Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
File:                     Jowu3BO7KjxjJiEhueqtGIvtuuk.mft (raw, json)
Hash identifier:          nhRuZRL9+sou9EpnOoax2aiOvSCmUZxZwnut1gR3vY8=
Subject key identifier:   C1:FC:E1:F1:C3:57:6E:A5:42:B5:23:BA:A4:FF:4B:92:1E:21:F3:2D
Authority key identifier: 26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
Certificate issuer:       /CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Certificate serial:       019CAEA3204E2FF2F21C8AD83236E5E75EB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
Manifest number:          146B
Signing time:             Mon 02 Mar 2026 13:00:52 +0000
Manifest this update:     Mon 02 Mar 2026 13:00:52 +0000
Manifest next update:     Tue 03 Mar 2026 13:00:52 +0000
Files and hashes:         1: 6GEbyuj2qKMcq18FIsrq4Q_-YBo.roa (hash: jxGNQfVpSStE/8Ajsn9ngwqV0Uae1t1kqzkQgh9Yxbs=)
                          2: Jowu3BO7KjxjJiEhueqtGIvtuuk.crl (hash: asOtiwAsOUZwvyRvB/556X8Jbo9aSRXSxUCdduT0tfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:20:4e:2f:f2:f2:1c:8a:d8:32:36:e5:e7:5e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
        Validity
            Not Before: Mar  2 13:00:52 2026 GMT
            Not After : Mar  3 13:00:52 2026 GMT
        Subject: CN=c1fce1f1c3576ea542b523baa4ff4b921e21f32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:77:ef:96:0b:7b:bb:a4:7f:f2:a5:5b:bc:37:
                    73:c3:f4:f3:91:ab:af:ff:55:aa:2f:49:24:ec:a0:
                    1d:9b:15:ac:0b:9f:d8:36:58:c8:e2:64:bc:95:c3:
                    c8:20:cf:ec:a4:c8:7e:ee:6b:67:87:97:de:e1:98:
                    66:db:fe:f0:ea:58:83:ec:ee:bd:1e:cf:9f:8a:02:
                    d2:47:1b:52:b4:15:13:c3:ac:52:d3:ed:a1:e6:d2:
                    72:d6:e2:e0:98:17:3d:71:79:0e:95:48:73:06:1a:
                    67:c7:75:b3:78:da:41:35:2f:2f:f0:7a:e6:5b:77:
                    e7:09:c2:9b:ef:9c:b1:7d:81:8f:e9:be:2e:b0:ff:
                    cc:73:dd:21:ba:c2:2a:ec:90:f5:4b:e8:82:0d:ce:
                    5c:5b:65:70:23:e8:03:04:dc:a6:bd:f4:ef:1d:ce:
                    65:c1:e3:52:d6:dd:6c:62:7b:a0:6b:a1:bf:f0:d0:
                    4d:ae:72:bc:61:c4:82:c7:e1:0a:14:3a:ff:b3:66:
                    cd:a1:05:6b:4f:82:08:a8:5b:5b:f0:13:08:c5:e1:
                    26:28:b8:fc:06:af:95:8e:a3:3f:c9:b2:4f:80:1e:
                    b5:f3:93:bc:0f:af:57:e4:ce:72:41:48:91:93:a7:
                    c7:62:20:a5:7b:13:46:47:95:09:64:43:6c:53:d6:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FC:E1:F1:C3:57:6E:A5:42:B5:23:BA:A4:FF:4B:92:1E:21:F3:2D
            X509v3 Authority Key Identifier:
                keyid:26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:5b:b3:12:51:0b:1b:bb:93:be:8b:df:5d:80:46:ea:29:1f:
         0a:28:12:1e:d7:59:f4:97:ba:2b:ce:9d:8d:88:cc:22:fc:fa:
         d2:46:5a:29:12:f5:c7:61:57:f3:0a:2e:50:e9:44:ee:9a:7d:
         10:8f:ce:b5:6b:78:21:8e:33:8a:6c:bb:d1:30:22:df:e1:42:
         73:86:1d:2f:c2:2d:d7:1e:e9:a8:35:29:cd:9a:03:03:93:63:
         65:59:8b:ae:1d:95:7e:13:22:ae:80:eb:e7:44:31:f4:cd:45:
         db:b1:81:90:1b:87:25:45:24:aa:da:f2:40:cf:85:a3:d5:9c:
         9c:c1:8b:4e:17:f4:5d:59:a9:69:35:f1:62:c9:d5:e8:ef:53:
         ff:f2:19:0f:b0:e2:bc:e6:04:cb:6d:9a:e3:3e:30:d7:97:6a:
         90:72:04:f3:60:7b:b9:db:9b:69:96:0b:96:8f:e6:26:32:9b:
         2d:c4:cb:59:14:56:87:d9:ee:a7:54:3f:3b:10:2f:8d:13:89:
         83:6f:a5:e4:26:48:87:22:b6:97:0c:6a:27:e0:84:9e:d9:f6:
         34:a1:05:bb:d7:1e:24:26:b1:7b:ad:ad:47:f5:8c:7d:3d:ed:
         fc:cd:3f:d9:0c:f7:1c:83:a4:73:5d:cf:ab:ea:bc:65:8f:84:
         51:0e:cf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:41 2026 by rpki-client