Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
File:                     jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft (raw, json)
Hash identifier:          lFzH5Q60dbLuDAYC+UIni9YYEfbd2GfFhTZeH04TLoI=
Subject key identifier:   6E:1E:9C:E0:64:CD:F3:24:DC:A0:C0:04:25:2A:CC:26:EF:B6:D3:81
Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
Certificate issuer:       /CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Certificate serial:       019D9A07031ADABBE55BCE5E6A76E649DC97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 06:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:43 +0000
Files and hashes:         1: AanVvurhzUc2_YlhTUVI0EdSJQM.roa (hash: D8Ey7qoWHGx1lJPT+RSbE0DodoNoh42qXfRsH7R0814=)
                          2: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl (hash: +I+PVN1Yua/h2wLJmSlMn3at35xH+1g/RHgLud873iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:03:1a:da:bb:e5:5b:ce:5e:6a:76:e6:49:dc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295
        Validity
            Not Before: Apr 17 06:00:43 2026 GMT
            Not After : Apr 18 06:00:43 2026 GMT
        Subject: CN=6e1e9ce064cdf324dca0c004252acc26efb6d381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:b6:c6:f8:fc:e1:1c:81:24:66:f7:1a:e9:
                    db:b1:4f:39:dc:ec:75:3f:04:64:db:a3:fd:93:81:
                    86:45:2f:c5:3f:99:32:9d:ff:89:b9:00:80:2c:4a:
                    25:f7:2c:42:a7:79:df:27:7b:6d:1e:0d:98:03:2e:
                    90:f3:42:88:17:ac:8c:98:44:c1:5d:5c:6a:f3:b1:
                    0d:14:6f:36:3d:6d:6d:de:64:ad:6a:bb:87:f7:8f:
                    68:6d:0d:8d:39:be:91:5c:e6:5c:f9:9f:d6:28:ad:
                    a4:96:0b:ea:2a:da:05:00:52:30:63:2e:85:81:6b:
                    b7:68:3b:fc:5a:a8:35:20:af:7a:d7:26:72:a0:fa:
                    ab:cb:69:0c:50:28:9e:da:74:b3:6c:31:86:b6:42:
                    97:41:e6:5d:a3:41:c3:61:22:5f:70:1a:b9:10:80:
                    54:a8:9b:eb:78:61:85:d0:00:0a:e8:f1:4e:89:79:
                    b9:b6:c8:b1:d4:94:fd:14:9f:92:eb:d5:ba:06:07:
                    b0:32:97:d9:94:de:13:6a:45:b6:ae:c5:4e:4d:45:
                    eb:d0:db:08:f9:85:81:b0:fb:e3:c6:c3:00:ff:f2:
                    d7:90:85:64:a5:55:1c:aa:af:e8:79:7c:c1:fd:db:
                    3c:59:30:9a:3d:10:e5:1a:25:de:7d:2b:07:23:e6:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1E:9C:E0:64:CD:F3:24:DC:A0:C0:04:25:2A:CC:26:EF:B6:D3:81
            X509v3 Authority Key Identifier:
                keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d0:94:d9:55:56:6a:ea:b5:2d:24:5f:0b:a2:98:3a:a1:f2:
         3a:cd:38:a2:dc:31:c6:27:c2:dd:8f:8f:da:51:b4:e6:a8:03:
         24:23:3b:76:ca:ad:e6:02:28:6e:14:fe:23:db:00:bb:54:70:
         51:c6:bf:26:b5:c6:d7:51:f6:be:04:c6:8b:b6:05:94:88:97:
         6f:87:05:b0:02:1a:b6:bd:df:98:a9:ae:a6:22:54:cd:ca:6d:
         9e:80:59:9e:03:66:22:2f:0a:52:e2:c2:b5:e9:61:c3:e8:fb:
         20:f2:be:39:58:ec:fb:2d:96:25:37:87:2d:5e:db:41:91:de:
         68:66:5b:2d:69:07:2d:77:86:db:de:f4:8f:40:c2:00:f5:62:
         d9:b5:1e:83:2c:ce:08:06:5f:57:da:e1:9c:5b:5b:11:30:49:
         1c:8c:36:f5:a7:9e:58:75:f9:8c:0c:42:1b:16:5d:f8:db:7f:
         23:08:83:21:59:a5:98:68:b7:e4:5d:a4:c4:d6:4b:38:26:c3:
         d4:97:e7:fd:65:37:e4:db:8b:92:bc:5a:f8:c4:c7:62:f0:45:
         c2:ff:6e:dd:4b:a3:4c:18:08:8f:7d:7d:94:c4:e0:d0:65:16:
         68:47:d5:0e:77:ce:f0:f1:3e:39:5e:46:3b:2d:4a:e7:8b:21:
         ec:2e:cc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:41 2026 by rpki-client