd:bd:93:07:e6:64:e3:17:fd:a4:
         a7:48:c2:c2:35:9d:f9:f4:77:57:6e:7a:3b:e8:23:fb:0a:a0:
         55:b9:e9:56:df:40:81:71:39:7f:5b:c7:c6:b0:e5:05:7f:fc:
         e1:fe:69:bb:c1:bd:42:31:0f:ca:7d:2b:df:77:43:0e:26:ac:
         6d:52:fb:b9:44:5c:61:74:a6:c4:f6:1e:61:b5:eb:14:14:1b:
         48:a6:eb:a7:9e:04:6e:9b:2c:61:e6:ab:0d:a0:9e:36:0a:ed:
         d9:fe:c9:ce:06:f0:17:64:36:42:4e:56:c2:c2:b3:84:45:70:
         80:59:71:fb:72:1e:56:a0:bc:22:8e:01:ad:0c:02:f8:98:43:
         df:a2:7f:4f:51:c9:ef:98:8f:cb:87:1b:82:5d:13:7a:af:24:
         11:88:79:cc:bf:dc:c7:7f:4f:3c:19:bc:e3:20:cb:08:b4:49:
         39:fd:b8:4e:2b:51:99:a1:5b:30:e7:b8:e4:d1:41:fe:97:ad:
         56:b4:24:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:11 2026 by rpki-client