Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
File:                     JKMLYNI9dOgia81eFdxb93CtMH4.mft (raw, json)
Hash identifier:          o4gD4BztjcEmR3J45E9q4eYG0lzPWhNxGUuLAOB7Cro=
Subject key identifier:   C7:B9:D6:21:A4:C8:E7:FA:5F:ED:12:CC:54:AC:8D:A1:71:0C:69:9A
Authority key identifier: 24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
Certificate issuer:       /CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Certificate serial:       019CABA238DFF8C0199A9C73FD8A8CB1DF95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 23:01:01 +0000
Manifest this update:     Sun 01 Mar 2026 23:01:01 +0000
Manifest next update:     Mon 02 Mar 2026 23:01:01 +0000
Files and hashes:         1: JKMLYNI9dOgia81eFdxb93CtMH4.crl (hash: lpmWqFn+MnOiFg/zPhDjI4UyDzzIeP1MjqtpB4zH7FY=)
                          2: PRf1LS_LP0qS88N_ayNpAAcnkow.roa (hash: 8w2iytIBhAZgJ6MfqYVy5FcnMvWSHpnknQ6QMhqDObg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:38:df:f8:c0:19:9a:9c:73:fd:8a:8c:b1:df:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
        Validity
            Not Before: Mar  1 23:01:01 2026 GMT
            Not After : Mar  2 23:01:01 2026 GMT
        Subject: CN=c7b9d621a4c8e7fa5fed12cc54ac8da1710c699a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1c:ef:ef:aa:cf:c5:7d:94:a5:37:16:fd:c0:
                    f0:44:21:ba:41:c4:63:00:0b:c8:63:4b:28:99:3d:
                    a7:e0:64:31:19:94:1d:98:3a:f4:eb:30:2f:c5:13:
                    6a:10:5d:27:37:c6:75:8b:17:39:d4:74:80:f4:f7:
                    ee:75:6c:54:dc:f3:8c:fd:9e:a9:14:2b:b3:25:43:
                    32:69:06:85:c7:19:1d:33:4b:c8:67:c2:68:69:da:
                    c2:77:fe:fa:71:fd:9f:c8:8c:f0:2f:77:4f:bd:50:
                    2b:52:21:6d:fd:4a:37:81:64:63:5b:4a:4a:25:f3:
                    1b:96:81:85:0f:ec:27:9f:8f:05:24:32:1d:3a:37:
                    23:13:a9:6c:32:c6:49:73:a4:9d:0b:af:32:16:27:
                    f8:f9:91:61:da:a9:50:24:55:6a:b1:57:15:95:db:
                    bb:72:f8:77:ef:2c:a7:06:f2:8e:cd:2f:5f:5e:bd:
                    a3:c0:1a:bf:d1:d7:80:6b:9b:5d:24:8b:58:12:ff:
                    5d:d0:de:11:46:c6:51:1d:2b:b4:40:ff:a8:d5:c4:
                    ed:6a:e3:6b:d6:84:ea:ea:43:39:8a:db:fc:d5:b6:
                    a1:8c:d4:ee:57:da:23:7a:f7:07:35:81:7b:1c:d6:
                    8f:e9:26:76:f1:d7:27:0d:a8:71:e9:1f:19:71:c7:
                    9a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B9:D6:21:A4:C8:E7:FA:5F:ED:12:CC:54:AC:8D:A1:71:0C:69:9A
            X509v3 Authority Key Identifier:
                keyid:24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:58:0b:45:64:12:53:88:29:bb:33:05:68:3e:64:dd:30:03:
         1f:7e:32:18:bc:ed:14:08:d6:65:3c:4e:ed:c5:12:fe:cc:0a:
         8f:34:d9:a6:76:ad:99:8b:a5:c1:44:50:74:c9:55:b4:cd:9e:
         5f:f2:15:9d:fb:f4:23:b4:e1:63:80:5d:0b:05:25:52:a2:06:
         6f:b2:90:ad:58:1b:a8:ad:f6:f0:4e:41:98:97:0b:c6:31:b1:
         04:5a:02:55:f8:7e:cf:2b:17:13:14:fa:46:3e:62:9e:36:3f:
         7a:42:93:1d:b3:e4:90:cf:60:da:90:62:01:2f:38:62:75:1a:
         dd:af:43:b3:98:a2:00:45:84:99:89:04:3e:e6:a8:45:6b:b7:
         ea:23:dd:dc:48:e7:4a:3a:c8:4a:ac:b9:b2:05:2f:39:81:f9:
         3e:6c:02:54:77:c3:34:1b:8d:39:bb:01:5f:10:af:5a:50:f2:
         ad:77:f1:55:12:0b:a1:de:46:61:d0:66:9e:ec:c1:a8:5a:c8:
         f4:63:92:c8:0f:ff:48:84:7a:da:0b:f4:49:bb:6d:1a:26:57:
         63:21:93:8d:8d:56:38:b3:99:24:bc:de:56:27:7b:c9:ab:30:
         3b:30:48:55:8b:97:33:c1:75:95:8b:67:80:6b:14:9f:6d:40:
         d6:94:72:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:58 2026 by rpki-client