Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
File:                     JmceUvfpei6lP17KvWuUvIwHWmo.mft (raw, json)
Hash identifier:          waA8udxpTgufzdrIaK7u6gAWCba1GJvYaUiarOHv7kc=
Subject key identifier:   57:A0:9F:D0:50:2F:05:51:FB:5F:EC:DA:1A:F0:4B:F2:34:D8:03:8C
Authority key identifier: 26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
Certificate issuer:       /CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Certificate serial:       019CAD59CFB7CCFF1043490399789FD19C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
Manifest number:          1362
Signing time:             Mon 02 Mar 2026 07:01:10 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:10 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:10 +0000
Files and hashes:         1: GhP6Vn--SqdLNlAbm7AaZpnExPU.roa (hash: LE4ZlCHS2qUrwNtls6Qsm1YOj9fYR0KcBc+qgdSoRxA=)
                          2: JmceUvfpei6lP17KvWuUvIwHWmo.crl (hash: /kjOrjlGF0BTYalOeM5C60xCVaLwoDAG8nwrNh8kQ38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:cf:b7:cc:ff:10:43:49:03:99:78:9f:d1:9c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
        Validity
            Not Before: Mar  2 07:01:10 2026 GMT
            Not After : Mar  3 07:01:10 2026 GMT
        Subject: CN=57a09fd0502f0551fb5fecda1af04bf234d8038c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:cc:a6:e3:94:b8:ca:e1:bb:9e:34:00:71:
                    19:54:15:21:77:1f:a1:11:ab:f9:36:43:99:f8:b4:
                    eb:bf:ad:ae:f1:6d:31:59:e2:fa:91:7a:a7:25:84:
                    c5:02:66:34:28:c3:25:21:44:3c:df:33:ab:5c:44:
                    2d:3b:c5:41:27:b1:37:fe:6e:6e:f6:d3:78:fe:f0:
                    8e:8c:39:8b:49:06:0b:0e:54:2b:db:36:f5:c8:3e:
                    24:c8:82:b4:3c:7a:b6:09:22:17:c4:64:ca:89:8c:
                    54:e9:95:91:75:3f:42:e9:d8:6a:ee:78:2b:f6:46:
                    8a:74:13:6c:10:d4:ad:98:8c:a8:39:a6:74:2b:a4:
                    15:cb:44:dc:ce:32:07:9d:7d:43:af:f7:6c:30:63:
                    ef:64:27:30:20:e9:f8:8f:50:34:43:0f:a2:fc:66:
                    ba:ec:4c:74:3d:e7:32:1f:d9:86:a3:d7:4b:f0:a4:
                    5e:e7:2f:b6:d3:04:b0:12:cd:76:0c:15:f4:51:c2:
                    6d:c5:52:72:32:05:ab:6f:7b:e4:8a:50:42:7a:9e:
                    24:1f:94:0e:2b:75:6a:9e:a0:92:b9:f7:49:af:4a:
                    ab:67:1b:e0:38:32:16:de:2d:ac:ec:16:97:ba:a9:
                    2a:35:67:a4:46:c5:fc:0f:27:85:51:87:15:a7:df:
                    eb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A0:9F:D0:50:2F:05:51:FB:5F:EC:DA:1A:F0:4B:F2:34:D8:03:8C
            X509v3 Authority Key Identifier:
                keyid:26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:07:64:68:86:c4:b9:81:e6:ea:e0:a7:dd:c0:ac:b4:9b:74:
         9e:f7:e1:bb:31:9e:d7:32:c7:59:55:7a:57:53:9f:01:b6:6c:
         bd:e6:4a:c9:23:a5:dc:2e:b1:58:ae:10:83:00:2d:ef:8c:7a:
         c4:0d:7d:d3:58:b9:a3:f2:38:02:4d:d3:35:c6:ac:b8:69:11:
         44:84:22:f0:40:76:5a:a9:69:d8:23:38:9b:36:46:f8:a9:68:
         40:fe:9f:17:b6:a5:bc:6b:62:16:ab:25:0f:71:b9:21:1a:60:
         4e:d4:b1:9f:49:5c:e1:ed:9e:50:47:73:61:09:61:8b:ed:78:
         2d:a0:e5:b3:30:50:37:bb:8c:2c:61:d1:64:9d:61:02:06:58:
         eb:63:9e:6d:b6:bf:aa:40:cd:80:06:87:7d:d5:58:f2:de:00:
         93:3f:5b:69:be:9b:8f:6c:48:f8:bd:3f:d1:d3:20:6f:c6:11:
         34:de:bf:6a:62:ca:6c:12:a3:8d:93:c4:e0:18:52:b5:88:4a:
         9d:8f:8b:06:5d:3a:10:a7:7e:f5:d4:22:2c:19:57:03:1d:5c:
         62:93:40:c4:db:c8:7c:d9:64:b0:44:ce:69:e2:c0:b7:23:ab:
         6c:7a:ed:ed:38:bf:08:69:96:ac:77:ae:8a:3f:67:e1:a1:54:
         db:58:81:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:35 2026 by rpki-client