Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File:                     jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier:          v3G5IT+cAiWdmqE6SQ71aUm8ALWSkXs5qcRBYm1XDRE=
Subject key identifier:   F2:28:92:C6:3F:DB:25:8F:38:E0:C2:29:9C:3F:D0:74:30:2B:16:21
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer:       /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial:       019CAC0F92B89FAFE82ECBE723EAB429186B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 01:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:27 +0000
Files and hashes:         1: DW0L4TMX0k7NIxwBqURjmrgnl7k.roa (hash: 9bpHxyEG2FowJ+5wF/MX0mk7jznSAQlzUuYCWXpTFQM=)
                          2: fdMO8uKSbPAwkZWz81kW00ikw90.roa (hash: bDzUzfVEg3uUN6Y1DlBJvXf2YCZXufjYUiQMDPh+1vc=)
                          3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: 2NEqIx6v/b/LxnNiTHYgJx4d6HihhSbJ4XahN1ASsKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:92:b8:9f:af:e8:2e:cb:e7:23:ea:b4:29:18:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
        Validity
            Not Before: Mar  2 01:00:27 2026 GMT
            Not After : Mar  3 01:00:27 2026 GMT
        Subject: CN=f22892c63fdb258f38e0c2299c3fd074302b1621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:33:91:7f:a5:09:69:ab:e8:55:35:1e:be:
                    a3:0b:fd:3a:80:d4:b3:0b:77:ec:d6:a4:f2:f2:46:
                    1e:a4:ae:6f:09:63:29:52:4d:eb:1c:84:9d:2a:a6:
                    ca:3c:7b:9c:d2:69:43:63:1c:14:9e:d3:26:c3:aa:
                    fc:a2:be:85:14:9b:6f:30:01:2a:99:7c:cc:55:85:
                    df:51:cf:e3:17:fd:3d:0c:0a:a4:36:da:57:bf:3e:
                    07:1a:31:73:03:56:39:ed:86:ed:ce:81:6d:82:a9:
                    62:bc:40:a7:0d:a9:2e:db:e5:75:be:5d:0f:17:1a:
                    10:91:7a:ec:e4:05:39:bf:3a:8b:2d:50:db:b4:85:
                    5b:3f:08:e7:89:a8:66:87:70:a2:06:00:ee:9d:f9:
                    f2:76:5f:39:6d:59:8c:3d:06:72:43:91:54:76:aa:
                    8d:67:86:3c:e2:b6:00:5f:9f:74:9a:d4:d6:bd:ce:
                    10:4b:a3:62:ef:fa:be:48:df:33:a4:08:96:d6:70:
                    a8:27:a0:8b:2f:14:25:1a:16:28:d2:d0:dd:9d:dd:
                    fa:96:34:16:7f:8a:cf:7f:93:2d:79:86:84:20:c8:
                    67:45:eb:a8:26:d6:54:a8:17:d0:95:99:c2:36:d7:
                    19:b8:c8:a3:25:2e:3e:e6:04:e1:ab:cd:39:c1:03:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:28:92:C6:3F:DB:25:8F:38:E0:C2:29:9C:3F:D0:74:30:2B:16:21
            X509v3 Authority Key Identifier:
                keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:dc:1f:58:01:0e:e1:b5:8f:a5:36:ee:70:11:08:32:11:48:
         7d:6a:1b:44:37:c9:65:e6:2b:e9:91:d9:c8:52:cb:14:6e:cf:
         8d:e7:71:e3:15:05:e8:64:89:34:b7:d5:b7:ec:b3:28:73:de:
         b8:df:00:d9:37:54:ff:66:dd:7c:03:2e:04:9b:23:18:c0:78:
         53:2e:7b:28:39:0c:b6:13:8a:b2:69:d5:5d:9a:5f:9c:49:3a:
         91:8e:e3:a4:22:f4:ca:d5:08:7b:36:21:21:fc:39:4a:56:98:
         55:ef:d2:f9:a3:09:e9:f3:b8:11:b9:4c:4d:6e:c3:df:56:b3:
         54:73:53:0d:70:b9:1e:8e:80:9e:46:28:8b:31:79:d9:ab:45:
         2e:6a:58:bf:c5:d9:19:34:ca:b5:70:4f:2e:b9:62:d4:94:69:
         b3:07:f1:03:a3:a4:b1:63:b4:a4:a7:21:84:08:04:a8:4f:71:
         15:f9:ff:7c:c9:22:07:0b:fa:c6:17:99:97:25:6d:cc:3f:91:
         25:7c:c3:ca:2c:c0:41:e5:07:23:62:19:47:c9:65:5d:12:6f:
         2c:12:9e:d2:eb:b4:e1:2b:0f:c4:d7:b7:7d:43:ca:a3:ca:ea:
         3b:74:87:2e:46:05:3c:e7:ba:ca:1a:5f:61:d7:90:62:0c:cd:
         6e:db:8b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:24 2026 by rpki-client