Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
File:                     J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json)
Hash identifier:          BU1H9pPHHxDGvaIECgeCd/OZe17jbpzdMfidExABFH8=
Subject key identifier:   6C:21:51:88:0E:10:5F:BB:D9:63:CE:06:B2:32:1F:CD:5C:1E:73:1A
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Certificate issuer:       /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial:       019CACEB5C819338CE44630C76E69782268C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
Manifest number:          13F0
Signing time:             Mon 02 Mar 2026 05:00:31 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:31 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:31 +0000
Files and hashes:         1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: 3vdj8Y3Amz01QrkihwI9HwgJ6njghV8RzO2R2EYHUow=)
                          2: hv5F2fKm7cZ-fqlTGhS4HLwa_Mo.roa (hash: 3e8QQ5wpWIE1xn2kF+A/CiSMbxQICMGVp/zM+nv9PN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 05:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:5c:81:93:38:ce:44:63:0c:76:e6:97:82:26:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
        Validity
            Not Before: Mar  2 05:00:31 2026 GMT
            Not After : Mar  3 05:00:31 2026 GMT
        Subject: CN=6c2151880e105fbbd963ce06b2321fcd5c1e731a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d7:17:ee:06:c5:b7:5c:49:cd:9e:c5:3d:91:
                    c8:4a:d3:a2:92:d3:4b:d6:15:50:df:3a:97:d9:01:
                    23:1a:2d:33:3f:a2:04:b1:17:82:25:e8:f1:e4:32:
                    f2:fd:ee:df:41:0d:d3:82:1e:d7:bf:da:ce:f7:9a:
                    d8:9d:a4:7b:30:53:cb:0c:39:6b:6f:b6:e9:8a:d9:
                    06:cc:5c:a5:23:01:a0:a7:f1:08:cf:0f:54:91:a8:
                    22:a1:a7:0a:87:84:7b:4f:de:19:08:10:7a:61:4e:
                    93:7d:ee:6e:0f:45:79:78:bd:2f:43:71:d0:6a:78:
                    0d:46:9f:33:1a:b3:df:bf:db:0a:6c:f4:dc:4a:f0:
                    23:5c:f7:08:37:66:85:4d:e8:78:95:60:ad:0d:c8:
                    97:1a:b7:da:1b:a2:a2:4d:0c:83:1e:11:29:b5:5e:
                    4b:16:a5:8f:51:82:e8:e7:65:fa:94:92:08:63:e9:
                    75:8f:65:60:5c:9a:09:80:18:83:97:97:6c:20:d2:
                    d0:24:4a:47:af:bf:43:0c:dd:c3:24:c6:72:dc:88:
                    3d:73:bd:b6:ac:6d:09:a4:a8:6d:2d:b6:0d:73:39:
                    0e:4c:c0:79:e2:ca:f5:74:d8:66:34:9e:e6:9c:4c:
                    04:cc:04:7d:30:c5:ac:fd:a5:19:72:9b:ef:84:ad:
                    e1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:21:51:88:0E:10:5F:BB:D9:63:CE:06:B2:32:1F:CD:5C:1E:73:1A
            X509v3 Authority Key Identifier:
                keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:56:ee:1a:35:1b:d1:33:cb:f8:c2:da:7c:c9:34:8f:20:65:
         a3:3b:a7:f9:00:8d:e8:ed:10:a6:58:47:25:d7:a4:11:44:dd:
         43:00:e1:18:d4:f0:04:c9:3a:8a:88:8e:3f:c5:af:16:c8:e2:
         51:61:3f:bd:d1:fa:ac:b9:bc:71:d0:72:24:a3:c5:e4:3e:e2:
         53:21:ab:3a:1b:71:b6:5f:0e:fe:a8:b3:22:31:9f:6e:57:69:
         b5:85:93:47:9c:e3:44:22:da:7b:dd:a3:98:cc:12:cb:6c:03:
         e3:e2:31:75:3b:11:6d:7a:5e:60:bf:a9:da:10:50:b8:90:9c:
         6f:95:6d:c0:30:9a:9b:2a:c2:03:3c:35:be:55:2e:ad:3d:ac:
         50:f1:de:d7:70:40:f5:89:96:92:ef:26:d2:20:88:8d:2e:41:
         3d:56:f3:49:b1:a7:bb:5c:2a:74:73:c6:d8:4c:e4:f4:00:8b:
         56:b1:6d:6d:c3:25:cc:12:e7:42:93:3e:cd:99:0a:8a:a0:b7:
         da:78:8a:c6:c0:aa:c0:a1:0f:84:40:57:a3:a4:db:8e:c7:e9:
         49:1c:0d:e3:24:75:fb:a4:6b:cb:56:27:c6:24:3e:f2:f6:58:
         57:4d:e7:83:3e:60:a2:5c:a9:50:cd:a7:7f:fa:a8:67:eb:87:
         18:cb:59:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:41 2026 by rpki-client