Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
File:                     jQjCXuFjw27WtzFxYBoYNkgupe4.mft (raw, json)
Hash identifier:          JLKYSh+Q4Gxvof41bk+23NW6grcXc891cnCDycK0Wbk=
Subject key identifier:   7A:CB:6D:09:17:28:58:16:81:A5:89:3E:6F:9D:F6:C1:3A:D0:64:41
Authority key identifier: 8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
Certificate issuer:       /CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Certificate serial:       019CAD59BCBA5C2F7FCFD863897FEBABE8B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
Manifest number:          0BA5
Signing time:             Mon 02 Mar 2026 07:01:05 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:05 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:05 +0000
Files and hashes:         1: jQjCXuFjw27WtzFxYBoYNkgupe4.crl (hash: BQiGt+99XN8ce0j5qMfJ+j4T6FKnvDtf/dYQtmrxSjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:bc:ba:5c:2f:7f:cf:d8:63:89:7f:eb:ab:e8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
        Validity
            Not Before: Mar  2 07:01:05 2026 GMT
            Not After : Mar  3 07:01:05 2026 GMT
        Subject: CN=7acb6d091728581681a5893e6f9df6c13ad06441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e2:c3:df:c2:e6:6f:f0:38:fd:84:1e:a3:95:
                    35:4e:80:ed:9a:f8:1d:da:31:fd:16:2f:60:ae:75:
                    9c:f1:99:a2:39:f4:83:f5:f2:93:13:61:10:a1:7c:
                    e3:78:cd:93:84:61:7d:02:06:82:e8:a5:ca:7f:d8:
                    65:ac:4d:d8:d2:fc:27:ef:6f:86:b9:82:4c:e8:9d:
                    6b:95:b4:6a:eb:09:89:14:e2:3e:28:de:19:86:5b:
                    3f:bd:1e:19:84:69:4a:0c:14:e6:6e:ef:2f:4b:7d:
                    ae:ab:33:56:27:ef:21:a4:93:15:62:71:03:b9:e5:
                    ec:39:49:75:ed:8a:9d:89:64:4a:79:f4:d0:7d:99:
                    a4:9d:9c:4a:7f:7f:ff:d1:b6:74:71:0a:05:63:30:
                    83:a0:97:f1:f8:8b:77:73:58:38:ab:8b:00:b4:35:
                    e5:3a:e9:c5:ac:cb:48:e1:56:04:32:0c:43:f7:05:
                    50:64:5e:eb:be:16:ae:53:cd:1f:a4:1b:1b:fb:65:
                    2f:7f:8c:c8:d4:23:2a:12:a5:59:3b:e8:10:a6:63:
                    ac:2b:5f:49:3b:24:a1:5e:e5:e6:af:57:09:6b:a8:
                    7b:7a:f7:28:7f:e3:4e:62:c2:54:70:a8:c1:eb:4a:
                    ee:d9:3e:da:00:cc:6a:09:f6:62:cd:bd:c3:3e:f1:
                    af:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CB:6D:09:17:28:58:16:81:A5:89:3E:6F:9D:F6:C1:3A:D0:64:41
            X509v3 Authority Key Identifier:
                keyid:8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:bc:06:c0:20:31:e4:6e:07:25:a9:1f:d6:c2:3b:8a:8b:3e:
         fe:2d:67:8e:91:9d:25:9f:0b:ec:1b:8a:34:c5:ff:a9:a5:d7:
         e9:3e:1a:23:01:4b:46:e5:1e:e7:49:ee:ca:b2:43:03:5f:72:
         f5:80:f5:53:24:93:24:b0:26:fd:c3:a6:58:d6:db:f8:a4:5f:
         d0:5e:16:32:06:3f:21:cb:ab:06:c3:75:6e:7a:27:6e:f9:25:
         90:34:73:c5:d8:4b:d8:f2:25:97:c0:a2:42:e3:61:55:1b:09:
         8b:bb:59:ea:70:6e:dc:19:e0:88:9d:a8:ec:3a:4f:d4:eb:0a:
         77:c9:c5:6e:82:91:ae:14:0c:68:4d:2e:7d:19:f4:fc:05:42:
         1c:57:b5:33:be:a3:0c:f7:b8:9c:7a:f2:01:8f:3a:a3:1c:d3:
         58:18:ea:b8:f9:f2:f8:95:c3:f4:c0:47:57:3e:be:83:47:9a:
         63:8d:e6:6b:21:09:0a:c5:4b:57:f2:c7:3e:20:4e:98:92:9d:
         e7:cb:6c:52:ce:7a:4a:24:55:ac:2f:72:8b:2d:ba:54:c3:1f:
         e3:f0:af:59:7e:ac:1a:bf:e7:c2:a5:81:96:0a:d2:da:e6:c9:
         61:8d:de:d9:3a:36:52:a2:58:cf:81:fa:56:a2:b9:f0:c9:45:
         cf:04:3a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:22 2026 by rpki-client