Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
File:                     jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json)
Hash identifier:          cEoyEbMNTCV2yUCaSUsxnBTaSXLfZwg56mq6vQsb6a4=
Subject key identifier:   B6:8B:38:62:F6:24:08:71:53:F3:F3:4F:54:84:51:B9:EB:B6:E9:8A
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Certificate issuer:       /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial:       019CAF7EE3089B950F9A241CB3F105E2BE1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
Manifest number:          08A6
Signing time:             Mon 02 Mar 2026 17:00:54 +0000
Manifest this update:     Mon 02 Mar 2026 17:00:54 +0000
Manifest next update:     Tue 03 Mar 2026 17:00:54 +0000
Files and hashes:         1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: QO7XCD8BU/0bzEAAdksHDwOQ777jao+1Uy0ANh0ahLU=)
                          2: rx7GC_CHfYxl4Ofnp8MOvM23hM8.roa (hash: 81lkujtMvuC5mIlhZHNqQoKSuJAiHrlt9j7cnoTOQdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:7e:e3:08:9b:95:0f:9a:24:1c:b3:f1:05:e2:be:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
        Validity
            Not Before: Mar  2 17:00:54 2026 GMT
            Not After : Mar  3 17:00:54 2026 GMT
        Subject: CN=b68b3862f624087153f3f34f548451b9ebb6e98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:bc:a7:76:43:d1:2b:bf:4b:85:eb:89:48:
                    89:5d:c6:84:3d:d6:e2:cb:c9:38:02:99:f4:94:e8:
                    b5:7d:73:4d:79:60:88:74:ae:ef:88:2a:33:41:45:
                    6f:57:57:7a:4e:f6:e0:de:a4:2d:b0:51:00:2a:1c:
                    f4:d7:fb:6a:7c:e4:71:e8:45:76:9e:b3:6d:fb:fa:
                    7a:d7:c9:9e:ce:dd:2e:35:49:3b:1d:d4:23:63:78:
                    10:e7:58:38:ba:75:b1:53:43:6f:e7:b1:d9:1e:98:
                    9d:f4:0c:7d:48:a4:45:2b:3d:c6:66:d4:06:f2:d9:
                    fa:9d:3b:4a:02:d0:0f:c1:12:6c:8a:20:73:2a:5c:
                    d0:03:e5:92:34:d1:d4:19:09:df:a2:28:e0:97:54:
                    43:6d:68:ad:5d:c7:4b:25:83:c3:e2:39:e2:9a:0a:
                    bb:3a:6e:aa:af:e3:70:cf:89:a6:76:ae:95:11:94:
                    e3:9e:d7:b1:02:60:bb:5d:fd:c5:59:86:f4:cb:ab:
                    05:90:f6:a3:18:1d:c1:db:65:77:c5:1f:e5:ae:10:
                    f2:6d:59:10:e6:e3:ca:30:8a:42:be:00:2b:ed:71:
                    b5:d2:1d:42:76:f1:58:47:33:a4:36:df:64:c6:20:
                    32:a7:dd:c2:34:97:6f:8c:f9:6c:6a:cc:c9:57:89:
                    db:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8B:38:62:F6:24:08:71:53:F3:F3:4F:54:84:51:B9:EB:B6:E9:8A
            X509v3 Authority Key Identifier:
                keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6e:d1:f4:88:88:9a:de:e5:51:0d:55:c9:9d:63:1b:40:0a:
         cc:59:89:93:e3:ea:4c:a2:b3:36:6f:3d:85:5b:cf:64:10:92:
         4e:cf:54:3e:50:3f:a8:18:32:b4:37:20:52:68:d9:fd:91:8a:
         bf:63:d4:47:c0:5e:e7:e4:c5:0e:7f:60:ca:d7:f8:f1:8e:67:
         ac:56:0b:7e:28:f7:77:4c:9d:cb:d2:01:08:6a:59:ce:0b:aa:
         93:a9:0d:4f:67:4f:58:bf:70:58:a2:ff:ce:66:61:2d:e3:5c:
         ec:12:f0:eb:68:ec:0b:e4:94:04:4e:5b:38:0d:05:23:62:67:
         7e:37:85:ad:12:0d:0d:8f:a5:a4:2b:45:b1:0b:63:63:2f:19:
         0b:69:e8:c9:98:69:97:9f:a6:51:8b:46:e5:32:d3:5f:af:0f:
         b8:87:43:db:93:a0:b6:51:f1:09:6f:6d:5d:b0:a3:0f:b6:0c:
         bb:f2:f6:e8:23:25:4b:71:b2:30:9d:4f:e4:b6:66:0c:f7:40:
         df:ab:55:0c:98:8e:83:8b:46:20:90:c8:2b:84:74:25:f0:1c:
         66:6c:02:54:8b:f6:0b:79:31:b8:94:5a:15:77:b1:36:8e:81:
         bb:30:c6:ed:7a:53:d1:3d:7b:25:f3:52:e5:04:f5:ca:e2:51:
         93:4c:fc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:33 2026 by rpki-client