Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
File:                     jEjc7LvMBSxln5cWCSKeNlaj2VY.mft (raw, json)
Hash identifier:          DMaJORMBwRq+S0o4LamaumYiKvY0RkK4EKawXI+iTbM=
Subject key identifier:   FB:D5:74:99:9E:85:5B:6E:62:F3:E2:CD:7F:A4:28:A1:F0:64:F9:60
Authority key identifier: 8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
Certificate issuer:       /CN=8c48dcecbbcc052c659f971609229e3656a3d956
Certificate serial:       019CAA5938123B679D6824FF5BD1B63231D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
Manifest number:          0763
Signing time:             Sun 01 Mar 2026 17:01:39 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:39 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:39 +0000
Files and hashes:         1: jEjc7LvMBSxln5cWCSKeNlaj2VY.crl (hash: 4hAfxwtr0AmY6l9TIINlRr8KEBeIn1rc0VYrgUoJxwY=)
                          2: nyskGSMyjznwMN2wb3tRAEeMLcE.roa (hash: PX/bA+AaDD7Kn1LegVS7xXR8J6c1hlmfLAOwmDLgfNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:59:38:12:3b:67:9d:68:24:ff:5b:d1:b6:32:31:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c48dcecbbcc052c659f971609229e3656a3d956
        Validity
            Not Before: Mar  1 17:01:39 2026 GMT
            Not After : Mar  2 17:01:39 2026 GMT
        Subject: CN=fbd574999e855b6e62f3e2cd7fa428a1f064f960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:66:b1:1f:ad:44:e5:83:e3:63:09:4f:5f:
                    ee:91:e3:a2:eb:7d:c2:3b:35:89:42:67:4f:73:7f:
                    59:3a:25:d8:c2:dc:cf:31:9e:aa:58:73:79:d1:59:
                    5f:f6:17:8d:f5:e5:0f:f0:90:26:0b:ff:5f:30:04:
                    50:29:93:81:dd:79:79:c4:09:4c:50:63:8a:3e:72:
                    b2:75:2a:3e:56:4a:8f:50:d7:99:e8:4d:eb:a5:3c:
                    6b:9a:7f:89:56:0b:b1:5f:e7:4a:ad:6b:e4:61:4a:
                    53:79:c3:19:9e:c2:8d:a5:2a:d0:5c:82:b0:c2:f1:
                    e5:e3:37:6e:cd:07:75:1f:7d:80:1b:0d:50:3d:1d:
                    11:fe:68:41:a7:44:81:93:65:dc:c8:30:64:ab:a2:
                    54:38:7b:39:41:ec:47:6a:56:36:ee:1c:b2:fd:f0:
                    f2:55:4f:c7:6d:32:35:18:86:e7:42:a4:d0:5b:7d:
                    eb:59:a1:6c:d5:6a:cd:e6:a5:9c:71:1f:f8:bf:5c:
                    66:64:39:fb:67:cf:da:fc:37:19:f6:96:45:c8:a5:
                    22:a5:5d:ef:08:0d:68:d8:fa:70:80:6c:d2:07:fa:
                    23:6e:05:25:43:bf:c0:d6:7e:b0:c0:27:3f:41:c1:
                    80:53:4c:e6:4e:69:b7:8f:7d:ef:51:22:91:82:6e:
                    2d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D5:74:99:9E:85:5B:6E:62:F3:E2:CD:7F:A4:28:A1:F0:64:F9:60
            X509v3 Authority Key Identifier:
                keyid:8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fe:17:a4:07:da:10:31:95:1c:f7:ad:bf:6b:64:16:c1:ea:
         f0:9c:e4:75:ca:74:c0:ca:d8:95:a4:f7:50:86:b2:14:b6:03:
         e5:bc:8b:60:2e:67:e2:ae:8f:19:dc:cf:13:53:aa:30:d7:9a:
         ef:34:07:f3:c8:50:7e:dd:7e:92:72:e2:1a:71:80:a5:83:76:
         6d:89:d5:a4:fe:ab:93:1b:fc:b5:b8:d3:73:58:37:09:ea:91:
         bf:b1:31:a6:fa:b1:d2:43:6b:40:a5:94:b4:87:e9:32:73:68:
         f3:c5:5b:39:d0:d1:5d:d8:5e:b0:aa:c6:a9:87:6d:d9:0c:c5:
         5f:32:17:91:19:9d:80:33:8f:85:ea:88:57:bb:5e:63:60:c1:
         9e:a6:12:f0:09:56:51:41:3d:31:ab:f4:4c:d8:c8:93:06:ba:
         6b:4a:e1:f8:25:c5:c5:86:98:af:fc:df:19:11:c5:40:96:e6:
         33:84:7d:9e:a7:41:e3:fc:54:14:f4:ea:e0:b6:14:05:a4:55:
         80:7f:88:42:22:7b:af:e5:25:e7:61:72:09:3f:38:21:ec:e8:
         bb:f0:cb:73:fe:03:6d:92:35:b7:d3:52:71:8e:7b:d3:53:55:
         5c:42:ae:a2:e5:07:a3:3b:f2:23:75:fc:48:93:01:ee:79:4f:
         3b:d6:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:37 2026 by rpki-client