Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File:                     rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier:          e+vcpJt9fvCi9GdBSYxBa1viKexdLS35KFQ4wglYuxc=
Subject key identifier:   BB:C9:B0:0B:9D:5A:D8:61:2E:8A:C6:83:D0:6E:FA:EA:BF:40:01:A5
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer:       /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial:       019DA3E65336586152409B03A83C5F624577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number:          0B90
Signing time:             Sun 19 Apr 2026 04:01:13 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:13 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:13 +0000
Files and hashes:         1: cFj2gabjb2A6OS2M4OWiTy7sjlY.roa (hash: c2wHgi8z7Wquh1Yiowi4MCoX8zsu06SPgPbyIoYnmLY=)
                          2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: Uk2stBAd3M0eGeHXbxRXtJFk16z4kV/ixzcVJ3ByMfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:53:36:58:61:52:40:9b:03:a8:3c:5f:62:45:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
        Validity
            Not Before: Apr 19 04:01:13 2026 GMT
            Not After : Apr 20 04:01:13 2026 GMT
        Subject: CN=bbc9b00b9d5ad8612e8ac683d06efaeabf4001a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:ca:ef:2e:ab:a6:06:7a:84:e6:b1:61:50:
                    91:6b:4e:aa:8c:85:3b:2a:e5:f7:e6:5c:0d:a2:12:
                    f1:7f:0b:d8:20:b3:f9:09:3a:7d:27:e3:7d:37:c5:
                    b7:9f:d2:a2:ec:4a:f6:a2:46:21:ef:94:d2:da:b7:
                    10:59:99:be:81:6e:a6:be:b8:b2:87:48:66:90:22:
                    a5:bf:02:82:b5:91:b1:ed:25:46:16:47:ff:f3:fd:
                    3d:1d:c1:a5:95:92:99:36:ef:ab:10:b5:82:fb:d9:
                    d7:1f:ec:7c:24:86:a3:e2:69:63:ac:e4:d6:b8:97:
                    84:d0:86:7e:11:49:79:ae:90:08:26:31:be:26:e7:
                    ae:2a:d1:27:61:db:62:7e:68:f0:a8:2a:46:6e:47:
                    45:fd:58:cb:40:e7:73:b6:51:5e:a6:16:4f:57:5f:
                    a2:dc:72:25:2c:fa:0d:01:a3:a9:43:fd:7d:15:a9:
                    fd:4f:00:8c:8d:5d:7e:1a:42:da:42:fa:4e:d2:38:
                    b5:b5:bd:6b:07:68:28:11:ec:6d:3f:3a:43:0e:86:
                    15:93:df:ea:4d:25:4c:d0:f9:7a:a3:7e:04:1e:03:
                    28:4b:a6:0c:c2:f2:8e:96:68:83:02:95:cb:05:09:
                    02:a6:ad:68:5a:e6:a3:85:bb:34:5f:b5:40:10:bd:
                    a9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C9:B0:0B:9D:5A:D8:61:2E:8A:C6:83:D0:6E:FA:EA:BF:40:01:A5
            X509v3 Authority Key Identifier:
                keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:72:3b:07:59:0a:29:ca:ec:2b:d2:1e:e4:4f:e5:d5:37:5c:
         60:1a:55:0b:b4:8a:36:e2:6b:38:cb:b9:0b:b6:53:f4:64:6b:
         88:1b:bb:aa:15:83:d4:5b:03:bd:bc:b6:7d:c7:94:99:32:96:
         a4:95:d1:df:83:98:5b:42:a2:9a:98:7a:69:55:9d:bd:d4:40:
         d0:83:6b:43:ca:1d:4c:75:ee:6b:e4:6f:3c:e6:c7:c0:c1:a3:
         07:07:95:31:8b:b9:0b:4f:41:14:ba:26:74:0a:f1:95:74:62:
         ad:8a:10:97:ef:0b:5c:72:83:d7:13:b9:2f:51:f9:8d:30:99:
         a6:4d:bf:fe:eb:f4:c1:c7:eb:78:a4:73:f7:4a:4f:71:a6:94:
         72:36:82:83:e6:63:f9:ea:93:f5:33:e7:a6:22:28:30:52:d3:
         35:0b:6b:3e:0b:ac:af:59:5a:ef:81:48:58:2d:ff:fc:c4:8f:
         9b:35:2e:75:9d:2a:ba:32:4f:51:a8:ba:b9:26:f0:a6:f2:59:
         b5:ff:5b:a9:b1:f2:d5:de:3d:01:70:50:c2:b2:a0:6a:ff:3b:
         56:ff:87:78:aa:25:27:cc:64:1b:03:40:7b:d3:e1:a1:01:7e:
         f9:c6:22:c7:9d:d4:d2:f7:cb:60:ab:04:f8:1d:f8:1b:5b:ae:
         a2:07:4f:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5lM2WGFSQJsDqDxfYkV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWJiZjlmNjIzMzEzZWIyYjE4MjczNTBiNDVhOWJhMWZk
OWRhNWYwHhcNMjYwNDE5MDQwMTEzWhcNMjYwNDIwMDQwMTEzWjAzMTEwLwYDVQQD
EyhiYmM5YjAwYjlkNWFkODYxMmU4YWM2ODNkMDZlZmFlYWJmNDAwMWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy/K7y6rpgZ6hOaxYVCRa06qjIU7
KuX35lwNohLxfwvYILP5CTp9J+N9N8W3n9Ki7Er2okYh75TS2rcQWZm+gW6mvriy
h0hmkCKlvwKCtZGx7SVGFkf/8/09HcGllZKZNu+rELWC+9nXH+x8JIaj4mljrOTW
uJeE0IZ+EUl5rpAIJjG+JueuKtEnYdtifmjwqCpGbkdF/VjLQOdztlFephZPV1+i
3HIlLPoNAaOpQ/19Fan9TwCMjV1+GkLaQvpO0ji1tb1rB2goEextPzpDDoYVk9/q
TSVM0Pl6o34EHgMoS6YMwvKOlmiDApXLBQkCpq1oWuajhbs0X7VAEL2ppwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvJsAudWthhLorGg9Bu+uq/QAGlMB8GA1UdIwQY
MBaAFKybv59iMxPrKxgnNQtFqbof2dpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQt
NTdlZjdmZWU3NTljLzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQtNTdlZjdmZWU3NTlj
LzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXI7B1kK
KcrsK9Ie5E/l1TdcYBpVC7SKNuJrOMu5C7ZT9GRriBu7qhWD1FsDvby2fceUmTKW
pJXR34OYW0Kimph6aVWdvdRA0INrQ8odTHXua+RvPObHwMGjBweVMYu5C09BFLom
dArxlXRirYoQl+8LXHKD1xO5L1H5jTCZpk2//uv0wcfreKRz90pPcaaUcjaCg+Zj
+eqT9TPnpiIoMFLTNQtrPgusr1la74FIWC3//MSPmzUudZ0qujJPUai6uSbwpvJZ
tf9bqbHy1d49AXBQwrKgav87Vv+HeKolJ8xkGwNAe9PhoQF++cYix53U0vfLYKsE
+B34G1uuogdP8g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:34 2026 by rpki-client