Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
File:                     j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json)
Hash identifier:          NELH7mjKyh/eD8ubE+HsZwQmyO/w8/2O45KRAzM3Ph4=
Subject key identifier:   12:DE:79:EC:E7:56:74:4C:4C:05:7B:80:C8:12:82:C7:2F:AA:E2:80
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Certificate issuer:       /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial:       019CAB341E58C43FACB0EDF210AD3E10EEA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
Manifest number:          17CE
Signing time:             Sun 01 Mar 2026 21:00:45 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:45 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:45 +0000
Files and hashes:         1: 1-ProWPAo3xOPAlfLXyHl2FoLaSQ.roa (hash: UipbPGi/LNsdDzSZcU72FThIZcRNZgYBDRQICzZQdtI=)
                          2: TxAodq-PWJbB0yRlZgotd8wKMYY.roa (hash: B1bJrRcIm/UVOcci99q39RXXf3qdHKs7kJRjCqO0v8g=)
                          3: _1Cvu-C3Eeb74QQ01oJI3VbAErk.roa (hash: veWk/S2496THUfG9z5Kmti3rd3m5NbM9tA+VyMVoV+s=)
                          4: gqRQBpLK3zXQTfzBnWEhQSsGto0.roa (hash: qD6m/RkAZJfynFeSG5lvjcc7zHJ2to6IwFe26TyaUJs=)
                          5: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: UtYThKFZQNXpCdMca6cly7AWZHxv870dc7+0EVsvGrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:1e:58:c4:3f:ac:b0:ed:f2:10:ad:3e:10:ee:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
        Validity
            Not Before: Mar  1 21:00:45 2026 GMT
            Not After : Mar  2 21:00:45 2026 GMT
        Subject: CN=12de79ece756744c4c057b80c81282c72faae280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:ea:ae:94:84:0d:7a:27:5c:62:26:e9:82:
                    2b:05:0f:e4:e5:5d:82:2b:a9:88:ee:79:3e:8b:7f:
                    82:ef:7e:ea:c8:51:f2:4c:c7:97:8f:66:59:30:f6:
                    d4:50:21:bd:b0:f1:34:12:a3:b6:f8:b7:db:7a:a6:
                    51:59:6f:21:42:4e:34:58:4b:78:c9:18:bd:89:bb:
                    7b:f4:67:c3:f0:f1:0e:d1:3f:1a:b6:62:a0:f2:21:
                    ac:9c:3c:14:4a:19:7b:f7:f6:d4:80:fd:41:90:15:
                    30:98:34:ea:04:fc:ef:73:eb:03:4f:48:5f:1e:72:
                    54:8f:8e:5e:b9:9c:0d:a7:6a:fe:f6:36:8e:8c:e0:
                    82:1d:81:13:b1:01:aa:43:a9:de:e1:a1:78:08:31:
                    22:ac:3f:f5:f9:a4:1e:6f:44:c6:4d:bc:c1:16:2a:
                    70:69:20:5a:af:96:57:a9:11:3c:27:bd:c7:83:7b:
                    11:24:5e:9d:2c:31:3a:86:2d:48:7f:2d:fb:ac:35:
                    bb:1c:7e:48:e4:63:73:94:2c:9c:cc:64:a4:ff:d8:
                    59:66:8c:77:00:05:61:7f:bd:a8:4a:9b:9e:b2:a2:
                    fd:16:81:52:aa:6b:c5:ac:de:ef:20:cf:f8:c2:0f:
                    ea:40:dc:05:c4:27:23:ab:9d:46:18:02:35:7d:31:
                    43:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DE:79:EC:E7:56:74:4C:4C:05:7B:80:C8:12:82:C7:2F:AA:E2:80
            X509v3 Authority Key Identifier:
                keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f1:80:06:74:c7:94:f9:c7:f3:e5:4d:2e:56:2c:cf:ad:06:
         c9:06:53:ae:4e:ea:57:a9:49:4d:ee:e5:52:65:f4:e4:a3:e2:
         af:b1:47:04:eb:3d:39:c2:4e:99:62:3f:dc:96:6b:c1:9f:66:
         6c:e6:0b:d6:36:5f:ae:0c:2f:11:9f:3e:d1:d8:e2:6b:bb:8e:
         a5:93:55:16:ea:c1:c5:29:34:51:be:77:91:af:a8:c7:90:ed:
         bb:40:d1:82:30:6b:78:1e:6e:2f:d5:b6:a1:f3:3e:ce:b0:b1:
         be:2d:74:fd:24:67:6a:e2:e2:4e:58:7e:32:a1:f6:3c:b4:96:
         07:1f:b2:39:c6:4d:e2:d1:52:34:d3:04:dc:3f:00:35:82:33:
         ec:91:9f:75:a8:65:6f:9a:dd:26:d8:35:15:52:1a:c4:0e:3a:
         7e:cb:18:a4:e1:67:b8:7b:74:42:8c:2e:dd:ab:50:75:7a:d9:
         04:07:58:98:c2:8a:11:28:e8:b9:94:02:ee:4d:43:56:9c:51:
         e3:58:88:d7:25:c3:e7:a8:9c:87:e9:02:21:ed:ee:a1:66:c4:
         25:d1:42:47:86:75:83:9c:3b:f8:6c:24:8b:a4:7b:3e:11:12:
         c7:a7:a9:42:b7:f4:19:84:b8:00:de:ac:0b:70:a5:a2:b6:ed:
         4f:e7:26:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:30:37 2026 by rpki-client