Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
File:                     jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json)
Hash identifier:          8ZWAdapIWZKW/0Wtftr17FJVYhLDD00SZSNO8q6aDI8=
Subject key identifier:   00:F1:47:97:21:70:4F:E2:87:6A:D4:40:67:8B:79:AD:9A:D1:79:FD
Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
Certificate issuer:       /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Certificate serial:       019CAD5A12C8CB047BBA833729B86278AAFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
Manifest number:          06BE
Signing time:             Mon 02 Mar 2026 07:01:27 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:27 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:27 +0000
Files and hashes:         1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: Umk9j79aVhzHjRdHUYqYPGggWhlSC+/1LnPZS5a1qTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:12:c8:cb:04:7b:ba:83:37:29:b8:62:78:aa:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
        Validity
            Not Before: Mar  2 07:01:27 2026 GMT
            Not After : Mar  3 07:01:27 2026 GMT
        Subject: CN=00f1479721704fe2876ad440678b79ad9ad179fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:eb:34:2d:47:9a:83:00:a3:c6:01:9a:63:89:
                    d0:e6:dd:b4:fe:dd:f8:fb:dc:f6:64:e8:c7:a3:cb:
                    97:49:35:97:73:6c:b6:09:40:f3:06:65:2c:cd:b8:
                    da:e4:2e:aa:a2:1d:68:0b:b0:78:11:9e:23:2c:d6:
                    3d:3f:fc:a4:ab:c9:23:e8:50:b3:a9:3d:4a:2a:cf:
                    f8:bc:76:ee:6c:66:da:32:90:2d:c1:e8:7c:97:a0:
                    c1:cc:d1:f6:e2:a8:86:c6:23:75:8d:42:8f:c1:c8:
                    5d:1a:64:a9:77:6f:c6:80:20:53:f0:73:b7:75:a6:
                    04:dc:4d:bc:00:e9:31:c8:36:70:57:2b:eb:4c:f8:
                    c2:f9:93:63:9c:c0:f8:9f:3c:65:84:b5:63:b5:15:
                    78:4a:97:f4:e5:8c:26:ab:ae:50:ca:a5:b5:c1:cc:
                    ff:be:32:47:4a:22:48:66:6f:a0:bd:0c:4a:df:3d:
                    06:aa:ea:fe:2b:b4:da:60:66:d0:a1:ed:9d:21:6e:
                    06:fb:0b:ea:5c:0f:38:e0:f6:6e:a4:b2:c7:d3:27:
                    e9:39:03:eb:73:d5:00:bd:8c:7f:ee:66:9d:3a:d3:
                    1c:1e:fb:b5:08:59:bd:1e:ce:0c:48:bb:bb:70:ee:
                    e6:24:ed:bc:fd:62:05:c9:80:5a:f5:30:d0:fa:c6:
                    fa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F1:47:97:21:70:4F:E2:87:6A:D4:40:67:8B:79:AD:9A:D1:79:FD
            X509v3 Authority Key Identifier:
                keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c2:e8:9f:a8:f8:25:88:e4:45:8b:a1:59:e8:fb:5c:d6:6f:
         7d:49:9b:ac:6d:d1:ec:24:21:39:17:a8:42:9c:0b:2f:d9:df:
         33:0e:54:95:a6:e0:61:fb:ff:88:1f:53:35:db:37:5f:17:55:
         71:18:4c:b9:f3:7c:ad:1c:c3:c8:7e:f9:d4:e0:3c:2f:42:12:
         26:38:87:72:92:da:84:51:d0:de:a1:08:35:3a:64:c9:6d:20:
         dc:16:91:ac:7b:40:76:f7:b9:c5:bd:6b:9d:7d:ac:d7:9c:c7:
         84:dd:16:a5:9b:f0:c0:1d:c0:1d:44:c3:f6:46:43:df:cd:79:
         4c:cb:42:ba:9d:4f:1d:78:cb:7e:c1:48:96:2e:fd:f7:05:f4:
         fe:9f:36:77:91:d6:52:66:d9:24:93:a1:70:35:ca:59:e7:0f:
         cb:66:30:5e:10:2c:c5:60:f3:66:35:d1:73:28:44:d3:11:3f:
         50:17:87:7e:29:41:aa:f1:23:bc:c1:b6:23:3c:5e:8f:d6:61:
         ae:e2:c3:b1:1e:6c:a9:b3:73:a1:8f:21:f6:df:98:44:0c:27:
         c0:d7:9b:4e:2c:67:17:6d:65:db:7b:10:ff:64:6e:36:a9:81:
         97:27:0e:71:89:5f:13:c9:73:75:97:8d:3c:17:94:5d:cd:aa:
         a6:f3:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:42 2026 by rpki-client