Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
File:                     J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft (raw, json)
Hash identifier:          8tI+Ittm7R2fMVCmM9ayNL8zJiRoQK0Pmq5TucjZ6i0=
Subject key identifier:   18:B9:F8:BA:13:20:93:31:1B:1F:02:17:C2:1C:F7:96:15:3F:8D:37
Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
Certificate issuer:       /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Certificate serial:       019CAB6B6AF147EC6F35DBCC9965D0D62B04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
Manifest number:          1849
Signing time:             Sun 01 Mar 2026 22:01:09 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:09 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:09 +0000
Files and hashes:         1: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl (hash: DVuFphXQvjYtI0y7wVQ55ovnMQdXeqHbj9p4X8LMBjE=)
                          2: SPWsU8T9PLAubzeedd1G0T5GSAM.roa (hash: UkMo0FW619fM25TcBwQ8m/aK6wdUQ2mji2t/icRA2rU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:6a:f1:47:ec:6f:35:db:cc:99:65:d0:d6:2b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
        Validity
            Not Before: Mar  1 22:01:09 2026 GMT
            Not After : Mar  2 22:01:09 2026 GMT
        Subject: CN=18b9f8ba132093311b1f0217c21cf796153f8d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f0:20:19:fe:52:dc:73:88:36:7f:94:4a:58:
                    aa:52:92:1d:3f:00:46:60:28:c0:d4:c9:17:82:0b:
                    77:ad:93:0d:6a:0d:1e:7c:9b:bc:fe:a3:44:31:cb:
                    ed:05:c0:0c:b4:22:9e:cf:84:ae:75:c7:65:f3:03:
                    c6:9b:d7:55:9e:f5:21:a1:30:a0:c7:61:0a:f0:c9:
                    35:88:ad:a0:24:a2:c4:ee:b6:d3:6f:e1:c8:01:42:
                    a9:fb:dd:2d:02:5a:af:af:b1:8b:02:a5:c8:2e:1f:
                    67:2f:de:90:be:3d:22:73:79:7a:64:84:fd:c5:0b:
                    36:18:3c:96:43:39:8a:c7:ba:64:b3:ae:ca:1e:68:
                    0c:93:a8:69:26:1f:14:33:b8:17:cb:e3:1c:94:f2:
                    d6:8b:38:fb:04:12:a6:9d:0b:35:20:91:f3:cd:8a:
                    13:99:be:1a:4d:73:60:23:50:e7:22:d6:02:c6:97:
                    98:35:9e:8d:75:4f:2c:32:f7:06:27:47:39:4f:34:
                    53:41:1f:78:15:5d:d1:c0:90:76:e3:23:a6:fb:62:
                    ff:60:60:62:84:6f:e7:27:58:1d:54:59:97:63:9c:
                    b7:c8:ef:f5:43:3a:b4:25:5c:90:82:65:69:80:26:
                    ff:75:f0:19:d8:97:29:33:62:47:48:d2:f6:4a:8a:
                    03:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B9:F8:BA:13:20:93:31:1B:1F:02:17:C2:1C:F7:96:15:3F:8D:37
            X509v3 Authority Key Identifier:
                keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ad:f7:55:e3:48:23:3a:74:54:cb:0e:db:6c:3a:54:c5:89:
         e8:4e:af:aa:0e:52:e2:9b:f8:be:c3:20:f3:5b:21:19:43:a7:
         40:d0:1e:4e:dc:b4:cf:c4:a9:5f:ba:d7:6e:44:52:98:64:2c:
         c4:9a:fd:d8:be:0c:9a:98:0e:4d:94:f5:7f:68:f6:2a:d0:4f:
         ea:1b:1f:b7:10:91:ff:3f:2a:7e:92:46:8e:e7:59:55:1a:d2:
         04:28:c2:94:12:67:60:5b:c1:7c:2a:25:76:5b:d4:27:f4:db:
         39:aa:a4:07:da:83:81:f4:62:4a:34:41:ff:c5:5d:a1:19:e6:
         dd:ed:e2:f3:dc:29:43:3c:40:05:7d:8e:4d:90:af:cb:fe:f3:
         9a:cf:36:35:c7:b2:80:fe:17:83:f9:bf:6c:3e:7d:0a:a9:03:
         d6:15:37:fb:7e:7a:4e:d9:05:74:46:fc:20:3f:99:ce:ec:1d:
         e6:8e:19:d4:53:ee:29:ae:86:80:e3:e0:d6:18:7f:54:fd:68:
         2c:0d:8d:78:c6:1a:2f:80:dd:1f:df:c1:79:e2:22:34:63:af:
         fa:6b:25:42:dd:f4:96:e1:38:6f:5e:45:58:10:4c:89:b3:a4:
         38:b2:48:02:51:78:d2:1b:e6:8f:90:13:62:a6:d0:b1:59:41:
         75:15:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:51 2026 by rpki-client