Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
File:                     JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft (raw, json)
Hash identifier:          /a1a6yifb/CTUuGFygbrSuRO+CQ++wbk2TFVu8iMe+8=
Subject key identifier:   E8:EB:E3:91:40:EB:46:19:A3:84:51:24:39:DE:FF:8D:27:08:F7:00
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Certificate issuer:       /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial:       019CAD22BE70B521C6F1E85336961CB77429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 06:01:01 +0000
Manifest this update:     Mon 02 Mar 2026 06:01:01 +0000
Manifest next update:     Tue 03 Mar 2026 06:01:01 +0000
Files and hashes:         1: IgEQEQxKF4JA_Yvwjt39ZRq-8to.roa (hash: w7LlxRV0iiav+R1gAPk1T8fKDTaiJNPPpktAM0ZCdmY=)
                          2: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl (hash: 3zFpdccPeVSjp4WukZ/rb/ZAgRmnnaeIZZy2+hJ5i+4=)
                          3: VpdxolhjeAAWOSWgaqR-V3JQwwo.roa (hash: Ruq0CFducLP8nqCWrlVaWaavOiOwsIA0PJ/oDQESMw8=)
                          4: gQf5G9Hw0jqLTco8BzanoYJkr0s.roa (hash: PQEokUiOnX9Qj/TyQO7GSAnGjYkROWa561oyoy92YWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:be:70:b5:21:c6:f1:e8:53:36:96:1c:b7:74:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
        Validity
            Not Before: Mar  2 06:01:01 2026 GMT
            Not After : Mar  3 06:01:01 2026 GMT
        Subject: CN=e8ebe39140eb4619a384512439deff8d2708f700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:4a:9a:e7:fa:60:ec:4c:7b:0a:f9:9c:43:
                    12:fc:8e:eb:97:f1:5a:4e:43:43:61:fd:6e:43:e1:
                    98:de:e5:66:27:ec:69:f2:f9:36:f0:50:75:d3:3e:
                    6b:45:f8:78:75:7a:43:56:7a:22:d3:b8:df:2f:e7:
                    34:c1:8d:48:70:14:46:05:20:b5:3e:1a:dd:c2:58:
                    67:87:82:3e:5c:dd:44:60:d2:1f:c3:11:63:97:47:
                    ac:0c:cb:ec:ae:4f:f9:64:10:80:09:04:38:b4:87:
                    6f:b3:b8:8d:7b:59:f0:65:11:8f:38:3d:82:f6:26:
                    52:ab:c4:d8:bf:4b:f1:92:50:e7:6c:30:73:54:cc:
                    50:1e:6f:09:7c:e0:b7:11:64:eb:b9:53:15:1b:d4:
                    57:61:5a:8e:c0:6f:2b:cc:e8:7d:c8:da:a3:4a:7a:
                    d5:49:79:d0:3f:b0:a0:9e:c8:08:d5:72:1f:c3:8f:
                    97:21:62:20:32:eb:fb:76:c5:06:7a:78:95:e9:2d:
                    b5:4e:e5:40:fa:0b:23:cd:db:2a:c8:d8:35:bf:f2:
                    ab:f5:c1:c8:4d:6f:88:fe:90:8c:71:45:a6:66:53:
                    f4:05:41:4d:91:79:c9:c6:79:5e:93:32:79:fa:67:
                    5e:3a:cd:f4:18:94:cd:0d:6d:2a:53:3b:9b:04:45:
                    47:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EB:E3:91:40:EB:46:19:A3:84:51:24:39:DE:FF:8D:27:08:F7:00
            X509v3 Authority Key Identifier:
                keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:17:16:a4:18:7e:a1:b5:2e:61:9d:26:2d:f4:7c:a7:e0:3b:
         f4:c4:fb:fe:7e:e9:02:be:fb:63:d4:c5:09:82:7b:fc:3b:72:
         8b:f9:40:ee:ea:ec:31:82:ce:01:d6:0c:58:ee:1b:57:47:05:
         54:ec:92:63:23:80:50:5e:fe:0f:80:0e:70:51:ff:2a:e3:57:
         0a:cd:63:7a:87:6e:64:91:1b:66:7a:30:6f:12:bd:4a:a3:9b:
         e2:28:a2:96:75:bf:df:90:06:19:5c:c7:b4:84:cd:1b:d7:21:
         56:61:89:a3:04:f6:c6:b2:02:6c:f7:9a:dc:4d:c0:62:92:d5:
         a1:86:86:f9:e0:d6:fc:4a:73:a5:28:24:56:61:09:30:87:31:
         27:47:81:00:3c:6a:e6:1a:90:3f:be:53:18:12:2f:5c:b2:f3:
         de:df:5e:45:bf:81:cf:a9:8f:0d:5e:c6:89:ee:e7:9a:ad:96:
         6d:f7:f9:ad:78:b8:2b:5e:45:d5:21:10:bc:78:bd:e1:67:30:
         66:a8:ca:d1:0d:49:f0:20:e5:56:fd:d7:d4:34:60:e4:0c:5a:
         46:6e:05:48:17:5c:45:ac:da:fb:da:b9:0f:46:94:85:97:89:
         17:cd:3e:56:99:6f:c4:38:1f:6e:60:f1:e0:6f:eb:73:fb:4c:
         82:a0:5b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:39 2026 by rpki-client