Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
File:                     jNspNdndDVhbZVEYdkwBxtdvdMI.mft (raw, json)
Hash identifier:          smdkiFEE2wsUoGbJ9CdsXoK0kPfDfTXhz3QCQqkNKNk=
Subject key identifier:   97:D7:D7:89:F0:0F:A5:28:9E:1A:76:B6:B2:47:75:38:49:8A:FB:97
Authority key identifier: 8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
Certificate issuer:       /CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Certificate serial:       019CAC7E45EB61DBBE9F54DF5F5649287398
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
Manifest number:          094E
Signing time:             Mon 02 Mar 2026 03:01:22 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:22 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:22 +0000
Files and hashes:         1: jNspNdndDVhbZVEYdkwBxtdvdMI.crl (hash: M/AncvM6koa/t5HcXfiNatCAHwqlz5gKAluT9CPyIM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:45:eb:61:db:be:9f:54:df:5f:56:49:28:73:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
        Validity
            Not Before: Mar  2 03:01:22 2026 GMT
            Not After : Mar  3 03:01:22 2026 GMT
        Subject: CN=97d7d789f00fa5289e1a76b6b2477538498afb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:db:a3:92:ba:51:8a:20:00:d6:1b:f8:15:
                    55:3b:49:82:3e:16:a6:31:36:35:d5:bf:d4:50:76:
                    47:5c:53:c1:ca:67:79:76:27:03:d6:df:73:74:4c:
                    a8:9c:e9:f9:00:bc:3f:02:8a:70:69:42:74:0e:5a:
                    7d:08:f0:86:a1:31:f9:df:f7:72:1f:9d:a7:23:18:
                    c4:1a:cf:49:47:92:dc:08:a9:eb:96:9d:8b:6b:49:
                    3f:1a:01:5b:10:6e:79:65:ca:d0:a3:57:62:5f:f9:
                    ac:f1:1e:10:00:89:5f:9c:74:b5:a6:e7:10:44:8b:
                    04:cb:82:9e:db:1c:24:11:5e:0c:d0:05:23:d7:e1:
                    6a:1b:bd:c9:11:8c:4c:7f:03:57:75:1c:30:27:b8:
                    53:a5:4e:6a:af:34:9c:9b:45:ac:a3:a9:75:b0:9e:
                    56:12:a3:7f:f0:08:62:94:c4:78:7f:47:48:c2:08:
                    15:a9:c4:fa:65:49:3a:64:5b:4c:9d:e8:01:e1:de:
                    e8:55:29:9b:f3:c2:98:bb:4b:ee:4d:a9:6d:c3:0e:
                    8a:64:c0:d5:83:39:d2:be:ce:a0:9c:56:62:59:d6:
                    a2:03:4f:18:52:f3:0c:28:09:02:7b:70:28:72:9e:
                    42:9a:c0:29:e7:bc:1a:21:8a:be:5d:db:2a:1a:7d:
                    e2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D7:D7:89:F0:0F:A5:28:9E:1A:76:B6:B2:47:75:38:49:8A:FB:97
            X509v3 Authority Key Identifier:
                keyid:8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:f5:ac:2a:43:70:02:0a:3e:7c:a4:07:a8:ed:97:c9:f4:a2:
         cd:3c:4a:e1:d7:64:16:ce:bc:e3:c1:c7:85:78:a6:c8:c8:f8:
         69:4e:b8:b1:fc:69:af:72:d7:7f:c6:15:aa:21:88:77:09:7d:
         91:be:27:1d:67:2f:4f:64:60:a6:5c:ce:18:92:a8:78:d2:cb:
         51:75:3b:25:c0:1a:f1:a0:59:96:9c:ab:14:e5:4e:07:82:06:
         40:cd:fc:26:98:36:00:5b:ef:e2:24:2f:03:5a:b8:0a:66:4b:
         a7:ac:cc:36:2f:39:c3:f9:3b:a2:bb:f9:44:24:e4:56:0c:82:
         56:0d:81:b3:f2:60:40:02:f4:f8:35:b0:66:ff:20:19:46:20:
         cb:d9:84:98:64:56:97:a3:23:84:af:4e:fe:50:78:a0:27:0f:
         39:80:ed:91:7d:ab:d8:42:2a:d8:64:a8:e6:96:09:7e:f6:c9:
         6c:64:d6:c6:74:a9:a0:7c:b3:ef:75:6d:c2:0f:04:7c:83:1f:
         c8:d1:3b:45:5b:5f:9f:f6:0a:f7:1d:37:1c:64:c3:60:ee:8a:
         f2:38:40:db:af:f0:d4:61:56:4b:4f:56:23:0b:55:98:72:02:
         21:93:b9:2e:c9:0d:49:3e:d9:e3:d8:7b:25:22:31:b7:c6:ce:
         a0:00:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:18 2026 by rpki-client