Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
File:                     jvSnYgy-f8xHKj2gKckLX72UUZw.mft (raw, json)
Hash identifier:          hPnZCqEYq88YhL7pPEgmXxxuWv4Kqb50x8nRqo53T+Y=
Subject key identifier:   08:42:BB:4C:55:CB:DA:39:13:45:63:8D:77:55:F4:2D:6C:B0:CA:F7
Authority key identifier: 8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C
Certificate issuer:       /CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
Certificate serial:       019CAD5A23674E4D9FAFC7DFD338A98DC18B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
Manifest number:          0936
Signing time:             Mon 02 Mar 2026 07:01:31 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:31 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:31 +0000
Files and hashes:         1: jvSnYgy-f8xHKj2gKckLX72UUZw.crl (hash: gCpmc7HvDExE3oUgWgBt3CoN2/ULnOolo8PRMYzmhMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:23:67:4e:4d:9f:af:c7:df:d3:38:a9:8d:c1:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
        Validity
            Not Before: Mar  2 07:01:31 2026 GMT
            Not After : Mar  3 07:01:31 2026 GMT
        Subject: CN=0842bb4c55cbda391345638d7755f42d6cb0caf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5f:b7:ef:63:37:c3:2d:93:1d:af:25:7f:80:
                    38:e3:a2:bf:65:8c:4f:45:9b:24:39:dd:5e:82:1a:
                    51:8a:c7:f7:6d:76:b3:66:16:a8:39:56:84:6c:17:
                    20:5f:c1:23:2f:bd:e8:af:56:62:f4:7d:db:26:3f:
                    d9:3d:96:45:2f:b2:fc:42:55:e4:b0:a2:2d:fc:c4:
                    c3:0a:e3:23:01:9c:0c:07:27:eb:18:f0:93:21:dc:
                    b0:12:b7:b5:82:d5:20:8f:4e:ac:24:9d:1b:dc:7b:
                    61:c2:a9:51:fd:fa:91:6d:72:10:a1:06:79:0b:11:
                    8b:41:94:af:7e:e0:ae:6d:ce:f6:80:1e:25:78:de:
                    bb:da:58:75:7d:3c:f4:0b:cb:a3:74:e2:14:0a:9b:
                    bb:28:8d:c0:f7:47:5a:56:0f:29:5b:3e:87:49:1e:
                    6b:ac:06:1c:ce:12:9b:1f:8f:a3:aa:65:43:14:3d:
                    f8:f6:00:7d:4d:c6:28:b8:cf:54:c9:cb:26:df:db:
                    0d:4e:11:73:e0:54:26:4d:0c:30:67:54:32:32:2b:
                    66:77:1a:ba:02:88:14:b7:b4:65:cc:bd:28:d5:f3:
                    88:a1:31:83:3a:2c:1b:f6:31:0b:29:83:9d:4b:b6:
                    ab:1d:22:0b:c5:97:b9:ab:4d:8f:9a:41:78:df:d4:
                    f7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:42:BB:4C:55:CB:DA:39:13:45:63:8D:77:55:F4:2D:6C:B0:CA:F7
            X509v3 Authority Key Identifier:
                keyid:8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:be:78:d7:3b:49:16:8a:a3:6e:e7:1c:6b:23:f7:96:00:e1:
         17:11:af:3e:62:b5:e5:6e:4d:4f:96:1f:ea:c8:f3:52:9a:ee:
         6e:93:d9:44:18:f4:01:b7:24:cb:01:05:6a:f7:71:da:95:3b:
         01:85:f5:1f:1e:3f:d2:d6:c7:6f:1c:53:07:67:10:fd:55:64:
         ae:1d:25:e8:97:a9:a2:0b:63:61:38:1f:2b:dd:36:77:27:12:
         24:5a:a9:bb:9f:6f:c7:1e:8e:43:d8:b4:f2:f5:e8:82:c7:fa:
         98:4d:76:f0:7a:90:27:c8:2e:d6:96:ec:8f:da:6c:9c:6c:18:
         e8:c6:b3:08:a4:26:22:b1:96:4b:f5:58:a6:99:8c:4f:6b:8a:
         03:2b:16:95:0c:8b:88:ea:ea:a8:57:ae:8e:55:e8:4d:7a:8b:
         41:eb:b7:d8:3a:af:c1:d7:ff:26:9a:ba:f5:f8:39:68:f0:7d:
         66:50:7e:72:5a:a3:b6:7a:c2:9f:b4:14:6f:7d:0f:df:39:dd:
         35:ce:b4:c1:e5:0d:a5:7b:64:fb:e4:06:d4:65:29:35:14:3a:
         74:7e:37:0e:32:aa:91:96:2f:48:3e:30:5e:49:a4:82:88:c7:
         01:36:02:e1:ae:d3:61:30:aa:1b:73:72:65:a1:69:e8:e2:34:
         74:e0:34:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:52 2026 by rpki-client