Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
File:                     j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft (raw, json)
Hash identifier:          xi6ZmWn7s0ZlqMGovYjkuVyHDt2BX08yzcX+uO1/240=
Subject key identifier:   7A:87:FC:E6:45:69:F3:86:43:06:35:41:10:08:5A:E9:0B:10:B8:75
Authority key identifier: 8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
Certificate issuer:       /CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Certificate serial:       019CAC4684159F9C16506BD562162D40D2DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
Manifest number:          1843
Signing time:             Mon 02 Mar 2026 02:00:28 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:28 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:28 +0000
Files and hashes:         1: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl (hash: hPI/PVx6x35Pq5MbzgEmyBdagDPWXmhhAU0Nqnd6ueE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:84:15:9f:9c:16:50:6b:d5:62:16:2d:40:d2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
        Validity
            Not Before: Mar  2 02:00:28 2026 GMT
            Not After : Mar  3 02:00:28 2026 GMT
        Subject: CN=7a87fce64569f3864306354110085ae90b10b875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6f:01:b6:8d:2d:f9:d8:ff:21:ac:c9:ff:2a:
                    e5:53:74:f6:d6:48:9c:b6:82:be:3c:96:1b:dd:78:
                    88:d3:5f:a8:c1:75:69:ec:d7:b2:20:28:14:d3:96:
                    00:bc:04:73:6a:7a:9d:58:54:49:57:52:db:92:7a:
                    e8:58:32:90:cd:b6:90:ac:7f:43:88:e1:2f:04:87:
                    4a:eb:3b:f0:c6:64:15:ba:e2:21:2c:78:4d:d3:69:
                    9d:56:45:1c:94:45:f1:77:23:71:a3:13:1e:f0:bf:
                    04:7f:d2:fa:52:8c:7b:53:00:fe:5e:c4:0c:c9:0e:
                    ab:c6:7b:8d:ee:a6:f0:58:85:c4:1f:32:70:c5:cc:
                    fb:fe:12:97:0c:48:f5:6c:c9:d2:e2:16:0a:65:25:
                    e5:5e:0d:6a:e9:71:e5:0e:53:6e:2f:22:63:50:46:
                    c7:77:37:d9:83:4b:64:0a:77:f6:13:c2:34:29:67:
                    19:50:73:8d:a3:de:fd:01:0d:ea:54:54:16:71:a7:
                    47:e8:3d:70:f4:b9:50:b5:74:3e:c6:bc:b9:c0:ea:
                    ec:37:de:71:71:41:58:10:ef:3f:63:e7:7c:34:59:
                    63:14:26:de:98:4e:11:89:99:08:eb:84:68:2c:65:
                    95:83:71:f4:9d:fd:9c:e1:ca:f0:1e:07:49:68:93:
                    74:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:87:FC:E6:45:69:F3:86:43:06:35:41:10:08:5A:E9:0B:10:B8:75
            X509v3 Authority Key Identifier:
                keyid:8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:9c:55:76:8a:a8:42:03:58:7f:9b:c3:16:d2:53:ce:47:09:
         f5:0f:ee:49:da:1e:2f:86:ff:35:70:b6:a3:be:cd:67:a4:77:
         9c:30:52:85:61:1e:c2:87:c4:fb:5f:1b:fe:db:0a:e6:e0:54:
         35:99:0c:2f:e4:98:e3:c5:2f:be:0f:bf:bb:c3:ae:88:4d:12:
         5d:cc:c2:0e:8e:0f:17:d0:2b:53:28:f0:a3:b9:60:f8:15:86:
         b4:a5:d1:50:d1:a4:33:95:8e:ff:de:db:37:81:d2:7d:bc:1a:
         01:3e:a9:cd:38:b9:c0:8a:a7:1d:56:5b:90:b5:9b:c3:0e:0f:
         89:98:cf:c7:f3:a2:7b:d1:8a:3a:c2:c9:cd:31:18:fc:a4:65:
         91:31:b0:4b:64:d6:18:4f:28:62:fb:04:9d:81:fe:e1:5e:d4:
         a3:3d:28:d8:e1:33:79:4b:e0:33:ac:ea:d4:e6:0f:d7:6d:83:
         ad:13:c4:d9:36:03:f4:86:9c:eb:2b:a0:a6:c0:e2:a8:5c:76:
         32:42:b8:f7:50:0e:81:44:83:b8:49:89:98:7a:d3:02:6a:e3:
         05:da:35:f0:d6:b0:25:dd:ef:26:07:08:c6:8c:a0:f9:10:51:
         76:a6:83:fb:82:00:fc:32:f6:0d:f0:09:96:80:e5:8f:ff:68:
         f2:b1:a7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:01 2026 by rpki-client