Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
File:                     jLz5N0OA69GF0hGPVRyFWa4jNUE.mft (raw, json)
Hash identifier:          4vaMk9g9Ifcj22Y0yl9YPh7zWG80qdB0DVtvvvNhqls=
Subject key identifier:   DC:6A:F0:D0:9B:2D:9C:BA:8A:40:4B:90:07:8C:76:9B:DB:8A:88:6E
Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
Certificate issuer:       /CN=8cbcf9374380ebd185d2118f551c8559ae233541
Certificate serial:       019D2816F8D5EDC2A473657992896A9590B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
Manifest number:          0E6B
Signing time:             Thu 26 Mar 2026 03:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:27 +0000
Files and hashes:         1: L2W5oJj2sIZeOCADA_xFuQfAn7Q.roa (hash: upS3aOnw/wQ7yjWNv575VRnG3gYRLnA5O/bTU3MDbbk=)
                          2: jLz5N0OA69GF0hGPVRyFWa4jNUE.crl (hash: joVNw53bVknhp6fHYPlSJ7PBXVMfxPCXeTPcvEV8RWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:f8:d5:ed:c2:a4:73:65:79:92:89:6a:95:90:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541
        Validity
            Not Before: Mar 26 03:01:27 2026 GMT
            Not After : Mar 27 03:01:27 2026 GMT
        Subject: CN=dc6af0d09b2d9cba8a404b90078c769bdb8a886e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:8e:fd:19:03:a8:e9:bd:05:f2:97:97:38:
                    70:e9:ec:d1:a4:89:f8:fa:b5:e0:f8:6f:1e:f0:e4:
                    7a:d6:7d:eb:e1:5d:0b:5b:89:5e:58:17:74:31:86:
                    e8:09:fe:96:e4:71:4a:d2:28:32:99:67:17:ba:a0:
                    1d:ad:75:b5:54:18:f6:ae:cf:39:1a:ab:8d:5a:18:
                    d1:2f:a4:59:3a:70:dc:f8:8c:58:a4:03:2f:01:6b:
                    c4:fb:52:cc:fd:94:0d:8b:dc:65:45:b3:a5:26:6a:
                    7d:3b:ea:97:69:c8:ae:f4:51:c8:81:95:dc:ec:84:
                    59:a3:d6:18:0a:37:3f:aa:aa:74:8d:ac:58:5f:d6:
                    b9:4d:d0:de:40:38:7e:34:75:f8:93:05:15:c7:67:
                    23:e2:13:06:68:88:26:bf:5a:7c:b9:12:05:87:8b:
                    8e:6b:90:98:1a:10:40:70:29:76:97:1f:b3:05:64:
                    5c:2e:c0:1f:3c:8d:d3:8e:dd:f2:1c:4d:5a:8d:d0:
                    4b:be:55:1f:ac:51:0c:b3:42:4a:d3:5f:52:37:87:
                    c5:6c:b1:46:d7:b8:88:cd:fb:76:e1:a2:f5:88:52:
                    9e:88:5e:b1:16:c2:44:23:7d:2b:33:50:5c:c3:5f:
                    68:c1:84:45:44:c9:99:fe:a5:b0:55:5e:90:d3:86:
                    6d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6A:F0:D0:9B:2D:9C:BA:8A:40:4B:90:07:8C:76:9B:DB:8A:88:6E
            X509v3 Authority Key Identifier:
                keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:89:d0:43:39:b3:b5:2e:6b:7c:cf:df:f3:ee:86:b9:44:2d:
         1b:cf:89:5c:3c:49:54:48:c6:ed:18:41:00:64:72:aa:ca:39:
         af:e4:38:c1:be:e8:af:25:9a:b5:2a:34:91:32:9b:5d:7e:21:
         f3:54:d3:e6:35:4d:c8:9d:80:71:7f:87:1e:40:3d:c1:8a:64:
         d2:34:95:5a:47:e7:60:20:4c:5f:11:2a:1f:60:d6:08:8f:d9:
         a2:30:45:f4:6a:b1:d5:16:90:8b:64:1c:d4:e0:40:67:46:61:
         72:cb:a8:69:70:39:68:f4:b2:32:ee:84:bd:fa:bf:1b:c6:f6:
         08:bc:c0:9f:0f:e2:dc:76:28:20:3c:cb:eb:50:d4:66:eb:5d:
         48:55:b1:72:3f:9e:9a:39:78:4b:f6:cb:5d:23:fd:74:bf:b3:
         1a:89:c0:fb:43:4d:5f:db:ff:bf:a3:6f:06:3f:c7:4b:aa:ad:
         30:85:39:ba:00:17:a9:ba:25:ff:fa:36:a7:43:45:06:f8:af:
         f0:8e:8a:67:57:40:c9:71:96:00:41:96:01:8e:2f:ba:33:00:
         b5:75:0b:5a:8e:0f:ef:81:18:13:47:7f:be:f4:db:2d:fe:98:
         00:a9:0c:b0:df:bb:69:fb:dc:32:1a:53:62:0f:3a:d0:6d:37:
         2d:ea:c2:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFvjV7cKkc2V5kolqlZC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYmNmOTM3NDM4MGViZDE4NWQyMTE4ZjU1MWM4NTU5YWUy
MzM1NDEwHhcNMjYwMzI2MDMwMTI3WhcNMjYwMzI3MDMwMTI3WjAzMTEwLwYDVQQD
EyhkYzZhZjBkMDliMmQ5Y2JhOGE0MDRiOTAwNzhjNzY5YmRiOGE4ODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm+O/RkDqOm9BfKXlzhw6ezRpIn4
+rXg+G8e8OR61n3r4V0LW4leWBd0MYboCf6W5HFK0igymWcXuqAdrXW1VBj2rs85
GquNWhjRL6RZOnDc+IxYpAMvAWvE+1LM/ZQNi9xlRbOlJmp9O+qXaciu9FHIgZXc
7IRZo9YYCjc/qqp0jaxYX9a5TdDeQDh+NHX4kwUVx2cj4hMGaIgmv1p8uRIFh4uO
a5CYGhBAcCl2lx+zBWRcLsAfPI3Tjt3yHE1ajdBLvlUfrFEMs0JK019SN4fFbLFG
17iIzft24aL1iFKeiF6xFsJEI30rM1Bcw19owYRFRMmZ/qWwVV6Q04ZtmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxq8NCbLZy6ikBLkAeMdpvbiohuMB8GA1UdIwQY
MBaAFIy8+TdDgOvRhdIRj1UchVmuIzVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OWExZjAtNjlkYy00YzEzLWI5N2It
MzUyMDNkNmIwZDU3LzEvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84OWExZjAtNjlkYy00YzEzLWI5N2ItMzUyMDNkNmIwZDU3
LzEvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZInQQzmz
tS5rfM/f8+6GuUQtG8+JXDxJVEjG7RhBAGRyqso5r+Q4wb7oryWatSo0kTKbXX4h
81TT5jVNyJ2AcX+HHkA9wYpk0jSVWkfnYCBMXxEqH2DWCI/ZojBF9Gqx1RaQi2Qc
1OBAZ0ZhcsuoaXA5aPSyMu6Evfq/G8b2CLzAnw/i3HYoIDzL61DUZutdSFWxcj+e
mjl4S/bLXSP9dL+zGonA+0NNX9v/v6NvBj/HS6qtMIU5ugAXqbol//o2p0NFBviv
8I6KZ1dAyXGWAEGWAY4vujMAtXULWo4P74EYE0d/vvTbLf6YAKkMsN+7afvcMhpT
Yg860G03LerCsA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:49 2026 by rpki-client