Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
File:                     J0hJVnNlSeqzsG4jqricpZk6gHY.mft (raw, json)
Hash identifier:          5wi+vINBhhOwWeWsr2JVMnl+CyCgGu9yXBE5Puh36i4=
Subject key identifier:   58:B2:82:34:9F:F3:A9:BB:CD:E1:13:A6:AF:C9:39:93:E9:69:EA:14
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Certificate issuer:       /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial:       019CAFB5E51A4DDCC7BFDBD37A324A3B5993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
Manifest number:          144E
Signing time:             Mon 02 Mar 2026 18:00:59 +0000
Manifest this update:     Mon 02 Mar 2026 18:00:59 +0000
Manifest next update:     Tue 03 Mar 2026 18:00:59 +0000
Files and hashes:         1: IGGsOWInx7GDiTu-4uOnz6TKF_4.roa (hash: hCa0gQemcviWEbgPvunZmS38fuAZ96Xy3vU8q4L13BQ=)
                          2: J0hJVnNlSeqzsG4jqricpZk6gHY.crl (hash: ND7ORQd/fLVNnhqw2YQoWEoDgiSStSLfjylO57Y3WAQ=)
                          3: i1XEOqcKBZSos8XulivRUlJPsiQ.roa (hash: +AnbBQ6xlhmmq8oeU75OadeT8SHBJxGCIHBGP6tLW5s=)
                          4: jxIzweNGbwp67oAJPrxn65prYVA.roa (hash: qci5dm1heyJtkWX1qezUrzv1Lx1lqWj4xvftYho9n2c=)
                          5: oRmOzlxkjaKvIFitB3DoJI9OFPY.roa (hash: YHu28evWYm6LA/MihdvRJT4qUDYpq3RC/bhLC2lzCms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:b5:e5:1a:4d:dc:c7:bf:db:d3:7a:32:4a:3b:59:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
        Validity
            Not Before: Mar  2 18:00:59 2026 GMT
            Not After : Mar  3 18:00:59 2026 GMT
        Subject: CN=58b282349ff3a9bbcde113a6afc93993e969ea14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2b:34:b1:49:87:0f:cc:c6:e2:9c:88:03:c0:
                    15:fa:8a:51:56:05:dd:3f:b2:34:c7:9c:f8:ae:5a:
                    12:54:9f:ac:b3:b9:fc:d0:48:cb:99:4f:bc:a9:ff:
                    4f:fe:48:d8:d2:85:f0:2e:53:2a:b5:b4:20:b5:27:
                    45:cb:2d:6f:19:36:fe:53:60:13:24:6e:36:1a:5f:
                    36:ed:c5:da:03:23:65:ea:2c:c3:7d:3f:52:6f:51:
                    94:c6:b5:2b:9b:19:3a:d1:0e:2e:15:f6:64:c8:43:
                    72:dd:29:08:75:da:fa:d1:77:9c:48:2c:75:bd:3d:
                    62:8f:72:21:32:85:84:78:37:d8:3e:64:2d:78:f3:
                    ae:7c:95:96:c0:b7:b9:a7:68:72:2a:66:ef:ab:d6:
                    d3:f5:7b:05:98:b0:76:e9:af:5c:cf:00:4c:13:4b:
                    ad:79:f3:fc:ba:b4:1d:a4:02:47:e6:86:6d:75:15:
                    ad:1e:6b:20:e1:89:68:1f:e3:d4:b5:0f:df:be:1a:
                    e7:ec:00:33:da:2e:9f:ae:0c:69:cb:52:6f:ba:64:
                    69:42:5d:2d:3b:a8:bc:2b:84:4d:43:cd:84:21:04:
                    0d:da:88:e5:1d:23:7a:c0:2e:05:5e:86:91:8a:bb:
                    4e:38:e2:64:d6:5d:18:9b:e4:3d:ac:01:75:2f:a6:
                    5b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B2:82:34:9F:F3:A9:BB:CD:E1:13:A6:AF:C9:39:93:E9:69:EA:14
            X509v3 Authority Key Identifier:
                keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:db:10:5b:26:44:f6:24:c9:ff:b0:10:6b:58:2f:27:82:75:
         ab:95:4a:57:6c:33:b3:0b:b1:fa:cd:2d:e6:08:c0:64:32:31:
         47:f8:98:c7:df:e0:5d:65:23:13:be:a6:ca:df:e3:67:d9:6f:
         1e:33:a4:87:47:70:e7:53:8e:95:02:f1:aa:43:0a:55:12:28:
         fa:fb:73:43:b4:eb:b5:66:b4:14:45:33:ba:81:b2:7a:cc:9c:
         11:79:65:07:4b:14:6c:56:57:58:26:0f:8a:1a:0c:6e:67:45:
         59:87:2b:5b:84:e2:07:ff:d9:41:bd:1b:af:c0:28:62:90:d1:
         a5:46:3b:b7:f3:b0:fb:fd:68:fe:36:63:78:95:1b:97:b0:17:
         46:8f:51:e3:63:99:0b:27:be:fd:c6:8c:46:89:b1:73:aa:b8:
         01:19:7d:86:dc:f5:c4:70:5b:40:dd:80:e8:10:b3:6e:5c:37:
         a9:80:a5:0d:dc:b1:37:5b:0c:67:d7:03:6d:80:40:ae:12:78:
         33:9b:dc:0e:61:47:5d:e8:6f:ab:dc:9b:91:5b:f0:fb:3d:7b:
         a7:e6:1b:89:83:c4:95:d7:5a:22:77:3c:7a:c8:66:90:7e:4d:
         40:fb:9c:59:b0:45:3a:0f:dd:02:94:ef:ec:b1:82:a9:4e:39:
         8c:96:83:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:22:06 2026 by rpki-client