Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
File:                     Jp9PcUO0BngFy6mkD2OXMu59QuU.mft (raw, json)
Hash identifier:          quTuTjA3UqRKrcN0EK+4vTSuy7Fy19+cEEHUK5ZAmGU=
Subject key identifier:   99:4D:49:64:2D:DF:9A:3D:16:EF:64:E6:8C:DC:60:AB:78:89:BF:EC
Authority key identifier: 26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
Certificate issuer:       /CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Certificate serial:       019CABD8FD4FE7F952B3AD5A5046085C7F47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 00:00:50 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:50 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:50 +0000
Files and hashes:         1: Jp9PcUO0BngFy6mkD2OXMu59QuU.crl (hash: QgC0BLI4U0vDKnmRcVTfn8yjHoUbjjJZ4gxl0SRZr1Q=)
                          2: fK_RqyAKvk7n3ODLIZ0WLrGJM8w.roa (hash: 7v/5RLR7Q81lEDWcKmADnfeMIsDhKBKucowaJiP2+SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:fd:4f:e7:f9:52:b3:ad:5a:50:46:08:5c:7f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269f4f7143b4067805cba9a40f639732ee7d42e5
        Validity
            Not Before: Mar  2 00:00:50 2026 GMT
            Not After : Mar  3 00:00:50 2026 GMT
        Subject: CN=994d49642ddf9a3d16ef64e68cdc60ab7889bfec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:17:73:e0:8b:67:d2:55:90:5d:c6:38:4e:
                    28:8a:b5:ae:92:97:41:10:d1:8a:f4:7d:c0:da:0f:
                    e0:f6:19:fd:f7:22:30:d8:8b:99:ad:d9:4b:b0:2d:
                    a8:00:bb:1d:d2:c1:44:e5:85:e4:33:f4:f0:e2:33:
                    cc:f7:d6:4b:4f:1d:d6:9c:a4:52:19:c3:ae:e9:f2:
                    b4:26:2c:24:24:4e:83:2a:27:d3:a6:92:90:3a:af:
                    2b:94:cd:b9:b2:14:88:4b:b4:5d:6a:57:bc:93:5b:
                    f4:99:32:7d:71:a4:b8:e7:1a:2a:31:77:74:a1:4c:
                    64:52:0d:bf:47:dc:99:97:e5:d0:6c:b3:f2:49:7f:
                    04:2d:ed:27:ac:6e:97:05:c2:eb:a0:b0:b1:0b:a6:
                    f8:a2:9f:4f:db:af:d2:15:68:30:09:0a:3e:75:4b:
                    a9:4a:d6:96:5d:a5:e8:1f:29:5d:47:b8:0e:64:75:
                    4a:8b:48:fe:59:4d:e0:8a:90:7a:87:db:e6:17:3e:
                    35:c3:14:c1:fa:cc:69:69:af:aa:65:6a:26:d1:e5:
                    e2:81:98:c2:b2:84:b5:7e:19:bb:f6:ff:12:dc:0b:
                    3e:92:86:10:50:5a:2b:62:6f:50:7c:54:2e:7c:c2:
                    ed:77:7d:06:47:11:0b:62:d8:f7:e2:4d:55:d9:38:
                    0c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4D:49:64:2D:DF:9A:3D:16:EF:64:E6:8C:DC:60:AB:78:89:BF:EC
            X509v3 Authority Key Identifier:
                keyid:26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:65:3e:0f:c2:3c:60:2e:70:aa:d4:ee:a1:e0:b2:c5:6d:d3:
         cf:ed:31:cf:f8:99:e9:4a:f3:ed:cb:cd:e1:f6:d6:41:b9:8c:
         76:52:7b:43:b6:08:ae:11:e1:78:45:5f:18:8d:83:54:91:ac:
         79:94:fa:ce:25:60:c8:40:b6:16:e5:52:35:ce:99:dc:33:a4:
         ad:e7:d2:d4:1a:9b:bb:71:fb:dd:cf:74:a6:49:ba:b9:18:77:
         c0:31:a6:2d:36:c2:10:1f:02:f9:5f:c1:b6:26:e0:8e:44:69:
         af:a2:1f:9b:15:bd:7b:8c:c8:9b:9e:01:a6:d5:df:57:5b:79:
         c0:c0:2a:56:c4:e9:68:52:98:c1:07:a4:3e:29:93:a7:99:c1:
         26:38:02:b9:83:c8:d9:76:3f:00:f0:f8:10:3a:00:0b:a5:0a:
         c9:e7:4b:3b:78:16:3b:8a:89:1f:a2:6e:6b:ef:4d:5f:a8:4e:
         55:bd:82:7f:de:fb:1b:35:5e:cc:8f:76:ce:d4:fe:f6:b2:eb:
         44:a3:00:70:b2:87:17:d0:89:40:62:06:e7:5e:06:a6:a0:37:
         e9:d6:64:64:ab:09:29:0a:c6:32:d0:4d:51:80:f1:b2:65:9a:
         31:3e:db:58:bf:e2:15:51:57:13:de:e0:3b:43:72:14:f9:d8:
         bd:de:02:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:55 2026 by rpki-client