Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
File:                     jw6u_3Y07o3-gFSthfihXoR1kRQ.mft (raw, json)
Hash identifier:          4GschGgWUMC0ThXqTPt+jrsyrNvqzTjKevA4ByRPMqg=
Subject key identifier:   32:60:E1:87:A7:9A:0D:47:EF:77:B1:90:A7:C2:91:82:02:25:95:AC
Authority key identifier: 8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
Certificate issuer:       /CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Certificate serial:       019CABA23DC428F2A39AA354D2DFB3E761C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
Manifest number:          077E
Signing time:             Sun 01 Mar 2026 23:01:02 +0000
Manifest this update:     Sun 01 Mar 2026 23:01:02 +0000
Manifest next update:     Mon 02 Mar 2026 23:01:02 +0000
Files and hashes:         1: jw6u_3Y07o3-gFSthfihXoR1kRQ.crl (hash: jXNdVGHBhvMCnaaRnYjyM4T+TdaymIGqEtTO3E7DVW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:3d:c4:28:f2:a3:9a:a3:54:d2:df:b3:e7:61:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
        Validity
            Not Before: Mar  1 23:01:02 2026 GMT
            Not After : Mar  2 23:01:02 2026 GMT
        Subject: CN=3260e187a79a0d47ef77b190a7c29182022595ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ea:2e:7f:17:37:34:c1:ae:38:8c:99:06:b9:
                    ee:3d:81:9e:3c:0f:ea:1a:e1:1e:88:b4:ed:f0:2b:
                    40:07:9e:6b:3a:e3:11:d5:6d:4a:07:a6:78:92:fc:
                    b8:df:4a:92:46:da:08:97:d5:34:4d:89:b2:4e:62:
                    fe:6b:90:52:52:19:8d:fc:3a:9b:70:39:58:36:a2:
                    47:f2:6a:22:f7:d5:7b:9f:77:cc:17:38:c1:e5:c5:
                    bd:92:a9:fd:81:32:29:2b:a9:16:c1:20:a7:00:dd:
                    8f:77:1d:da:47:e4:a3:62:26:54:5b:4f:f4:38:3d:
                    40:c5:d4:23:99:bf:84:c4:02:48:02:09:5a:34:70:
                    43:40:62:84:c8:25:35:d6:d6:61:c2:02:55:38:07:
                    2c:91:93:86:d0:19:6c:a6:4f:5c:fb:8b:17:55:d3:
                    58:4c:4c:b3:7a:03:f6:b4:ad:ad:1e:de:ce:8f:6f:
                    b6:45:ad:5b:69:36:96:c8:87:72:07:9b:17:c7:a6:
                    8b:26:b4:06:3f:52:2b:1f:b0:9f:8d:0e:e2:1a:84:
                    e9:4b:bb:67:7f:77:1c:b3:96:2e:99:8f:c6:58:3c:
                    2f:ca:67:df:e9:06:dd:f6:4c:3d:8c:65:27:35:aa:
                    e0:8d:8d:67:92:14:cf:52:4e:ae:15:6d:9e:9a:b1:
                    20:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:60:E1:87:A7:9A:0D:47:EF:77:B1:90:A7:C2:91:82:02:25:95:AC
            X509v3 Authority Key Identifier:
                keyid:8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d1:bb:2b:d8:b3:5d:67:de:68:4a:37:94:a0:f0:15:f6:69:
         ff:d6:5f:8b:ed:d3:50:e3:a3:8a:d4:ac:e7:b5:51:f8:04:7c:
         85:cc:12:e4:82:cf:14:c7:e9:05:7c:1a:3f:57:21:95:46:93:
         0f:f9:c4:74:48:7b:c3:55:70:e3:68:18:46:55:5c:e4:15:ab:
         ab:6f:c8:53:4a:3b:95:de:3c:b2:2c:3d:e7:48:e4:64:8e:af:
         71:41:b3:b6:0c:3e:21:cc:9c:c4:45:75:6d:16:8d:4e:b9:8a:
         3a:3f:6a:8b:68:3d:d0:1c:c8:8a:9f:83:fc:de:9f:7e:73:9a:
         09:fa:0e:48:1e:79:23:15:a9:94:d5:06:72:14:f2:c5:3a:32:
         34:af:1c:89:08:7d:15:32:e8:9c:3a:2f:91:84:e7:1e:fd:21:
         ad:5e:af:48:ee:9d:d8:a0:e1:46:16:a0:64:ea:f0:42:b1:b1:
         55:89:1f:c9:70:35:89:12:14:44:b6:ae:3a:a9:10:83:66:6a:
         81:ee:d0:5f:d7:4c:66:f0:0f:98:2d:bf:2c:4f:1b:72:6b:42:
         ae:2f:7b:cb:0f:ee:69:ce:4c:d2:88:9f:a5:20:c9:be:6c:2d:
         f0:a3:2d:d1:7b:c6:2b:e7:d9:d5:8d:8f:2d:87:da:50:cd:29:
         7f:58:bf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:03 2026 by rpki-client