Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File:                     jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier:          HgVuknCARScwBj4+Eik7uaSgUaABHofjnAlo6G1Bfto=
Subject key identifier:   71:69:32:67:1C:8D:65:BD:CD:68:5F:F7:04:D9:1C:84:32:65:6D:90
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer:       /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial:       019CABD9DF3A754B241D52C85903016A3580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 00:01:48 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:48 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:48 +0000
Files and hashes:         1: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: GQdEq3AvwBkwg1cgU0tLsetaUH4FWvLxY+HyONLiJW0=)
                          2: zSwQGbw5eUrS_VmyS0eNcuYgWQM.roa (hash: KhztEjdKKCUwFxaKlQfytzrfu+bmSSNX/+mFfUrHfZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:df:3a:75:4b:24:1d:52:c8:59:03:01:6a:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
        Validity
            Not Before: Mar  2 00:01:48 2026 GMT
            Not After : Mar  3 00:01:48 2026 GMT
        Subject: CN=716932671c8d65bdcd685ff704d91c8432656d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:83:da:1a:72:f8:91:7c:40:25:a0:68:f0:bb:
                    43:76:0c:a6:06:bd:d2:8a:aa:49:8e:10:4e:43:f9:
                    57:cb:2c:57:85:a5:51:3e:c8:18:49:95:9b:e2:7f:
                    c6:65:5e:30:22:cb:2f:1a:28:21:21:37:48:4e:d4:
                    79:ed:d5:f8:3e:a6:c2:fc:c6:67:30:03:42:36:31:
                    f9:27:b2:c7:bd:c5:79:33:27:fe:cf:69:3c:bb:67:
                    22:e9:6b:19:4e:e7:db:f5:4f:79:9e:58:61:a8:07:
                    d9:a9:9e:5d:f2:23:94:31:ef:bd:47:87:8f:41:f2:
                    d6:c0:52:fb:32:16:c4:65:f1:b0:50:3e:4c:ee:57:
                    16:39:09:00:6a:cf:5d:13:31:b4:7b:2b:99:df:be:
                    1b:8e:c7:38:e1:cc:63:8e:18:a7:95:08:c4:a4:2e:
                    6f:ee:77:7a:4a:dd:9d:71:83:16:db:b2:53:0f:b1:
                    66:66:9b:5c:11:fd:c2:69:af:26:35:dd:b5:89:97:
                    47:fa:4b:a1:4e:ae:7c:10:37:53:1b:de:d9:a2:7f:
                    14:65:75:3f:7f:93:18:87:e8:73:d7:a0:2b:88:be:
                    17:9f:1c:73:63:8a:56:6f:d2:fb:92:b4:e7:f6:58:
                    b1:99:8a:e1:ea:91:f9:8b:b0:19:12:73:64:61:5c:
                    00:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:69:32:67:1C:8D:65:BD:CD:68:5F:F7:04:D9:1C:84:32:65:6D:90
            X509v3 Authority Key Identifier:
                keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d9:e5:bb:5c:66:5b:89:2b:5d:4b:28:7f:05:70:de:ad:fd:
         fd:2c:95:6b:47:7e:35:8d:9d:93:43:d1:e4:f6:bc:28:3d:a7:
         44:82:e6:06:26:09:36:d8:c1:c3:2e:ba:18:bc:e9:22:f2:56:
         6a:df:08:c8:4b:7b:52:43:b4:11:c0:ab:fb:6f:e2:05:08:e0:
         b1:c2:19:32:19:04:06:64:74:3e:40:0c:af:a7:35:c5:3c:fb:
         c6:55:dc:8c:32:02:26:49:4b:32:15:f1:cb:7a:5b:d0:20:9b:
         93:5c:c1:e3:32:89:ee:19:87:70:a7:7a:72:a9:ea:c7:e2:58:
         28:b5:ce:a1:97:fa:16:61:17:6e:ce:32:fe:2e:43:f0:36:81:
         3f:c9:97:a2:e1:52:5f:c6:47:e1:bc:64:4d:13:8c:32:1d:72:
         46:94:14:14:01:18:c0:db:a6:cf:f7:1e:0c:48:fd:bd:ab:85:
         0d:04:52:4f:41:e3:8e:75:11:c2:98:8c:09:cb:b3:ba:2a:27:
         bc:63:fc:b0:49:63:34:86:c6:a4:8d:42:53:bc:e6:6d:d3:92:
         50:e0:0e:26:d4:04:5a:73:20:83:a5:24:7a:f4:80:bc:f4:5e:
         60:93:5b:28:6e:be:40:a8:a6:cb:6b:a1:71:f9:c6:c6:67:61:
         60:2a:73:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:22 2026 by rpki-client