Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File:                     JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier:          U6bPWoyJHLtz+z01VFFMQmlvmvh24iRDUqHV+sOr0Gk=
Subject key identifier:   F1:C6:9F:15:62:89:17:67:6B:EA:08:63:20:AE:2A:74:A2:F3:F1:97
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer:       /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial:       019CAA8F85E278F56041A6C62840D0844176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number:          0460
Signing time:             Sun 01 Mar 2026 18:00:58 +0000
Manifest this update:     Sun 01 Mar 2026 18:00:58 +0000
Manifest next update:     Mon 02 Mar 2026 18:00:58 +0000
Files and hashes:         1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: 8c7izd8nuGu6CqdIzv4EdY2Ywv0ioVr6giG0K4Spdn8=)
                          2: q9nb03LLGhEQgbaQ_RRS2Oti8mA.roa (hash: +gb3UnVeZl4+1DAMyjUb0CGvwvwAAF1A19rfF/kmb3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:85:e2:78:f5:60:41:a6:c6:28:40:d0:84:41:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
        Validity
            Not Before: Mar  1 18:00:58 2026 GMT
            Not After : Mar  2 18:00:58 2026 GMT
        Subject: CN=f1c69f15628917676bea086320ae2a74a2f3f197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:87:ed:04:d7:0d:57:83:64:68:ce:b4:ca:
                    3f:7e:09:61:e7:e7:71:84:b7:d0:5e:2a:6b:6d:e1:
                    84:b0:12:c0:96:06:68:3b:47:6d:8f:a2:91:c2:bf:
                    50:bb:1e:ab:b4:f0:f4:6c:6e:e3:55:a0:fb:75:d5:
                    77:d7:29:b6:0d:91:09:65:f9:a0:01:53:fb:19:c9:
                    1a:6e:3f:fb:b3:eb:83:34:b9:bc:22:dc:d1:c1:6e:
                    0d:92:f8:c1:b3:86:18:f7:db:b4:cd:1e:80:18:00:
                    3b:6b:19:3c:dc:21:d9:2c:57:c9:5f:93:5b:01:83:
                    f1:56:96:a5:1d:63:55:c3:09:fb:df:f6:81:db:64:
                    d5:d6:91:03:6b:18:60:dc:fe:58:ac:a5:a3:aa:19:
                    89:7a:6b:d9:5c:f2:87:fc:17:08:73:35:b1:58:3d:
                    0a:fb:5e:63:0b:73:64:9b:ab:63:18:24:d5:e5:73:
                    e3:1c:b9:72:36:cf:a3:3b:28:66:df:be:41:b6:2c:
                    b6:7f:34:b2:f8:52:3b:7a:fd:dd:76:d9:c1:01:c9:
                    fd:2c:36:4a:71:82:f8:ed:ce:bf:83:fe:6d:a6:c0:
                    23:73:44:93:2f:f7:d5:d6:63:4b:6e:50:07:55:f9:
                    ee:bf:e2:8e:bd:d4:ba:fc:db:51:ff:d9:10:ff:72:
                    c3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C6:9F:15:62:89:17:67:6B:EA:08:63:20:AE:2A:74:A2:F3:F1:97
            X509v3 Authority Key Identifier:
                keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:25:3f:69:42:a3:9a:28:4e:4b:c6:02:32:1b:e6:b4:c7:25:
         1b:22:50:1b:92:ed:5d:db:4e:e7:96:19:6d:08:4f:08:73:77:
         91:29:a2:d3:53:68:90:48:f8:55:68:d6:e5:aa:05:cd:07:90:
         7c:d6:57:25:57:17:79:32:74:60:2b:63:40:f3:c9:ef:12:1e:
         48:94:f8:7a:1e:6e:e3:75:b7:88:7f:a4:08:21:d2:7f:5a:18:
         7a:c5:aa:08:c9:ab:8c:6e:14:23:67:aa:12:ca:80:2d:19:a9:
         2e:51:f1:6c:8e:44:7a:33:a5:7e:9f:51:d2:97:87:a1:22:b6:
         30:ee:2b:a1:9a:f8:8c:37:f8:26:c9:45:2a:e9:ba:3d:11:a5:
         9a:66:19:23:4c:cc:01:81:ae:85:37:85:8c:e7:da:a7:42:8d:
         48:46:fe:9e:ca:2c:48:50:6e:79:e9:c7:c4:2b:a2:e5:77:04:
         21:d3:5c:9a:61:0c:1b:47:99:43:e8:bd:b9:cb:a6:8e:05:a3:
         18:46:80:08:dc:44:c4:bb:b3:eb:03:da:da:9c:9c:a9:16:a2:
         82:b8:d6:69:5f:aa:99:2f:d6:92:36:4c:25:32:84:3c:72:59:
         13:0a:35:29:76:43:3c:31:f6:e2:cf:ef:c1:d2:af:6f:a0:05:
         7d:24:98:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj4XiePVgQabGKEDQhEF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzU4ZDZkMzNlMjZkMmFmODQzZDU4MWRjZjY5YzBkMTEw
YTlkZTgwHhcNMjYwMzAxMTgwMDU4WhcNMjYwMzAyMTgwMDU4WjAzMTEwLwYDVQQD
EyhmMWM2OWYxNTYyODkxNzY3NmJlYTA4NjMyMGFlMmE3NGEyZjNmMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDqH7QTXDVeDZGjOtMo/fglh5+dx
hLfQXiprbeGEsBLAlgZoO0dtj6KRwr9Qux6rtPD0bG7jVaD7ddV31ym2DZEJZfmg
AVP7Gckabj/7s+uDNLm8ItzRwW4NkvjBs4YY99u0zR6AGAA7axk83CHZLFfJX5Nb
AYPxVpalHWNVwwn73/aB22TV1pEDaxhg3P5YrKWjqhmJemvZXPKH/BcIczWxWD0K
+15jC3Nkm6tjGCTV5XPjHLlyNs+jOyhm375Btiy2fzSy+FI7ev3ddtnBAcn9LDZK
cYL47c6/g/5tpsAjc0STL/fV1mNLblAHVfnuv+KOvdS6/NtR/9kQ/3LDhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHGnxViiRdna+oIYyCuKnSi8/GXMB8GA1UdIwQY
MBaAFCc1jW0z4m0q+EPVgdz2nA0RCp3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMt
NDI2ZDlmZjIwN2QxLzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMtNDI2ZDlmZjIwN2Qx
LzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSU/aUKj
mihOS8YCMhvmtMclGyJQG5LtXdtO55YZbQhPCHN3kSmi01NokEj4VWjW5aoFzQeQ
fNZXJVcXeTJ0YCtjQPPJ7xIeSJT4eh5u43W3iH+kCCHSf1oYesWqCMmrjG4UI2eq
EsqALRmpLlHxbI5EejOlfp9R0peHoSK2MO4roZr4jDf4JslFKum6PRGlmmYZI0zM
AYGuhTeFjOfap0KNSEb+nsosSFBueenHxCui5XcEIdNcmmEMG0eZQ+i9ucumjgWj
GEaACNxExLuz6wPa2pycqRaigrjWaV+qmS/WkjZMJTKEPHJZEwo1KXZDPDH24s/v
wdKvb6AFfSSYoQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:00 2026 by rpki-client