Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
File:                     Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft (raw, json)
Hash identifier:          16GcLOzN6oG0ZSv4gGCj9tonLyfIw7XYQbTLsDuLy/8=
Subject key identifier:   1A:D7:59:91:51:75:1E:13:66:32:35:C7:8A:B4:36:DE:36:A1:26:77
Authority key identifier: 26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
Certificate issuer:       /CN=267d0cc5bd86d568366657aef0310d493a7176e4
Certificate serial:       019CABA243EF03FEFE56BE0C4A2FADACE78A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 23:01:04 +0000
Manifest this update:     Sun 01 Mar 2026 23:01:04 +0000
Manifest next update:     Mon 02 Mar 2026 23:01:04 +0000
Files and hashes:         1: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl (hash: X5UQaI3SJDw86JO8bAWIyqD1iXEesxJAtTm8QDPRBUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:43:ef:03:fe:fe:56:be:0c:4a:2f:ad:ac:e7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267d0cc5bd86d568366657aef0310d493a7176e4
        Validity
            Not Before: Mar  1 23:01:04 2026 GMT
            Not After : Mar  2 23:01:04 2026 GMT
        Subject: CN=1ad7599151751e13663235c78ab436de36a12677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:2b:4c:f9:82:50:6f:f3:99:71:fe:7e:bd:
                    bf:fe:54:60:57:cc:a0:15:0d:da:5d:a1:3b:6f:54:
                    03:ae:05:3a:b6:60:46:b0:d6:a1:74:a1:10:ea:a8:
                    89:f6:09:62:1f:8f:b7:c0:ba:66:00:6a:e0:57:5b:
                    fe:81:b7:3b:7b:b5:a0:37:4e:f3:bf:0d:97:15:2d:
                    ce:57:0b:76:c0:4e:c2:66:26:a0:df:6c:a7:a6:72:
                    0c:b5:67:64:88:22:59:cf:e7:a6:ac:a2:8b:cc:41:
                    3c:a3:20:10:a9:f3:f6:37:f8:5a:f7:88:8b:42:79:
                    a4:3c:25:61:a1:26:bd:13:60:21:04:a3:65:25:5b:
                    75:45:51:0f:7d:7e:83:da:f3:13:47:35:45:2b:d9:
                    5d:f3:17:e7:fb:22:00:c1:30:5c:88:81:85:d1:10:
                    6e:ee:48:9b:eb:5a:8d:d7:e8:d8:ea:7f:3a:78:cf:
                    6a:6d:2a:e5:2e:f9:e0:c0:6c:d2:cc:e3:02:61:70:
                    35:e6:56:bb:73:4c:24:12:1c:b4:f0:2e:d7:e5:b6:
                    e3:19:8f:0b:61:66:17:88:cc:34:b2:07:fc:91:aa:
                    42:9c:09:3a:00:2e:58:ac:9e:4f:c0:ef:e9:16:48:
                    0d:19:4e:33:1f:8a:3f:e2:1d:47:8f:5a:32:73:c7:
                    cc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D7:59:91:51:75:1E:13:66:32:35:C7:8A:B4:36:DE:36:A1:26:77
            X509v3 Authority Key Identifier:
                keyid:26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f4:e6:6d:37:ca:4a:56:c1:42:8b:f4:59:31:75:30:60:28:
         67:56:72:c8:84:b8:4f:dc:26:df:d7:f0:f8:d4:e1:16:a6:ab:
         3b:cd:89:59:c1:a8:bf:ee:6c:6a:d2:79:9d:ef:96:12:3d:83:
         a5:4c:83:40:ec:bd:46:1c:0f:8c:12:6d:ad:40:ea:d3:67:1d:
         f6:fd:e5:8a:0c:d7:9a:f8:20:fe:17:f6:09:ae:85:22:e2:7c:
         e8:24:28:ce:2b:5d:c8:f5:69:b9:ba:42:b0:34:9e:d1:9c:a9:
         bf:ea:18:03:1e:47:57:fd:ac:84:b1:a9:6b:a9:03:22:b0:54:
         9c:15:5c:68:c3:d2:0d:d0:a3:1d:33:30:e3:c2:8f:20:08:7a:
         39:c5:8e:66:c2:6c:e1:c7:0b:ca:f6:aa:18:21:dd:02:12:b3:
         05:23:f0:96:95:2d:8f:79:c0:60:70:a9:2b:38:a0:29:6c:7e:
         37:f5:4c:3a:fb:f5:0e:bd:85:30:23:25:22:56:0c:2b:2b:0b:
         80:07:bb:77:69:1e:3e:19:61:0d:9a:33:e5:7e:c9:7e:2c:5b:
         8c:35:a5:4f:a4:57:94:bc:43:38:0f:5b:e9:22:86:f9:b7:03:
         f5:f3:9b:14:4d:c6:21:ce:f3:48:5d:37:f0:7c:fe:76:15:d8:
         c7:16:b9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:16:46 2026 by rpki-client