Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
File:                     jlo2o46eViR2rnC5FQKOMBhxKRk.mft (raw, json)
Hash identifier:          jefhavyrh1C/oXKJmZRc1eeEAu6FxIzoezvDjWd7Mws=
Subject key identifier:   E5:66:B1:71:C1:8D:3A:9D:E8:66:72:F2:A9:77:1A:A4:EB:BA:32:02
Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
Certificate issuer:       /CN=8e5a36a38e9e562476ae70b915028e3018712919
Certificate serial:       019CAAFD981169E9AEC873E330C2E566EDC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
Manifest number:          0BE7
Signing time:             Sun 01 Mar 2026 20:01:12 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:12 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:12 +0000
Files and hashes:         1: jlo2o46eViR2rnC5FQKOMBhxKRk.crl (hash: QYp6LbMRtXbVzMyY4U9VXFj3tL2yEdh2eDTw1UJJZsk=)
                          2: w7qO3XTNq0Yzdc30rEPjt7iJFZU.roa (hash: LNZ6lyl5sjWLQK11LqKZIO+Pewy+8JnS92wQrFux3FI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:98:11:69:e9:ae:c8:73:e3:30:c2:e5:66:ed:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919
        Validity
            Not Before: Mar  1 20:01:12 2026 GMT
            Not After : Mar  2 20:01:12 2026 GMT
        Subject: CN=e566b171c18d3a9de86672f2a9771aa4ebba3202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:f3:33:32:68:fe:bd:8b:16:ab:eb:f5:32:
                    9b:b7:62:1b:17:38:05:a1:07:84:55:8b:42:f8:f7:
                    77:e9:e8:bd:54:1d:43:63:09:fb:da:89:35:16:44:
                    ec:b1:46:a7:c1:e9:ee:7a:59:fb:5f:45:56:e8:1d:
                    a2:49:c4:cc:2d:43:ad:d0:de:45:58:43:c3:e0:d1:
                    2b:d4:2b:bd:6d:84:30:b2:47:7d:43:db:5a:2f:ce:
                    4c:73:94:2a:62:05:a6:e2:54:87:aa:15:c5:7b:3c:
                    a5:41:5a:d8:7e:e0:50:c8:68:ff:0e:d7:ab:34:e5:
                    1e:b9:22:6a:ea:b9:97:4e:34:88:64:c7:d6:6d:b7:
                    c3:50:0c:cb:9f:bb:d1:92:bc:4a:39:7a:f2:67:18:
                    ba:52:cc:17:ed:37:63:1e:43:32:5e:e9:f2:f1:4c:
                    88:6d:88:7f:cd:17:29:28:f7:4c:b5:c7:24:16:7d:
                    43:1f:26:69:f3:38:ca:f8:bd:52:8a:49:ed:fa:d0:
                    e2:a0:9d:a2:56:47:2f:df:ac:ea:5f:88:55:67:b4:
                    00:ed:72:1a:84:1c:73:81:06:09:12:95:42:2f:18:
                    1d:9a:2f:19:6a:83:2b:72:78:a6:75:37:b8:83:06:
                    6f:ed:3a:51:1f:bd:f1:8d:ab:78:03:3f:ac:f1:52:
                    36:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:66:B1:71:C1:8D:3A:9D:E8:66:72:F2:A9:77:1A:A4:EB:BA:32:02
            X509v3 Authority Key Identifier:
                keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:74:d1:2b:e3:37:f9:cc:0a:e7:ab:83:50:6a:ed:18:96:34:
         7b:cc:d3:e9:47:e5:6d:90:2f:94:04:3e:ea:02:5c:92:76:71:
         f0:4f:2e:ea:8a:db:ef:f9:cb:90:fb:2d:47:38:a4:fb:28:7b:
         91:65:93:a4:57:2e:a9:9b:11:52:14:4c:66:c8:52:0b:b2:4f:
         9c:9e:ae:62:f8:2a:7e:01:f1:e4:3d:64:22:f5:15:49:45:2c:
         69:e4:59:6c:42:a0:9f:cf:61:ab:21:78:04:16:22:d6:89:91:
         14:cf:82:bd:5b:92:d0:21:07:2b:3c:e6:e2:27:d1:23:25:18:
         bd:7e:68:b2:0f:2c:bb:ea:c6:11:24:29:06:bd:95:b3:46:69:
         c9:28:7c:31:80:40:26:bb:e1:94:4f:05:73:dd:81:fa:12:13:
         09:a4:1b:7c:5a:a6:73:6f:7e:bd:f9:78:e2:05:5c:fc:db:7a:
         04:92:88:c7:ea:da:32:9f:e9:2a:4e:fc:3d:d6:81:68:99:e8:
         76:f6:46:8f:d7:ff:6c:14:f6:37:c3:5f:51:56:7f:36:cf:1d:
         10:05:dd:51:c4:7b:d0:6d:85:46:5a:61:10:8d:4b:79:7b:ce:
         03:e8:5a:2e:ea:5a:b6:ac:90:03:e3:fd:72:43:e8:86:c4:b1:
         62:31:7d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:58 2026 by rpki-client