Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
File:                     jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json)
Hash identifier:          8rExDj4JOTyk9zSf9LDujarGTjjmEJ6vUu7O8YsvPsk=
Subject key identifier:   55:60:50:BF:B2:5D:EC:CB:54:06:2A:D9:00:59:86:89:FE:95:BA:C0
Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
Certificate issuer:       /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Certificate serial:       019CAA21960AFD678E5122B93C00D39FFAFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 16:00:53 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:53 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:53 +0000
Files and hashes:         1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: 5A3aEMfQ25+wXcCyE4+TTNDiuCyXXs5PA62sBQb0m6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:96:0a:fd:67:8e:51:22:b9:3c:00:d3:9f:fa:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
        Validity
            Not Before: Mar  1 16:00:53 2026 GMT
            Not After : Mar  2 16:00:53 2026 GMT
        Subject: CN=556050bfb25deccb54062ad900598689fe95bac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5f:7e:ba:62:e7:b3:91:90:bc:02:cc:06:22:
                    bb:df:99:19:85:f4:09:b5:11:4a:98:e7:da:e2:5f:
                    df:91:c2:6a:e6:cc:4f:3f:33:f4:e0:df:df:e4:3e:
                    8b:ca:23:52:48:c2:23:73:d4:31:02:a1:71:21:c0:
                    37:29:08:23:97:39:e4:e3:12:82:c6:22:c3:0a:03:
                    7f:d9:3b:bb:5b:f3:86:eb:4b:c4:bc:f6:4a:c2:af:
                    5e:8f:cf:09:24:df:51:02:95:da:98:ba:c0:eb:fc:
                    5c:ec:ee:a8:47:38:40:c2:40:5f:01:53:11:3e:14:
                    cb:e6:48:62:5a:94:f1:b9:9f:5d:7d:16:16:eb:19:
                    8c:d8:89:e1:44:30:3c:42:95:7c:b3:f5:56:b2:ce:
                    90:d4:6e:0f:c3:f5:d7:b8:31:59:ee:7a:b9:78:69:
                    3a:09:1d:6d:7e:6f:50:2f:c9:49:61:79:cd:7b:9c:
                    9d:75:8c:29:e9:da:86:7a:76:58:a3:12:54:44:f2:
                    78:49:c1:e0:ee:9f:0e:82:e6:ac:1b:e5:89:07:c1:
                    51:11:68:25:25:c7:38:3e:01:2b:a1:45:08:f1:ee:
                    86:dd:50:f0:1d:96:22:f0:b2:b3:7c:a4:fe:d6:07:
                    06:1b:81:11:9e:11:55:81:d7:a6:86:53:13:f4:f0:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:60:50:BF:B2:5D:EC:CB:54:06:2A:D9:00:59:86:89:FE:95:BA:C0
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:32:7a:94:cc:d0:95:a1:84:45:90:bc:c5:e1:11:a0:54:ec:
         6b:1c:f9:2b:0b:79:c9:d0:d0:bd:c7:6f:4c:fc:f4:07:e2:4c:
         27:49:08:13:a3:e9:44:45:a9:7e:f2:84:f4:99:75:29:58:07:
         da:d7:61:48:1f:1e:df:af:ac:0e:7a:29:b8:e8:92:92:d3:7e:
         23:95:6b:c1:24:6a:6d:57:e6:c7:9b:a4:86:88:12:67:3b:3c:
         80:ed:90:e4:1c:15:45:7b:09:8a:63:96:ae:8e:04:44:2b:7f:
         32:2e:df:c5:f5:94:b3:44:2f:89:d4:24:73:39:1c:0d:02:c9:
         47:f3:e0:00:9e:3f:eb:8d:03:09:f2:3a:e9:0b:3b:ff:08:f9:
         dc:54:38:f0:be:05:ed:11:91:d0:fa:30:94:da:37:e8:35:63:
         3d:70:75:da:8b:99:80:c1:18:2e:86:d6:ee:0a:92:03:b4:a4:
         eb:56:07:46:40:bf:2f:a8:9c:71:d6:6f:14:69:3d:f6:61:2f:
         01:5d:fb:41:ea:03:72:08:56:81:1e:8d:20:ec:36:72:f8:80:
         9f:24:5d:90:24:9a:6b:e3:6f:d0:a9:71:66:05:f7:75:84:a6:
         36:cc:a5:58:07:72:ac:0a:b1:db:bc:b1:be:19:79:a7:b2:93:
         58:c9:35:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIZYK/WeOUSK5PADTn/r+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjM2NjZjkzZjdjODA3ZGRlMDQyMGFkNTQ4NmFlMjllYjVk
Yzc1ZjkwHhcNMjYwMzAxMTYwMDUzWhcNMjYwMzAyMTYwMDUzWjAzMTEwLwYDVQQD
Eyg1NTYwNTBiZmIyNWRlY2NiNTQwNjJhZDkwMDU5ODY4OWZlOTViYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6F9+umLns5GQvALMBiK735kZhfQJ
tRFKmOfa4l/fkcJq5sxPPzP04N/f5D6LyiNSSMIjc9QxAqFxIcA3KQgjlznk4xKC
xiLDCgN/2Tu7W/OG60vEvPZKwq9ej88JJN9RApXamLrA6/xc7O6oRzhAwkBfAVMR
PhTL5khiWpTxuZ9dfRYW6xmM2InhRDA8QpV8s/VWss6Q1G4Pw/XXuDFZ7nq5eGk6
CR1tfm9QL8lJYXnNe5yddYwp6dqGenZYoxJURPJ4ScHg7p8OguasG+WJB8FREWgl
Jcc4PgEroUUI8e6G3VDwHZYi8LKzfKT+1gcGG4ERnhFVgdemhlMT9PChIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVgUL+yXezLVAYq2QBZhon+lbrAMB8GA1UdIwQY
MBaAFIw8z5P3yAfd4EIK1Uhq4p613HX5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xODM0YWMtMjAzMC00NDFmLTgyZTIt
NjgxZGJmZjg1MTVlLzEvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xODM0YWMtMjAzMC00NDFmLTgyZTItNjgxZGJmZjg1MTVl
LzEvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjJ6lMzQ
laGERZC8xeERoFTsaxz5Kwt5ydDQvcdvTPz0B+JMJ0kIE6PpREWpfvKE9Jl1KVgH
2tdhSB8e36+sDnopuOiSktN+I5VrwSRqbVfmx5ukhogSZzs8gO2Q5BwVRXsJimOW
ro4ERCt/Mi7fxfWUs0QvidQkczkcDQLJR/PgAJ4/640DCfI66Qs7/wj53FQ48L4F
7RGR0PowlNo36DVjPXB12ouZgMEYLobW7gqSA7Sk61YHRkC/L6iccdZvFGk99mEv
AV37QeoDcghWgR6NIOw2cviAnyRdkCSaa+Nv0KlxZgX3dYSmNsylWAdyrAqx27yx
vhl5p7KTWMk1Sg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:55 2026 by rpki-client