Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
File:                     j6mutCbCijSAh3b5Vok107nsngg.mft (raw, json)
Hash identifier:          Rp89Qa6LHE/+jbpL150Hpv1ijo2eqMHhPx0skCZf9to=
Subject key identifier:   46:55:2B:71:28:25:23:C5:B9:06:1E:7C:8D:0E:B4:E6:F5:3B:36:BC
Authority key identifier: 8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
Certificate issuer:       /CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Certificate serial:       019CAC46D775F8ED9E710485A660B26D072E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
Manifest number:          12D6
Signing time:             Mon 02 Mar 2026 02:00:49 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:49 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:49 +0000
Files and hashes:         1: 9Jh_HKzAuSnv77A4D--WJcenWJk.roa (hash: 1jniHAv+TqLat97OntRtBXGUV1Fdi2TS9uabmrOi/mo=)
                          2: j6mutCbCijSAh3b5Vok107nsngg.crl (hash: vcarQaO8XUDPs5iJiEKQw1zr5uQP+2y1kbDgEmlUjGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:d7:75:f8:ed:9e:71:04:85:a6:60:b2:6d:07:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
        Validity
            Not Before: Mar  2 02:00:49 2026 GMT
            Not After : Mar  3 02:00:49 2026 GMT
        Subject: CN=46552b71282523c5b9061e7c8d0eb4e6f53b36bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:05:c6:e9:af:a7:a2:32:9d:46:bf:7b:f3:
                    eb:5e:e3:5b:cd:b0:a8:60:f7:5b:0b:92:fc:8c:fb:
                    28:06:a1:ac:14:52:ad:3a:a8:be:27:0e:72:38:28:
                    e3:c8:ca:87:05:2a:5f:84:25:cd:fb:ac:8a:51:d9:
                    9d:98:ef:7c:0e:f6:b3:b2:d8:7f:8d:c8:15:60:e7:
                    9a:63:4b:8b:f7:8a:1e:1f:8d:94:3b:d9:f4:eb:f7:
                    87:9d:3f:5c:a0:92:10:cd:a3:de:83:1e:d4:d7:37:
                    ba:3d:f3:8e:9d:c3:7c:ae:58:a8:0b:7a:f2:74:2a:
                    09:f1:a2:06:99:6b:62:12:81:9f:13:76:2c:c1:13:
                    13:67:a5:e2:b7:5d:df:00:7b:a1:e8:a0:1e:fd:26:
                    f9:9a:0e:7e:25:42:d1:5a:28:b4:83:f9:ec:a8:65:
                    6f:01:76:b6:25:c5:b3:4d:9a:c6:4e:9e:c4:b4:83:
                    fa:6d:b9:9a:5b:e4:62:42:03:59:89:6a:fb:67:c2:
                    21:f9:6a:f5:a9:ff:57:83:ba:85:1f:fc:5e:69:dd:
                    fe:af:72:94:02:ee:e5:73:50:ba:cf:9b:1d:fc:3b:
                    2c:6c:9a:56:1d:2d:aa:aa:bd:84:55:c1:3c:5f:a3:
                    64:66:5d:68:45:c1:00:62:60:4e:d2:73:23:ec:83:
                    51:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:55:2B:71:28:25:23:C5:B9:06:1E:7C:8D:0E:B4:E6:F5:3B:36:BC
            X509v3 Authority Key Identifier:
                keyid:8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:58:7f:14:0d:20:9b:32:52:0f:bc:9c:03:21:3c:89:aa:23:
         a8:aa:42:e6:91:f0:08:3f:c9:f3:59:52:bc:ea:25:29:c8:cb:
         60:60:c0:5d:48:24:47:70:a0:f9:c2:1c:fe:d1:c3:33:01:aa:
         23:08:93:bb:4a:c2:cd:ae:71:1e:95:23:7a:af:bf:36:4a:da:
         fd:aa:e1:e3:68:94:8b:bb:45:1d:66:ea:93:ee:14:27:89:49:
         27:8e:b2:e7:ee:b4:e1:e7:51:f6:c3:9f:71:58:b8:27:72:d9:
         e8:66:ad:67:26:40:90:6f:1c:0f:66:8e:fd:00:34:c6:0a:6d:
         37:10:11:42:ba:ca:58:22:92:46:d9:68:0a:d3:42:85:9d:89:
         37:7f:01:a6:a6:81:71:d9:48:19:35:4d:16:1b:b6:5b:93:9d:
         94:a2:03:1a:c6:33:0f:b1:21:fd:48:c3:12:29:9c:3c:ad:e0:
         ba:c3:e3:59:31:93:f7:57:a0:ac:20:3d:ee:83:e6:3f:64:1b:
         d5:18:b6:b2:85:26:e3:c0:48:ab:44:32:97:e8:30:cd:78:fd:
         cd:5b:b9:da:ff:40:48:0f:96:cf:34:8b:1b:87:eb:59:67:78:
         e5:e7:31:2f:f8:a9:97:98:a3:0a:b7:6a:d8:ac:6b:99:2d:6b:
         10:d4:99:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:20 2026 by rpki-client