Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
File:                     JYYj7MjcuRPRAiipRgqG5mDLj7I.mft (raw, json)
Hash identifier:          ZQvq3EQGCVdekt5cpdMMlHZURjd9Ex8L7jLQKQEs15k=
Subject key identifier:   C1:31:91:60:75:0F:3E:D1:7C:97:39:D3:45:F0:63:CA:DE:95:4A:17
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Certificate issuer:       /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial:       019CAEA2EC67AA41E957F6386AE3CE7C271F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 13:00:38 +0000
Manifest this update:     Mon 02 Mar 2026 13:00:38 +0000
Manifest next update:     Tue 03 Mar 2026 13:00:38 +0000
Files and hashes:         1: 27iJL7tabeRZf9si2vPA81cwEnc.roa (hash: xWHsz8ye7DjPUgv12m50umXvY8HUT0fQ38UrVHv9Jwc=)
                          2: 6zmwp0Ty38xOLaz9dzA80B6hzAM.roa (hash: OlOuB/7WZRu3jgahb4J4hkXzTMRNqdoXbJ2s7Ooyi+Q=)
                          3: JYYj7MjcuRPRAiipRgqG5mDLj7I.crl (hash: OuX0hMO2ElCAocoeQ9qwI0JdHtZWqWlMcc8cdPQCMgM=)
                          4: Txl_hQPriUVq_Buu0gTEPI2kg_g.roa (hash: svJCwy5lyL58vBvH80bdWo+cEP+N6WrO0t2/0pD94JY=)
                          5: e4fvp8yWlAX8buHeYzF-90rR6Bk.roa (hash: cr5m93AUTTeXzPXmKSQPnNEYJwCdKzbaLZUVJBf9U6g=)
                          6: ljr109WhqKfeYcH-MhSgPoSjR9U.roa (hash: RdTZwN02aq7Yl4Y75F8xayBDhsLyfJXGJDu35AD1V7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a2:ec:67:aa:41:e9:57:f6:38:6a:e3:ce:7c:27:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
        Validity
            Not Before: Mar  2 13:00:38 2026 GMT
            Not After : Mar  3 13:00:38 2026 GMT
        Subject: CN=c1319160750f3ed17c9739d345f063cade954a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:d1:eb:ad:1f:0e:3e:d8:0d:18:1e:44:de:
                    65:3e:a7:70:33:e1:55:66:d7:36:ec:e2:1d:5b:f0:
                    bb:bc:d8:ff:eb:ea:ed:6b:76:32:90:11:40:0d:ee:
                    21:b4:e8:47:c4:0c:09:1c:4b:d8:fe:eb:c7:73:68:
                    0c:36:3e:4a:30:0e:1e:10:f7:97:32:29:db:08:b2:
                    6b:28:72:3b:ea:e5:49:d0:3b:2a:20:74:3b:b8:65:
                    71:98:22:d3:6e:fa:9f:25:d4:85:65:cc:32:6d:f5:
                    9d:71:bf:57:82:e9:d1:19:b3:94:da:a8:9d:67:7e:
                    53:cd:56:db:81:a0:a3:27:21:23:69:34:83:8c:a5:
                    bb:01:8e:72:52:60:4e:3e:88:45:30:30:6e:0b:5a:
                    17:3e:6c:e7:10:77:fe:85:61:e2:25:28:24:a3:f1:
                    c0:96:e7:10:a4:1d:65:4d:08:25:9d:c7:aa:5f:d6:
                    81:a7:44:a1:63:8f:b6:42:87:76:97:35:b4:72:5f:
                    6d:88:dc:82:13:69:0d:e1:1f:26:1c:27:12:dd:d5:
                    86:0e:31:e1:e7:d0:49:6f:c5:63:b2:49:92:b1:ef:
                    48:3f:02:6f:8b:c4:32:d8:c5:9b:6a:86:22:14:79:
                    63:75:9d:77:aa:c0:eb:e8:5c:97:3b:a3:d9:fd:18:
                    66:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:31:91:60:75:0F:3E:D1:7C:97:39:D3:45:F0:63:CA:DE:95:4A:17
            X509v3 Authority Key Identifier:
                keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:4f:1d:8a:31:42:79:4e:c4:91:b2:7f:3b:c5:2d:9e:6e:13:
         87:c1:b8:58:6c:52:e1:2f:a4:b0:e3:60:e2:6f:76:a9:92:f4:
         12:fb:06:b5:f9:19:cb:70:24:99:3f:f2:b8:ae:ab:06:07:6c:
         79:57:95:53:bd:65:33:9b:15:ff:5b:eb:2b:ef:fd:8d:a1:bd:
         30:8a:fb:65:3d:b3:84:df:a9:a8:a9:b2:79:4a:c5:04:76:1a:
         68:cb:ee:d3:34:0c:96:64:c2:7b:b2:05:a3:43:59:f2:50:c4:
         f3:e4:99:06:de:1b:48:3f:b3:0e:2a:a0:b4:6a:7e:2d:a3:bb:
         29:4f:ec:02:aa:4c:88:aa:15:ff:4d:68:83:41:5b:5e:59:f7:
         e4:5d:8f:c0:53:aa:b8:84:49:1d:df:9e:a7:f1:ea:27:ad:37:
         e5:05:b1:c2:a2:11:77:11:61:23:e5:21:9e:6f:d3:99:bb:4f:
         a9:85:95:2e:5e:5a:fb:1f:b8:c1:60:18:9b:74:52:ce:57:50:
         8f:3f:57:8f:93:38:2e:62:a7:b7:8e:c7:80:5e:33:5c:d0:78:
         95:a2:76:a5:69:4c:5c:de:57:ae:aa:9d:75:60:12:6b:b3:fb:
         5a:5e:72:e1:d3:8d:f4:2f:1e:52:fd:98:55:13:da:78:8b:56:
         32:27:33:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:34 2026 by rpki-client