Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
File:                     SCJSDeYUN6bOZcbjRidHBwPmXtE.mft (raw, json)
Hash identifier:          L2yq8oCPu951lAKBUs8CgPJC8W815nVSJz75ZA6HGHs=
Subject key identifier:   C8:36:C8:EB:69:75:C6:F5:03:72:72:A6:A6:A2:E1:56:03:2E:41:02
Authority key identifier: 48:22:52:0D:E6:14:37:A6:CE:65:C6:E3:46:27:47:07:03:E6:5E:D1
Certificate issuer:       /CN=4822520de61437a6ce65c6e34627470703e65ed1
Certificate serial:       019CAFECA246B4EA76E6F109FACC1AFAF3AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
Manifest number:          60
Signing time:             Mon 02 Mar 2026 19:00:46 +0000
Manifest this update:     Mon 02 Mar 2026 19:00:46 +0000
Manifest next update:     Tue 03 Mar 2026 19:00:46 +0000
Files and hashes:         1: SCJSDeYUN6bOZcbjRidHBwPmXtE.crl (hash: fNh/AchHuceEMV20tXe5kz+AFicwMBURlTpXhNFgaeY=)
                          2: hy7V_eg1KosUr6B48auj7x_GyG0.roa (hash: esE+dAQn3fgKAAwpaNKRZUcrbj7NuDcvWUlHXEbNi8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:ec:a2:46:b4:ea:76:e6:f1:09:fa:cc:1a:fa:f3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4822520de61437a6ce65c6e34627470703e65ed1
        Validity
            Not Before: Mar  2 19:00:46 2026 GMT
            Not After : Mar  3 19:00:46 2026 GMT
        Subject: CN=c836c8eb6975c6f5037272a6a6a2e156032e4102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:35:48:f9:4c:22:da:f1:7e:42:6f:d1:a2:66:
                    71:99:6b:cb:ea:a7:a7:8c:7e:9d:16:08:14:bb:4f:
                    01:6f:4c:42:9c:21:31:65:3e:21:a3:c0:4f:f6:5d:
                    4e:80:29:18:04:f3:f1:95:f2:22:2e:42:e9:3b:bf:
                    60:c0:d2:ff:5a:1b:53:d6:5f:34:9f:38:f0:30:7c:
                    a5:66:21:27:46:22:5a:8b:40:65:2a:23:16:79:bc:
                    cf:c7:a2:f6:ec:b7:80:af:c8:1b:f5:4c:94:de:a3:
                    57:0d:81:0a:39:7c:34:c7:bf:44:9c:2b:f3:0d:27:
                    65:f3:30:1d:1e:6f:6a:34:06:bb:00:70:39:46:06:
                    f5:dc:f9:a7:fe:6d:48:47:14:f8:90:bd:7e:5d:cc:
                    3c:ca:c9:00:75:23:89:53:4a:21:37:d8:21:3a:bc:
                    6f:c8:b2:b1:e1:81:1a:d7:78:ff:85:34:00:ce:f8:
                    e7:87:0b:57:f3:69:43:2c:c7:e1:0b:64:5f:07:91:
                    b0:ed:91:fa:61:9e:19:70:96:53:9a:82:d4:4f:e4:
                    e6:65:d6:8f:5b:db:2f:89:d6:c6:98:9e:77:a2:88:
                    71:d2:2b:8c:31:6e:5b:43:16:c4:dd:ef:6d:c5:d3:
                    db:89:d0:f6:5a:85:d9:3b:48:0f:e6:6b:b5:b8:35:
                    e9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:36:C8:EB:69:75:C6:F5:03:72:72:A6:A6:A2:E1:56:03:2E:41:02
            X509v3 Authority Key Identifier:
                keyid:48:22:52:0D:E6:14:37:A6:CE:65:C6:E3:46:27:47:07:03:E6:5E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f0:b1:cb:f0:f8:b3:91:93:5d:de:c6:f5:c8:21:dd:5e:97:
         48:36:79:d9:40:6d:c3:5d:1b:93:f6:0a:7b:aa:4e:b1:cb:af:
         55:e1:73:82:56:66:de:9e:c8:12:77:9b:33:b2:48:61:e8:83:
         e9:5b:e8:cc:3a:f0:81:20:08:7d:5b:32:47:a1:72:50:ae:f8:
         2b:f0:5b:6f:1a:ef:95:ee:c4:4f:34:9d:b8:1b:c8:05:2e:93:
         80:5a:86:72:23:79:47:60:75:ec:97:60:4c:13:1c:c7:2c:74:
         c7:85:4d:f8:9e:1c:6b:5a:b5:98:83:3b:f8:0d:87:6c:f7:5f:
         c9:1d:83:7f:be:a9:23:0e:ff:24:f1:fa:a9:c5:ba:7a:6e:21:
         56:8b:75:12:e3:9d:7c:ce:25:fa:be:fd:31:fb:b2:dc:6a:12:
         ee:03:48:09:17:f5:03:4a:0e:f8:19:f0:dc:57:08:03:32:29:
         8c:81:f0:e9:e6:4a:d5:cd:37:30:d9:11:a8:bf:dd:85:27:ea:
         7c:98:75:28:75:9d:a3:45:e7:e1:27:66:c6:31:21:47:26:5f:
         ec:46:52:5f:10:01:cc:9b:2b:f6:39:42:fb:fb:c8:00:e0:6d:
         e5:f7:c3:c6:d3:2e:32:f4:34:7a:91:6a:c0:89:e6:18:8f:b4:
         74:0c:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:37:33 2026 by rpki-client