Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
File:                     jhTxdhHOtBMYStycGa71CKhJubI.mft (raw, json)
Hash identifier:          8Q4MPTdhBItYoLoEpK1POh7C3SpFR2URISC6Ddm+wTY=
Subject key identifier:   57:CD:36:9B:A7:88:54:E2:48:86:BE:38:B2:A8:06:87:0B:20:49:17
Authority key identifier: 8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2
Certificate issuer:       /CN=8e14f17611ceb413184adc9c19aef508a849b9b2
Certificate serial:       019CAB6BA3F41D5119B3FC257F3F6C54B521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
Manifest number:          1841
Signing time:             Sun 01 Mar 2026 22:01:24 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:24 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:24 +0000
Files and hashes:         1: jhTxdhHOtBMYStycGa71CKhJubI.crl (hash: ekGhxL0ueXLKVptj8tz8p0BDteZtkhgB0ChntMO7ODQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:a3:f4:1d:51:19:b3:fc:25:7f:3f:6c:54:b5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e14f17611ceb413184adc9c19aef508a849b9b2
        Validity
            Not Before: Mar  1 22:01:24 2026 GMT
            Not After : Mar  2 22:01:24 2026 GMT
        Subject: CN=57cd369ba78854e24886be38b2a806870b204917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:26:14:61:4a:8c:1e:27:78:d4:e8:e7:e0:
                    02:43:16:ed:07:0f:40:76:d7:32:31:a6:61:3b:9c:
                    cb:14:3c:cd:d8:59:c1:95:16:fd:f5:10:79:4c:c5:
                    e0:b9:b2:ca:8d:91:24:64:72:78:02:6b:1f:8c:08:
                    85:a4:1f:db:31:37:f7:d5:e5:fc:fb:53:2c:24:68:
                    9a:10:1e:03:c7:b5:0d:a3:3b:1f:38:73:f5:3f:18:
                    21:57:1e:3a:da:42:68:f3:48:d9:60:f3:a6:5e:2f:
                    af:5e:25:4d:d2:54:4b:ac:7d:4b:c1:e8:5c:61:d5:
                    3d:5a:8f:22:a0:e5:d6:f9:71:e9:6f:a4:5c:0d:8e:
                    89:68:a5:89:69:b9:92:4d:1d:01:8a:2f:74:af:54:
                    fb:49:4e:a6:ab:26:16:52:9f:4c:96:8e:0c:6f:ef:
                    b4:a3:7f:a1:79:39:fe:c7:7b:90:8d:58:4b:90:26:
                    cb:9f:02:20:b6:22:81:99:f5:38:8b:c7:91:36:90:
                    71:05:96:45:54:0a:7c:67:32:c7:8e:15:da:72:a5:
                    98:d2:60:55:8e:c6:5c:f3:a7:f2:06:07:3e:ac:f9:
                    08:ec:aa:9c:e5:43:74:6b:77:a1:90:48:36:81:95:
                    6a:0d:7d:b1:8e:50:3a:ab:21:3e:32:9d:7a:ec:78:
                    d9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CD:36:9B:A7:88:54:E2:48:86:BE:38:B2:A8:06:87:0B:20:49:17
            X509v3 Authority Key Identifier:
                keyid:8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e5:9a:f9:45:59:ee:4f:56:b6:4f:ce:c7:6b:7a:e7:1a:a6:
         d5:df:4d:70:2b:9e:9e:6b:69:10:14:f5:0c:cd:85:e2:76:f8:
         33:35:95:38:c2:49:c0:46:0d:a9:f7:49:32:86:37:48:c1:4c:
         b9:5a:9a:0d:c2:71:3c:39:1a:1d:da:b9:03:10:11:60:3d:21:
         53:9d:cf:fe:11:8a:3c:88:a1:c5:4d:36:75:29:1b:97:75:78:
         b3:11:d0:af:62:34:6d:b6:fd:92:e0:75:1b:c0:00:df:00:d1:
         94:22:a9:34:f2:41:c3:d7:f7:f1:d1:36:77:e2:6a:e0:cd:aa:
         3f:4b:6a:12:43:b2:7b:f0:c9:83:b9:41:3c:5f:a6:23:fb:b7:
         f6:4a:b4:ba:aa:e0:38:f9:ab:3b:23:3b:0b:9c:cf:11:64:7f:
         12:a1:ca:dd:b5:b5:9a:76:45:86:7c:4c:4e:e8:46:4c:22:d3:
         fd:a6:3b:68:54:36:1d:97:dc:69:28:ac:cd:1c:ca:b2:c9:c3:
         1d:31:b5:22:07:8e:53:d4:76:8e:1c:c7:68:b0:a8:72:92:0e:
         ad:83:e3:21:7d:fb:d0:d2:9a:18:dc:d3:11:5f:c3:18:6b:25:
         22:a1:67:5c:14:2c:51:6c:d5:78:76:46:90:c0:7e:90:ed:11:
         07:8a:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:58 2026 by rpki-client